2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-0442 | HIGH | 7.5 | 1.0% | Nov 10, 2020 | In Message and toBundle of Notification.java, there is a possible UI slowdown or crash due to improper input validation.... |
| CVE-2020-0441 | HIGH | 7.5 | 1.1% | Nov 10, 2020 | In Message and toBundle of Notification.java, there is a possible resource exhaustion due to improper input validation. ... |
| CVE-2020-0439 | HIGH | 7.8 | 0.2% | Nov 10, 2020 | In generatePackageInfo of PackageManagerService.java, there is a possible permissions bypass due to an incorrect permiss... |
| CVE-2020-0438 | HIGH | 7.8 | 0.2% | Nov 10, 2020 | In the AIBinder_Class constructor of ibinder.cpp, there is a possible arbitrary code execution due to uninitialized data... |
| CVE-2020-0437 | MEDIUM | 5.5 | 0.1% | Nov 10, 2020 | In CellBroadcastReceiver's intent handlers, there is a possible denial of service due to a missing permission check. Thi... |
| CVE-2020-0424 | MEDIUM | 5.5 | 0.2% | Nov 10, 2020 | In send_vc of res_send.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to ... |
| CVE-2020-0418 | HIGH | 7.8 | 0.3% | Nov 10, 2020 | In getPermissionInfosForGroup of Utils.java, there is a logic error. This could lead to local escalation of privilege wi... |
| CVE-2020-0409 | HIGH | 7.8 | 0.2% | Nov 10, 2020 | In create of FileMap.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local e... |
| CVE-2020-16125 | MEDIUM | 6.8 | 1.1% | Nov 10, 2020 | gdm3 versions before 3.36.2 or 3.38.2 would start gnome-initial-setup if gdm3 can't contact the accountservice service v... |
| CVE-2020-27694 | HIGH | 8.8 | 7.3% | Nov 9, 2020 | Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 has updated a specific critical library that may ... |
| CVE-2020-27693 | MEDIUM | 4.4 | 1.8% | Nov 9, 2020 | Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 stores administrative passwords using a hash that... |
| CVE-2020-27019 | MEDIUM | 5.5 | 17.9% | Nov 9, 2020 | Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 is vulnerable to an information disclosure vulner... |
| CVE-2020-27018 | MEDIUM | 5.5 | 3.5% | Nov 9, 2020 | Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 is vulnerable to a server side request forgery vu... |
| CVE-2020-27017 | MEDIUM | 4.9 | 6.4% | Nov 9, 2020 | Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 is vulnerable to an XML External Entity Processin... |
| CVE-2020-27016 | HIGH | 8.8 | 1.9% | Nov 9, 2020 | Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 is vulnerable to a cross-site request forgery (CS... |
| CVE-2020-28373 | HIGH | 8.8 | 1.0% | Nov 9, 2020 | upnpd on certain NETGEAR devices allows remote (LAN) attackers to execute arbitrary code via a stack-based buffer overfl... |
| CVE-2020-28371 | CRITICAL | 9.8 | 1.7% | Nov 9, 2020 | An issue was discovered in ReadyTalk Avian 1.2.0 before 2020-10-27. The FileOutputStream.write() method in FileOutputStr... |
| CVE-2020-26168 | CRITICAL | 9.8 | 1.6% | Nov 9, 2020 | The LDAP authentication method in LdapLoginModule in Hazelcast IMDG Enterprise 4.x before 4.0.3, and Jet Enterprise 4.x ... |
| CVE-2020-14189 | CRITICAL | 9.8 | 2.3% | Nov 9, 2020 | The execute function in in the Atlassian gajira-comment GitHub Action before version 2.0.2 allows remote attackers to ex... |
| CVE-2020-14188 | CRITICAL | 9.8 | 2.8% | Nov 9, 2020 | The preprocessArgs function in the Atlassian gajira-create GitHub Action before version 2.0.1 allows remote attackers to... |
| CVE-2020-4759 | HIGH | 7.8 | 2.0% | Nov 9, 2020 | IBM FileNet Content Manager 5.5.4 and 5.5.5 is potentially vulnerable to CVS Injection. A remote attacker could execute ... |
| CVE-2020-4651 | MEDIUM | 4.8 | 0.3% | Nov 9, 2020 | IBM Maximo Spatial Asset Management 7.6.0.3, 7.6.0.4, 7.6.0.5, and 7.6.1.0 is vulnerable to cross-site request forgery w... |
| CVE-2020-4650 | LOW | 3.3 | 0.3% | Nov 9, 2020 | IBM Maximo Spatial Asset Management 7.6.0.3, 7.6.0.4, 7.6.0.5, and 7.6.1.0 allows web pages to be stored locally which c... |
| CVE-2020-28364 | MEDIUM | 6.1 | 0.6% | Nov 9, 2020 | A stored cross-site scripting (XSS) vulnerability affects the Web UI in Locust before 1.3.2, if the installation violate... |
| CVE-2020-27977 | HIGH | 7.8 | 0.3% | Nov 9, 2020 | CapaSystems CapaInstaller before 6.0.101 does not properly assign, modify, or check privileges for an actor who attempts... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now