2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-7131 | CRITICAL | 9 | 1.1% | Apr 24, 2020 | This document describes a security vulnerability in Blade Maintenance Entity, Integrated Maintenance Entity and Maintena... |
| CVE-2020-6828 | HIGH | 7.5 | 1.5% | Apr 24, 2020 | A malicious Android application could craft an Intent that would have been processed by Firefox for Android and potentia... |
| CVE-2020-6827 | MEDIUM | 4.7 | 0.7% | Apr 24, 2020 | When following a link that opened an intent://-schemed URL, causing a custom tab to be opened, Firefox for Android could... |
| CVE-2020-6826 | CRITICAL | 9.8 | 1.2% | Apr 24, 2020 | Mozilla developers Tyson Smith, Bob Clary, and Alexandru Michis reported memory safety bugs present in Firefox 74. Some ... |
| CVE-2020-6825 | CRITICAL | 9.8 | 1.9% | Apr 24, 2020 | Mozilla developers and community members Tyson Smith and Christian Holler reported memory safety bugs present in Firefox... |
| CVE-2020-6824 | LOW | 2.8 | 0.3% | Apr 24, 2020 | Initially, a user opens a Private Browsing Window and generates a password for a site, then closes the Private Browsing ... |
| CVE-2020-6823 | CRITICAL | 9.8 | 1.6% | Apr 24, 2020 | A malicious extension could have called <code>browser.identity.launchWebAuthFlow</code>, controlling the redirect_uri, a... |
| CVE-2020-6822 | HIGH | 8.8 | 1.3% | Apr 24, 2020 | On 32-bit builds, an out of bounds write could have occurred when processing an image larger than 4 GB in <code>GMPDecod... |
| CVE-2020-6821 | HIGH | 7.5 | 1.5% | Apr 24, 2020 | When reading from areas partially or fully outside the source resource with WebGL's <code>copyTexSubImage</code> method,... |
| CVE-2020-6820 | HIGH | 8.1 | 6.3% | Apr 24, 2020 | Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. We are aware of t... |
| CVE-2020-6819 | HIGH | 8.1 | 3.0% | Apr 24, 2020 | Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free. We are aw... |
| CVE-2020-4267 | MEDIUM | 6.5 | 1.3% | Apr 24, 2020 | IBM MQ and MQ Appliance 8.0, 9.1 LTS, and 9.1 CD could allow an authenticated user cause a denial of service due to a me... |
| CVE-2020-5870 | HIGH | 8.1 | 0.5% | Apr 24, 2020 | In BIG-IQ 5.2.0-7.0.0, high availability (HA) synchronization mechanisms do not use any form of authentication for conne... |
| CVE-2020-5869 | CRITICAL | 9.1 | 0.5% | Apr 24, 2020 | In BIG-IQ 5.2.0-7.0.0, high availability (HA) synchronization is not secure by TLS and may allow on-path attackers to re... |
| CVE-2020-5868 | CRITICAL | 9.8 | 2.2% | Apr 24, 2020 | In BIG-IQ 6.0.0-7.0.0, a remote access vulnerability has been discovered that may allow a remote user to execute shell c... |
| CVE-2020-12137 | MEDIUM | 6.1 | 2.3% | Apr 24, 2020 | GNU Mailman 2.x before 2.1.30 uses the .obj extension for scrubbed application/octet-stream MIME parts. This behavior ma... |
| CVE-2020-12063 | MEDIUM | 5.3 | 0.9% | Apr 24, 2020 | A certain Postfix 2.10.1-7 package could allow an attacker to send an email from an arbitrary-looking sender via a homog... |
| CVE-2020-12135 | MEDIUM | 5.5 | 1.2% | Apr 24, 2020 | bson before 0.8 incorrectly uses int rather than size_t for many variables, parameters, and return values. In particular... |
| CVE-2020-12134 | CRITICAL | 9.8 | 1.3% | Apr 24, 2020 | Nanometrics Centaur through 4.3.23 and TitanSMA through 4.2.20 mishandle access control for the syslog log. |
| CVE-2020-12132 | MEDIUM | 6.1 | 0.7% | Apr 24, 2020 | Fifthplay S.A.M.I before 2019.3_HP2 allows unauthenticated stored XSS via a POST request. |
| CVE-2020-12131 | MEDIUM | 6.1 | 0.7% | Apr 24, 2020 | The AirDisk Pro app 5.5.3 for iOS allows XSS via the devicename parameter (shown next to the UI logo). |
| CVE-2020-12130 | MEDIUM | 6.1 | 0.7% | Apr 24, 2020 | The AirDisk Pro app 5.5.3 for iOS allows XSS via the deleteFile parameter of the Delete function. |
| CVE-2020-12129 | MEDIUM | 6.1 | 0.7% | Apr 24, 2020 | The AirDisk Pro app 5.5.3 for iOS allows XSS via the createFolder parameter of the Create Folder function. |
| CVE-2020-12128 | HIGH | 7.5 | 1.6% | Apr 24, 2020 | DONG JOO CHO File Transfer iFamily 2.1 allows directory traversal related to the ./etc/ path. |
| CVE-2020-12118 | HIGH | 8.2 | 1.4% | Apr 23, 2020 | The keygen protocol implementation in Binance tss-lib before 1.2.0 allows attackers to generate crafted h1 and h2 parame... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now