2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-0122 | MEDIUM | 6.7 | 0.2% | Jul 17, 2020 | In the permission declaration for com.google.android.providers.gsf.permission.WRITE_GSERVICES in AndroidManifest.xml, th... |
| CVE-2020-0107 | MEDIUM | 5.5 | 0.1% | Jul 17, 2020 | In getUiccCardsInfo of PhoneInterfaceManager.java, there is a possible permissions bypass due to improper input validati... |
| CVE-2020-0305 | MEDIUM | 6.4 | 0.2% | Jul 17, 2020 | In cdev_get of char_dev.c, there is a possible use-after-free due to a race condition. This could lead to local escalati... |
| CVE-2020-1655 | MEDIUM | 5.3 | 1.0% | Jul 17, 2020 | When a device running Juniper Networks Junos OS with MPC7, MPC8, or MPC9 line cards installed and the system is configur... |
| CVE-2020-1651 | MEDIUM | 6.5 | 0.5% | Jul 17, 2020 | On Juniper Networks MX series, receipt of a stream of specific Layer 2 frames may cause a memory leak resulting in the p... |
| CVE-2020-1643 | MEDIUM | 5.5 | 0.3% | Jul 17, 2020 | Execution of the "show ospf interface extensive" or "show ospf interface detail" CLI commands on a Juniper Networks devi... |
| CVE-2020-1641 | MEDIUM | 6.5 | 0.4% | Jul 17, 2020 | A Race Condition vulnerability in Juniper Networks Junos OS LLDP implementation allows an attacker to cause LLDP to cras... |
| CVE-2020-5130 | MEDIUM | 5.3 | 1.3% | Jul 17, 2020 | SonicOS SSLVPN LDAP login request allows remote attackers to cause external service interaction (DNS) due to improper va... |
| CVE-2020-15497 | MEDIUM | 6.1 | 1.3% | Jul 17, 2020 | jcore/portal/ajaxPortal.jsp in Jalios JCMS 10.0.2 build-20200224104759 allows XSS via the types parameter. Note: It is a... |
| CVE-2020-15807 | MEDIUM | 6.5 | 1.5% | Jul 17, 2020 | GNU LibreDWG before 0.11 allows NULL pointer dereferences via crafted input files. |
| CVE-2020-15586 | MEDIUM | 5.9 | 2.9% | Jul 17, 2020 | Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as demonstrated by the httputil.Rev... |
| CVE-2020-14928 | MEDIUM | 5.9 | 2.8% | Jul 17, 2020 | evolution-data-server (eds) through 3.36.3 has a STARTTLS buffering issue that affects SMTP and POP3. When a server send... |
| CVE-2020-14039 | MEDIUM | 5.3 | 1.8% | Jul 17, 2020 | In Go before 1.13.13 and 1.14.x before 1.14.5, Certificate.Verify may lack a check on the VerifyOptions.KeyUsages EKU re... |
| CVE-2020-7696 | MEDIUM | 5.3 | 1.6% | Jul 17, 2020 | This affects all versions of package react-native-fast-image. When an image with source={{uri: "...", headers: { host: "... |
| CVE-2020-15803 | MEDIUM | 6.1 | 32.3% | Jul 17, 2020 | Zabbix before 3.0.32rc1, 4.x before 4.0.22rc1, 4.1.x through 4.4.x before 4.4.10rc1, and 5.x before 5.0.2rc1 allows stor... |
| CVE-2020-9649 | MEDIUM | 5.5 | 2.6% | Jul 17, 2020 | Adobe Media Encoder versions 14.2 and earlier have an out-of-bounds read vulnerability. Successful exploitation could le... |
| CVE-2020-9485 | MEDIUM | 6.1 | 2.0% | Jul 17, 2020 | An issue was found in Apache Airflow versions 1.10.10 and below. A stored XSS vulnerability was discovered in the Chart ... |
| CVE-2020-11983 | MEDIUM | 5.4 | 1.3% | Jul 17, 2020 | An issue was found in Apache Airflow versions 1.10.10 and below. It was discovered that many of the admin management scr... |
| CVE-2020-4095 | MEDIUM | 6 | 0.2% | Jul 16, 2020 | "BigFix Platform is storing clear text credentials within the system's memory. An attacker who is able to gain administr... |
| CVE-2020-3468 | MEDIUM | 5.4 | 1.0% | Jul 16, 2020 | A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, rem... |
| CVE-2020-3450 | MEDIUM | 4.9 | 1.0% | Jul 16, 2020 | A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an authentica... |
| CVE-2020-3437 | MEDIUM | 6.5 | 2.9% | Jul 16, 2020 | A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, rem... |
| CVE-2020-3406 | MEDIUM | 5.4 | 0.8% | Jul 16, 2020 | A vulnerability in the web-based management interface of the Cisco SD-WAN vManage Software could allow an authenticated,... |
| CVE-2020-3401 | MEDIUM | 6.5 | 2.6% | Jul 16, 2020 | A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, rem... |
| CVE-2020-3385 | MEDIUM | 6.5 | 0.5% | Jul 16, 2020 | A vulnerability in the deep packet inspection (DPI) engine of Cisco SD-WAN vEdge Routers could allow an unauthenticated,... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now