2020 CVE Vulnerabilities
21,060 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-1833 | LOW | 2.4 | 0.2% | May 29, 2020 | Honor 9X smartphones with versions earlier than 9.1.1.172(C00E170R8P1) have an improper authentication vulnerability. A ... |
| CVE-2020-1797 | LOW | 2.4 | 0.2% | May 29, 2020 | HUAWEI Mate 20 smartphones with versions earlier than 10.0.0.185(C00E74R3P8) have an improper authorization vulnerabilit... |
| CVE-2020-11085 | LOW | 3.5 | 1.7% | May 29, 2020 | In FreeRDP before 2.1.0, there is an out-of-bounds read in cliprdr_read_format_list. Clipboard format data read (by clie... |
| CVE-2020-11043 | LOW | 2.7 | 1.9% | May 29, 2020 | In FreeRDP less than or equal to 2.0.0, there is an out-of-bounds read in rfx_process_message_tileset. Invalid data fed ... |
| CVE-2020-11040 | LOW | 2.7 | 1.6% | May 29, 2020 | In FreeRDP less than or equal to 2.0.0, there is an out-of-bound data read from memory in clear_decompress_subcode_rlex,... |
| CVE-2020-11041 | LOW | 2.7 | 1.5% | May 29, 2020 | In FreeRDP less than or equal to 2.0.0, an outside controlled array index is used unchecked for data used as configurati... |
| CVE-2020-4248 | LOW | 2.7 | 1.0% | May 28, 2020 | IBM Security Identity Governance and Intelligence 5.2.6 could allow a remote attacker to obtain sensitive information wh... |
| CVE-2020-13362 | LOW | 3.2 | 0.4% | May 28, 2020 | In QEMU 5.0.0 and earlier, megasas_lookup_frame in hw/scsi/megasas.c has an out-of-bounds read via a crafted reply_queue... |
| CVE-2020-13361 | LOW | 3.9 | 0.4% | May 28, 2020 | In QEMU 5.0.0 and earlier, es1370_transfer_audio in hw/audio/es1370.c does not properly validate the frame count, which ... |
| CVE-2020-12394 | LOW | 3.3 | 0.3% | May 26, 2020 | A logic flaw in our location bar implementation could have allowed a local attacker to spoof the current location by sel... |
| CVE-2020-4345 | LOW | 3.3 | 0.3% | May 17, 2020 | IBM i 7.2, 7.3, and 7.4 users running complex SQL statements under a specific set of circumstances may allow a local use... |
| CVE-2020-11526 | LOW | 2.2 | 2.0% | May 15, 2020 | libfreerdp/core/update.c in FreeRDP versions > 1.1 through 2.0.0-rc4 has an Out-of-bounds Read. |
| CVE-2020-11525 | LOW | 2.2 | 1.7% | May 15, 2020 | libfreerdp/cache/bitmap.c in FreeRDP versions > 1.0 through 2.0.0-rc4 has an Out of bounds read. |
| CVE-2020-9073 | LOW | 2.4 | 0.2% | May 15, 2020 | Huawei P20 smartphones with versions earlier than 10.0.0.156(C00E156R1P4) have an improper authentication vulnerability.... |
| CVE-2020-11931 | LOW | 3.3 | 0.3% | May 15, 2020 | An Ubuntu-specific modification to Pulseaudio to provide security mediation for Snap-packaged applications was found to ... |
| CVE-2020-11063 | LOW | 3.7 | 1.2% | May 13, 2020 | In TYPO3 CMS versions 10.4.0 and 10.4.1, it has been discovered that time-based attacks can be used with the password re... |
| CVE-2020-11932 | LOW | 2.3 | 0.6% | May 13, 2020 | It was discovered that the Subiquity installer for Ubuntu Server logged the LUKS full disk encryption password if one wa... |
| CVE-2020-11058 | LOW | 2.2 | 1.6% | May 12, 2020 | In FreeRDP after 1.1 and before 2.0.0, a stream out-of-bounds seek in rdp_read_font_capability_set could lead to a later... |
| CVE-2020-5833 | LOW | 3.3 | 0.3% | May 11, 2020 | Symantec Endpoint Protection Manager, prior to 14.3, may be susceptible to an out of bounds vulnerability, which is a ty... |
| CVE-2020-12755 | LOW | 3.3 | 0.4% | May 9, 2020 | fishProtocol::establishConnection in fish/fish.cpp in KDE kio-extras through 20.04.0 makes a cacheAuthentication call ev... |
| CVE-2020-11054 | LOW | 3.5 | 1.3% | May 7, 2020 | In qutebrowser versions less than 1.11.1, reloading a page with certificate errors shows a green URL. After a certificat... |
| CVE-2020-11049 | LOW | 2.2 | 1.5% | May 7, 2020 | In FreeRDP after 1.1 and before 2.0.0, there is an out-of-bound read of client memory that is then passed on to the prot... |
| CVE-2020-11048 | LOW | 2.2 | 1.8% | May 7, 2020 | In FreeRDP after 1.0 and before 2.0.0, there is an out-of-bounds read. It only allows to abort a session. No data extrac... |
| CVE-2020-11046 | LOW | 2.2 | 1.3% | May 7, 2020 | In FreeRDP after 1.0 and before 2.0.0, there is a stream out-of-bounds seek in update_read_synchronize that could lead t... |
| CVE-2020-11045 | LOW | 3.3 | 1.7% | May 7, 2020 | In FreeRDP after 1.0 and before 2.0.0, there is an out-of-bound read in in update_read_bitmap_data that allows client me... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now