Menu

Star on GitHub · 3.2k

2020

18,349 vulnerabilities published in 2020.

Results

7,554 of 18,349· Page 46/152
6.5
CVE-2020-1091

<p>An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of it

5.5
CVE-2020-1083

<p>An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objec

4.2
CVE-2020-1057

<p>A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memor

4.3
CVE-2020-1044

<p>A security feature bypass vulnerability exists in SQL Server Reporting Services (SSRS) when the server improperly val

5.5
CVE-2020-1038

<p>A denial of service vulnerability exists when Windows Routing Utilities improperly handles objects in memory. An atta

6.8
CVE-2020-1034

<p>An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attac

4.0
CVE-2020-1033

<p>An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attac

4.2
CVE-2020-16884

<p>A remote code execution vulnerability exists in the way that the IEToEdge Browser Helper Object (BHO) plugin on Inter

5.5
CVE-2020-16879

<p>An information disclosure vulnerability exists when a Windows Projected Filesystem improperly handles file redirectio

5.4
CVE-2020-16878

<p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a sp

4.7
CVE-2020-16873

<p>A spoofing vulnerability manifests in Microsoft Xamarin.Forms due to the default settings on Android WebView version

5.4
CVE-2020-16871

<p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a sp

5.4
CVE-2020-16864

<p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a sp

5.4
CVE-2020-16861

<p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a sp

6.8
CVE-2020-16860

<p>A remote code execution vulnerability exists in Microsoft Dynamics 365 (on-premises) when the server fails to properl

5.4
CVE-2020-16859

<p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a sp

5.4
CVE-2020-16858

<p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a sp

5.5
CVE-2020-16855

<p>An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uni

5.5
CVE-2020-16854

<p>An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attac

5.5
CVE-2020-0989

<p>An information disclosure vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly han

6.7
CVE-2020-0951

<p>A security feature bypass vulnerability exists in Windows Defender Application Control (WDAC) which could allow an at

5.5
CVE-2020-0941

<p>An information disclosure vulnerability exists when the win32k component improperly provides kernel information. An a

5.5
CVE-2020-0928

<p>An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attac

5.5
CVE-2020-0921

Microsoft Graphics Component Denial of Service Vulnerability

5.5
CVE-2020-0914

<p>An information disclosure vulnerability exists when the Windows State Repository Service improperly handles objects i

6.5
CVE-2020-0904

<p>A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific

6.5
CVE-2020-0890

<p>A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific

4.2
CVE-2020-0878KEV

<p>A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnera

5.5
CVE-2020-0875

<p>An information disclosure vulnerability exists in how splwow64.exe handles certain calls. An attacker who successfull

6.5
CVE-2020-0856

<p>An information disclosure vulnerability exists when Active Directory integrated DNS (ADIDNS) mishandles objects in me

5.0
CVE-2020-0837

<p>An elevation of privilege vulnerability exists when Active Directory Federation Services (ADFS) improperly handles mu

5.3
CVE-2020-0805

<p>A security feature bypass vulnerability exists when a Windows Projected Filesystem improperly handles file redirectio

6.5
CVE-2020-0664

<p>An information disclosure vulnerability exists when Active Directory integrated DNS (ADIDNS) mishandles objects in me

5.4
CVE-2020-15169

In Action View before versions 5.2.4.4 and 6.0.3.3 there is a potential Cross-Site Scripting (XSS) vulnerability in Acti

4.3
CVE-2018-19947

The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this information exposure vul

4.2
CVE-2018-19946

The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this improper certificate val

5.5
CVE-2020-9239

Huawei smartphones BLA-A09 versions 8.0.0.123(C212),versions earlier than 8.0.0.123(C567),versions earlier than 8.0.0.12

6.5
CVE-2020-16224

In Patient Information Center iX (PICiX) Versions C.02, C.03, the software parses a formatted message or structure but

4.3
CVE-2020-16220

In Patient Information Center iX (PICiX) Versions C.02, C.03, PerformanceBridge Focal Point Version A.01, the product r

6.5
CVE-2020-16216

In IntelliVue patient monitors MX100, MX400-550, MX600, MX700, MX750, MX800, MX850, MP2-MP90, and IntelliVue X2 and X3

6.8
CVE-2020-16212

In Patient Information Center iX (PICiX) Versions B.02, C.02, C.03, the product exposes a resource to the wrong control

5.9
CVE-2020-15802

Devices supporting Bluetooth before 5.1 may allow man-in-the-middle attacks, aka BLURtooth. Cross Transport Key Derivati

6.4
CVE-2020-16228

In Patient Information Center iX (PICiX) Versions C.02 and C.03, PerformanceBridge Focal Point Version A.01, IntelliVue

5.0
CVE-2020-16214

In Patient Information Center iX (PICiX) Versions B.02, C.02, C.03, the software saves user-provided information into a

6.5
CVE-2020-25269

An issue was discovered in InspIRCd 2 before 2.0.29 and 3 before 3.6.0. The pgsql module contains a use after free vulne

6.5
CVE-2019-20918

An issue was discovered in InspIRCd 3 before 3.1.0. The silence module contains a use after free vulnerability. This vul

6.5
CVE-2019-20917

An issue was discovered in InspIRCd 2 before 2.0.28 and 3 before 3.3.0. The mysql module contains a NULL pointer derefer

5.3
CVE-2020-25249

An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 an

6.6
CVE-2020-15171

In XWiki before versions 11.10.5 or 12.2.1, any user with SCRIPT right (EDIT right before XWiki 7.4) can gain access to

6.1
CVE-2020-9726

Adobe FrameMaker version 2019.0.6 (and earlier versions) has an out-of-bounds read vulnerability that could be exploited

Test your stack for 2020issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.