2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-11146 | HIGH | 7.8 | 0.2% | Jan 21, 2021 | Out of bound write while copying data using IOCTL due to lack of check of array index received from user in Snapdragon A... |
| CVE-2020-11145 | HIGH | 7.5 | 0.8% | Jan 21, 2021 | Divide by zero issue can happen while updating delta extension header due to improper validation of master SN and extens... |
| CVE-2020-11144 | CRITICAL | 9.1 | 0.9% | Jan 21, 2021 | Buffer over-read while UE process invalid DL ROHC packet for decompression due to lack of check of size of compresses pa... |
| CVE-2020-11143 | CRITICAL | 9.8 | 1.1% | Jan 21, 2021 | Out of bound memory access during music playback with modified content due to copying data without checking destination ... |
| CVE-2020-11140 | CRITICAL | 9.8 | 1.1% | Jan 21, 2021 | Out of bound memory access during music playback with ALAC modified content due to improper validation in Snapdragon Aut... |
| CVE-2020-11139 | HIGH | 7.5 | 0.8% | Jan 21, 2021 | Out of bound memory access while processing frames due to lack of check of invalid frames received in Snapdragon Auto, S... |
| CVE-2020-11138 | CRITICAL | 9.8 | 1.1% | Jan 21, 2021 | Uninitialized pointers accessed during music play back with incorrect bit stream due to an uninitialized heap memory res... |
| CVE-2020-11137 | CRITICAL | 9.8 | 1.1% | Jan 21, 2021 | Integer multiplication overflow resulting in lower buffer size allocation than expected causes memory access out of boun... |
| CVE-2020-11136 | CRITICAL | 9.8 | 1.1% | Jan 21, 2021 | Buffer Over-read in audio driver while using malloc management function due to not returning NULL for zero sized memory ... |
| CVE-2020-11119 | HIGH | 7.5 | 0.8% | Jan 21, 2021 | Buffer over-read can happen when the buffer length received from response handlers is more than the size of the payload ... |
| CVE-2020-27221 | CRITICAL | 9.8 | 1.5% | Jan 21, 2021 | In Eclipse OpenJ9 up to and including version 0.23, there is potential for a stack-based buffer overflow when the virtua... |
| CVE-2020-26278 | HIGH | 8 | 0.7% | Jan 20, 2021 | Weave Net is open source software which creates a virtual network that connects Docker containers across multiple hosts ... |
| CVE-2020-26252 | HIGH | 7.2 | 2.1% | Jan 20, 2021 | OpenMage is a community-driven alternative to Magento CE. In OpenMage before versions 19.4.10 and 20.0.6, there is a vul... |
| CVE-2020-27859 | HIGH | 7.5 | 2.9% | Jan 20, 2021 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of NEC ESMPRO Man... |
| CVE-2020-27858 | HIGH | 7.5 | 73.8% | Jan 20, 2021 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of CA Arcserve D2... |
| CVE-2020-6024 | HIGH | 7.8 | 0.3% | Jan 20, 2021 | Check Point SmartConsole before R80.10 Build 185, R80.20 Build 119, R80.30 before Build 94, R80.40 before Build 415, and... |
| CVE-2020-28483 | HIGH | 7.1 | 1.3% | Jan 20, 2021 | This affects all versions of package github.com/gin-gonic/gin. When gin is exposed directly to the internet, a client's ... |
| CVE-2020-28452 | HIGH | 8.8 | 0.5% | Jan 20, 2021 | This affects the package com.softwaremill.akka-http-session:core_2.12 from 0 and before 0.6.1; all versions of package c... |
| CVE-2020-25687 | MEDIUM | 5.9 | 86.8% | Jan 20, 2021 | A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in dnsmasq when DNSSEC is e... |
| CVE-2020-25686 | LOW | 3.7 | 4.9% | Jan 20, 2021 | A flaw was found in dnsmasq before version 2.83. When receiving a query, dnsmasq does not check for an existing pending ... |
| CVE-2020-25682 | HIGH | 8.1 | 71.0% | Jan 20, 2021 | A flaw was found in dnsmasq before 2.83. A buffer overflow vulnerability was discovered in the way dnsmasq extract names... |
| CVE-2020-25681 | HIGH | 8.1 | 81.3% | Jan 20, 2021 | A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in the way RRSets are sorte... |
| CVE-2020-35272 | MEDIUM | 4.8 | 0.6% | Jan 20, 2021 | Employee Performance Evaluation System in PHP/MySQLi with Source Code 1.0 is affected by cross-site scripting (XSS) in t... |
| CVE-2020-35271 | MEDIUM | 4.8 | 0.5% | Jan 20, 2021 | Employee Performance Evaluation System in PHP/MySQLi with Source Code 1.0 is affected by cross-site scripting (XSS) in t... |
| CVE-2020-25685 | LOW | 3.7 | 2.2% | Jan 20, 2021 | A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in forward.... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now