2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-0081 | HIGH | 7.8 | 0.2% | Apr 17, 2020 | In finalize of AssetManager.java, there is possible memory corruption due to a double free. This could lead to local esc... |
| CVE-2020-0080 | HIGH | 7.8 | 0.5% | Apr 17, 2020 | In onOpActiveChanged and related methods of AppOpsControllerImpl.java, there is a possible way to display an app overlay... |
| CVE-2020-0079 | HIGH | 7.8 | 0.1% | Apr 17, 2020 | In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds write due to stale pointer. This could lead to loc... |
| CVE-2020-0078 | HIGH | 7.8 | 0.1% | Apr 17, 2020 | In releaseSecureStops of DrmPlugin.cpp, there is a possible out of bounds write due to a missing bounds check. This coul... |
| CVE-2020-7085 | HIGH | 7.8 | 1.4% | Apr 17, 2020 | A heap overflow vulnerability in the Autodesk FBX-SDK versions 2019.2 and earlier may lead to arbitrary code execution o... |
| CVE-2020-7082 | HIGH | 8.8 | 2.0% | Apr 17, 2020 | A use-after-free vulnerability in the Autodesk FBX-SDK versions 2019.0 and earlier may lead to code execution on a syste... |
| CVE-2020-7081 | HIGH | 8.8 | 1.5% | Apr 17, 2020 | A type confusion vulnerability in the Autodesk FBX-SDK versions 2019.0 and earlier may lead to arbitary code read/write ... |
| CVE-2020-7080 | HIGH | 7.8 | 1.4% | Apr 17, 2020 | A buffer overflow vulnerability in the Autodesk FBX-SDK versions 2019.0 and earlier may lead to arbitrary code execution... |
| CVE-2020-7079 | HIGH | 7.8 | 0.4% | Apr 17, 2020 | An improper signature validation vulnerability in Autodesk Dynamo BIM versions 2.5.1 and 2.5.0 may lead to code executio... |
| CVE-2020-11877 | HIGH | 7.5 | 1.5% | Apr 17, 2020 | airhost.exe in Zoom Client for Meetings 4.6.11 uses 3423423432325249 as the Initialization Vector (IV) for AES-256 CBC e... |
| CVE-2020-11876 | HIGH | 7.5 | 1.7% | Apr 17, 2020 | airhost.exe in Zoom Client for Meetings 4.6.11 uses the SHA-256 hash of 0123425234234fsdfsdr3242 for initialization of a... |
| CVE-2020-9523 | HIGH | 8.8 | 0.9% | Apr 17, 2020 | Insufficiently protected credentials vulnerability on Micro Focus enterprise developer and enterprise server, affecting ... |
| CVE-2020-4277 | HIGH | 7.5 | 1.4% | Apr 17, 2020 | IBM TRIRIGA Application Platform 3.5.3 and 3.6.1 discloses sensitive information in error messages that could aid an att... |
| CVE-2020-11875 | HIGH | 7.8 | 0.2% | Apr 17, 2020 | An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10.0 (MTK chipsets) software. The MTK ke... |
| CVE-2020-11874 | HIGH | 7.5 | 0.4% | Apr 17, 2020 | An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9, and 10 software. Attackers can bypass Factory ... |
| CVE-2020-11793 | HIGH | 8.8 | 2.8% | Apr 17, 2020 | A use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via crafted web content that allow... |
| CVE-2020-10947 | HIGH | 8.8 | 2.0% | Apr 17, 2020 | Mac Endpoint for Sophos Central before 9.9.6 and Mac Endpoint for Sophos Home before 2.2.6 allow Privilege Escalation. |
| CVE-2020-10813 | HIGH | 7.5 | 1.4% | Apr 17, 2020 | A buffer overflow vulnerability in FTPDMIN 0.96 allows attackers to crash the server via a crafted packet. |
| CVE-2020-11872 | HIGH | 7.5 | 0.7% | Apr 17, 2020 | The Cloud Functions subsystem in OpenTrace 1.0 might allow fabrication attacks by making billions of TempID requests bef... |
| CVE-2020-11868 | HIGH | 7.5 | 2.1% | Apr 17, 2020 | ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows an off-path attacker to block unauthenticated synchronizatio... |
| CVE-2020-7486 | HIGH | 7.5 | 1.6% | Apr 16, 2020 | **VERSION NOT SUPPORTED WHEN ASSIGNED** A vulnerability could cause TCM modules to reset when under high network load in... |
| CVE-2020-7484 | HIGH | 7.5 | 1.3% | Apr 16, 2020 | **VERSION NOT SUPPORTED WHEN ASSIGNED** A vulnerability with the former 'password' feature could allow a denial of servi... |
| CVE-2020-7483 | HIGH | 7.5 | 0.9% | Apr 16, 2020 | **VERSION NOT SUPPORTED WHEN ASSIGNED** A vulnerability could cause certain data to be visible on the network when the '... |
| CVE-2020-7111 | HIGH | 7.2 | 1.9% | Apr 16, 2020 | A server side injection vulnerability exists which could allow an authenticated administrative user to achieve Remote Co... |
| CVE-2020-2180 | HIGH | 8.8 | 2.3% | Apr 16, 2020 | Jenkins AWS SAM Plugin 1.2.2 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary ty... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now