2020 CVE Vulnerabilities

21,141 CVEs published in 2020.

CVE IDSeverityCVSSDescription
CVE-2020-8893HIGH7.5An issue was discovered in MISP before 2.4.121. The Galaxy view contained an incorrectly sanitized search string in app/...
CVE-2020-8892HIGH8.1An issue was discovered in MISP before 2.4.121. It did not consider the HTTP PUT method when trying to block a brute-for...
CVE-2020-8891MEDIUM5.9An issue was discovered in MISP before 2.4.121. It did not canonicalize usernames when trying to block a brute-force ser...
CVE-2020-8890MEDIUM5.9An issue was discovered in MISP before 2.4.121. It mishandled time skew (between the machine hosting the web server and ...
CVE-2020-0792HIGH8.8An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory,...
CVE-2020-0767HIGH7.5A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, ...
CVE-2020-0759HIGH8.8A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obje...
CVE-2020-0757HIGH7.8An elevation of privilege vulnerability exists when Windows improperly handles Secure Socket Shell remote commands, aka ...
CVE-2020-0756MEDIUM5.5An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to proper...
CVE-2020-0755MEDIUM5.5An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to proper...
CVE-2020-0754HIGH7.8An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, aka...
CVE-2020-0753HIGH7.8An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, aka...
CVE-2020-0752HIGH7.8An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka...
CVE-2020-0751MEDIUM6A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific mal...
CVE-2020-0750HIGH7.8An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in...
CVE-2020-0749HIGH7.8An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in...
CVE-2020-0748MEDIUM5.5An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to proper...
CVE-2020-0747HIGH7.8An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations,...
CVE-2020-0746MEDIUM5.5An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, a...
CVE-2020-0745HIGH7.8An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory,...
CVE-2020-0744MEDIUM5.5An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objec...
CVE-2020-0743HIGH7.8An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in...
CVE-2020-0742HIGH7.8An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in...
CVE-2020-0741HIGH7.8An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in...
CVE-2020-0740HIGH7.8An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now