2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-0070 | CRITICAL | 9.8 | 1.3% | Apr 17, 2020 | In rw_t2t_update_lock_attributes of rw_t2t_ndef.cc, there is a possible out of bounds write due to a missing bounds chec... |
| CVE-2020-0068 | MEDIUM | 4.4 | 0.1% | Apr 17, 2020 | In crus_afe_get_param of msm-cirrus-playback.c, there is a possible out of bounds read due to an integer overflow. This ... |
| CVE-2020-0067 | MEDIUM | 4.4 | 0.5% | Apr 17, 2020 | In f2fs_xattr_generic_list of xattr.c, there is a possible out of bounds read due to a missing bounds check. This could ... |
| CVE-2020-7085 | HIGH | 7.8 | 1.4% | Apr 17, 2020 | A heap overflow vulnerability in the Autodesk FBX-SDK versions 2019.2 and earlier may lead to arbitrary code execution o... |
| CVE-2020-7084 | MEDIUM | 5.5 | 0.8% | Apr 17, 2020 | A NULL pointer dereference vulnerability in the Autodesk FBX-SDK versions 2019.0 and earlier may lead to denial of servi... |
| CVE-2020-7083 | MEDIUM | 6.5 | 1.0% | Apr 17, 2020 | An intager overflow vulnerability in the Autodesk FBX-SDK versions 2019.0 and earlier may lead to denial of service of t... |
| CVE-2020-7082 | HIGH | 8.8 | 2.0% | Apr 17, 2020 | A use-after-free vulnerability in the Autodesk FBX-SDK versions 2019.0 and earlier may lead to code execution on a syste... |
| CVE-2020-7081 | HIGH | 8.8 | 1.5% | Apr 17, 2020 | A type confusion vulnerability in the Autodesk FBX-SDK versions 2019.0 and earlier may lead to arbitary code read/write ... |
| CVE-2020-7080 | HIGH | 7.8 | 1.4% | Apr 17, 2020 | A buffer overflow vulnerability in the Autodesk FBX-SDK versions 2019.0 and earlier may lead to arbitrary code execution... |
| CVE-2020-7079 | HIGH | 7.8 | 0.4% | Apr 17, 2020 | An improper signature validation vulnerability in Autodesk Dynamo BIM versions 2.5.1 and 2.5.0 may lead to code executio... |
| CVE-2020-11880 | MEDIUM | 6.5 | 0.9% | Apr 17, 2020 | An issue was discovered in KDE KMail before 19.12.3. By using the proprietary (non-RFC6068) "mailto?attach=..." paramete... |
| CVE-2020-11879 | MEDIUM | 6.5 | 2.7% | Apr 17, 2020 | An issue was discovered in GNOME Evolution before 3.35.91. By using the proprietary (non-RFC6068) "mailto?attach=..." pa... |
| CVE-2020-10178 | — | — | — | Apr 17, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-11637. Reason: This candidate is a reservation d... |
| CVE-2020-11878 | CRITICAL | 9.8 | 1.3% | Apr 17, 2020 | The Jitsi Meet (aka docker-jitsi-meet) stack on Docker before stable-4384-1 uses default passwords (such as passw0rd) fo... |
| CVE-2020-11877 | HIGH | 7.5 | 1.5% | Apr 17, 2020 | airhost.exe in Zoom Client for Meetings 4.6.11 uses 3423423432325249 as the Initialization Vector (IV) for AES-256 CBC e... |
| CVE-2020-11876 | HIGH | 7.5 | 1.7% | Apr 17, 2020 | airhost.exe in Zoom Client for Meetings 4.6.11 uses the SHA-256 hash of 0123425234234fsdfsdr3242 for initialization of a... |
| CVE-2020-9523 | HIGH | 8.8 | 0.9% | Apr 17, 2020 | Insufficiently protected credentials vulnerability on Micro Focus enterprise developer and enterprise server, affecting ... |
| CVE-2020-4277 | HIGH | 7.5 | 1.4% | Apr 17, 2020 | IBM TRIRIGA Application Platform 3.5.3 and 3.6.1 discloses sensitive information in error messages that could aid an att... |
| CVE-2020-11875 | HIGH | 7.8 | 0.2% | Apr 17, 2020 | An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10.0 (MTK chipsets) software. The MTK ke... |
| CVE-2020-11874 | HIGH | 7.5 | 0.4% | Apr 17, 2020 | An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9, and 10 software. Attackers can bypass Factory ... |
| CVE-2020-11873 | CRITICAL | 9.8 | 0.4% | Apr 17, 2020 | An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software. A stack-based buffer ove... |
| CVE-2020-11793 | HIGH | 8.8 | 2.8% | Apr 17, 2020 | A use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via crafted web content that allow... |
| CVE-2020-10947 | HIGH | 8.8 | 2.0% | Apr 17, 2020 | Mac Endpoint for Sophos Central before 9.9.6 and Mac Endpoint for Sophos Home before 2.2.6 allow Privilege Escalation. |
| CVE-2020-10813 | HIGH | 7.5 | 1.4% | Apr 17, 2020 | A buffer overflow vulnerability in FTPDMIN 0.96 allows attackers to crash the server via a crafted packet. |
| CVE-2020-10377 | CRITICAL | 9.8 | 0.5% | Apr 17, 2020 | A weak encryption vulnerability in Mitel MiVoice Connect Client before 214.100.1214.0 could allow an unauthenticated att... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now