2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-1797 | LOW | 2.4 | 0.2% | May 29, 2020 | HUAWEI Mate 20 smartphones with versions earlier than 10.0.0.185(C00E74R3P8) have an improper authorization vulnerabilit... |
| CVE-2020-11089 | MEDIUM | 5.5 | 1.2% | May 29, 2020 | In FreeRDP before 2.1.0, there is an out-of-bound read in irp functions (parallel_process_irp_create, serial_process_irp... |
| CVE-2020-11088 | MEDIUM | 5.4 | 1.5% | May 29, 2020 | In FreeRDP less than or equal to 2.0.0, there is an out-of-bound read in ntlm_read_NegotiateMessage. This has been fixed... |
| CVE-2020-11087 | MEDIUM | 5.4 | 1.4% | May 29, 2020 | In FreeRDP less than or equal to 2.0.0, there is an out-of-bound read in ntlm_read_AuthenticateMessage. This has been fi... |
| CVE-2020-11086 | MEDIUM | 5.4 | 1.4% | May 29, 2020 | In FreeRDP less than or equal to 2.0.0, there is an out-of-bound read in ntlm_read_ntlm_v2_client_challenge that reads u... |
| CVE-2020-11085 | LOW | 3.5 | 1.7% | May 29, 2020 | In FreeRDP before 2.1.0, there is an out-of-bounds read in cliprdr_read_format_list. Clipboard format data read (by clie... |
| CVE-2020-11043 | LOW | 2.7 | 1.9% | May 29, 2020 | In FreeRDP less than or equal to 2.0.0, there is an out-of-bounds read in rfx_process_message_tileset. Invalid data fed ... |
| CVE-2020-11040 | LOW | 2.7 | 1.6% | May 29, 2020 | In FreeRDP less than or equal to 2.0.0, there is an out-of-bound data read from memory in clear_decompress_subcode_rlex,... |
| CVE-2020-8816 | HIGH | 7.2 | 77.8% | May 29, 2020 | Pi-hole Web v4.3.2 (aka AdminLTE) allows Remote Code Execution by privileged dashboard users via a crafted DHCP static l... |
| CVE-2020-1798 | MEDIUM | 4.6 | 0.2% | May 29, 2020 | HUAWEI P30 smartphones with versions earlier than 10.1.0.135(C00E135R2P11) have an improper authentication vulnerability... |
| CVE-2020-11041 | LOW | 2.7 | 1.5% | May 29, 2020 | In FreeRDP less than or equal to 2.0.0, an outside controlled array index is used unchecked for data used as configurati... |
| CVE-2020-11039 | MEDIUM | 6.8 | 1.3% | May 29, 2020 | In FreeRDP less than or equal to 2.0.0, when using a manipulated server with USB redirection enabled (nearly) arbitrary ... |
| CVE-2020-11038 | MEDIUM | 5.4 | 1.3% | May 29, 2020 | In FreeRDP less than or equal to 2.0.0, an Integer Overflow to Buffer Overflow exists. When using /video redirection, a ... |
| CVE-2020-11019 | MEDIUM | 6.5 | 2.5% | May 29, 2020 | In FreeRDP less than or equal to 2.0.0, when running with logger set to "WLOG_TRACE", a possible crash of application co... |
| CVE-2020-12493 | CRITICAL | 10 | 1.4% | May 29, 2020 | An open port used for debugging in SWARCOs CPU LS4000 Series with versions starting with G4... grants root access to the... |
| CVE-2020-13634 | HIGH | 7.8 | 0.4% | May 29, 2020 | In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users ... |
| CVE-2020-11018 | MEDIUM | 6.5 | 1.9% | May 29, 2020 | In FreeRDP less than or equal to 2.0.0, a possible resource exhaustion vulnerability can be performed. Malicious clients... |
| CVE-2020-12675 | HIGH | 8.8 | 2.8% | May 29, 2020 | The mappress-google-maps-for-wordpress plugin before 2.54.6 for WordPress does not correctly implement capability checks... |
| CVE-2020-11017 | MEDIUM | 6.5 | 1.8% | May 29, 2020 | In FreeRDP less than or equal to 2.0.0, by providing manipulated input a malicious client can create a double free condi... |
| CVE-2020-4490 | MEDIUM | 6.1 | 0.9% | May 29, 2020 | IBM Business Automation Workflow 18 and 19, and IBM Business Process Manager 8.0, 8.5, and 8.6 could allow a remote atta... |
| CVE-2020-4352 | HIGH | 7 | 0.3% | May 29, 2020 | IBM MQ on HPE NonStop 8.0.4 and 8.1.0 is vulnerable to a privilege escalation attack when running in restricted mode. IB... |
| CVE-2020-4306 | MEDIUM | 5.4 | 0.6% | May 29, 2020 | IBM Planning Analytics Local 2.0.0 through 2.0.9 is vulnerable to cross-site scripting. This vulnerability allows users ... |
| CVE-2020-5573 | MEDIUM | 4.6 | 0.3% | May 29, 2020 | Android App 'kintone mobile for Android' 1.0.0 to 2.5 allows an attacker to obtain credential information registered in ... |
| CVE-2020-5572 | MEDIUM | 4.6 | 0.3% | May 29, 2020 | Android App 'Mailwise for Android' 1.0.0 to 1.0.1 allows an attacker to obtain credential information registered in the ... |
| CVE-2020-13693 | CRITICAL | 9.8 | 43.9% | May 29, 2020 | An unauthenticated privilege-escalation issue exists in the bbPress plugin before 2.6.5 for WordPress when New User Regi... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now