2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-6295 | HIGH | 7.8 | 0.3% | Aug 12, 2020 | Under certain conditions the SAP Adaptive Server Enterprise, version 16.0, allows an attacker to access encrypted sensit... |
| CVE-2020-2232 | HIGH | 7.5 | 0.8% | Aug 12, 2020 | Jenkins Email Extension Plugin 2.72 and 2.73 transmits and displays the SMTP password in plain text as part of the globa... |
| CVE-2020-8913 | HIGH | 8.8 | 2.9% | Aug 12, 2020 | A local, arbitrary code execution vulnerability exists in the SplitCompat.install endpoint in Android's Play Core Librar... |
| CVE-2020-7029 | HIGH | 8.8 | 0.4% | Aug 11, 2020 | A Cross-Site Request Forgery (CSRF) vulnerability was discovered in the System Management Interface Web component of Ava... |
| CVE-2020-17495 | HIGH | 7.5 | 0.9% | Aug 11, 2020 | django-celery-results through 1.2.1 stores task results in the database. Among the data it stores are the variables pass... |
| CVE-2020-17487 | HIGH | 7.5 | 1.8% | Aug 11, 2020 | radare2 4.5.0 misparses signature information in PE files, causing a segmentation fault in r_x509_parse_algorithmidentif... |
| CVE-2020-16170 | HIGH | 7.5 | 1.9% | Aug 11, 2020 | Use of Hard-coded Credentials in temi Robox OS prior to 120, temi Android app up to 1.3.7931 allows remote attackers to ... |
| CVE-2020-0259 | HIGH | 7.8 | 0.2% | Aug 11, 2020 | In android_verity_ctr of dm-android-verity.c, there is a possible way to modify a dm-verity protected filesystem due to ... |
| CVE-2020-0257 | HIGH | 7.8 | 0.2% | Aug 11, 2020 | In SpecializeCommon of com_android_internal_os_Zygote.cpp, there is a permissions bypass due to an incomplete cleanup. T... |
| CVE-2020-0254 | HIGH | 7.5 | 0.5% | Aug 11, 2020 | There is a possible out of bounds read due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID:... |
| CVE-2020-0251 | HIGH | 7.5 | 0.5% | Aug 11, 2020 | There is a possible out of bounds read due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID:... |
| CVE-2020-0243 | HIGH | 7.8 | 0.2% | Aug 11, 2020 | In clearPropValue of MediaAnalyticsItem.cpp, there is a possible use-after-free due to improper locking. This could lead... |
| CVE-2020-0242 | HIGH | 7.8 | 0.2% | Aug 11, 2020 | In reset of NuPlayerDriver.cpp, there is a possible use-after-free due to improper locking. This could lead to local esc... |
| CVE-2020-0241 | HIGH | 7.8 | 0.3% | Aug 11, 2020 | In NuPlayerStreamListener of NuPlayerStreamListener.cpp, there is possible memory corruption due to a double free. This ... |
| CVE-2020-0240 | HIGH | 8.8 | 2.1% | Aug 11, 2020 | In NewFixedDoubleArray of factory.cc, there is a possible out of bounds write due to an integer overflow. This could lea... |
| CVE-2020-0238 | HIGH | 7 | 0.1% | Aug 11, 2020 | In updatePreferenceIntents of AccountTypePreferenceLoader, there is a possible confused deputy attack due to a race cond... |
| CVE-2020-0108 | HIGH | 7.8 | 0.5% | Aug 11, 2020 | In postNotification of ServiceRecord.java, there is a possible bypass of foreground process restrictions due to an uncau... |
| CVE-2020-9404 | HIGH | 7.1 | 0.3% | Aug 11, 2020 | In PACTware before 4.1 SP6 and 5.x before 5.0.5.31, passwords are stored in an insecure manner, and may be modified by a... |
| CVE-2020-8918 | HIGH | 7.1 | 0.2% | Aug 11, 2020 | An improperly initialized 'migrationAuth' value in Google's go-tpm TPM1.2 library versions prior to 0.3.0 can lead an ea... |
| CVE-2020-11976 | HIGH | 7.5 | 3.8% | Aug 11, 2020 | By crafting a special URL it is possible to make Wicket deliver unprocessed HTML templates. This would allow an attacker... |
| CVE-2020-14979 | HIGH | 7.8 | 0.6% | Aug 11, 2020 | The WinRing0.sys and WinRing0x64.sys drivers 1.2.0 in EVGA Precision X1 through 1.0.6 allow local users, including low i... |
| CVE-2020-13177 | HIGH | 7.8 | 0.4% | Aug 11, 2020 | The support bundler in Teradici PCoIP Standard Agent for Windows and Graphics Agent for Windows versions prior to 20.04.... |
| CVE-2020-13175 | HIGH | 7.5 | 1.7% | Aug 11, 2020 | The Management Interface of the Teradici Cloud Access Connector and Cloud Access Connector Legacy for releases prior to ... |
| CVE-2020-17448 | HIGH | 7.8 | 2.3% | Aug 11, 2020 | Telegram Desktop through 2.1.13 allows a spoofed file type to bypass the Dangerous File Type Execution protection mechan... |
| CVE-2020-17367 | HIGH | 7.8 | 1.5% | Aug 11, 2020 | Firejail through 0.9.62 does not honor the -- end-of-options indicator after the --output option, which may lead to comm... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now