VIR Vulnerability Intelligence Relay

CVEs from 2020

4,634 normalized CVEs published or assigned in this year.

Total
4,634
critical
critical 193
high
high 470
medium
medium 675
low
low 56
% Critical
4.2%
% with KEV
3.2%
% with exploit
3.2%

Top vendors

Top products

  • banking_digital_experience 30
  • retail_xstore_point_of_service 28
  • primavera_unifier 27
  • retail_service_backbone 15
  • financial_services_institutional_performance_analytics 10
  • communications_network_charging_and_control 10
  • communications_contacts_server 9
  • agile_plm 8

Top packages

Severitycriticalhighmediumlowunknown
0
KEVHas exploit
Reset
CVE Severity CVSS Risk Published Description Impact
CVE-2020-36385 high — 8.0 5y ago Important: kernel security, bug fix, and enhancement update suserockylinuxdebian
CVE-2020-14765 high — 8.0 5y ago Important: mariadb:10.3 security, bug fix, and enhancement update suserockylinuxdebian
CVE-2020-13675 high — 8.0 5y ago Unrestricted Upload of File with Dangerous Type in Drupal core archphp
CVE-2020-13673 high — 8.0 5y ago The Drupal core Media module allows embedding internal and external media in content fields. In certain circumstances, the filter could allow an unprivileged user to inject HTML into a page when it i… archphp
CVE-2020-13677 high — 8.0 5y ago Drupal core access bypass vulnerability archphp
CVE-2020-13676 high — 8.0 5y ago Incorrect Authorization in Drupal core archphp
CVE-2020-13674 high — 8.0 5y ago Cross-Site Request Forgery in Drupal core archphp
CVE-2020-26265 high — 8.0 5y ago Consensus flaw in github.com/ethereum/go-ethereum archgolang
CVE-2020-26541 high — 8.0 5y ago Important: kernel security and bug fix update archsuserockylinuxdebian
CVE-2020-15257 high — 8.0 5y ago containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd archdebiansusegolang
CVE-2020-10696 high — 8.0 5y ago Important: container-tools:2.0 security update susedebianrockylinuxgolang
CVE-2020-25097 high — 8.0 5y ago Important: squid:4 security update suserockylinuxdebian
CVE-2020-25285 high — 8.0 5y ago Important: kernel security, bug fix, and enhancement update susedebian
CVE-2020-27786 high — 8.0 5y ago Important: kernel security, bug fix, and enhancement update susedebianalmalinux
CVE-2020-24394 high — 8.0 5y ago Important: kernel security, bug fix, and enhancement update susedebian
CVE-2020-12114 high — 8.0 5y ago Important: kernel security, bug fix, and enhancement update susedebian
CVE-2020-14356 high — 8.0 5y ago Important: kernel security, bug fix, and enhancement update susedebian
CVE-2020-28974 high — 8.0 5y ago Important: kernel security, bug fix, and enhancement update archsusedebianalmalinux
CVE-2020-25704 high — 8.0 5y ago Important: kernel security, bug fix, and enhancement update archsusedebianalmalinux
CVE-2020-25212 high — 8.0 5y ago Important: kernel security, bug fix, and enhancement update susedebian
CVE-2020-25643 high — 8.0 5y ago Important: kernel security, bug fix, and enhancement update susedebian
CVE-2020-15437 high — 8.0 5y ago Important: kernel security, bug fix, and enhancement update susedebian
CVE-2020-0431 high — 8.0 5y ago Important: kernel security, bug fix, and enhancement update susedebian
CVE-2020-25284 high — 8.0 5y ago Important: kernel security, bug fix, and enhancement update susedebian
CVE-2020-12364 high — 8.0 5y ago Important: kernel security, bug fix, and enhancement update susedebianrockylinux
CVE-2020-12464 high — 8.0 5y ago Important: kernel security, bug fix, and enhancement update susedebian
CVE-2020-12362 high — 8.0 5y ago Important: kernel security, bug fix, and enhancement update susedebianrockylinux
CVE-2020-36322 high — 8.0 5y ago Important: kernel security, bug fix, and enhancement update susedebianalmalinux
