2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-0547 | HIGH | 7.8 | 0.3% | Apr 15, 2020 | Incorrect default permissions in the installer for Intel(R) Data Migration Software versions 3.3 and earlier may allow a... |
| CVE-2020-8948 | HIGH | 7.8 | 0.5% | Apr 15, 2020 | The Sierra Wireless Windows Mobile Broadband Driver Packages (MBDP) before build 5043 allows an unprivileged user to ove... |
| CVE-2020-4294 | MEDIUM | 6.3 | 1.2% | Apr 15, 2020 | IBM QRadar 7.3.0 to 7.3.3 Patch 2 is vulnerable to Server Side Request Forgery (SSRF). This may allow an authenticated a... |
| CVE-2020-4274 | MEDIUM | 5.4 | 0.9% | Apr 15, 2020 | IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow an authenticated user to access data and perform unauthorized actions due ... |
| CVE-2020-4272 | HIGH | 8.8 | 3.0% | Apr 15, 2020 | IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a remote attacker to include arbitrary files. A remote attacker could send... |
| CVE-2020-4271 | MEDIUM | 6.3 | 1.7% | Apr 15, 2020 | IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow an authenticated user to send a specially crafted command which would be e... |
| CVE-2020-4270 | HIGH | 7.8 | 0.5% | Apr 15, 2020 | IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a local user to gain escalated privileges due to weak file permissions. IB... |
| CVE-2020-4269 | HIGH | 7.5 | 2.0% | Apr 15, 2020 | IBM QRadar 7.3.0 to 7.3.3 Patch 2 contains hard-coded credentials, such as a password or cryptographic key, which it use... |
| CVE-2020-4268 | MEDIUM | 5.4 | 0.6% | Apr 15, 2020 | IBM QRadar 7.3.0 to 7.3.3 Patch 2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitr... |
| CVE-2020-11783 | MEDIUM | 4.8 | 0.5% | Apr 15, 2020 | Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 b... |
| CVE-2020-11782 | MEDIUM | 4.8 | 0.5% | Apr 15, 2020 | Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 b... |
| CVE-2020-11781 | MEDIUM | 4.8 | 0.4% | Apr 15, 2020 | Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 b... |
| CVE-2020-11780 | MEDIUM | 4.8 | 0.5% | Apr 15, 2020 | Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 b... |
| CVE-2020-11779 | MEDIUM | 4.8 | 0.4% | Apr 15, 2020 | Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 b... |
| CVE-2020-11729 | CRITICAL | 9.8 | 1.9% | Apr 15, 2020 | An issue was discovered in DAViCal Andrew's Web Libraries (AWL) through 0.60. Long-term session cookies, uses to provide... |
| CVE-2020-11728 | HIGH | 7.5 | 1.6% | Apr 15, 2020 | An issue was discovered in DAViCal Andrew's Web Libraries (AWL) through 0.60. Session management does not use a sufficie... |
| CVE-2020-1094 | HIGH | 7.8 | 0.9% | Apr 15, 2020 | An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, ... |
| CVE-2020-1050 | MEDIUM | 6.1 | 1.8% | Apr 15, 2020 | A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a speci... |
| CVE-2020-1049 | MEDIUM | 5.4 | 1.5% | Apr 15, 2020 | A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a speci... |
| CVE-2020-1029 | HIGH | 7.8 | 1.0% | Apr 15, 2020 | An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles ... |
| CVE-2020-1027 | HIGH | 7.8 | 4.5% | Apr 15, 2020 | An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Window... |
| CVE-2020-1026 | CRITICAL | 9.8 | 2.5% | Apr 15, 2020 | A Security Feature Bypass vulnerability exists in the MSR JavaScript Cryptography Library that is caused by multiple bug... |
| CVE-2020-1022 | HIGH | 8 | 6.8% | Apr 15, 2020 | A remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remo... |
| CVE-2020-1020 | HIGH | 8.8 | 65.0% | Apr 15, 2020 | A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly... |
| CVE-2020-1019 | HIGH | 7.8 | 0.9% | Apr 15, 2020 | An elevation of privilege vulnerability exists in RMS Sharing App for Mac in the way it allows an attacker to load unsig... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now