Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-3950 State: PUBLISHED Published: 2020-03-17T18:41:52.000Z Last Updated: 2025-10-21T23:35:48.178Z Vendors: n/a Products: VMware Fusion, VMware Remote Console for Mac and Horizon Client for Mac Problem Types: Privilege escalation vulnerability Description: VMware Fusion (11.x before 11.5.2), VMware Remote Console for Mac (11.x and prior before 11.0.1) and Horizon Client for Mac (5.x and prior before 5.4.0) contain a privilege escalation vulnerability due to improper use of setuid binaries. Successful exploitation of this issue may allow attackers with normal user privileges to escalate their privileges to root on the system where Fusion, VMRC or Horizon Client is installed. Ad
user privileges to escalate their privileges to root on the system where Fusion, VMRC or Horizon Client is installed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.vmware.com/security/advisories/VMSA-2020-0005.html - http://packetstormsecurity.com/files/156843/VMware-Fusion-11.5.2-Privilege-Escalation.html - http://packetstormsecurity.com/files/157079/VMware-Fusion-USB-Arbitrator-Setuid-Privilege-Escalation.html
CVE ID: CVE-2020-3951 State: PUBLISHED Published: 2020-03-17T18:41:49 Last Updated: 2024-08-04T07:52:19.833Z Vendors: n/a Products: VMware Workstation and Horizon Client for Windows Problem Types: Denial-of-service vulnerability Description: VMware Workstation (15.x before 15.5.2) and Horizon Client for Windows (5.x and prior before 5.4.0) contain a denial-of-service vulnerability due to a heap-overflow issue in Cortado Thinprint. Attackers with non-administrative access to a guest VM with virtual printing enabled may exploit this issue to create a denial-of-service condition of the Thinprint service running on the system where Workstation or Horizon Client is installed. Additional Analyst N
on of the Thinprint service running on the system where Workstation or Horizon Client is installed. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2020-0005.html
CVE ID: CVE-2020-3952 State: PUBLISHED Published: 2020-04-10T13:55:36.000Z Last Updated: 2025-10-21T23:35:46.943Z Vendors: n/a Products: VMware vCenter Server Problem Types: Critical Information Disclosure Description: Under certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or external Platform Services Controller (PSC), does not correctly implement access controls. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.vmware.com/security/advisories/VMSA-2020-0006 - http://packetstormsecurity.com/files/157896/VMware-vCenter-Server-6.7-Authentication-Bypass.html
CVE ID: CVE-2020-3953 State: PUBLISHED Published: 2020-04-15T17:20:09 Last Updated: 2024-08-04T07:52:20.252Z Vendors: n/a Products: VMware vRealize Log Insight Problem Types: Stored XSS Description: Cross Site Scripting (XSS) vulnerability exists in VMware vRealize Log Insight prior to 8.1.0 due to improper Input validation. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2020-0007.html
CVE ID: CVE-2020-3954 State: PUBLISHED Published: 2020-04-15T17:17:17 Last Updated: 2024-08-04T07:52:20.507Z Vendors: n/a Products: VMware vRealize Log Insight Problem Types: Stored XSS Description: Open Redirect vulnerability exists in VMware vRealize Log Insight prior to 8.1.0 due to improper Input validation. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2020-0007.html
CVE ID: CVE-2020-3955 State: PUBLISHED Published: 2020-04-29T02:14:06 Last Updated: 2024-08-04T07:52:20.472Z Vendors: VMware Products: ESXi Problem Types: Stored Cross-Site-Scripting (XSS) Description: ESXi 6.5 without patch ESXi650-201912104-SG and ESXi 6.7 without patch ESXi670-202004103-SG do not properly neutralize script-related HTML when viewing virtual machines attributes. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 8.3. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2020-0008.html
CVE ID: CVE-2020-3956 State: PUBLISHED Published: 2020-05-20T13:30:58 Last Updated: 2024-08-04T07:52:20.437Z Vendors: n/a Products: VMware Cloud Director Problem Types: Code Injection Vulnerability Description: VMware Cloud Director 10.0.x before 10.0.0.2, 9.7.0.x before 9.7.0.5, 9.5.0.x before 9.5.0.6, and 9.1.0.x before 9.1.0.4 do not properly handle input leading to a code injection vulnerability. An authenticated actor may be able to send malicious traffic to VMware Cloud Director which may lead to arbitrary remote code execution. This vulnerability can be exploited through the HTML5- and Flex-based UIs, the API Explorer interface and API access. Additional Analyst Notes: - CVE Program C
