2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-12751 | HIGH | 7.8 | 0.5% | May 11, 2020 | An issue was discovered on Samsung mobile devices with O(8.X), P(9.0), and Q(10.0) software. The Quram image codec libra... |
| CVE-2020-12750 | HIGH | 7.5 | 0.4% | May 11, 2020 | An issue was discovered on Samsung mobile devices with Q(10.0) software. Attackers can bypass Factory Reset Protection (... |
| CVE-2020-12749 | HIGH | 7.8 | 0.2% | May 11, 2020 | An issue was discovered on Samsung mobile devices with P(9.0) (Exynos chipsets) software. The S.LSI Wi-Fi drivers have a... |
| CVE-2020-12748 | MEDIUM | 5.3 | 0.3% | May 11, 2020 | An issue was discovered on Samsung mobile devices with Q(10.0) software. Attackers can bypass the locked-state protectio... |
| CVE-2020-12747 | CRITICAL | 9.8 | 0.4% | May 11, 2020 | An issue was discovered on Samsung mobile devices with Q(10.0) (Exynos980 9630 and Exynos990 9830 chipsets) software. Th... |
| CVE-2020-12746 | CRITICAL | 9.8 | 1.1% | May 11, 2020 | An issue was discovered on Samsung mobile devices with O(8.X), P(9.0), and Q(10.0) (Exynos chipsets) software. Attackers... |
| CVE-2020-12745 | HIGH | 7.5 | 0.4% | May 11, 2020 | An issue was discovered on Samsung mobile devices with Q(10.0) software. Attackers can bypass the locked-state protectio... |
| CVE-2020-12650 | — | — | — | May 11, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2020-11866 | HIGH | 7.8 | 1.3% | May 11, 2020 | libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows a use-after-free. |
| CVE-2020-11865 | HIGH | 7.8 | 1.4% | May 11, 2020 | libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows out-of-bounds memory access. |
| CVE-2020-11864 | MEDIUM | 5.5 | 1.2% | May 11, 2020 | libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows denial of service (issue 2 of 2). |
| CVE-2020-11863 | MEDIUM | 5.5 | 1.1% | May 11, 2020 | libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows denial of service (issue 1 of 2). |
| CVE-2020-11108 | HIGH | 8.8 | 78.3% | May 11, 2020 | The Gravity updater in Pi-hole through 4.4 allows an authenticated adversary to upload arbitrary files. This can be abus... |
| CVE-2020-1698 | MEDIUM | 5.5 | 0.4% | May 11, 2020 | A flaw was found in keycloak in versions before 9.0.0. A logged exception in the HttpMethod class may leak the password ... |
| CVE-2020-12783 | HIGH | 7.5 | 4.5% | May 11, 2020 | Exim through 4.93 has an out-of-bounds read in the SPA authenticator that could result in SPA/NTLM authentication bypass... |
| CVE-2020-10685 | MEDIUM | 5.5 | 0.4% | May 11, 2020 | A flaw was found in Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 and 2.8.x before 2.8.11 and 2.9... |
| CVE-2020-12743 | CRITICAL | 9.8 | 1.5% | May 11, 2020 | An issue was discovered in Gazie 7.32. A successful installation does not remove or block (or in any other way prevent u... |
| CVE-2020-5538 | HIGH | 7.8 | 0.4% | May 11, 2020 | Improper Access Control in PALLET CONTROL Ver. 6.3 and earlier allows authenticated attackers to execute arbitrary code ... |
| CVE-2020-9315 | HIGH | 7.5 | 81.8% | May 10, 2020 | ** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** Oracle iPlanet Web Server 7.0.x has Incorrect Access Control for admingui/vers... |
| CVE-2020-9314 | MEDIUM | 4.8 | 1.3% | May 10, 2020 | ** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** Oracle iPlanet Web Server 7.0.x allows image injection in the Administration c... |
| CVE-2020-12771 | MEDIUM | 5.5 | 0.5% | May 9, 2020 | An issue was discovered in the Linux kernel through 5.6.11. btree_gc_coalesce in drivers/md/bcache/btree.c has a deadloc... |
| CVE-2020-12770 | MEDIUM | 6.7 | 0.6% | May 9, 2020 | An issue was discovered in the Linux kernel through 5.6.11. sg_write lacks an sg_remove_request call in a certain failur... |
| CVE-2020-12769 | MEDIUM | 5.5 | 0.7% | May 9, 2020 | An issue was discovered in the Linux kernel before 5.4.17. drivers/spi/spi-dw.c allows attackers to cause a panic via co... |
| CVE-2020-12768 | MEDIUM | 5.5 | 0.4% | May 9, 2020 | An issue was discovered in the Linux kernel before 5.6. svm_cpu_uninit in arch/x86/kvm/svm.c has a memory leak, aka CID-... |
| CVE-2020-12767 | MEDIUM | 5.5 | 0.5% | May 9, 2020 | exif_entry_get_value in exif-entry.c in libexif 0.6.21 has a divide-by-zero error. |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now