2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-0093 | MEDIUM | 5 | 0.3% | May 14, 2020 | In exif_data_save_data_entry of exif-data.c, there is a possible out of bounds read due to a missing bounds check. This ... |
| CVE-2020-0092 | MEDIUM | 5 | 0.1% | May 14, 2020 | In setHideSensitive of NotificationStackScrollLayout.java, there is a possible disclosure of sensitive notification cont... |
| CVE-2020-0091 | MEDIUM | 5.5 | 0.1% | May 14, 2020 | In mnld, an incorrect configuration in driver_cfg of mnld for meta factory mode.Product: AndroidVersions: Android SoCAnd... |
| CVE-2020-0090 | MEDIUM | 5.5 | 0.1% | May 14, 2020 | An improper authorization in the receiver component of Email.Product: AndroidVersions: Android SoCAndroid ID: A-14981304... |
| CVE-2020-0065 | MEDIUM | 5.5 | 0.1% | May 14, 2020 | An improper authorization in the receiver component of the Android Suite Daemon.Product: AndroidVersions: Android SoCAnd... |
| CVE-2020-0064 | MEDIUM | 5.5 | 0.1% | May 14, 2020 | An improper authorization while processing the provisioning data.Product: AndroidVersions: Android SoCAndroid ID: A-1498... |
| CVE-2020-0024 | HIGH | 7.8 | 0.2% | May 14, 2020 | In onCreate of SettingsBaseActivity.java, there is a possible unauthorized setting modification due to a permissions byp... |
| CVE-2020-12877 | HIGH | 7.5 | 1.2% | May 14, 2020 | Veritas APTARE versions prior to 10.4 allowed sensitive information to be accessible without authentication. |
| CVE-2020-12876 | HIGH | 7.5 | 1.1% | May 14, 2020 | Veritas APTARE versions prior to 10.4 allowed remote users to access several unintended files on the server. This vulner... |
| CVE-2020-12875 | MEDIUM | 6.3 | 0.6% | May 14, 2020 | Veritas APTARE versions prior to 10.4 did not perform adequate authorization checks. An authenticated user could gain un... |
| CVE-2020-12874 | CRITICAL | 9.8 | 0.9% | May 14, 2020 | Veritas APTARE versions prior to 10.4 included code that bypassed the normal login process when specific authentication ... |
| CVE-2020-5408 | MEDIUM | 6.5 | 1.8% | May 14, 2020 | Spring Security versions 5.3.x prior to 5.3.2, 5.2.x prior to 5.2.4, 5.1.x prior to 5.1.10, 5.0.x prior to 5.0.16 and 4.... |
| CVE-2020-12677 | MEDIUM | 6.1 | 1.9% | May 14, 2020 | An issue was discovered in Progress MOVEit Automation Web Admin. A Web Admin application endpoint failed to adequately s... |
| CVE-2020-1960 | MEDIUM | 4.7 | 0.9% | May 14, 2020 | A vulnerability in Apache Flink (1.1.0 to 1.1.5, 1.2.0 to 1.2.1, 1.3.0 to 1.3.3, 1.4.0 to 1.4.2, 1.5.0 to 1.5.6, 1.6.0 t... |
| CVE-2020-1941 | MEDIUM | 6.1 | 6.2% | May 14, 2020 | In Apache ActiveMQ 5.0.0 to 5.15.11, the webconsole admin GUI is open to XSS, in the view that lists the contents of a q... |
| CVE-2020-11973 | CRITICAL | 9.8 | 6.6% | May 14, 2020 | Apache Camel Netty enables Java deserialization by default. Apache Camel 2.22.x, 2.23.x, 2.24.x, 2.25.0, 3.0.0 up to 3.1... |
| CVE-2020-11972 | CRITICAL | 9.8 | 5.5% | May 14, 2020 | Apache Camel RabbitMQ enables Java deserialization by default. Apache Camel 2.22.x, 2.23.x, 2.24.x, 2.25.0, 3.0.0 up to ... |
| CVE-2020-11971 | HIGH | 7.5 | 14.3% | May 14, 2020 | Apache Camel's JMX is vulnerable to Rebind Flaw. Apache Camel 2.22.x, 2.23.x, 2.24.x, 2.25.x, 3.0.0 up to 3.1.0 is affec... |
| CVE-2020-4468 | HIGH | 7.8 | 2.8% | May 14, 2020 | IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused ... |
| CVE-2020-4467 | HIGH | 7.8 | 2.8% | May 14, 2020 | IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused ... |
| CVE-2020-4422 | HIGH | 7.8 | 2.8% | May 14, 2020 | IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused ... |
| CVE-2020-4365 | MEDIUM | 4.3 | 1.4% | May 14, 2020 | IBM WebSphere Application Server 8.5 is vulnerable to server-side request forgery. By sending a specially crafted reques... |
| CVE-2020-4343 | HIGH | 7.8 | 2.8% | May 14, 2020 | IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused ... |
| CVE-2020-4299 | MEDIUM | 4.3 | 1.0% | May 14, 2020 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.3.1 could expose sensitive information to a user throug... |
| CVE-2020-4288 | HIGH | 7.8 | 2.8% | May 14, 2020 | IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now