2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-11699 | HIGH | 8.8 | 9.6% | Sep 17, 2020 | An issue was discovered in Titan SpamTitan 7.07. Improper validation of the parameter fname on the page certs-x.php woul... |
| CVE-2020-0401 | HIGH | 7.8 | 0.3% | Sep 17, 2020 | In setInstallerPackageName of PackageManagerService.java, there is a missing permission check. This could lead to local ... |
| CVE-2020-0394 | HIGH | 7.8 | 0.3% | Sep 17, 2020 | In onCreate of BluetoothPairingDialog.java, there is a possible tapjacking vector due to an insecure default value. This... |
| CVE-2020-0392 | HIGH | 7.8 | 0.3% | Sep 17, 2020 | In getLayerDebugInfo of SurfaceFlinger.cpp, there is a possible code execution due to a double free. This could lead to ... |
| CVE-2020-0391 | HIGH | 7.8 | 0.4% | Sep 17, 2020 | In applyPolicy of PackageManagerService.java, there is possible arbitrary command execution as System due to an unenforc... |
| CVE-2020-0388 | HIGH | 7.8 | 0.2% | Sep 17, 2020 | In createEmergencyLocationUserNotification of GnssVisibilityControl.java, there is a possible permissions bypass due to ... |
| CVE-2020-0381 | HIGH | 7.5 | 1.5% | Sep 17, 2020 | In Parse_wave of eas_mdls.c, there is a possible out of bounds write due to an integer overflow. This could lead to remo... |
| CVE-2020-0245 | HIGH | 8.8 | 2.1% | Sep 17, 2020 | In DecodeFrameCombinedMode of combined_decode.cpp, there is a possible out of bounds write due to a heap buffer overflow... |
| CVE-2020-0074 | HIGH | 7.8 | 0.2% | Sep 17, 2020 | In verifyIntentFiltersIfNeeded of PackageManagerService.java, there is a possible settings bypass allowing an app to bec... |
| CVE-2020-6116 | HIGH | 7.8 | 28.4% | Sep 17, 2020 | An arbitrary code execution vulnerability exists in the rendering functionality of Nitro Software, Inc.’s Nitro Pro 13.1... |
| CVE-2020-6115 | HIGH | 7.8 | 2.7% | Sep 17, 2020 | An exploitable vulnerability exists in the cross-reference table repairing functionality of Nitro Software, Inc.’s Nitro... |
| CVE-2020-6113 | HIGH | 7.8 | 68.6% | Sep 17, 2020 | An exploitable vulnerability exists in the object stream parsing functionality of Nitro Software, Inc.’s Nitro Pro 13.13... |
| CVE-2020-6112 | HIGH | 7.8 | 17.1% | Sep 17, 2020 | An exploitable code execution vulnerability exists in the JPEG2000 Stripe Decoding functionality of Nitro Software, Inc.... |
| CVE-2020-13948 | HIGH | 8.8 | 3.1% | Sep 17, 2020 | While investigating a bug report on Apache Superset, it was determined that an authenticated user could craft requests v... |
| CVE-2020-24373 | HIGH | 8.8 | 0.5% | Sep 16, 2020 | A CSRF vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3. |
| CVE-2020-16233 | HIGH | 7.5 | 1.8% | Sep 16, 2020 | An attacker could send a specially crafted packet that could have CodeMeter (All versions prior to 7.10) send back packe... |
| CVE-2020-14519 | HIGH | 7.5 | 0.6% | Sep 16, 2020 | This vulnerability allows an attacker to use the internal WebSockets API for CodeMeter (All versions prior to 7.00 are a... |
| CVE-2020-14515 | HIGH | 7.5 | 0.8% | Sep 16, 2020 | CodeMeter (All versions prior to 6.90 when using CmActLicense update files with CmActLicense Firm Code) has an issue in ... |
| CVE-2020-14513 | HIGH | 7.5 | 1.6% | Sep 16, 2020 | CodeMeter (All versions prior to 6.81) and the software using it may crash while processing a specifically crafted licen... |
| CVE-2020-6781 | HIGH | 7.4 | 0.5% | Sep 16, 2020 | Improper certificate validation for certain connections in the Bosch Smart Home System App for iOS prior to version 9.17... |
| CVE-2020-6146 | HIGH | 8.8 | 78.5% | Sep 16, 2020 | An exploitable code execution vulnerability exists in the rendering functionality of Nitro Pro 13.13.2.242 and 13.16.2.3... |
| CVE-2020-13259 | HIGH | 8.8 | 4.7% | Sep 16, 2020 | A vulnerability in the web-based management interface of RAD SecFlow-1v os-image SF_0290_2.3.01.26 could allow an unauth... |
| CVE-2020-10718 | HIGH | 7.5 | 1.4% | Sep 16, 2020 | A flaw was found in Wildfly before wildfly-embedded-13.0.0.Final, where the embedded managed process API has an exposed ... |
| CVE-2020-25040 | HIGH | 8.8 | 2.0% | Sep 16, 2020 | Sylabs Singularity through 3.6.2 has Insecure Permissions on temporary directories used in explicit and implicit contain... |
| CVE-2020-25039 | HIGH | 8.1 | 2.0% | Sep 16, 2020 | Sylabs Singularity 3.2.0 through 3.6.2 has Insecure Permissions on temporary directories used in fakeroot or user namesp... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now