2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-15382 | HIGH | 7.2 | 0.9% | Jun 9, 2021 | Brocade SANnav before version 2.1.1 uses a hard-coded administrator account with the weak password ‘passw0rd’ if a passw... |
| CVE-2020-15381 | HIGH | 7.5 | 1.0% | Jun 9, 2021 | Brocade SANnav before version 2.1.1 contains an Improper Authentication vulnerability that allows cleartext transmission... |
| CVE-2020-11306 | HIGH | 7.8 | 0.2% | Jun 9, 2021 | Possible integer overflow in RPMB counter due to lack of length check on user provided data in Snapdragon Auto, Snapdrag... |
| CVE-2020-11304 | HIGH | 7.1 | 0.2% | Jun 9, 2021 | Possible out of bound read in DRM due to improper buffer length check. in Snapdragon Auto, Snapdragon Compute, Snapdrago... |
| CVE-2020-11298 | HIGH | 7 | 0.1% | Jun 9, 2021 | While waiting for a response to a callback or listener request, non-secure clients can change permissions to shared memo... |
| CVE-2020-11292 | HIGH | 7.8 | 0.8% | Jun 9, 2021 | Possible buffer overflow in voice service due to lack of input validation of parameters in QMI Voice API in Snapdragon A... |
| CVE-2020-11291 | CRITICAL | 9.8 | 0.9% | Jun 9, 2021 | Possible buffer overflow while updating ikev2 parameters for delete payloads received during informational exchange due ... |
| CVE-2020-11267 | HIGH | 7.8 | 0.2% | Jun 9, 2021 | Stack out-of-bounds write occurs while setting up a cipher device if the provided IV length exceeds the max limit value ... |
| CVE-2020-11176 | CRITICAL | 9.8 | 0.7% | Jun 9, 2021 | While processing server certificate from IPSec server, certificate validation for subject alternative name API can cause... |
| CVE-2020-11266 | MEDIUM | 6.5 | 0.2% | Jun 9, 2021 | Image address is dereferenced before validating its range which can cause potential QSEE information leakage in Snapdrag... |
| CVE-2020-11265 | MEDIUM | 5.5 | 0.2% | Jun 9, 2021 | Information disclosure issue due to lack of validation of pointer arguments passed to TZ BSP in Snapdragon Wired Infrast... |
| CVE-2020-11262 | HIGH | 7 | 0.1% | Jun 9, 2021 | A race between command submission and destroying the context can cause an invalid context being added to the list leads ... |
| CVE-2020-11261 | HIGH | 7.8 | 1.8% | Jun 9, 2021 | Memory corruption due to improper check to return error when user application requests memory allocation of a huge size ... |
| CVE-2020-11260 | HIGH | 8.4 | 0.2% | Jun 9, 2021 | An improper free of uninitialized memory can occur in DIAG services in Snapdragon Compute, Snapdragon Industrial IOT, Sn... |
| CVE-2020-11259 | HIGH | 8.8 | 0.2% | Jun 9, 2021 | Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastruct... |
| CVE-2020-11258 | HIGH | 8.8 | 0.2% | Jun 9, 2021 | Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastruct... |
| CVE-2020-11257 | HIGH | 8.8 | 0.2% | Jun 9, 2021 | Memory corruption due to lack of validation of pointer arguments passed to TrustZone BSP in Snapdragon Wired Infrastruct... |
| CVE-2020-11256 | HIGH | 8.8 | 0.2% | Jun 9, 2021 | Memory corruption due to lack of check of validation of pointer to buffer passed to trustzone in Snapdragon Wired Infras... |
| CVE-2020-11250 | HIGH | 7 | 0.1% | Jun 9, 2021 | Use after free due to race condition when reopening the device driver repeatedly in Snapdragon Auto, Snapdragon Compute,... |
| CVE-2020-11241 | HIGH | 7.5 | 0.6% | Jun 9, 2021 | Out of bound read will happen if EAPOL Key length is less than expected while processing NAN shared key descriptor attri... |
| CVE-2020-11240 | HIGH | 7.8 | 0.2% | Jun 9, 2021 | Memory corruption due to ioctl command size was incorrectly set to the size of a pointer and not enough storage is alloc... |
| CVE-2020-11239 | HIGH | 7.8 | 0.2% | Jun 9, 2021 | Use after free issue when importing a DMA buffer by using the CPU address of the buffer due to attachment is not cleaned... |
| CVE-2020-11238 | HIGH | 7.5 | 0.6% | Jun 9, 2021 | Possible Buffer over-read in ARP/NS parsing due to lack of check of packet length received in Snapdragon Auto, Snapdrago... |
| CVE-2020-11235 | HIGH | 7.8 | 0.2% | Jun 9, 2021 | Buffer overflow might occur while parsing unified command due to lack of check of input data received in Snapdragon Auto... |
| CVE-2020-11233 | HIGH | 7 | 0.1% | Jun 9, 2021 | Time-of-check time-of-use race condition While processing partition entries due to newly created buffer was read again f... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now