ough the HTML5- and Flex-based UIs, the API Explorer interface and API access. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2020-0010.html - https://citadelo.com/en/blog/full-infrastructure-takeover-of-vmware-cloud-director-CVE-2020-3956/ - https://github.com/aaronsvk/CVE-2020-3956 - http://packetstormsecurity.com/files/157909/vCloud-Director-9.7.0.15498291-Remote-Code-Execution.html
CVE ID: CVE-2020-3957 State: PUBLISHED Published: 2020-05-29T19:37:58 Last Updated: 2024-08-04T07:52:20.529Z Vendors: VMware Products: VMware Fusion, VMware Remote Console for Mac, VMware Horizon Client for Mac Problem Types: Local privilege escalation vulnerability Description: VMware Fusion (11.x before 11.5.5), VMware Remote Console for Mac (11.x and prior) and VMware Horizon Client for Mac (5.x and prior) contain a local privilege escalation vulnerability due to a Time-of-check Time-of-use (TOCTOU) issue in the service opener. Successful exploitation of this issue may allow attackers with normal user privileges to escalate their privileges to root on the system where Fusion, VMRC and Hor
llow attackers with normal user privileges to escalate their privileges to root on the system where Fusion, VMRC and Horizon Client are installed. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2020-0011.html
CVE ID: CVE-2020-3958 State: PUBLISHED Published: 2020-05-29T19:42:41 Last Updated: 2024-08-04T07:52:20.563Z Vendors: VMware Products: VMware ESXi, VMware Workstation, VMware Fusion Problem Types: Denial-of-service vulnerability Description: VMware ESXi (6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), VMware Workstation (15.x before 15.5.2) and VMware Fusion (11.x before 11.5.2) contain a denial-of-service vulnerability in the shader functionality. Successful exploitation of this issue may allow attackers with non-administrative access to a virtual machine to crash the virtual machine's vmx process leading to a denial of service condition. Additional Analyst Notes: - CV
hine to crash the virtual machine's vmx process leading to a denial of service condition. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2020-0011.html - https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0957
CVE ID: CVE-2020-3959 State: PUBLISHED Published: 2020-05-29T19:49:35 Last Updated: 2024-08-04T07:52:20.401Z Vendors: VMware Products: VMware ESXi, VMware Workstation, VMware Fusion Problem Types: Denial-of-service vulnerability Description: VMware ESXi (6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), VMware Workstation (15.x before 15.1.0) and VMware Fusion (11.x before 11.1.0) contain a memory leak vulnerability in the VMCI module. A malicious actor with local non-administrative access to a virtual machine may be able to crash the virtual machine's vmx process leading to a partial denial of service. Additional Analyst Notes: - CVE Program Container: References: - http
mx process leading to a partial denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2020-0011.html
CVE ID: CVE-2020-3960 State: PUBLISHED Published: 2021-09-15T12:14:02 Last Updated: 2024-08-04T07:52:20.338Z Vendors: n/a Products: VMware ESXi, Workstation, and Fusion Problem Types: Out-of-bounds read vulnerability Description: VMware ESXi (6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before 11.5.5) contain an out-of-bounds read vulnerability in NVMe functionality. A malicious actor with local non-administrative access to a virtual machine with a virtual NVMe controller present may be able to read privileged information contained in physical memory. Additional Analyst Notes: - CVE Program Container: References: - h
privileged information contained in physical memory. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2020-0012.html
