2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-11681 | HIGH | 8.1 | 1.1% | Jun 4, 2020 | Castel NextGen DVR v1.0.0 stores and displays credentials for the associated SMTP server in cleartext. Low privileged us... |
| CVE-2020-11680 | MEDIUM | 6.5 | 1.2% | Jun 4, 2020 | Castel NextGen DVR v1.0.0 is vulnerable to authorization bypass on all administrator functionality. The application fail... |
| CVE-2020-11679 | HIGH | 8.8 | 2.0% | Jun 4, 2020 | Castel NextGen DVR v1.0.0 is vulnerable to privilege escalation through the Adminstrator/Users/Edit/:UserId functionalit... |
| CVE-2020-7661 | HIGH | 7.5 | 2.7% | Jun 4, 2020 | all versions of url-regex are vulnerable to Regular Expression Denial of Service. An attacker providing a very long stri... |
| CVE-2020-13838 | LOW | 3.5 | 0.1% | Jun 4, 2020 | An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. The DeX Lockscreen feature does not ... |
| CVE-2020-13837 | LOW | 3.5 | 0.1% | Jun 4, 2020 | An issue was discovered on Samsung mobile devices with Q(10.0) software. The Lockscreen feature does not block Quick Pan... |
| CVE-2020-13836 | HIGH | 7.5 | 0.5% | Jun 4, 2020 | An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. HWRResProvider allows path ... |
| CVE-2020-13835 | CRITICAL | 9.8 | 0.4% | Jun 4, 2020 | An issue was discovered on Samsung mobile devices with O(8.x) (with TEEGRIS) software. The Gatekeeper Trustlet allows a ... |
| CVE-2020-13834 | HIGH | 7.5 | 0.3% | Jun 4, 2020 | An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (with TEEGRIS) software. Secure Folde... |
| CVE-2020-13833 | CRITICAL | 9.1 | 0.5% | Jun 4, 2020 | An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. The system area allows arbi... |
| CVE-2020-13832 | CRITICAL | 9.8 | 0.7% | Jun 4, 2020 | An issue was discovered on Samsung mobile devices with Q(10.0) (with TEEGRIS on Exynos chipsets) software. The Widevine ... |
| CVE-2020-13831 | CRITICAL | 9.8 | 0.4% | Jun 4, 2020 | An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (Exynos 7570 chipsets) software. The Trustonic ... |
| CVE-2020-13830 | HIGH | 7.5 | 0.4% | Jun 4, 2020 | An issue was discovered on Samsung mobile devices with P(9.0) software. One UI HOME logging can leak information. The Sa... |
| CVE-2020-13829 | HIGH | 7.5 | 0.3% | Jun 4, 2020 | An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. Attackers can disable the SEAndroid ... |
| CVE-2020-10702 | MEDIUM | 5.5 | 0.3% | Jun 4, 2020 | A flaw was found in QEMU in the implementation of the Pointer Authentication (PAuth) support for ARM introduced in versi... |
| CVE-2020-9462 | MEDIUM | 4.3 | 0.3% | Jun 4, 2020 | An issue was discovered in all Athom Homey and Homey Pro devices up to the current version 4.2.0. An attacker within RF ... |
| CVE-2020-13815 | HIGH | 7.5 | 1.5% | Jun 4, 2020 | An issue was discovered in Foxit Reader and PhantomPDF before 9.7.1. It allows stack consumption via a loop of an indire... |
| CVE-2020-13814 | CRITICAL | 9.8 | 1.7% | Jun 4, 2020 | An issue was discovered in Foxit Reader and PhantomPDF before 9.7.1. It has a use-after-free via a document that lacks a... |
| CVE-2020-13813 | HIGH | 7.8 | 0.8% | Jun 4, 2020 | An issue was discovered in Foxit Studio Photo before 3.6.6.922. It allows local users to gain privileges via a crafted D... |
| CVE-2020-13812 | HIGH | 7.8 | 0.8% | Jun 4, 2020 | An issue was discovered in Foxit Studio Photo before 3.6.6.922. It allows local users to gain privileges via a crafted D... |
| CVE-2020-13811 | HIGH | 7.8 | 2.7% | Jun 4, 2020 | An issue was discovered in Foxit Studio Photo before 3.6.6.922. It has an out-of-bounds write via a crafted TIFF file. |
| CVE-2020-13800 | MEDIUM | 6 | 0.5% | Jun 4, 2020 | ati-vga in hw/display/ati.c in QEMU 4.2.0 allows guest OS users to trigger infinite recursion via a crafted mm_index val... |
| CVE-2020-13791 | MEDIUM | 5.5 | 0.4% | Jun 4, 2020 | hw/pci/pci.c in QEMU 4.2.0 allows guest OS users to trigger an out-of-bounds access by providing an address near the end... |
| CVE-2020-13765 | MEDIUM | 5.6 | 2.4% | Jun 4, 2020 | rom_copy() in hw/core/loader.c in QEMU 4.0 and 4.1.0 does not validate the relationship between two addresses, which all... |
| CVE-2020-13692 | HIGH | 7.7 | 4.1% | Jun 4, 2020 | PostgreSQL JDBC Driver (aka PgJDBC) before 42.2.13 allows XXE. |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now