2020 CVE Vulnerabilities

21,141 CVEs published in 2020.

CVE IDSeverityCVSSDescription
CVE-2020-0243HIGH7.8In clearPropValue of MediaAnalyticsItem.cpp, there is a possible use-after-free due to improper locking. This could lead...
CVE-2020-0242HIGH7.8In reset of NuPlayerDriver.cpp, there is a possible use-after-free due to improper locking. This could lead to local esc...
CVE-2020-0241HIGH7.8In NuPlayerStreamListener of NuPlayerStreamListener.cpp, there is possible memory corruption due to a double free. This ...
CVE-2020-0240HIGH8.8In NewFixedDoubleArray of factory.cc, there is a possible out of bounds write due to an integer overflow. This could lea...
CVE-2020-0239MEDIUM5.5In getDocumentMetadata of DocumentsContract.java, there is a possible disclosure of location metadata from a file due to...
CVE-2020-0238HIGH7In updatePreferenceIntents of AccountTypePreferenceLoader, there is a possible confused deputy attack due to a race cond...
CVE-2020-0108HIGH7.8In postNotification of ServiceRecord.java, there is a possible bypass of foreground process restrictions due to an uncau...
CVE-2020-9404HIGH7.1In PACTware before 4.1 SP6 and 5.x before 5.0.5.31, passwords are stored in an insecure manner, and may be modified by a...
CVE-2020-9403MEDIUM5.5In PACTware before 4.1 SP6 and 5.x before 5.0.5.31, passwords are stored in a recoverable format, and may be retrieved b...
CVE-2020-9244MEDIUM6.8HUAWEI Mate 20 versions Versions earlier than 10.1.0.160(C00E160R3P8);HUAWEI Mate 20 Pro versions Versions earlier than ...
CVE-2020-8918HIGH7.1An improperly initialized 'migrationAuth' value in Google's go-tpm TPM1.2 library versions prior to 0.3.0 can lead an ea...
CVE-2020-13179MEDIUM5.5Broker Protocol messages in Teradici PCoIP Standard Agent for Windows and Graphics Agent for Windows prior to 20.04.1 ar...
CVE-2020-11976HIGH7.5By crafting a special URL it is possible to make Wicket deliver unprocessed HTML templates. This would allow an attacker...
CVE-2020-15071MEDIUM6.1content/content.blueprintsevents.php in Symphony CMS 3.0.0 allows XSS via fields['name'] to appendSubheading.
CVE-2020-14979HIGH7.8The WinRing0.sys and WinRing0x64.sys drivers 1.2.0 in EVGA Precision X1 through 1.0.6 allow local users, including low i...
CVE-2020-13178MEDIUM6.7A function in the Teradici PCoIP Standard Agent for Windows and Graphics Agent for Windows prior to version 20.04.1 does...
CVE-2020-13177HIGH7.8The support bundler in Teradici PCoIP Standard Agent for Windows and Graphics Agent for Windows versions prior to 20.04....
CVE-2020-13176MEDIUM6.1The Management Interface of the Teradici Cloud Access Connector and Cloud Access Connector Legacy for releases prior to ...
CVE-2020-13175HIGH7.5The Management Interface of the Teradici Cloud Access Connector and Cloud Access Connector Legacy for releases prior to ...
CVE-2020-13174MEDIUM6.1The web server in the Teradici Managament console versions 20.04 and 20.01.1 did not properly set the X-Frame-Options HT...
CVE-2020-17466CRITICAL9.8Turcom TRCwifiZone through 2020-08-10 allows authentication bypass by visiting manage/control.php and ignoring 302 Redir...
CVE-2020-17448HIGH7.8Telegram Desktop through 2.1.13 allows a spoofed file type to bypass the Dangerous File Type Execution protection mechan...
CVE-2020-17368CRITICAL9.8Firejail through 0.9.62 mishandles shell metacharacters during use of the --output or --output-stderr option, which may ...
CVE-2020-17367HIGH7.8Firejail through 0.9.62 does not honor the -- end-of-options indicator after the --output option, which may lead to comm...
CVE-2020-16092LOW3.8In QEMU through 5.0.0, an assertion failure can occur in the network packet processing. This issue affects the e1000e an...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now