CVE-2020-35508 high — 8.0 5y ago Important: kernel security, bug fix, and enhancement update susedebianalmalinux
CVE-2020-27835 high — 8.0 5y ago Important: kernel security, bug fix, and enhancement update archsusedebianalmalinux
CVE-2020-12363 high — 8.0 5y ago Important: kernel security, bug fix, and enhancement update susedebianrockylinux
CVE-2020-11608 high — 8.0 5y ago Important: kernel security, bug fix, and enhancement update susedebian
CVE-2020-14314 high — 8.0 5y ago Important: kernel security, bug fix, and enhancement update susedebian
CVE-2020-28052 high — 8.0 5y ago Logic error in Legion of the Bouncy Castle BC Java archdebianjava
CVE-2020-28468 high — 8.0 5y ago This affects the package pwntools before 4.3.1. The shellcraft generator for affected versions of this module are vulnerable to Server-Side Template Injection (SSTI), which can lead to remote code ex… archpython
CVE-2020-28362 high — 8.0 5y ago Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service. archsusedebiangolang
CVE-2020-27152 high — 8.0 5y ago Important: kernel security, bug fix, and enhancement update susedebian
CVE-2020-0466 high — 8.0 5y ago Important: kernel security, bug fix, and enhancement update susedebian
CVE-2020-28374 high — 8.0 5y ago Important: kernel security, bug fix, and enhancement update archsusedebian
CVE-2020-35517 high — 8.0 5y ago Important: virt:rhel and virt-devel:rhel security update rockylinuxdebian
CVE-2020-14351 high — 8.0 5y ago Important: kernel security, bug fix, and enhancement update susedebian
CVE-2020-25705 high — 8.0 5y ago Important: kernel security, bug fix, and enhancement update susedebian
CVE-2020-29661 high — 8.0 5y ago Important: kernel security, bug fix, and enhancement update archsusedebian
CVE-2020-17525 high — 8.0 5y ago Important: subversion:1.10 security update archsuserockylinuxdebian
CVE-2020-1720 high — 8.0 6y ago Important: postgresql:12 security update suserockylinux
CVE-2020-14349 high — 8.0 6y ago Important: postgresql:12 security update suserockylinux
CVE-2020-25694 high — 8.0 6y ago Important: postgresql:12 security update archsuserockylinuxdebian
CVE-2020-25696 high — 8.0 6y ago Important: postgresql:12 security update archsuserockylinuxdebian
CVE-2020-25695 high — 8.0 6y ago Important: postgresql:12 security update archsuserockylinuxdebian
CVE-2020-14350 high — 8.0 6y ago Important: postgresql:12 security update suserockylinux
CVE-2020-13249 high — 8.0 6y ago Important: mariadb:10.3 security, bug fix, and enhancement update suserockylinux
CVE-2020-15180 high — 8.0 6y ago Important: mariadb:10.3 security, bug fix, and enhancement update suserockylinuxdebian
CVE-2020-0452 high — 8.0 6y ago Important: libexif security update archsusedebianrockylinux
CVE-2020-17521 high — 8.0 6y ago Information Disclosure in Apache Groovy archsusedebianjava
CVE-2020-26890 high — 8.0 6y ago Matrix Synapse before 1.20.0 erroneously permits non-standard NaN, Infinity, and -Infinity JSON values in fields of m.room.member events, allowing remote attackers to execute a denial of service atta… archdebianpython
CVE-2020-26891 high — 8.0 6y ago AuthRestServlet in Matrix Synapse before 1.21.0 is vulnerable to XSS due to unsafe interpolation of the session GET parameter. This allows a remote attacker to execute an XSS attack on the domain Syn… archdebianpython
CVE-2020-6506 high — 8.0 6y ago Android WebView Universal Cross-site Scripting archdebiannpm
CVE-2020-36327 high — 8.0 6y ago Important: ruby:2.5 security update archsuserockylinuxdebian+1
CVE-2020-14364 high — 8.0 6y ago Important: virt:rhel security update suserockylinuxdebian
CVE-2020-2760 high — 8.0 6y ago Important: mariadb:10.3 security, bug fix, and enhancement update rockylinuxalmalinux