CVE ID: CVE-2020-3961 State: PUBLISHED Published: 2020-06-15T15:18:29 Last Updated: 2024-08-04T07:52:20.509Z Vendors: n/a Products: VMware Horizon Client for Windows Problem Types: Privilege escalation vulnerability Description: VMware Horizon Client for Windows (prior to 5.4.3) contains a privilege escalation vulnerability due to folder permission configuration and unsafe loading of libraries. A local user on the system where the software is installed may exploit this issue to run commands as any user. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2020-0013.html
CVE ID: CVE-2020-3962 State: PUBLISHED Published: 2020-06-24T16:01:53 Last Updated: 2024-08-04T07:52:20.307Z Vendors: VMware Products: VMware ESXi, Workstation, Fusion Problem Types: Use-after-free vulnerability Description: VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before 11.5.5) contain a use-after-free vulnerability in the SVGA device. A malicious actor with local access to a virtual machine with 3D graphics enabled may be able to exploit this vulnerability to execute code on the hypervisor from a virtual machine. Additional Analyst Notes: - CVE Program Containe
vulnerability to execute code on the hypervisor from a virtual machine. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2020-0015.html - https://www.zerodayinitiative.com/advisories/ZDI-20-785/
CVE ID: CVE-2020-3963 State: PUBLISHED Published: 2020-06-25T14:50:52 Last Updated: 2024-08-04T07:52:20.479Z Vendors: VMware Products: VMware ESXi, Workstation, Fusion Problem Types: Use-after-free vulnerability Description: VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.2), and Fusion (11.x before 11.5.2) contain a use-after-free vulnerability in PVNVRAM. A malicious actor with local access to a virtual machine may be able to read privileged information contained in physical memory. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/
cal memory. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2020-0015.html - http://seclists.org/fulldisclosure/2020/Jul/22 - http://packetstormsecurity.com/files/158459/VMware-ESXi-Use-After-Free-Out-Of-Bounds-Access.html
CVE ID: CVE-2020-3964 State: PUBLISHED Published: 2020-06-25T14:51:48 Last Updated: 2024-08-04T07:52:20.578Z Vendors: VMware Products: VMware ESXi, Workstation, Fusion Problem Types: Information Leak Description: VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.2), and Fusion (11.x before 11.5.2) contain an information leak in the EHCI USB controller. A malicious actor with local access to a virtual machine may be able to read privileged information contained in the hypervisor's memory. Additional conditions beyond the attacker's control need to be present for exploitation to be possible. Add
or's memory. Additional conditions beyond the attacker's control need to be present for exploitation to be possible. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2020-0015.html - http://seclists.org/fulldisclosure/2020/Jul/22 - http://packetstormsecurity.com/files/158459/VMware-ESXi-Use-After-Free-Out-Of-Bounds-Access.html
CVE ID: CVE-2020-3965 State: PUBLISHED Published: 2020-06-25T14:54:46 Last Updated: 2024-08-04T07:52:20.544Z Vendors: VMware Products: VMware ESXi, Workstation, Fusion Problem Types: Information Leak Description: VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.2), and Fusion (11.x before 11.5.2) contain an information leak in the XHCI USB controller. A malicious actor with local access to a virtual machine may be able to read privileged information contained in hypervisor memory from a virtual machine. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/se
emory from a virtual machine. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2020-0015.html - http://seclists.org/fulldisclosure/2020/Jul/22 - http://packetstormsecurity.com/files/158459/VMware-ESXi-Use-After-Free-Out-Of-Bounds-Access.html
CVE ID: CVE-2020-3966 State: PUBLISHED Published: 2020-06-25T14:45:34 Last Updated: 2024-08-04T07:52:20.417Z Vendors: VMware Products: VMware ESXi, Workstation, Fusion Problem Types: Heap-overflow due to race condition. Description: VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.2), and Fusion (11.x before 11.5.2) contain a heap-overflow due to a race condition issue in the USB 2.0 controller (EHCI). A malicious actor with local access to a virtual machine may be able to exploit this vulnerability to execute code on the hypervisor from a virtual machine. Additional conditions beyond the att
