2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-11202 | HIGH | 7.8 | 1.5% | Nov 12, 2020 | Buffer overflow/underflow occurs when typecasting the buffer passed by CPU internally in the library which is not aligne... |
| CVE-2020-11201 | HIGH | 7.8 | 1.8% | Nov 12, 2020 | Arbitrary access to DSP memory due to improper check in loaded library for data received from CPU side' in Snapdragon Au... |
| CVE-2020-11196 | CRITICAL | 9.8 | 0.9% | Nov 12, 2020 | u'Integer overflow to buffer overflow occurs while playback of ASF clip having unexpected number of codec entries' in Sn... |
| CVE-2020-11193 | CRITICAL | 9.8 | 0.9% | Nov 12, 2020 | u'Buffer over read can happen while parsing mkv clip due to improper typecasting of data returned from atomsize' in Snap... |
| CVE-2020-11184 | CRITICAL | 9.8 | 0.9% | Nov 12, 2020 | u'Possible buffer overflow will occur in video while parsing mp4 clip with crafted esds atom size.' in Snapdragon Auto, ... |
| CVE-2020-11175 | HIGH | 7.8 | 0.2% | Nov 12, 2020 | u'Use after free issue in Bluetooth transport driver when a method in the object is accessed after the object has been d... |
| CVE-2020-11168 | CRITICAL | 9.8 | 0.9% | Nov 12, 2020 | u'Null-pointer dereference can occur while accessing data buffer beyond its size that leads to access the buffer beyond ... |
| CVE-2020-11132 | HIGH | 7.1 | 0.2% | Nov 12, 2020 | u'Buffer over read in boot due to size check ignored before copying GUID attribute from request to response' in Snapdrag... |
| CVE-2020-11131 | HIGH | 7.8 | 0.2% | Nov 12, 2020 | u'Possible buffer overflow in WMA message processing due to integer overflow occurs when processing command received fro... |
| CVE-2020-11130 | HIGH | 7.8 | 0.2% | Nov 12, 2020 | u'Possible buffer overflow in WIFI hal process due to copying data without checking the buffer length' in Snapdragon Aut... |
| CVE-2020-11127 | HIGH | 7.8 | 0.2% | Nov 12, 2020 | u'Integer overflow can cause a buffer overflow due to lack of table length check in the extensible boot Loader during th... |
| CVE-2020-11123 | MEDIUM | 5.5 | 0.2% | Nov 12, 2020 | u'information disclosure in gatekeeper trustzone implementation as the throttling mechanism to prevent brute force attem... |
| CVE-2020-11121 | HIGH | 7.8 | 0.2% | Nov 12, 2020 | u'Possible buffer overflow in WIFI hal process due to usage of memcpy without checking length of destination buffer' in ... |
| CVE-2020-7769 | CRITICAL | 9.8 | 2.3% | Nov 12, 2020 | This affects the package nodemailer before 6.4.16. Use of crafted recipient email addresses may result in arbitrary comm... |
| CVE-2020-26070 | HIGH | 8.6 | 1.9% | Nov 12, 2020 | A vulnerability in the ingress packet processing function of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation... |
| CVE-2020-2050 | HIGH | 8.2 | 1.0% | Nov 12, 2020 | An authentication bypass vulnerability exists in the GlobalProtect SSL VPN component of Palo Alto Networks PAN-OS softwa... |
| CVE-2020-2048 | LOW | 3.3 | 0.3% | Nov 12, 2020 | An information exposure through log file vulnerability exists where the password for the configured system proxy server ... |
| CVE-2020-2022 | HIGH | 7.5 | 1.2% | Nov 12, 2020 | An information exposure vulnerability exists in Palo Alto Networks Panorama software that discloses the token for the Pa... |
| CVE-2020-2000 | HIGH | 7.2 | 3.2% | Nov 12, 2020 | An OS command injection and memory corruption vulnerability in the PAN-OS management web interface that allows authentic... |
| CVE-2020-1999 | MEDIUM | 5.3 | 1.3% | Nov 12, 2020 | A vulnerability exists in the Palo Alto Network PAN-OS signature-based threat detection engine that allows an attacker t... |
| CVE-2020-5992 | HIGH | 7.8 | 0.5% | Nov 11, 2020 | NVIDIA GeForce NOW application software on Windows, all versions prior to 2.0.25.119, contains a vulnerability in its op... |
| CVE-2020-26221 | MEDIUM | 6.1 | 0.6% | Nov 11, 2020 | touchbase.ai before version 2.0 is vulnerable to Cross-Site Scripting (XSS). The vulnerability allows an attacker to sen... |
| CVE-2020-26220 | LOW | 3.5 | 0.7% | Nov 11, 2020 | toucbase.ai before version 2.0 leaks information by not stripping exif data from images. Anyone with access to the uploa... |
| CVE-2020-26219 | MEDIUM | 6.1 | 0.6% | Nov 11, 2020 | touchbase.ai before version 2.0 is vulnerable to Open Redirect. Impacts can be many, and vary from theft of information ... |
| CVE-2020-26218 | MEDIUM | 6.1 | 1.9% | Nov 11, 2020 | touchbase.ai before version 2.0 is vulnerable to Cross-Site Scripting. The vulnerability allows an attacker to inject HT... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now