2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-0314 | MEDIUM | 5.5 | 0.1% | Sep 17, 2020 | In AudioService, there are missing permission checks. This could lead to local information disclosure of audio configura... |
| CVE-2020-0312 | MEDIUM | 5.5 | 0.1% | Sep 17, 2020 | In Battery Saver, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local informa... |
| CVE-2020-0308 | MEDIUM | 5.5 | 0.1% | Sep 17, 2020 | In Window Manager, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local inform... |
| CVE-2020-0306 | HIGH | 7.8 | 0.2% | Sep 17, 2020 | In LLVM, there is a possible ineffective stack cookie placement due to stack frame double reservation. This could lead t... |
| CVE-2020-0303 | HIGH | 8.8 | 0.6% | Sep 17, 2020 | In the Media extractor, there is a possible use after free due to improper locking. This could lead to remote code execu... |
| CVE-2020-0301 | MEDIUM | 6.5 | 0.6% | Sep 17, 2020 | In libstagefright, there is a possible resource exhaustion due to improper input validation. This could lead to remote d... |
| CVE-2020-0297 | MEDIUM | 5.5 | 0.1% | Sep 17, 2020 | In devicepolicy service, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local ... |
| CVE-2020-0296 | MEDIUM | 5.5 | 0.1% | Sep 17, 2020 | In ADB server and USB server, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to l... |
| CVE-2020-0293 | MEDIUM | 5.5 | 0.2% | Sep 17, 2020 | In Java network APIs, there is possible access to sensitive network state due to a missing permission check. This could ... |
| CVE-2020-0290 | MEDIUM | 5.5 | 0.1% | Sep 17, 2020 | In PackageManager, there is a missing permission check. This could lead to local information disclosure across users wit... |
| CVE-2020-0289 | MEDIUM | 5.5 | 0.1% | Sep 17, 2020 | In PackageManager, there is a missing permission check. This could lead to local information disclosure across users wit... |
| CVE-2020-0288 | MEDIUM | 5.5 | 0.1% | Sep 17, 2020 | In PackageManager, there is a missing permission check. This could lead to local information disclosure across user boun... |
| CVE-2020-0287 | MEDIUM | 6.5 | 0.6% | Sep 17, 2020 | In libmkvextractor, there is a possible resource exhaustion due to a missing bounds check. This could lead to remote den... |
| CVE-2020-0279 | MEDIUM | 6.5 | 1.0% | Sep 17, 2020 | In the AAC parser, there is a possible out of bounds read due to a missing bounds check. This could lead to remote infor... |
| CVE-2020-0277 | HIGH | 7.8 | 0.1% | Sep 17, 2020 | In NetworkPolicyManagerService, there is a possible permissions bypass due to a missing permission check. This could lea... |
| CVE-2020-0275 | HIGH | 7.8 | 0.2% | Sep 17, 2020 | In MediaProvider, there is a possible way to access ContentResolver and MediaStore entries the app shouldn't have access... |
| CVE-2020-0274 | MEDIUM | 5.5 | 0.1% | Sep 17, 2020 | In the OMX parser, there is a possible information disclosure due to a returned raw pointer. This could lead to local in... |
| CVE-2020-0270 | MEDIUM | 6.5 | 0.8% | Sep 17, 2020 | In tremolo, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information ... |
| CVE-2020-0267 | HIGH | 7.8 | 0.5% | Sep 17, 2020 | In WindowManager, there is a possible launch of an unexpected app due to a confused deputy. This could lead to local esc... |
| CVE-2020-0266 | HIGH | 7.8 | 0.2% | Sep 17, 2020 | In factory reset protection, there is a possible FRP bypass due to a missing permission check. This could lead to local ... |
| CVE-2020-0264 | HIGH | 8.8 | 0.7% | Sep 17, 2020 | In libstagefright, there is a possible out of bounds write due to an integer overflow. This could lead to remote code ex... |
| CVE-2020-0130 | HIGH | 7.8 | 0.4% | Sep 17, 2020 | In screencap, there is a possible command injection due to improper input validation. This could lead to local escalatio... |
| CVE-2020-0125 | MEDIUM | 5.5 | 0.1% | Sep 17, 2020 | In mediadrm, there is a possible out of bounds read due to a missing bounds check. This could lead to local information ... |
| CVE-2020-15183 | MEDIUM | 4.8 | 1.7% | Sep 17, 2020 | SoyCMS 3.0.2 and earlier is affected by Reflected Cross-Site Scripting (XSS) which leads to Remote Code Execution (RCE) ... |
| CVE-2020-15182 | CRITICAL | 9.6 | 1.2% | Sep 17, 2020 | The SOY Inquiry component of SOY CMS is affected by Cross-site Request Forgery (CSRF) and Remote Code Execution (RCE). T... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now