CVE-2020-2780 high — 8.0 6y ago Important: mariadb:10.3 security, bug fix, and enhancement update rockylinuxalmalinux
CVE-2020-2812 high — 8.0 6y ago Important: mariadb:10.3 security, bug fix, and enhancement update rockylinuxalmalinux
CVE-2020-2574 high — 8.0 6y ago Important: mariadb:10.3 security, bug fix, and enhancement update suserockylinuxalmalinux
CVE-2020-2923 high — 8.0 6y ago Important: mysql:8.0 security update rockylinuxalmalinux
CVE-2020-2928 high — 8.0 6y ago Important: mysql:8.0 security update rockylinuxalmalinux
CVE-2020-2921 high — 8.0 6y ago Important: mysql:8.0 security update rockylinuxalmalinux
CVE-2020-2904 high — 8.0 6y ago Important: mysql:8.0 security update rockylinuxalmalinux
CVE-2020-2898 high — 8.0 6y ago Important: mysql:8.0 security update rockylinuxalmalinux
CVE-2020-2893 high — 8.0 6y ago Important: mysql:8.0 security update rockylinuxalmalinux
CVE-2020-2774 high — 8.0 6y ago Important: mysql:8.0 security update rockylinuxalmalinux
CVE-2020-2896 high — 8.0 6y ago Important: mysql:8.0 security update rockylinuxalmalinux
CVE-2020-2765 high — 8.0 6y ago Important: mysql:8.0 security update rockylinuxalmalinux
CVE-2020-14634 high — 8.0 6y ago Important: mysql:8.0 security update rockylinuxalmalinux
CVE-2020-2901 high — 8.0 6y ago Important: mysql:8.0 security update rockylinuxalmalinux
CVE-2020-2763 high — 8.0 6y ago Important: mysql:8.0 security update rockylinuxalmalinux
CVE-2020-2804 high — 8.0 6y ago Important: mysql:8.0 security update rockylinuxalmalinux
CVE-2020-2895 high — 8.0 6y ago Important: mysql:8.0 security update rockylinuxalmalinux
CVE-2020-2897 high — 8.0 6y ago Important: mysql:8.0 security update rockylinuxalmalinux
CVE-2020-2853 high — 8.0 6y ago Important: mysql:8.0 security update rockylinuxalmalinux
CVE-2020-2759 high — 8.0 6y ago Important: mysql:8.0 security update rockylinuxalmalinux
CVE-2020-2762 high — 8.0 6y ago Important: mysql:8.0 security update rockylinuxalmalinux
CVE-2020-2892 high — 8.0 6y ago Important: mysql:8.0 security update rockylinuxalmalinux
CVE-2020-2686 high — 8.0 6y ago Important: mysql:8.0 security update rockylinuxalmalinux
CVE-2020-2779 high — 8.0 6y ago Important: mysql:8.0 security update rockylinuxalmalinux
CVE-2020-2588 high — 8.0 6y ago Important: mysql:8.0 security update rockylinuxalmalinux
CVE-2020-2770 high — 8.0 6y ago Important: mysql:8.0 security update rockylinuxalmalinux
CVE-2020-2589 high — 8.0 6y ago Important: mysql:8.0 security update rockylinuxalmalinux
CVE-2020-2577 high — 8.0 6y ago Important: mysql:8.0 security update rockylinuxalmalinux
CVE-2020-14697 high — 8.0 6y ago Important: mysql:8.0 security update rockylinuxalmalinux
CVE-2020-2694 high — 8.0 6y ago Important: mysql:8.0 security update rockylinuxalmalinux
CVE-2020-14643 high — 8.0 6y ago Important: mysql:8.0 security update rockylinuxalmalinux
CVE-2020-2627 high — 8.0 6y ago Important: mysql:8.0 security update rockylinuxalmalinux
CVE-2020-2584 high — 8.0 6y ago Important: mysql:8.0 security update rockylinuxalmalinux
CVE-2020-2579 high — 8.0 6y ago Important: mysql:8.0 security update rockylinuxalmalinux
CVE-2020-2761 high — 8.0 6y ago Important: mysql:8.0 security update rockylinuxalmalinux
CVE-2020-2573 high — 8.0 6y ago Important: mysql:8.0 security update rockylinuxalmalinux
CVE-2020-2679 high — 8.0 6y ago Important: mysql:8.0 security update rockylinuxalmalinux
CVE-2020-14632 high — 8.0 6y ago Important: mysql:8.0 security update rockylinuxalmalinux
CVE-2020-14799 high — 8.0 6y ago Important: mysql:8.0 security update rockylinuxdebianalmalinux
CVE-2020-14623 high — 8.0 6y ago Important: mysql:8.0 security update rockylinuxalmalinux