xploit this vulnerability to execute code on the hypervisor from a virtual machine. Additional conditions beyond the attacker's control must be present for exploitation to be possible. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2020-0015.html - https://www.zerodayinitiative.com/advisories/ZDI-20-783/
CVE ID: CVE-2020-3967 State: PUBLISHED Published: 2020-06-25T14:39:21 Last Updated: 2024-08-04T07:52:20.621Z Vendors: VMware Products: VMware ESXi, Workstation, Fusion Problem Types: Heap-overflow vulnerability Description: VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before 11.5.5) contain a heap-overflow vulnerability in the USB 2.0 controller (EHCI). A malicious actor with local access to a virtual machine may be able to exploit this vulnerability to execute code on the hypervisor from a virtual machine. Additional conditions beyond the attacker's control must be p
to execute code on the hypervisor from a virtual machine. Additional conditions beyond the attacker's control must be present for exploitation to be possible. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2020-0015.html - https://www.zerodayinitiative.com/advisories/ZDI-20-784/
CVE ID: CVE-2020-3968 State: PUBLISHED Published: 2020-06-25T14:43:59 Last Updated: 2024-08-04T07:52:20.492Z Vendors: VMware Products: VMware ESXi, Workstation, Fusion Problem Types: Out-of-bounds write vulnerability Description: VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before 11.5.5) contain an out-of-bounds write vulnerability in the USB 3.0 controller (xHCI). A malicious actor with local administrative privileges on a virtual machine may be able to exploit this issue to crash the virtual machine's vmx process leading to a denial of service condition or execute
le to exploit this issue to crash the virtual machine's vmx process leading to a denial of service condition or execute code on the hypervisor from a virtual machine. Additional conditions beyond the attacker's control must be present for exploitation to be possible. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2020-0015.html - https://www.zerodayinitiative.com/advisories/ZDI-20-781/
CVE ID: CVE-2020-3969 State: PUBLISHED Published: 2020-06-24T16:00:46 Last Updated: 2024-08-04T07:52:20.611Z Vendors: VMware Products: VMware ESXi, Workstation, Fusion Problem Types: Heap-overflow vulnerability Description: VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before 11.5.5) contain an off-by-one heap-overflow vulnerability in the SVGA device. A malicious actor with local access to a virtual machine with 3D graphics enabled may be able to exploit this vulnerability to execute code on the hypervisor from a virtual machine. Additional conditions beyond the attac
loit this vulnerability to execute code on the hypervisor from a virtual machine. Additional conditions beyond the attacker's control must be present for exploitation to be possible. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2020-0015.html - https://www.zerodayinitiative.com/advisories/ZDI-20-786/
CVE ID: CVE-2020-3970 State: PUBLISHED Published: 2020-06-25T14:37:44 Last Updated: 2024-08-04T07:52:20.563Z Vendors: VMware Products: VMware ESXi, Workstation, Fusion Problem Types: Out-of-bounds read vulnerability Description: VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before 11.5.5) contain an out-of-bounds read vulnerability in the Shader functionality. A malicious actor with non-administrative local access to a virtual machine with 3D graphics enabled may be able to exploit this vulnerability to crash the virtual machine's vmx process leading to a partial denia
enabled may be able to exploit this vulnerability to crash the virtual machine's vmx process leading to a partial denial of service condition. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2020-0015.html - https://www.zerodayinitiative.com/advisories/ZDI-20-782/
