2020 CVE Vulnerabilities

21,141 CVEs published in 2020.

CVE IDSeverityCVSSDescription
CVE-2020-13112CRITICAL9.1An issue was discovered in libexif before 0.6.22. Several buffer over-reads in EXIF MakerNote handling could lead to inf...
CVE-2020-10738HIGH8.8A flaw was found in Moodle versions 3.8 before 3.8.3, 3.7 before 3.7.6, 3.6 before 3.6.10, 3.5 before 3.5.12 and earlier...
CVE-2020-9069MEDIUM6.5There is an information leakage vulnerability in some Huawei products. An unauthenticated, adjacent attacker could explo...
CVE-2020-9045MEDIUM6.5During installation or upgrade to Software House C•CURE 9000 v2.70 and American Dynamics victor Video Management System ...
CVE-2020-8572HIGH7.5Element OS prior to version 12.0 and Element HealthTools prior to version 2020.04.01.04 are susceptible to a vulnerabili...
CVE-2020-7655MEDIUM6.1netius prior to 1.17.58 is vulnerable to HTTP Request Smuggling. HTTP pipelining issues and request smuggling attacks mi...
CVE-2020-5752HIGH7.8Relative path traversal in Druva inSync Windows Client 6.6.3 allows a local, unauthenticated attacker to execute arbitra...
CVE-2020-1799HIGH7.5E6878-370 with versions of 10.0.3.1(H557SP27C233), 10.0.3.1(H563SP1C00), 10.0.3.1(H563SP1C233) has a use after free vuln...
CVE-2020-6491MEDIUM6.5Insufficient data validation in site information in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spo...
CVE-2020-6490MEDIUM4.3Insufficient data validation in loader in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had been abl...
CVE-2020-6489MEDIUM4.3Inappropriate implementation in developer tools in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had...
CVE-2020-6488MEDIUM4.3Insufficient policy enforcement in downloads in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass ...
CVE-2020-6487MEDIUM6.5Insufficient policy enforcement in downloads in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass ...
CVE-2020-6486MEDIUM6.5Insufficient policy enforcement in navigations in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypas...
CVE-2020-6485MEDIUM6.5Insufficient data validation in media router in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had co...
CVE-2020-6484MEDIUM6.5Insufficient data validation in ChromeDriver in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass ...
CVE-2020-6483MEDIUM6.5Insufficient policy enforcement in payments in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass n...
CVE-2020-6482MEDIUM6.5Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convin...
CVE-2020-6481MEDIUM6.5Insufficient policy enforcement in URL formatting in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to pe...
CVE-2020-6480MEDIUM6.5Insufficient policy enforcement in enterprise in Google Chrome prior to 83.0.4103.61 allowed a local attacker to bypass ...
CVE-2020-6479MEDIUM6.5Inappropriate implementation in sharing in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof securi...
CVE-2020-6478MEDIUM6.5Inappropriate implementation in full screen in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof se...
CVE-2020-6477HIGH7.8Inappropriate implementation in installer in Google Chrome on OS X prior to 83.0.4103.61 allowed a local attacker to per...
CVE-2020-6476MEDIUM6.5Insufficient policy enforcement in tab strip in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a ...
CVE-2020-6475MEDIUM6.5Incorrect implementation in full screen in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof securi...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now