2020 CVE Vulnerabilities

21,141 CVEs published in 2020.

CVE IDSeverityCVSSDescription
CVE-2020-10841HIGH7.8An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (Exynos 9610 chipsets) software. There is an a...
CVE-2020-10840HIGH7.1An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (Exynos 9610 chipsets) software. There is a ke...
CVE-2020-10839MEDIUM6.8An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. Attackers can bypass Factor...
CVE-2020-10838HIGH7.8An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. PROCA allows a use-after-free and ar...
CVE-2020-10837CRITICAL9.8An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (with TEEGRIS) software. The Esecomm Trustlet ...
CVE-2020-10836CRITICAL9.8An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Exynos chipsets) software. The Widev...
CVE-2020-10835CRITICAL9.8An issue was discovered on Samsung mobile devices with any (before February 2020 for Exynos modem chipsets) software. Th...
CVE-2020-10834MEDIUM5.3An issue was discovered on Samsung mobile devices with P(9.0) software. Attackers can view notifications on the lock scr...
CVE-2020-10833HIGH7.5An issue was discovered on Samsung mobile devices with Q(10.0) software. The DeX Lockscreen allows attackers to access t...
CVE-2020-10832HIGH7.8An issue was discovered on Samsung mobile devices with P(9.0) (Exynos chipsets) software. Kernel Wi-Fi drivers allow out...
CVE-2020-10831HIGH7.5An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. Attackers can trigger an up...
CVE-2020-10830LOW2.4An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. Attackers can view notifications by ...
CVE-2020-10829HIGH7.8An issue was discovered on Samsung mobile devices with O(8.0), P(9.0), and Q(10.0) (Broadcom chipsets) software. A kerne...
CVE-2020-6972CRITICAL9.1In Notifier Web Server (NWS) Version 3.50 and earlier, the Honeywell Fire Web Server’s authentication may be bypassed by...
CVE-2020-4309MEDIUM5.3IBM Content Navigator 3.0CD could disclose sensitive information to an unauthenticated user which could be used to aid i...
CVE-2020-4253HIGH8.8IBM Content Navigator 3.0CD does not invalidate session after logout which could allow an authenticated user to imperson...
CVE-2020-10938CRITICAL9.8GraphicsMagick before 1.3.35 has an integer overflow and resultant heap-based buffer overflow in HuffmanDecodeImage in m...
CVE-2020-10385MEDIUM5.4A stored cross-site scripting (XSS) vulnerability exists in the WPForms Contact Form (aka wpforms-lite) plugin before 1....
CVE-2020-1747CRITICAL9.8A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code...
CVE-2020-10934HIGH7.2Acyba AcyMailing before 6.9.2 mishandles file uploads by admins.
CVE-2020-10931HIGH7.5Memcached 1.6.x before 1.6.2 allows remote attackers to cause a denial of service (daemon crash) via a crafted binary pr...
CVE-2020-9359MEDIUM5.3KDE Okular before 1.10.0 allows code execution via an action link in a PDF document.
CVE-2020-1744MEDIUM5.6A flaw was found in keycloak before version 9.0.1. When configuring an Conditional OTP Authentication Flow as a post log...
CVE-2020-10684HIGH7.1A flaw was found in Ansible Engine, all versions 2.7.x, 2.8.x and 2.9.x prior to 2.7.17, 2.8.9 and 2.9.6 respectively, w...
CVE-2020-10570MEDIUM6.1The Telegram application through 5.12 for Android, when Show Popup is enabled, might allow physically proximate attacker...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now