2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-17373 | MEDIUM | 5.3 | 1.4% | Aug 12, 2020 | SugarCRM before 10.1.0 (Q3 2020) allows SQL Injection. |
| CVE-2020-17372 | MEDIUM | 5.4 | 0.8% | Aug 12, 2020 | SugarCRM before 10.1.0 (Q3 2020) allows XSS. |
| CVE-2020-16266 | MEDIUM | 5.4 | 1.2% | Aug 12, 2020 | An XSS issue was discovered in MantisBT before 2.24.2. Improper escaping on view_all_bug_page.php allows a remote attack... |
| CVE-2020-16145 | MEDIUM | 6.1 | 1.9% | Aug 12, 2020 | Roundcube Webmail before 1.3.15 and 1.4.8 allows stored XSS in HTML messages during message display via a crafted SVG do... |
| CVE-2020-8913 | HIGH | 8.8 | 2.9% | Aug 12, 2020 | A local, arbitrary code execution vulnerability exists in the SplitCompat.install endpoint in Android's Play Core Librar... |
| CVE-2020-7029 | HIGH | 8.8 | 0.4% | Aug 11, 2020 | A Cross-Site Request Forgery (CSRF) vulnerability was discovered in the System Management Interface Web component of Ava... |
| CVE-2020-17495 | HIGH | 7.5 | 0.9% | Aug 11, 2020 | django-celery-results through 1.2.1 stores task results in the database. Among the data it stores are the variables pass... |
| CVE-2020-17489 | MEDIUM | 4.3 | 0.6% | Aug 11, 2020 | An issue was discovered in certain configurations of GNOME gnome-shell through 3.36.4. When logging out of an account, t... |
| CVE-2020-8912 | LOW | 2.5 | 0.2% | Aug 11, 2020 | A vulnerability in the in-band key negotiation exists in the AWS S3 Crypto SDK for GoLang versions prior to V2. An attac... |
| CVE-2020-8911 | MEDIUM | 5.6 | 0.3% | Aug 11, 2020 | A padding oracle vulnerability exists in the AWS S3 Crypto SDK for GoLang versions prior to V2. The SDK allows users to ... |
| CVE-2020-17487 | HIGH | 7.5 | 1.8% | Aug 11, 2020 | radare2 4.5.0 misparses signature information in PE files, causing a segmentation fault in r_x509_parse_algorithmidentif... |
| CVE-2020-16170 | HIGH | 7.5 | 1.9% | Aug 11, 2020 | Use of Hard-coded Credentials in temi Robox OS prior to 120, temi Android app up to 1.3.7931 allows remote attackers to ... |
| CVE-2020-0260 | CRITICAL | 9.1 | 0.5% | Aug 11, 2020 | There is a possible out of bounds read due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID:... |
| CVE-2020-0259 | HIGH | 7.8 | 0.2% | Aug 11, 2020 | In android_verity_ctr of dm-android-verity.c, there is a possible way to modify a dm-verity protected filesystem due to ... |
| CVE-2020-0258 | MEDIUM | 5.5 | 0.3% | Aug 11, 2020 | In stopZygoteLocked of AppZygote.java, there is an insufficient cleanup. This could lead to local information disclosure... |
| CVE-2020-0257 | HIGH | 7.8 | 0.2% | Aug 11, 2020 | In SpecializeCommon of com_android_internal_os_Zygote.cpp, there is a permissions bypass due to an incomplete cleanup. T... |
| CVE-2020-0256 | MEDIUM | 6.8 | 0.2% | Aug 11, 2020 | In LoadPartitionTable of gpt.cc, there is a possible out of bounds write due to a missing bounds check. This could lead ... |
| CVE-2020-0254 | HIGH | 7.5 | 0.5% | Aug 11, 2020 | There is a possible out of bounds read due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID:... |
| CVE-2020-0253 | CRITICAL | 9.8 | 0.6% | Aug 11, 2020 | There is a possible memory corruption due to a use after free.Product: AndroidVersions: Android SoCAndroid ID: A-1526473... |
| CVE-2020-0252 | CRITICAL | 9.8 | 0.6% | Aug 11, 2020 | There is a possible memory corruption due to a use after free.Product: AndroidVersions: Android SoCAndroid ID: A-1522368... |
| CVE-2020-0251 | HIGH | 7.5 | 0.5% | Aug 11, 2020 | There is a possible out of bounds read due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID:... |
| CVE-2020-0250 | MEDIUM | 5.5 | 0.1% | Aug 11, 2020 | In requestCellInfoUpdateInternal of PhoneInterfaceManager.java, there is a missing permission check. This could lead to ... |
| CVE-2020-0249 | MEDIUM | 5.5 | 0.2% | Aug 11, 2020 | In postInstantAppNotif of InstantAppNotifier.java, there is a possible permission bypass due to a PendingIntent error. T... |
| CVE-2020-0248 | MEDIUM | 5.5 | 0.2% | Aug 11, 2020 | In postInstantAppNotif of InstantAppNotifier.java, there is a possible permission bypass due to a PendingIntent error. T... |
| CVE-2020-0247 | MEDIUM | 5.5 | 0.1% | Aug 11, 2020 | In Threshold::getHistogram of ImageProcessHelper.java, there is a possible crash loop due to an uncaught exception. This... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now