2020 CVE Vulnerabilities

21,141 CVEs published in 2020.

CVE IDSeverityCVSSDescription
CVE-2020-6444MEDIUM6.3Uninitialized use in WebRTC in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap...
CVE-2020-6443HIGH8.8Insufficient data validation in developer tools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker who had...
CVE-2020-6442MEDIUM4.3Inappropriate implementation in cache in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to leak cross-ori...
CVE-2020-6441MEDIUM4.3Insufficient policy enforcement in omnibox in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass se...
CVE-2020-6440MEDIUM4.3Inappropriate implementation in extensions in Google Chrome prior to 81.0.4044.92 allowed an attacker who convinced a us...
CVE-2020-6439HIGH8.8Insufficient policy enforcement in navigations in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypas...
CVE-2020-6438MEDIUM4.3Insufficient policy enforcement in extensions in Google Chrome prior to 81.0.4044.92 allowed an attacker who convinced a...
CVE-2020-6437MEDIUM4.3Inappropriate implementation in WebView in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to spoof securi...
CVE-2020-6436HIGH8.8Use after free in window management in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially expl...
CVE-2020-6435MEDIUM4.3Insufficient policy enforcement in extensions in Google Chrome prior to 81.0.4044.92 allowed a remote attacker who had c...
CVE-2020-6434HIGH8.8Use after free in devtools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap ...
CVE-2020-6433MEDIUM4.3Insufficient policy enforcement in extensions in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass...
CVE-2020-6432MEDIUM4.3Insufficient policy enforcement in navigations in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypas...
CVE-2020-6431MEDIUM4.3Insufficient policy enforcement in full screen in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to spoof...
CVE-2020-6430HIGH8.8Type Confusion in V8 in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corrup...
CVE-2020-6423HIGH8.8Use after free in audio in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap cor...
CVE-2020-3126LOW3.5vulnerability within the Multimedia Viewer feature of Cisco Webex Meetings could allow an authenticated, remote attacker...
CVE-2020-11734MEDIUM6.1cgi-bin/go in CyberSolutions CyberMail 5 or later allows XSS via the ACTION parameter.
CVE-2020-8430MEDIUM6.1Stormshield Network Security 310 3.7.10 devices have an auth/lang.html?rurl= Open Redirect vulnerability on the captive ...
CVE-2020-9478HIGH8.8An issue was discovered in Rubrik 5.0.3-2296. An OS command injection vulnerability allows an authenticated attacker to ...
CVE-2020-11673CRITICAL9.8An issue was discovered in the Responsive Poll through 1.3.4 for Wordpress. It allows an unauthenticated user to manipul...
CVE-2020-8148MEDIUM5.3UniFi Cloud Key firmware < 1.1.6 contains a vulnerability that enables an attacker being able to change a device hostnam...
CVE-2020-1759MEDIUM6.8A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vul...
CVE-2020-11732HIGH7.5The Media Library Assistant plugin before 2.82 for Wordpress suffers from a Local File Inclusion vulnerability in mla_ga...
CVE-2020-11731MEDIUM6.1The Media Library Assistant plugin before 2.82 for Wordpress suffers from multiple XSS vulnerabilities in all Settings/M...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now