2020 CVE Vulnerabilities

21,141 CVEs published in 2020.

CVE IDSeverityCVSSDescription
CVE-2020-10541CRITICAL9.8Zoho ManageEngine OpManager before 12.4.179 allows remote code execution via a specially crafted Mail Server Settings v1...
CVE-2020-10540HIGH8.8Untis WebUntis before 2020.9.6 allows CSRF for certain combinations of rights and modules.
CVE-2020-1887CRITICAL9.1Incorrect validation of the TLS SNI hostname in osquery versions after 2.9.0 and before 4.2.0 could allow an attacker to...
CVE-2020-8469HIGH7.8Trend Micro Password Manager for Windows version 5.0 is affected by a DLL hijacking vulnerability would could potentiall...
CVE-2020-7600MEDIUM5.3querymen prior to 2.1.4 allows modification of object properties. The parameters of exported function handler(type, name...
CVE-2020-1863HIGH7.5Huawei USG6000V with versions V500R001C20SPC300, V500R003C00SPC100, and V500R005C00SPC100 have an out-of-bounds read vul...
CVE-2020-10535MEDIUM5.3GitLab 12.8.x before 12.8.6, when sign-up is enabled, allows remote attackers to bypass email domain restrictions within...
CVE-2020-10534CRITICAL9.8In the GlobalBlocking extension before 2020-03-10 for MediaWiki through 1.34.0, an issue related to IP range evaluation ...
CVE-2020-9064MEDIUM5.5Huawei smartphone Honor V30 with versions earlier than OxfordS-AN00A 10.0.1.167(C00E166R4P1) have an improper authentica...
CVE-2020-6643MEDIUM5.4An improper neutralization of input vulnerability in the URL Description in Fortinet FortiIsolator version 1.2.2 allows ...
CVE-2020-0583HIGH8.8Improper access control in the subsystem for Intel(R) Smart Sound Technology may allow an authenticated user to potentia...
CVE-2020-0551MEDIUM5.6Load value injection in some Intel(R) Processors utilizing speculative execution may allow an authenticated user to pote...
CVE-2020-0550MEDIUM5.6Improper data forwarding in some data cache for some Intel(R) Processors may allow an authenticated user to potentially ...
CVE-2020-0574MEDIUM5.9Improper configuration in block design for Intel(R) MAX(R) 10 FPGA all versions may allow an authenticated user to poten...
CVE-2020-0567MEDIUM5.5Improper input validation in Intel(R) Graphics Drivers before version 26.20.100.7212 may allow an authenticated user to ...
CVE-2020-0565HIGH7.8Uncontrolled search path in Intel(R) Graphics Drivers before version 26.20.100.7158 may allow an authenticated user to p...
CVE-2020-0556HIGH7.1Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enab...
CVE-2020-0546HIGH7.8Unquoted service path in Intel(R) Optane(TM) DC Persistent Memory Module Management Software before version 1.0.0.3461 m...
CVE-2020-0530HIGH7.8Improper buffer restrictions in firmware for Intel(R) NUC may allow an authenticated user to potentially enable escalati...
CVE-2020-0526MEDIUM6.7Improper input validation in firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of p...
CVE-2020-5961MEDIUM5.5NVIDIA vGPU graphics driver for guest OS contains a vulnerability in which an incorrect resource clean up on a failure p...
CVE-2020-5960MEDIUM5.5NVIDIA Virtual GPU Manager contains a vulnerability in the kernel module (nvidia.ko), where a null pointer dereference m...
CVE-2020-5959MEDIUM5.5NVIDIA Virtual GPU Manager, all versions, contains a vulnerability in the vGPU plugin in which an input index value is i...
CVE-2020-0520HIGH7.8Path traversal in igdkmd64.sys for Intel(R) Graphics Drivers before versions 15.45.30.5103, 15.40.44.5107, 15.36.38.5117...
CVE-2020-0519HIGH7.8Improper access control for Intel(R) Graphics Drivers before versions 15.33.49.5100 and 15.36.38.5117 may allow an authe...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now