Menu

Star on GitHub · 3.2k

2020

18,349 vulnerabilities published in 2020.

Results

7,678 of 18,349· Page 90/154
7.8
CVE-2020-1109

An elevation of privilege vulnerability exists when the Windows Update Stack fails to properly handle objects in memory.

7.5
CVE-2020-1108

A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests. An attacker w

8.8
CVE-2020-1102

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup

7.5
CVE-2020-1093

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerab

7.5
CVE-2020-1092

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerabi

7.8
CVE-2020-1090

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory. An attacke

7.8
CVE-2020-1088

An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files. The

7.8
CVE-2020-1087

An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attacker

7.8
CVE-2020-1086

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory. An attacke

7.8
CVE-2020-1082

An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files. The

7.8
CVE-2020-1081

An elevation of privilege vulnerability exists when the Windows Printer Service improperly validates file paths while lo

7.8
CVE-2020-1079

An elevation of privilege vulnerability exists when the Windows fails to properly handle objects in memory. An attacker

7.8
CVE-2020-1078

An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain

7.8
CVE-2020-1077

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory. An attacke

7.8
CVE-2020-1070

An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writin

8.8
CVE-2020-1069

A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filte

7.8
CVE-2020-1068

An elevation of privilege vulnerability exists in Windows Media Service that allows file creation in arbitrary locations

7.8
CVE-2020-1067

A remote code execution vulnerability exists in the way that Windows handles objects in memory. An attacker who successf

7.8
CVE-2020-1066

An elevation of privilege vulnerability exists in .NET Framework which could allow an attacker to elevate their privileg

7.5
CVE-2020-1064

A remote code execution vulnerability exists in the way that the MSHTML engine improperly validates input. An attacker c

7.5
CVE-2020-1062

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerabi

7.5
CVE-2020-1061

A remote code execution vulnerability exists in the way that the Microsoft Script Runtime handles objects in memory. The

7.5
CVE-2020-1060

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerab

7.5
CVE-2020-1058

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerab

7.0
CVE-2020-1054KEV

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle o

7.8
CVE-2020-1051

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory.

7.8
CVE-2020-1048

An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writin

7.5
CVE-2020-1035

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerab

7.8
CVE-2020-1028

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker

8.8
CVE-2020-1024

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup

8.8
CVE-2020-1023

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup

7.8
CVE-2020-1021

An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files. The

7.8
CVE-2020-1010

An elevation of privilege vulnerability exists in Windows Block Level Backup Engine Service (wbengine) that allows file

8.1
CVE-2020-12693

Slurm 19.05.x before 19.05.7 and 20.02.x before 20.02.3, in the rare case where Message Aggregation is enabled, allows A

7.5
CVE-2020-0909

A denial of service vulnerability exists when Hyper-V on a Windows Server fails to properly handle specially crafted net

8.8
CVE-2019-20804

Gila CMS before 1.11.6 allows CSRF with resultant XSS via the admin/themes URI, leading to compromise of the admin accou

7.7
CVE-2017-18868

Digi XBee 2 devices do not have an effective protection mechanism against remote AT commands, because of issues related

8.7
CVE-2020-7808

In RAONWIZ K Upload v2018.0.2.51 and prior, automatic update processing without integrity check on update module(web.js)

8.2
CVE-2020-13113

An issue was discovered in libexif before 0.6.22. Use of uninitialized memory in EXIF Makernote handling could lead to c

7.5
CVE-2020-13114

An issue was discovered in libexif before 0.6.22. An unrestricted size in handling Canon EXIF MakerNote data could lead

7.5
CVE-2020-10738

A flaw was found in Moodle versions 3.8 before 3.8.3, 3.7 before 3.7.6, 3.6 before 3.6.10, 3.5 before 3.5.12 and earlier

7.5
CVE-2020-8572

Element OS prior to version 12.0 and Element HealthTools prior to version 2020.04.01.04 are susceptible to a vulnerabili

7.8
CVE-2020-5752

Relative path traversal in Druva inSync Windows Client 6.6.3 allows a local, unauthenticated attacker to execute arbitra

7.5
CVE-2020-1799

E6878-370 with versions of 10.0.3.1(H557SP27C233), 10.0.3.1(H563SP1C00), 10.0.3.1(H563SP1C233) has a use after free vuln

7.8
CVE-2020-6477

Inappropriate implementation in installer in Google Chrome on OS X prior to 83.0.4103.61 allowed a local attacker to per

8.8
CVE-2020-6474

Use after free in Blink in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap cor

8.8
CVE-2020-6468

Type confusion in V8 in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corrup

8.8
CVE-2020-6467

Use after free in WebRTC in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap co

8.8
CVE-2020-6464

Type confusion in Blink in Google Chrome prior to 81.0.4044.138 allowed a remote attacker to potentially exploit heap co

8.8
CVE-2020-6463

Use after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap co

Test your stack for 2020issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.