2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-0023 | MEDIUM | 5.5 | 0.3% | Feb 13, 2020 | In setPhonebookAccessPermission of AdapterService.java, there is a possible disclosure of user contacts over bluetooth d... |
| CVE-2020-0021 | MEDIUM | 6.5 | 0.8% | Feb 13, 2020 | In removeUnusedPackagesLPw of PackageManagerService.java, there is a possible permanent denial-of-service due to a missi... |
| CVE-2020-0020 | MEDIUM | 5.5 | 0.1% | Feb 13, 2020 | In getAttributeRange of ExifInterface.java, there is a possible failure to redact location information from media files ... |
| CVE-2020-0018 | MEDIUM | 4.4 | 0.2% | Feb 13, 2020 | In MotionEntry::appendDescription of InputDispatcher.cpp, there is a possible log information disclosure. This could lea... |
| CVE-2020-0017 | MEDIUM | 4.4 | 0.2% | Feb 13, 2020 | In multiple places, it was possible for the primary user’s dictionary to be visible to and modifiable by secondary users... |
| CVE-2020-0014 | MEDIUM | 5.5 | 1.0% | Feb 13, 2020 | It is possible for a malicious application to construct a TYPE_TOAST window manually and make that window clickable. Thi... |
| CVE-2020-0005 | MEDIUM | 6.7 | 0.2% | Feb 13, 2020 | In btm_read_remote_ext_features_complete of btm_acl.cc, there is a possible out of bounds write due to a missing bounds ... |
| CVE-2020-7208 | MEDIUM | 6.1 | 0.9% | Feb 13, 2020 | LinuxKI v6.0-1 and earlier is vulnerable to an XSS which is resolved in release 6.0-2. |
| CVE-2020-6973 | MEDIUM | 6.2 | 0.8% | Feb 13, 2020 | Digi International ConnectPort LTS 32 MEI, Firmware Version 1.4.3 (82002228_K 08/09/2018), bios Version 1.2. Multiple cr... |
| CVE-2020-5241 | MEDIUM | 5.4 | 0.6% | Feb 13, 2020 | matestack-ui-core (RubyGem) before 0.7.4 is vulnerable to XSS/Script injection. This vulnerability is patched in version... |
| CVE-2020-6975 | MEDIUM | 4.9 | 0.8% | Feb 12, 2020 | Digi International ConnectPort LTS 32 MEI, Firmware Version 1.4.3 (82002228_K 08/09/2018), bios Version 1.2. Successful ... |
| CVE-2020-1976 | MEDIUM | 5.5 | 0.3% | Feb 12, 2020 | A denial-of-service (DoS) vulnerability in Palo Alto Networks GlobalProtect software running on Mac OS allows authentica... |
| CVE-2020-6193 | MEDIUM | 6.1 | 0.7% | Feb 12, 2020 | SAP NetWeaver (Knowledge Management ICE Service), versions 7.30, 7.31, 7.40, 7.50, allows an unauthenticated attacker to... |
| CVE-2020-6190 | MEDIUM | 5.8 | 0.9% | Feb 12, 2020 | Certain vulnerable endpoints in SAP NetWeaver AS Java (Heap Dump Application), versions 7.30, 7.31, 7.40, 7.50, provide ... |
| CVE-2020-6189 | MEDIUM | 5.3 | 0.9% | Feb 12, 2020 | Certain settings page(s) in SAP Business Objects Business Intelligence Platform (CMC), version 4.2, generates error mess... |
| CVE-2020-6187 | MEDIUM | 4.9 | 0.9% | Feb 12, 2020 | SAP NetWeaver (Guided Procedures), versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently validate an ... |
| CVE-2020-6185 | MEDIUM | 5.4 | 0.5% | Feb 12, 2020 | Under certain conditions ABAP Online Community in SAP NetWeaver (SAP_BASIS version 7.40) and SAP S/4HANA (SAP_BASIS vers... |
| CVE-2020-6184 | MEDIUM | 6.1 | 1.0% | Feb 12, 2020 | Under certain conditions, ABAP Online Community in SAP NetWeaver (SAP_BASIS version 7.40) and SAP S/4HANA (SAP_BASIS ver... |
| CVE-2020-6183 | MEDIUM | 6.5 | 0.7% | Feb 12, 2020 | SAP Host Agent, version 7.21, allows an unprivileged user to read the shared memory or write to the shared memory by sen... |
| CVE-2020-6181 | MEDIUM | 5.8 | 0.8% | Feb 12, 2020 | Under some circumstances the SAML SSO implementation in the SAP NetWeaver (SAP_BASIS versions 702, 730, 731, 740 and SAP... |
| CVE-2020-6177 | MEDIUM | 4.3 | 0.8% | Feb 12, 2020 | SAP Mobile Platform, version 3.0, does not sufficiently validate an XML document accepted from an untrusted source which... |
| CVE-2020-7957 | MEDIUM | 5.3 | 1.8% | Feb 12, 2020 | The IMAP and LMTP components in Dovecot 2.3.9 before 2.3.9.3 mishandle snippet generation when many characters must be r... |
| CVE-2020-8839 | MEDIUM | 6.1 | 2.1% | Feb 12, 2020 | Stored XSS was discovered on CHIYU BF-430 232/485 TCP/IP Converter devices before 1.16.00, as demonstrated by the /if.cg... |
| CVE-2020-2133 | MEDIUM | 6.5 | 0.9% | Feb 12, 2020 | Jenkins Applatix Plugin 1.1 and earlier stores a password unencrypted in job config.xml files on the Jenkins master wher... |
| CVE-2020-2132 | MEDIUM | 6.5 | 0.9% | Feb 12, 2020 | Jenkins Parasoft Environment Manager Plugin 2.14 and earlier stores a password unencrypted in job config.xml files on th... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now