2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-8875 | HIGH | 8.8 | 0.5% | Mar 23, 2020 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.2-4... |
| CVE-2020-8874 | MEDIUM | 6.7 | 0.4% | Mar 23, 2020 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.2-4... |
| CVE-2020-8873 | MEDIUM | 6.7 | 0.4% | Mar 23, 2020 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.2-4... |
| CVE-2020-8872 | MEDIUM | 4.4 | 0.5% | Mar 23, 2020 | This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Deskt... |
| CVE-2020-8871 | MEDIUM | 6.7 | 0.6% | Mar 23, 2020 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.0-4... |
| CVE-2020-9392 | HIGH | 7.3 | 1.7% | Mar 23, 2020 | An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress. Because there is no permiss... |
| CVE-2020-8838 | MEDIUM | 6.4 | 1.6% | Mar 23, 2020 | An issue was discovered in Zoho ManageEngine AssetExplorer 6.5. During an upgrade of the Windows agent, it does not vali... |
| CVE-2020-9760 | CRITICAL | 9.8 | 2.2% | Mar 23, 2020 | An issue was discovered in WeeChat before 2.7.1 (0.3.4 to 2.7 are affected). When a new IRC message 005 is received with... |
| CVE-2020-9759 | HIGH | 7.8 | 0.5% | Mar 23, 2020 | A Vulnerability of LG Electronic web OS TV Emulator could allow an attacker to escalate privileges and overwrite certain... |
| CVE-2020-8511 | HIGH | 7.2 | 3.1% | Mar 23, 2020 | In Artica Pandora FMS through 7.42, Web Admin users can execute arbitrary code by uploading a .php file via the File Rep... |
| CVE-2020-7935 | HIGH | 7.2 | 3.1% | Mar 23, 2020 | Artica Pandora FMS through 7.42 is vulnerable to remote PHP code execution because of an Unrestricted Upload Of A File W... |
| CVE-2020-6449 | HIGH | 8.8 | 2.7% | Mar 23, 2020 | Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap co... |
| CVE-2020-6429 | HIGH | 8.8 | 2.3% | Mar 23, 2020 | Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap co... |
| CVE-2020-6428 | HIGH | 8.8 | 2.3% | Mar 23, 2020 | Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap co... |
| CVE-2020-6427 | HIGH | 8.8 | 2.4% | Mar 23, 2020 | Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap co... |
| CVE-2020-6426 | MEDIUM | 6.5 | 2.9% | Mar 23, 2020 | Inappropriate implementation in V8 in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially expl... |
| CVE-2020-6425 | MEDIUM | 5.4 | 1.2% | Mar 23, 2020 | Insufficient policy enforcement in extensions in Google Chrome prior to 80.0.3987.149 allowed an attacker who convinced ... |
| CVE-2020-6424 | HIGH | 8.8 | 3.5% | Mar 23, 2020 | Use after free in media in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap co... |
| CVE-2020-6422 | HIGH | 8.8 | 2.4% | Mar 23, 2020 | Use after free in WebGL in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap co... |
| CVE-2020-6420 | HIGH | 8.8 | 1.3% | Mar 23, 2020 | Insufficient policy enforcement in media in Google Chrome prior to 80.0.3987.132 allowed a remote attacker to bypass sam... |
| CVE-2020-10364 | HIGH | 7.5 | 2.6% | Mar 23, 2020 | The SSH daemon on MikroTik routers through v6.44.3 could allow remote attackers to generate CPU activity, trigger refusa... |
| CVE-2020-8497 | MEDIUM | 5.3 | 5.3% | Mar 23, 2020 | In Artica Pandora FMS through 7.42, an unauthenticated attacker can read the chat history. The file is in JSON format an... |
| CVE-2020-10793 | HIGH | 8.8 | 1.9% | Mar 23, 2020 | CodeIgniter through 4.0.0 allows remote attackers to gain privileges via a modified Email ID to the "Select Role of the ... |
| CVE-2020-6650 | HIGH | 8.8 | 2.1% | Mar 23, 2020 | UPS companion software v1.05 & Prior is affected by ‘Eval Injection’ vulnerability. The software does not neutralize or ... |
| CVE-2020-1951 | MEDIUM | 5.5 | 2.7% | Mar 23, 2020 | A carefully crafted or corrupt PSD file can cause an infinite loop in Apache Tika's PSDParser in versions 1.0-1.23. |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now