2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-0473 | MEDIUM | 4.6 | 0.1% | Dec 15, 2020 | In updateIncomingFileConfirmNotification of BluetoothOppNotification.java, there is a possible permissions bypass. This ... |
| CVE-2020-0368 | LOW | 3.3 | 0.1% | Dec 15, 2020 | In queryInternal of CallLogProvider.java, there is a possible permission bypass due to improper input validation. This c... |
| CVE-2020-0280 | MEDIUM | 5.5 | 0.2% | Dec 15, 2020 | In nci_proc_ee_management_rsp of nci_hrcv.cc, there is a possible out of bounds read due to a missing bounds check. This... |
| CVE-2020-0244 | MEDIUM | 5.5 | 0.4% | Dec 15, 2020 | In writeBurstBufferBytes of SPDIFEncoder.cpp, there is a possible out of bounds read due to an incorrect bounds check. T... |
| CVE-2020-8944 | MEDIUM | 5.5 | 0.2% | Dec 15, 2020 | An arbitrary memory write vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to eca... |
| CVE-2020-8943 | MEDIUM | 5.5 | 0.1% | Dec 15, 2020 | An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to enc_... |
| CVE-2020-8942 | MEDIUM | 5.5 | 0.1% | Dec 15, 2020 | An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to enc_... |
| CVE-2020-8941 | MEDIUM | 5.5 | 0.1% | Dec 15, 2020 | An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to enc_... |
| CVE-2020-8940 | MEDIUM | 5.5 | 0.1% | Dec 15, 2020 | An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to enc_... |
| CVE-2020-8939 | MEDIUM | 5.5 | 0.1% | Dec 15, 2020 | An out of bounds read on the enc_untrusted_inet_ntop function allows an attack to extend the result size that is used by... |
| CVE-2020-8938 | LOW | 3.3 | 0.1% | Dec 15, 2020 | An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allows an attacker to make a host call to From... |
| CVE-2020-8937 | LOW | 3.3 | 0.1% | Dec 15, 2020 | An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allows an attacker to make a host call to enc_... |
| CVE-2020-8936 | MEDIUM | 5.5 | 0.1% | Dec 15, 2020 | An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allows an attacker to make a host call to Untr... |
| CVE-2020-8935 | HIGH | 7.8 | 0.1% | Dec 15, 2020 | An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allow an attacker to make an Ecall_restore fun... |
| CVE-2020-4849 | MEDIUM | 6.1 | 0.8% | Dec 15, 2020 | IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.19 Interim Fix 7 could allow a remote attacker to bypass security restri... |
| CVE-2020-4747 | CRITICAL | 9.8 | 2.0% | Dec 15, 2020 | IBM Connect:Direct for UNIX 6.1.0, 6.0.0, 4.3.0, and 4.2.0 can allow a local or remote user to obtain an authenticated C... |
| CVE-2020-28203 | MEDIUM | 5.5 | 1.9% | Dec 15, 2020 | An issue was discovered in Foxit Reader and PhantomPDF 10.1.0.37527 and earlier. There is a null pointer access/derefere... |
| CVE-2020-28442 | CRITICAL | 9.8 | 2.0% | Dec 15, 2020 | All versions of package js-data are vulnerable to Prototype Pollution via the deepFillIn function. |
| CVE-2020-35471 | HIGH | 7.5 | 2.4% | Dec 15, 2020 | Envoy before 1.16.1 mishandles dropped and truncated datagrams, as demonstrated by a segmentation fault for a UDP packet... |
| CVE-2020-35470 | HIGH | 8.8 | 1.0% | Dec 15, 2020 | Envoy before 1.16.1 logs an incorrect downstream address because it considers only the directly connected peer, not the ... |
| CVE-2020-35460 | MEDIUM | 5.3 | 1.8% | Dec 14, 2020 | common/InputStreamHelper.java in Packwood MPXJ before 8.3.5 allows directory traversal in the zip stream handler flow, l... |
| CVE-2020-35457 | HIGH | 7.8 | 0.6% | Dec 14, 2020 | GNOME GLib before 2.65.3 has an integer overflow, that might lead to an out-of-bounds write, in g_option_group_add_entri... |
| CVE-2020-0456 | CRITICAL | 9.8 | 0.7% | Dec 14, 2020 | There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A... |
| CVE-2020-0019 | MEDIUM | 5.5 | 0.2% | Dec 14, 2020 | In the Broadcom Nexus firmware, there is an insecure default password. This could lead to local information disclosure i... |
| CVE-2020-0016 | HIGH | 7.8 | 0.2% | Dec 14, 2020 | In the Broadcom Nexus firmware, there is an insecure default password. This could lead to local escalation of privilege ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now