2020 CVE Vulnerabilities

21,085 CVEs published in 2020.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2020-7846HIGH8.8Helpcom before v10.0 contains a file download and execution vulnerability caused by storing hardcoded cryptographic key....
CVE-2020-28599HIGH7.8A stack-based buffer overflow vulnerability exists in the import_stl.cc:import_stl() functionality of Openscad openscad-...
CVE-2020-28587HIGH7.8A specially crafted document can cause the document parser to copy data from a particular record type into a static-size...
CVE-2020-27782HIGH7.5A flaw was found in the Undertow AJP connector. Malicious requests and abrupt connection closes could be triggered by an...
CVE-2020-25161HIGH8.8The WADashboard component of WebAccess/SCADA Versions 9.0 and prior may allow an attacker to control or influence a path...
CVE-2020-16243HIGH7.8Multiple buffer overflow vulnerabilities exist when LeviStudioU (Version 2019-09-21 and prior) processes project files. ...
CVE-2020-7847HIGH8The ipTIME NAS product allows an arbitrary file upload vulnerability in the Manage Bulletins/Upload feature, which can b...
CVE-2020-14359HIGH7.3A vulnerability was found in all versions of Keycloak Gatekeeper, where on using lower case HTTP headers (via cURL) an a...
CVE-2020-25690HIGH8.8An out-of-bounds write flaw was found in FontForge in versions before 20200314 while parsing SFD files containing certai...
CVE-2020-24175HIGH7.8Buffer overflow in Yz1 0.30 and 0.32, as used in IZArc 4.4, ZipGenius 6.3.2.3116, and Explzh (extension) 8.14, allows at...
CVE-2020-11297HIGH7.5Denial of service in WLAN module due to improper check of subtypes in logic where excessive frames are dropped in Snapdr...
CVE-2020-11296HIGH7.5Arithmetic overflow can happen while processing NOA IE due to improper error handling in Snapdragon Auto, Snapdragon Com...
CVE-2020-11287HIGH7.5Allowing RTT frames to be linked with non randomized MAC address by comparing the sequence numbers can lead to informati...
CVE-2020-11282HIGH7.8Improper access control when using mmap with the kgsl driver with a special offset value that can be provided to map the...
CVE-2020-11281HIGH7.5Allowing RTT frames to be linked with non randomized MAC address by comparing the sequence numbers can lead to informati...
CVE-2020-11280HIGH7.5Denial of service while processing fine timing measurement request (FTMR) frame with reserved bits set in the FTM parame...
CVE-2020-11278HIGH7.5Possible denial of service while handling host WMI command due to improper validation in Snapdragon Auto, Snapdragon Com...
CVE-2020-11277HIGH7.4Possible race condition during async fastrpc session after sending RPC message due to the fastrpc ctx gets free during a...
CVE-2020-11271HIGH7.8Possible out of bounds while accessing global control elements due to race condition in Snapdragon Auto, Snapdragon Comp...
CVE-2020-11270HIGH7.5Possible denial of service due to RTT responder consistently rejects all FTMR by transmitting FTM1 with failure status i...
CVE-2020-11269HIGH8.8Possible memory corruption while processing EAPOL frames due to lack of validation of key length before using it in Snap...
CVE-2020-11253HIGH7.8Arbitrary memory write issue in video driver while setting the internal buffers in Snapdragon Auto, Snapdragon Compute, ...
CVE-2020-11223HIGH7.8Out of bound in camera driver due to lack of check of validation of array index before copying into array in Snapdragon ...
CVE-2020-11204HIGH7.8Possible memory corruption and information leakage in sub-system due to lack of check for validity and boundary complian...
CVE-2020-11203HIGH7.1Stack overflow may occur if GSM/WCDMA broadcast config size received from user is larger than variable length array in S...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now