2020 CVE Vulnerabilities

21,085 CVEs published in 2020.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2020-24139HIGH8.3Server-side request forgery in Wcms 0.3.2 lets an attacker send crafted requests from the back-end server of a vulnerabl...
CVE-2020-25584HIGH7.5In FreeBSD 13.0-STABLE before n245118, 12.2-STABLE before r369552, 11.4-STABLE before r369560, 13.0-RC5 before p1, 12.2-...
CVE-2020-24136HIGH8.6Directory traversal in Wcms 0.3.2 allows an attacker to read arbitrary files on the server that is running an applicatio...
CVE-2020-11255HIGH7.5Denial of service while processing RTCP packets containing multiple SDES reports due to memory for last SDES packet is f...
CVE-2020-11246HIGH7.8A double free condition can occur when the device moves to suspend mode during secure playback in Snapdragon Auto, Snapd...
CVE-2020-11245HIGH7.8Unintended reads and writes by NS EL2 in access control driver due to lack of check of input validation in Snapdragon Au...
CVE-2020-11243HIGH7.5RRC sends a connection establishment success to NAS even though connection setup validation returns failure and leads to...
CVE-2020-11242HIGH7.8User could gain access to secure memory due to incorrect argument into address range validation api used in SDI to captu...
CVE-2020-11237HIGH7.8Memory crash when accessing histogram type KPI input received due to lack of check of histogram definition before access...
CVE-2020-11234HIGH7.8When sending a socket event message to a user application, invalid information will be passed if socket is freed by othe...
CVE-2020-11210HIGH8.8Possible memory corruption in RPM region due to improper XPU configuration in Snapdragon Connectivity, Snapdragon Indust...
CVE-2020-36313HIGH7.8An issue was discovered in the Linux kernel before 5.7. The KVM subsystem allows out-of-range access to memslots after a...
CVE-2020-13422HIGH8.1OpenIAM before 4.2.0.3 does not verify if a user has permissions to perform /webconsole/rest/api/* administrative action...
CVE-2020-36285HIGH7.5Union Pay up to 3.3.12, for iOS mobile apps, contains a CWE-347: Improper Verification of Cryptographic Signature vulner...
CVE-2020-36284HIGH7.5Union Pay up to 3.4.93.4.9, for android, contains a CWE-347: Improper Verification of Cryptographic Signature vulnerabil...
CVE-2020-23533HIGH7.5Union Pay up to 1.2.0, for web based versions contains a CWE-347: Improper Verification of Cryptographic Signature vulne...
CVE-2020-19595HIGH7.5Buffer overflow vulnerability in Core FTP Server v2 Build 697, via a crafted username.
CVE-2020-9975HIGH7.8A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.0.1, tvOS ...
CVE-2020-9971HIGH7.8A logic issue was addressed with improved validation. This issue is fixed in watchOS 7.0, tvOS 14.0, iOS 14.0 and iPadOS...
CVE-2020-9967HIGH7.8Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Big Sur 11...
CVE-2020-9962HIGH7.8A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Big Sur 11.0.1, tvOS 14.0, m...
CVE-2020-9960HIGH7.8An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, tvOS 14...
CVE-2020-9956HIGH7.8An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, tvOS 14...
CVE-2020-9955HIGH7.8An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in watchOS 7.0, tvOS 14.0,...
CVE-2020-9930HIGH7.1An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.6, Secur...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now