2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-26171 | MEDIUM | 4.3 | 0.6% | Dec 18, 2020 | In tangro Business Workflow before 1.18.1, the documentId of attachment uploads to /api/document/attachments/upload can ... |
| CVE-2020-35552 | MEDIUM | 5.3 | 0.3% | Dec 18, 2020 | An issue was discovered in the GPS daemon on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (non-Qualcomm chips... |
| CVE-2020-35549 | MEDIUM | 5.5 | 0.1% | Dec 18, 2020 | An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. Any application may establi... |
| CVE-2020-35548 | MEDIUM | 5.5 | 0.1% | Dec 18, 2020 | An issue was discovered in Finder on Samsung mobile devices with Q(10.0) software. A call to a non-existent provider all... |
| CVE-2020-35480 | MEDIUM | 5.3 | 1.5% | Dec 18, 2020 | An issue was discovered in MediaWiki before 1.35.1. Missing users (accounts that don't exist) and hidden users (accounts... |
| CVE-2020-35479 | MEDIUM | 6.1 | 1.5% | Dec 18, 2020 | MediaWiki before 1.35.1 allows XSS via BlockLogFormatter.php. Language::translateBlockExpiry itself does not escape in a... |
| CVE-2020-35478 | MEDIUM | 6.1 | 1.4% | Dec 18, 2020 | MediaWiki before 1.35.1 allows XSS via BlockLogFormatter.php. MediaWiki:blanknamespace potentially can be output as raw ... |
| CVE-2020-35477 | MEDIUM | 5.3 | 1.5% | Dec 18, 2020 | MediaWiki before 1.35.1 blocks legitimate attempts to hide log entries in some situations. If one sets MediaWiki:Mainpag... |
| CVE-2020-35474 | MEDIUM | 6.1 | 1.0% | Dec 18, 2020 | In MediaWiki before 1.35.1, the combination of Html::rawElement and Message::text leads to XSS because the definition of... |
| CVE-2020-27340 | MEDIUM | 6.1 | 0.8% | Dec 18, 2020 | The online help portal of Mitel MiCollab before 9.2 could allow an attacker to redirect a user to an unauthorized websit... |
| CVE-2020-25612 | MEDIUM | 4.9 | 0.8% | Dec 18, 2020 | The NuPoint Messenger of Mitel MiCollab before 9.2 could allow an attacker with escalated privilege to access user files... |
| CVE-2020-25611 | MEDIUM | 6.1 | 0.6% | Dec 18, 2020 | The AWV portal of Mitel MiCollab before 9.2 could allow an attacker to gain access to conference information by sending ... |
| CVE-2020-25610 | MEDIUM | 5.3 | 0.9% | Dec 18, 2020 | The AWV component of Mitel MiCollab before 9.2 could allow an attacker to gain access to a web conference due to insuffi... |
| CVE-2020-25609 | MEDIUM | 5.4 | 0.7% | Dec 18, 2020 | The NuPoint Messenger Portal of Mitel MiCollab before 9.2 could allow an authenticated attacker to execute arbitrary scr... |
| CVE-2020-25606 | MEDIUM | 6.1 | 0.6% | Dec 18, 2020 | The AWV component of Mitel MiCollab before 9.2 could allow an attacker to view system information by sending arbitrary c... |
| CVE-2020-13528 | MEDIUM | 5.3 | 2.9% | Dec 18, 2020 | An information disclosure vulnerability exists in the Web Manager and telnet CLI functionality of Lantronix XPort EDGE 3... |
| CVE-2020-13527 | MEDIUM | 4.5 | 0.6% | Dec 18, 2020 | An authentication bypass vulnerability exists in the Web Manager functionality of Lantronix XPort EDGE 3.0.0.0R11, 3.1.0... |
| CVE-2020-13518 | MEDIUM | 6.5 | 0.5% | Dec 18, 2020 | An information disclosure vulnerability exists in the WinRing0x64 Driver IRP 0x9c402084 functionality of NZXT CAM 4.8.0.... |
| CVE-2020-13517 | MEDIUM | 5.5 | 0.5% | Dec 18, 2020 | An information disclosure vulnerability exists in the WinRing0x64 Driver IRP 0x9c406104 functionality of NZXT CAM 4.8.0.... |
| CVE-2020-13516 | MEDIUM | 6.5 | 0.5% | Dec 18, 2020 | An information disclosure vulnerability exists in the WinRing0x64 Driver IRP 0x9c406144 functionality of NZXT CAM 4.8.0.... |
| CVE-2020-13511 | MEDIUM | 6.5 | 0.5% | Dec 18, 2020 | An information disclosure vulnerability exists in the WinRing0x64 Driver Privileged I/O Read IRPs functionality of NZXT ... |
| CVE-2020-13510 | MEDIUM | 6.5 | 0.4% | Dec 18, 2020 | An information disclosure vulnerability exists in the WinRing0x64 Driver Privileged I/O Read IRPs functionality of NZXT ... |
| CVE-2020-13509 | MEDIUM | 6.5 | 0.5% | Dec 18, 2020 | An information disclosure vulnerability exists in the WinRing0x64 Driver Privileged I/O Read IRPs functionality of NZXT ... |
| CVE-2020-20142 | MEDIUM | 6.1 | 1.6% | Dec 17, 2020 | Cross Site Scripting (XSS) vulnerability in the "To Remote CSV" component under "Open" Menu in Flexmonster Pivot Table &... |
| CVE-2020-20141 | MEDIUM | 6.1 | 1.6% | Dec 17, 2020 | Cross Site Scripting (XSS) vulnerability in the To OLAP (XMLA) component Under the Connect menu in Flexmonster Pivot Tab... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now