2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-11182 | CRITICAL | 9.8 | 0.8% | Jun 9, 2021 | Possible heap overflow while parsing NAL header due to lack of check of length of data received from user in Snapdragon ... |
| CVE-2020-11178 | HIGH | 7.8 | 0.2% | Jun 9, 2021 | Trusted APPS to overwrite the CPZ memory of another use-case as TZ only checks the physical address not overlapping with... |
| CVE-2020-11165 | HIGH | 7.8 | 0.2% | Jun 9, 2021 | Memory corruption due to buffer overflow while copying the message provided by HLOS into buffer without validating the l... |
| CVE-2020-11161 | HIGH | 7.1 | 0.1% | Jun 9, 2021 | Out-of-bounds memory access can occur while calculating alignment requirements for a negative width from external compon... |
| CVE-2020-11160 | MEDIUM | 6.7 | 0.1% | Jun 9, 2021 | Resource leakage issue during dci client registration due to reference count is not decremented if dci client registrati... |
| CVE-2020-11159 | CRITICAL | 9.1 | 0.8% | Jun 9, 2021 | Buffer over-read can happen while processing WPA,RSN IE of beacon and response frames if IE length is less than length o... |
| CVE-2020-11134 | CRITICAL | 9.8 | 0.8% | Jun 9, 2021 | Possible stack out of bound write might happen due to time bitmap length and bit duration fields of the attributes like ... |
| CVE-2020-11126 | CRITICAL | 9.1 | 0.8% | Jun 9, 2021 | Possible out of bound read while WLAN frame parsing due to lack of check for body and header length in Snapdragon Auto, ... |
| CVE-2020-26136 | MEDIUM | 6.5 | 1.2% | Jun 8, 2021 | In SilverStripe through 4.6.0-rc1, GraphQL doesn't honour MFA (multi-factor authentication) when using basic authenticat... |
| CVE-2020-28713 | MEDIUM | 6.5 | 1.4% | Jun 8, 2021 | Incorrect access control in push notification service in Night Owl Smart Doorbell FW version 20190505 allows remote user... |
| CVE-2020-26138 | MEDIUM | 5.3 | 1.3% | Jun 8, 2021 | In SilverStripe through 4.6.0-rc1, a FormField with square brackets in the field name skips validation. |
| CVE-2020-25817 | MEDIUM | 4.8 | 0.8% | Jun 8, 2021 | SilverStripe through 4.6.0-rc1 has an XXE Vulnerability in CSSContentParser. A developer utility meant for parsing HTML ... |
| CVE-2020-26517 | MEDIUM | 4.8 | 0.5% | Jun 8, 2021 | A cross-site scripting (XSS) issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4. It is possible to per... |
| CVE-2020-26516 | HIGH | 8.8 | 0.8% | Jun 8, 2021 | A CSRF issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4. Requests sent to the server that trigger ac... |
| CVE-2020-26515 | HIGH | 7.5 | 0.5% | Jun 8, 2021 | An insufficiently protected credentials issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4. The rememb... |
| CVE-2020-25716 | HIGH | 8.1 | 0.8% | Jun 7, 2021 | A flaw was found in Cloudforms. A role-based privileges escalation flaw where export or import of administrator files is... |
| CVE-2020-1750 | MEDIUM | 6.5 | 0.9% | Jun 7, 2021 | A flaw was found in the machine-config-operator that causes an OpenShift node to become unresponsive when a container co... |
| CVE-2020-36387 | HIGH | 7.8 | 0.4% | Jun 7, 2021 | An issue was discovered in the Linux kernel before 5.8.2. fs/io_uring.c has a use-after-free related to io_async_task_fu... |
| CVE-2020-36386 | HIGH | 7.1 | 0.5% | Jun 7, 2021 | An issue was discovered in the Linux kernel before 5.8.1. net/bluetooth/hci_event.c has a slab out-of-bounds read in hci... |
| CVE-2020-1742 | HIGH | 7 | 0.3% | Jun 7, 2021 | An insecure modification vulnerability flaw was found in containers using nmstate/kubernetes-nmstate-handler. An attacke... |
| CVE-2020-1690 | MEDIUM | 6.5 | 0.2% | Jun 7, 2021 | An improper authorization flaw was discovered in openstack-selinux's applied policy where it does not prevent a non-root... |
| CVE-2020-18268 | MEDIUM | 6.1 | 2.7% | Jun 7, 2021 | Open Redirect in Z-BlogPHP v1.5.2 and earlier allows remote attackers to obtain sensitive information via the "redirect"... |
| CVE-2020-18265 | HIGH | 8.8 | 1.1% | Jun 7, 2021 | Cross Site Request Forgery (CSRF) in Simple-Log v1.6 allows remote attackers to gain privilege and execute arbitrary cod... |
| CVE-2020-18264 | HIGH | 8.8 | 1.1% | Jun 7, 2021 | Cross Site Request Forgery (CSRF) in Simple-Log v1.6 allows remote attackers to gain privilege and execute arbitrary cod... |
| CVE-2020-1719 | MEDIUM | 5.4 | 0.6% | Jun 7, 2021 | A flaw was found in wildfly. The EJBContext principle is not popped back after invoking another EJB using a different Se... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now