2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-1060 | HIGH | 7.5 | 7.1% | May 21, 2020 | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerab... |
| CVE-2020-1059 | MEDIUM | 4.3 | 2.0% | May 21, 2020 | A spoofing vulnerability exists when Microsoft Edge does not properly parse HTTP content. An attacker who successfully e... |
| CVE-2020-1058 | HIGH | 7.5 | 7.1% | May 21, 2020 | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerab... |
| CVE-2020-1056 | MEDIUM | 5.4 | 3.3% | May 21, 2020 | An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, whic... |
| CVE-2020-1055 | MEDIUM | 5.5 | 1.8% | May 21, 2020 | A cross-site-scripting (XSS) vulnerability exists when Active Directory Federation Services (ADFS) does not properly san... |
| CVE-2020-1054 | HIGH | 7 | 54.2% | May 21, 2020 | An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle o... |
| CVE-2020-1051 | HIGH | 7.8 | 10.9% | May 21, 2020 | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. ... |
| CVE-2020-1048 | HIGH | 7.8 | 16.5% | May 21, 2020 | An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writin... |
| CVE-2020-1037 | MEDIUM | 4.2 | 7.7% | May 21, 2020 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi... |
| CVE-2020-1035 | HIGH | 7.5 | 7.2% | May 21, 2020 | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerab... |
| CVE-2020-1028 | HIGH | 7.8 | 4.7% | May 21, 2020 | A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker... |
| CVE-2020-1024 | HIGH | 8.8 | 10.4% | May 21, 2020 | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup ... |
| CVE-2020-1023 | HIGH | 8.8 | 10.4% | May 21, 2020 | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup ... |
| CVE-2020-1021 | HIGH | 7.8 | 0.9% | May 21, 2020 | An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files. The... |
| CVE-2020-1010 | HIGH | 7.8 | 0.9% | May 21, 2020 | An elevation of privilege vulnerability exists in Windows Block Level Backup Engine Service (wbengine) that allows file ... |
| CVE-2020-12693 | HIGH | 8.1 | 2.3% | May 21, 2020 | Slurm 19.05.x before 19.05.7 and 20.02.x before 20.02.3, in the rare case where Message Aggregation is enabled, allows A... |
| CVE-2020-0963 | MEDIUM | 5.5 | 5.5% | May 21, 2020 | An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its m... |
| CVE-2020-0909 | HIGH | 7.5 | 4.4% | May 21, 2020 | A denial of service vulnerability exists when Hyper-V on a Windows Server fails to properly handle specially crafted net... |
| CVE-2020-0901 | CRITICAL | 9.8 | 11.6% | May 21, 2020 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obje... |
| CVE-2020-7808 | CRITICAL | 9.8 | 0.7% | May 21, 2020 | In RAONWIZ K Upload v2018.0.2.51 and prior, automatic update processing without integrity check on update module(web.js)... |
| CVE-2020-13258 | MEDIUM | 6.1 | 2.5% | May 21, 2020 | Contentful through 2020-05-21 for Python allows reflected XSS, as demonstrated by the api parameter to the-example-app.p... |
| CVE-2020-13113 | HIGH | 8.2 | 1.9% | May 21, 2020 | An issue was discovered in libexif before 0.6.22. Use of uninitialized memory in EXIF Makernote handling could lead to c... |
| CVE-2020-12828 | CRITICAL | 9.8 | 3.3% | May 21, 2020 | An issue was discovered in AnchorFree VPN SDK before 1.3.3.218. The VPN SDK service takes certain executable locations o... |
| CVE-2020-12431 | MEDIUM | 6.6 | 0.5% | May 21, 2020 | A Windows privilege change issue was discovered in Splashtop Software Updater before 1.5.6.16. Insecure permissions on t... |
| CVE-2020-13114 | HIGH | 7.5 | 2.3% | May 21, 2020 | An issue was discovered in libexif before 0.6.22. An unrestricted size in handling Canon EXIF MakerNote data could lead ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now