2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-9460 | MEDIUM | 5.4 | 1.3% | Apr 14, 2020 | Octech Oempro 4.7 through 4.11 allow XSS by an authenticated user. The parameter CampaignName in Campaign.Create is vuln... |
| CVE-2020-9004 | HIGH | 8.8 | 3.5% | Apr 14, 2020 | A remote authenticated authorization-bypass vulnerability in Wowza Streaming Engine 4.8.0 and earlier allows any read-on... |
| CVE-2020-4151 | MEDIUM | 6.5 | 1.1% | Apr 14, 2020 | IBM QRadar SIEM 7.3.0 through 7.3.3 could allow an authenticated attacker to perform unauthorized actions due to imprope... |
| CVE-2020-5739 | HIGH | 8.8 | 5.3% | Apr 14, 2020 | Grandstream GXP1600 series firmware 1.0.4.152 and below is vulnerable to authenticated remote command execution when an ... |
| CVE-2020-5738 | HIGH | 8.8 | 5.4% | Apr 14, 2020 | Grandstream GXP1600 series firmware 1.0.4.152 and below is vulnerable to authenticated remote command execution when an ... |
| CVE-2020-11743 | MEDIUM | 5.5 | 0.5% | Apr 14, 2020 | An issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a denial of service because of a bad err... |
| CVE-2020-11742 | MEDIUM | 5.5 | 0.4% | Apr 14, 2020 | An issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a denial of service because of bad conti... |
| CVE-2020-11741 | HIGH | 8.8 | 0.4% | Apr 14, 2020 | An issue was discovered in xenoprof in Xen through 4.13.x, allowing guest OS users (with active profiling) to obtain sen... |
| CVE-2020-11740 | MEDIUM | 5.5 | 0.4% | Apr 14, 2020 | An issue was discovered in xenoprof in Xen through 4.13.x, allowing guest OS users (without active profiling) to obtain ... |
| CVE-2020-11739 | HIGH | 7.8 | 0.3% | Apr 14, 2020 | An issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a denial of service or possibly gain pri... |
| CVE-2020-11738 | HIGH | 7.5 | 97.8% | Apr 13, 2020 | The Snap Creek Duplicator plugin before 1.3.28 for WordPress (and Duplicator Pro before 3.8.7.1) allows Directory Traver... |
| CVE-2020-1730 | MEDIUM | 5.3 | 3.1% | Apr 13, 2020 | A flaw was found in libssh versions before 0.8.9 and before 0.9.4 in the way it handled AES-CTR (or DES ciphers if enabl... |
| CVE-2020-11736 | LOW | 3.9 | 0.8% | Apr 13, 2020 | fr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Directory Traversal during extraction because it lack... |
| CVE-2020-10646 | HIGH | 7.8 | 0.8% | Apr 13, 2020 | Fuji Electric V-Server Lite all versions prior to 4.0.9.0 contains a heap based buffer overflow. The buffer allocated to... |
| CVE-2020-10642 | HIGH | 7.8 | 0.4% | Apr 13, 2020 | In Rockwell Automation RSLinx Classic versions 4.11.00 and prior, an authenticated local attacker could modify a registr... |
| CVE-2020-6456 | MEDIUM | 6.5 | 1.4% | Apr 13, 2020 | Insufficient validation of untrusted input in clipboard in Google Chrome prior to 81.0.4044.92 allowed a local attacker ... |
| CVE-2020-6455 | HIGH | 8.8 | 2.0% | Apr 13, 2020 | Out of bounds read in WebSQL in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit hea... |
| CVE-2020-6454 | HIGH | 8.8 | 1.4% | Apr 13, 2020 | Use after free in extensions in Google Chrome prior to 81.0.4044.92 allowed an attacker who convinced a user to install ... |
| CVE-2020-6452 | HIGH | 8.8 | 1.8% | Apr 13, 2020 | Heap buffer overflow in media in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to potentially exploit h... |
| CVE-2020-6451 | HIGH | 8.8 | 1.5% | Apr 13, 2020 | Use after free in WebAudio in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to potentially exploit heap... |
| CVE-2020-6450 | HIGH | 8.8 | 1.5% | Apr 13, 2020 | Use after free in WebAudio in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to potentially exploit heap... |
| CVE-2020-6448 | HIGH | 8.8 | 1.7% | Apr 13, 2020 | Use after free in V8 in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corrup... |
| CVE-2020-6447 | HIGH | 8.8 | 1.8% | Apr 13, 2020 | Inappropriate implementation in developer tools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker who had... |
| CVE-2020-6446 | MEDIUM | 6.5 | 1.6% | Apr 13, 2020 | Insufficient policy enforcement in trusted types in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to byp... |
| CVE-2020-6445 | MEDIUM | 6.5 | 1.9% | Apr 13, 2020 | Insufficient policy enforcement in trusted types in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to byp... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now