2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-0084 | HIGH | 7.8 | 0.1% | Mar 10, 2020 | In several functions of NotificationManagerService.java, there are missing permission checks. This could lead to local e... |
| CVE-2020-0063 | HIGH | 7.3 | 0.2% | Mar 10, 2020 | In SurfaceFlinger, it is possible to override UI confirmation screen protected by the TEE. This could lead to local esca... |
| CVE-2020-0062 | HIGH | 7.5 | 0.6% | Mar 10, 2020 | In Euicc, there is a possible information disclosure due to an included test Certificate. This could lead to remote info... |
| CVE-2020-0054 | HIGH | 7.8 | 0.1% | Mar 10, 2020 | In WifiNetworkSuggestionsManager of WifiNetworkSuggestionsManager.java, there is a possible permission revocation due to... |
| CVE-2020-0051 | HIGH | 7.8 | 0.2% | Mar 10, 2020 | In onCreate of SettingsHomepageActivity, there is a possible tapjacking attack. This could lead to local escalation of p... |
| CVE-2020-0046 | HIGH | 7.8 | 0.2% | Mar 10, 2020 | In DrmPlugin::releaseSecureStops of DrmPlugin.cpp, there is a possible out of bounds write due to a heap buffer overflow... |
| CVE-2020-0083 | HIGH | 7.5 | 0.9% | Mar 10, 2020 | In setRequirePmfInternal of sta_network.cpp, there is a possible default value being improperly applied due to a logic e... |
| CVE-2020-0069 | HIGH | 7.8 | 1.3% | Mar 10, 2020 | In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient ... |
| CVE-2020-0041 | HIGH | 7.8 | 3.2% | Mar 10, 2020 | In binder_transaction of binder.c, there is a possible out of bounds write due to an incorrect bounds check. This could ... |
| CVE-2020-0039 | HIGH | 7.5 | 1.1% | Mar 10, 2020 | In rw_i93_sm_update_ndef of rw_i93.cc, there is a possible read of uninitialized data due to a missing bounds check. Thi... |
| CVE-2020-0038 | HIGH | 7.5 | 1.1% | Mar 10, 2020 | In rw_i93_sm_update_ndef of rw_i93.cc, there is a possible read of uninitialized data due to a missing bounds check. Thi... |
| CVE-2020-0037 | HIGH | 7.5 | 1.2% | Mar 10, 2020 | In rw_i93_sm_set_read_only of rw_i93.cc, there is a possible out of bounds read due to a missing bounds check. This coul... |
| CVE-2020-0036 | HIGH | 7.8 | 0.2% | Mar 10, 2020 | In hasPermissions of PermissionMonitor.java, there is a possible access to restricted permissions due to a permissions b... |
| CVE-2020-0034 | HIGH | 7.5 | 1.9% | Mar 10, 2020 | In vp8_decode_frame of decodeframe.c, there is a possible out of bounds read due to improper input validation. This coul... |
| CVE-2020-0033 | HIGH | 7.8 | 0.2% | Mar 10, 2020 | In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to stale pointer. This could l... |
| CVE-2020-0032 | HIGH | 8.8 | 1.6% | Mar 10, 2020 | In ih264d_release_display_bufs of ih264d_utils.c, there is a possible out of bounds write due to a heap buffer overflow.... |
| CVE-2020-5259 | HIGH | 8.6 | 2.0% | Mar 10, 2020 | In affected versions of dojox (NPM package), the jqMix method is vulnerable to Prototype Pollution. Prototype Pollution ... |
| CVE-2020-5258 | HIGH | 7.7 | 4.0% | Mar 10, 2020 | In affected versions of dojo (NPM package), the deepCopy method is vulnerable to Prototype Pollution. Prototype Pollutio... |
| CVE-2020-5254 | HIGH | 8.1 | 1.1% | Mar 10, 2020 | In NetHack before 3.6.6, some out-of-bound values for the hilite_status option can be exploited. NetHack 3.6.6 resolves ... |
| CVE-2020-5342 | HIGH | 7.8 | 0.4% | Mar 9, 2020 | Dell Digital Delivery versions prior to 3.5.2015 contain an incorrect default permissions vulnerability. A locally authe... |
| CVE-2020-10248 | HIGH | 7.5 | 1.4% | Mar 9, 2020 | BWA DiREX-Pro 1.2181 devices allow remote attackers to discover passwords via a direct request to val_users.php3. |
| CVE-2020-10244 | HIGH | 7.5 | 0.7% | Mar 9, 2020 | JPaseto before 0.3.0 generates weak hashes when using v2.local tokens. |
| CVE-2020-10190 | HIGH | 8.8 | 1.2% | Mar 9, 2020 | An issue was discovered in MunkiReport before 5.3.0. An authenticated user could achieve SQL Injection in app/models/tab... |
| CVE-2020-8987 | HIGH | 7.4 | 0.5% | Mar 9, 2020 | Avast AntiTrack before 1.5.1.172 and AVG Antitrack before 2.0.0.178 proxies traffic to HTTPS sites but does not validate... |
| CVE-2020-5256 | HIGH | 8.8 | 2.0% | Mar 9, 2020 | BookStack before version 0.25.5 has a vulnerability where a user could upload PHP files through image upload functions, ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now