2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-25735 | MEDIUM | 6.1 | 1.4% | Sep 18, 2020 | webTareas through 2.1 allows XSS in clients/editclient.php, extensions/addextension.php, administration/add_announcement... |
| CVE-2020-25734 | MEDIUM | 5.3 | 2.1% | Sep 18, 2020 | webTareas through 2.1 allows files/Default/ Directory Listing. |
| CVE-2020-25733 | HIGH | 7.5 | 2.1% | Sep 18, 2020 | webTareas through 2.1 allows upload of the dangerous .exe and .shtml file types. |
| CVE-2020-15187 | MEDIUM | 4.7 | 1.4% | Sep 17, 2020 | In Helm before versions 2.16.11 and 3.3.2, a Helm plugin can contain duplicates of the same entry, with the last one alw... |
| CVE-2020-15186 | LOW | 2.7 | 1.0% | Sep 17, 2020 | In Helm before versions 2.16.11 and 3.3.2 plugin names are not sanitized properly. As a result, a malicious plugin autho... |
| CVE-2020-15185 | LOW | 2.7 | 0.9% | Sep 17, 2020 | In Helm before versions 2.16.11 and 3.3.2, a Helm repository can contain duplicates of the same chart, with the last one... |
| CVE-2020-15184 | LOW | 2.7 | 1.0% | Sep 17, 2020 | In Helm before versions 2.16.11 and 3.3.2 there is a bug in which the `alias` field on a `Chart.yaml` is not properly sa... |
| CVE-2020-0426 | MEDIUM | 5.5 | 0.1% | Sep 17, 2020 | In SyncManager, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local informati... |
| CVE-2020-0425 | MEDIUM | 5.5 | 0.1% | Sep 17, 2020 | There is a possible way to view notifications even when the "Lockdown" feature is on. This could lead to local informati... |
| CVE-2020-0406 | HIGH | 7.8 | 0.4% | Sep 17, 2020 | In libmpeg2dec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati... |
| CVE-2020-0375 | HIGH | 7.8 | 0.2% | Sep 17, 2020 | In Telephony, there is a possible permission bypass due to a missing permission check. This could lead to local escalati... |
| CVE-2020-0374 | HIGH | 7.8 | 0.2% | Sep 17, 2020 | In NFC, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local escalation of pri... |
| CVE-2020-0373 | MEDIUM | 4.7 | 0.1% | Sep 17, 2020 | In SoundTriggerHwService, there is a possible out of bounds read due to a race condition. This could lead to local infor... |
| CVE-2020-0372 | MEDIUM | 5.5 | 0.1% | Sep 17, 2020 | In ActivityManager, there is a possible access to protected data due to a missing permission check. This could lead to l... |
| CVE-2020-0370 | MEDIUM | 6.5 | 0.7% | Sep 17, 2020 | In libAACdec, there is a possible out of bounds read due to missing bounds check. This could lead to remote information ... |
| CVE-2020-0369 | HIGH | 7.8 | 0.2% | Sep 17, 2020 | In libavb, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of pr... |
| CVE-2020-0366 | HIGH | 7.8 | 0.4% | Sep 17, 2020 | In PackageInstaller, there is a possible permissions bypass due to a tapjacking vulnerability. This could lead to local ... |
| CVE-2020-0364 | MEDIUM | 6.5 | 0.8% | Sep 17, 2020 | In libDRCdec, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informatio... |
| CVE-2020-0363 | MEDIUM | 6.5 | 0.6% | Sep 17, 2020 | In libmedia, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial ... |
| CVE-2020-0362 | MEDIUM | 6.5 | 0.7% | Sep 17, 2020 | In libstagefright, there is a possible resource exhaustion due to improper input validation. This could lead to remote d... |
| CVE-2020-0361 | MEDIUM | 6.5 | 0.7% | Sep 17, 2020 | In libDRCdec, there is a possible information disclosure due to uninitialized data. This could lead to remote informatio... |
| CVE-2020-0360 | HIGH | 7.8 | 0.4% | Sep 17, 2020 | In Notification Access Confirmation, there is a possible permissions bypass due to uninformed consent. This could lead t... |
| CVE-2020-0359 | MEDIUM | 5.5 | 0.2% | Sep 17, 2020 | In GLESRenderEngine, there is a possible out of bounds read due to a buffer overflow. This could lead to local informati... |
| CVE-2020-0358 | MEDIUM | 6.4 | 0.1% | Sep 17, 2020 | In SurfaceFlinger, there is a possible use after free due to a race condition. This could lead to local escalation of pr... |
| CVE-2020-0357 | HIGH | 7.8 | 0.1% | Sep 17, 2020 | In SurfaceFlinger, there is a possible use-after-free due to improper locking. This could lead to local escalation of pr... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now