2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-13513 | HIGH | 8.8 | 0.5% | Dec 18, 2020 | A privilege escalation vulnerability exists in the WinRing0x64 Driver Privileged I/O Write IRPs functionality of NZXT CA... |
| CVE-2020-13512 | HIGH | 8.8 | 0.5% | Dec 18, 2020 | A privilege escalation vulnerability exists in the WinRing0x64 Driver Privileged I/O Write IRPs functionality of NZXT CA... |
| CVE-2020-27687 | HIGH | 8.8 | 1.5% | Dec 18, 2020 | ThingsBoard before v3.2 is vulnerable to Host header injection in password-reset emails. This allows an attacker to send... |
| CVE-2020-26280 | HIGH | 8.9 | 1.1% | Dec 18, 2020 | OpenSlides is a free, Web-based presentation and assembly system for managing and projecting agenda, motions, and electi... |
| CVE-2020-20299 | HIGH | 7.5 | 1.5% | Dec 18, 2020 | WeiPHP 5.0 does not properly restrict access to pages, related to using POST. |
| CVE-2020-26174 | HIGH | 8.8 | 1.2% | Dec 18, 2020 | tangro Business Workflow before 1.18.1 requests a list of allowed filetypes from the server and restricts uploads to the... |
| CVE-2020-35555 | HIGH | 7.8 | 0.1% | Dec 18, 2020 | An issue was discovered on LG mobile devices with Android OS 10 software. When a dual-screen configuration is supported,... |
| CVE-2020-35554 | HIGH | 7.8 | 0.1% | Dec 18, 2020 | An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software. There is a WebView SSL erro... |
| CVE-2020-35553 | HIGH | 7.5 | 0.4% | Dec 18, 2020 | An issue was discovered on Samsung mobile devices with Q(10.0) and R(11.0) (Qualcomm SM8250 chipsets) software. They all... |
| CVE-2020-35475 | HIGH | 7.5 | 1.6% | Dec 18, 2020 | In MediaWiki before 1.35.1, the messages userrights-expiry-current and userrights-expiry-none can contain raw HTML. XSS ... |
| CVE-2020-27640 | HIGH | 8.1 | 0.5% | Dec 18, 2020 | The Bluetooth handset of Mitel MiVoice 6940 and 6930 MiNet phones with firmware before 1.5.3 could allow an unauthentica... |
| CVE-2020-27639 | HIGH | 8.1 | 0.5% | Dec 18, 2020 | The Bluetooth handset of Mitel MiVoice 6873i, 6930, and 6940 SIP phones with firmware before 5.1.0.SP6 could allow an un... |
| CVE-2020-27154 | HIGH | 8.8 | 1.0% | Dec 18, 2020 | The chat window of Mitel BusinessCTI Enterprise (MBC-E) Client for Windows before 6.4.11 and 7.x before 7.0.3 could allo... |
| CVE-2020-25608 | HIGH | 7.2 | 0.9% | Dec 18, 2020 | The SAS portal of Mitel MiCollab before 9.2 could allow an attacker to access user credentials due to improper input val... |
| CVE-2020-7838 | HIGH | 8.8 | 1.2% | Dec 18, 2020 | A arbitrary code execution vulnerability exists in the way that the Stove client improperly validates input value. An at... |
| CVE-2020-28052 | HIGH | 8.1 | 7.1% | Dec 18, 2020 | An issue was discovered in Legion of the Bouncy Castle BC Java 1.65 and 1.66. The OpenBSDBCrypt.checkPassword utility me... |
| CVE-2020-14232 | HIGH | 8.8 | 1.3% | Dec 18, 2020 | A vulnerability in the input parameter handling of HCL Notes v9 could potentially be exploited by an authenticated attac... |
| CVE-2020-8464 | HIGH | 7.5 | 6.3% | Dec 17, 2020 | A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to send requests... |
| CVE-2020-8463 | HIGH | 7.5 | 5.9% | Dec 17, 2020 | A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to bypass a glob... |
| CVE-2020-8461 | HIGH | 8.8 | 1.1% | Dec 17, 2020 | A CSRF protection bypass vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an at... |
| CVE-2020-35491 | HIGH | 8.1 | 7.8% | Dec 17, 2020 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, rela... |
| CVE-2020-35490 | HIGH | 8.1 | 6.3% | Dec 17, 2020 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, rela... |
| CVE-2020-15294 | HIGH | 7 | 0.3% | Dec 17, 2020 | Compiler Optimization Removal or Modification of Security-critical Code vulnerability in IntPeParseUnwindData() results ... |
| CVE-2020-29652 | HIGH | 7.5 | 3.2% | Dec 17, 2020 | A nil pointer dereference in the golang.org/x/crypto/ssh component through v0.0.0-20201203163018-be400aefbc4c for Go all... |
| CVE-2020-27199 | HIGH | 7.5 | 2.9% | Dec 17, 2020 | The Magic Home Pro application 1.5.1 for Android allows Authentication Bypass. The security control that the application... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now