CVE ID: CVE-2020-3971 State: PUBLISHED Published: 2020-06-25T14:55:33 Last Updated: 2024-08-04T07:52:20.541Z Vendors: VMware Products: VMware ESXi, Workstation, Fusion Problem Types: Heap overflow vulnerability Description: VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201907101-SG), Workstation (15.x before 15.0.2), and Fusion (11.x before 11.0.2) contain a heap overflow vulnerability in the vmxnet3 virtual network adapter. A malicious actor with local access to a virtual machine with a vmxnet3 network adapter present may be able to read privileged information contained in physical memory. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmw
formation contained in physical memory. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2020-0015.html
CVE ID: CVE-2020-3972 State: PUBLISHED Published: 2020-06-19T17:29:36 Last Updated: 2024-08-04T07:52:20.488Z Vendors: n/a Products: VMware Tools for macOS Problem Types: Denial-of-service vulnerability Description: VMware Tools for macOS (11.x.x and prior before 11.1.1) contains a denial-of-service vulnerability in the Host-Guest File System (HGFS) implementation. Successful exploitation of this issue may allow attackers with non-admin privileges on guest macOS virtual machines to create a denial-of-service condition on their own VMs. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2020-0014.html
CVE ID: CVE-2020-3973 State: PUBLISHED Published: 2020-07-08T13:46:28 Last Updated: 2024-08-04T07:52:20.505Z Vendors: n/a Products: VMware SD-WAN by VeloCloud Problem Types: Blind SQL-injection Description: The VeloCloud Orchestrator does not apply correct input validation which allows for blind SQL-injection. A malicious actor with tenant access to Velocloud Orchestrator could enter specially crafted SQL queries and obtain data to which they are not privileged. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2020-0016.html
CVE ID: CVE-2020-3974 State: PUBLISHED Published: 2020-07-10T13:14:45 Last Updated: 2024-08-04T07:52:20.667Z Vendors: n/a Products: VMware Fusion, VMware Remote Console for Mac and Horizon Client for Mac Problem Types: Privilege escalation vulnerability Description: VMware Fusion (11.x before 11.5.5), VMware Remote Console for Mac (11.x and prior before 11.2.0 ) and Horizon Client for Mac (5.x and prior before 5.4.3) contain a privilege escalation vulnerability due to improper XPC Client validation. Successful exploitation of this issue may allow attackers with normal user privileges to escalate their privileges to root on the system where Fusion, VMware Remote Console for Mac or Horizon Cli
privileges to escalate their privileges to root on the system where Fusion, VMware Remote Console for Mac or Horizon Client for Mac is installed. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2020-0017.html
CVE ID: CVE-2020-3975 State: PUBLISHED Published: 2020-08-21T17:54:24 Last Updated: 2024-08-04T07:52:20.482Z Vendors: n/a Products: VMware App Volumes Problem Types: Stored Cross-Site Scripting (XSS) vulnerability Description: VMware App Volumes 2.x prior to 2.18.6 and VMware App Volumes 4 prior to 2006 contain a Stored Cross-Site Scripting (XSS) vulnerability. A malicious actor with access to create and edit applications or create storage groups, may be able to inject malicious script which will be executed by a victim's browser when viewing. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2020-0019.html
CVE ID: CVE-2020-3976 State: PUBLISHED Published: 2020-08-21T12:37:34 Last Updated: 2024-08-04T07:52:20.373Z Vendors: n/a Products: ESXi, vCenter Server, and Cloud Foundation Problem Types: Partial denial of service Description: VMware ESXi and vCenter Server contain a partial denial of service vulnerability in their respective authentication services. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 5.3. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2020-0018.html
CVE ID: CVE-2020-3977 State: PUBLISHED Published: 2020-09-22T13:45:14 Last Updated: 2024-08-04T07:52:20.663Z Vendors: n/a Products: VMware Horizon DaaS Problem Types: Broken authentication vulnerability Description: VMware Horizon DaaS (7.x and 8.x before 8.0.1 Update 1) contains a broken authentication vulnerability due to a flaw in the way it handled the first factor authentication. Successful exploitation of this issue may allow an attacker to bypass two-factor authentication process. In order to exploit this issue, an attacker must have a legitimate account on Horizon DaaS. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-20