2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-0379 | MEDIUM | 5.7 | 0.3% | Sep 17, 2020 | In the Bluetooth service, there is a possible spoofing attack due to a logic error. This could lead to remote informatio... |
| CVE-2020-0342 | CRITICAL | 9.8 | 0.6% | Sep 17, 2020 | There is a possible out of bounds write due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID... |
| CVE-2020-0278 | CRITICAL | 9.8 | 0.6% | Sep 17, 2020 | There is a possible out of bounds write due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID... |
| CVE-2020-0245 | HIGH | 8.8 | 2.1% | Sep 17, 2020 | In DecodeFrameCombinedMode of combined_decode.cpp, there is a possible out of bounds write due to a heap buffer overflow... |
| CVE-2020-0229 | CRITICAL | 9.8 | 0.6% | Sep 17, 2020 | There is a possible out of bounds write due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID... |
| CVE-2020-0123 | CRITICAL | 9.8 | 0.6% | Sep 17, 2020 | There is a possible out of bounds write due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID... |
| CVE-2020-0074 | HIGH | 7.8 | 0.2% | Sep 17, 2020 | In verifyIntentFiltersIfNeeded of PackageManagerService.java, there is a possible settings bypass allowing an app to bec... |
| CVE-2020-14338 | MEDIUM | 5.3 | 1.3% | Sep 17, 2020 | A flaw was found in Wildfly's implementation of Xerces, specifically in the way the XMLSchemaValidator class in the JAXP... |
| CVE-2020-13944 | MEDIUM | 6.1 | 25.1% | Sep 17, 2020 | In Apache Airflow < 1.10.12, the "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XS... |
| CVE-2020-6116 | HIGH | 7.8 | 28.4% | Sep 17, 2020 | An arbitrary code execution vulnerability exists in the rendering functionality of Nitro Software, Inc.’s Nitro Pro 13.1... |
| CVE-2020-6115 | HIGH | 7.8 | 2.7% | Sep 17, 2020 | An exploitable vulnerability exists in the cross-reference table repairing functionality of Nitro Software, Inc.’s Nitro... |
| CVE-2020-6113 | HIGH | 7.8 | 68.6% | Sep 17, 2020 | An exploitable vulnerability exists in the object stream parsing functionality of Nitro Software, Inc.’s Nitro Pro 13.13... |
| CVE-2020-6112 | HIGH | 7.8 | 17.1% | Sep 17, 2020 | An exploitable code execution vulnerability exists in the JPEG2000 Stripe Decoding functionality of Nitro Software, Inc.... |
| CVE-2020-13948 | HIGH | 8.8 | 3.1% | Sep 17, 2020 | While investigating a bug report on Apache Superset, it was determined that an authenticated user could craft requests v... |
| CVE-2020-8028 | CRITICAL | 9.3 | 0.4% | Sep 17, 2020 | A Improper Access Control vulnerability in the configuration of salt of SUSE Linux Enterprise Module for SUSE Manager Se... |
| CVE-2020-14181 | MEDIUM | 5.3 | 99.6% | Sep 17, 2020 | Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Infor... |
| CVE-2020-24377 | CRITICAL | 9.6 | 1.2% | Sep 16, 2020 | A DNS rebinding vulnerability in the Freebox OS web interface in Freebox Server before 4.2.3. |
| CVE-2020-24376 | CRITICAL | 9.6 | 1.0% | Sep 16, 2020 | A DNS rebinding vulnerability in the UPnP IGD implementations in Freebox v5 before 1.5.29 and Freebox Server before 4.2.... |
| CVE-2020-24374 | CRITICAL | 9.6 | 1.2% | Sep 16, 2020 | A DNS rebinding vulnerability in Freebox v5 before 1.5.29. |
| CVE-2020-24373 | HIGH | 8.8 | 0.5% | Sep 16, 2020 | A CSRF vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3. |
| CVE-2020-20406 | MEDIUM | 5.4 | 0.7% | Sep 16, 2020 | A stored XSS vulnerability exists in the Custom Link Attributes control Affect function in Elementor Page Builder 2.9.2 ... |
| CVE-2020-16233 | HIGH | 7.5 | 1.8% | Sep 16, 2020 | An attacker could send a specially crafted packet that could have CodeMeter (All versions prior to 7.10) send back packe... |
| CVE-2020-14519 | HIGH | 7.5 | 0.6% | Sep 16, 2020 | This vulnerability allows an attacker to use the internal WebSockets API for CodeMeter (All versions prior to 7.00 are a... |
| CVE-2020-14517 | CRITICAL | 9.8 | 0.7% | Sep 16, 2020 | Protocol encryption can be easily broken for CodeMeter (All versions prior to 6.90 are affected, including Version 6.90 ... |
| CVE-2020-14515 | HIGH | 7.5 | 0.8% | Sep 16, 2020 | CodeMeter (All versions prior to 6.90 when using CmActLicense update files with CmActLicense Firm Code) has an issue in ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now