2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-0037 | HIGH | 7.5 | 1.2% | Mar 10, 2020 | In rw_i93_sm_set_read_only of rw_i93.cc, there is a possible out of bounds read due to a missing bounds check. This coul... |
| CVE-2020-0036 | HIGH | 7.8 | 0.2% | Mar 10, 2020 | In hasPermissions of PermissionMonitor.java, there is a possible access to restricted permissions due to a permissions b... |
| CVE-2020-0035 | MEDIUM | 5.5 | 0.2% | Mar 10, 2020 | In query of TelephonyProvider.java, there is a possible access to SIM card info due to a missing permission check. This ... |
| CVE-2020-0034 | HIGH | 7.5 | 1.9% | Mar 10, 2020 | In vp8_decode_frame of decodeframe.c, there is a possible out of bounds read due to improper input validation. This coul... |
| CVE-2020-0033 | HIGH | 7.8 | 0.2% | Mar 10, 2020 | In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to stale pointer. This could l... |
| CVE-2020-0032 | HIGH | 8.8 | 1.6% | Mar 10, 2020 | In ih264d_release_display_bufs of ih264d_utils.c, there is a possible out of bounds write due to a heap buffer overflow.... |
| CVE-2020-0031 | MEDIUM | 5 | 0.2% | Mar 10, 2020 | In triggerAugmentedAutofillLocked and related functions of Session.java, it is possible for Augmented Autofill to displa... |
| CVE-2020-0029 | LOW | 2.3 | 0.1% | Mar 10, 2020 | In the WifiConfigManager, there is a possible storage of location history which can only be deleted by triggering a fact... |
| CVE-2020-0012 | MEDIUM | 6.7 | 0.2% | Mar 10, 2020 | In fpc_ta_pn_get_unencrypted_image of fpc_ta_pn.c, there is a possible out of bounds write due to a missing bounds check... |
| CVE-2020-0011 | MEDIUM | 6.7 | 0.2% | Mar 10, 2020 | In get_auth_result of fpc_ta_hw_auth.c, there is a possible out of bounds write due to a missing bounds check. This coul... |
| CVE-2020-0010 | MEDIUM | 6.7 | 0.2% | Mar 10, 2020 | In fpc_ta_get_build_info of fpc_ta_kpi.c, there is a possible out of bounds write due to a missing bounds check. This co... |
| CVE-2020-5259 | HIGH | 8.6 | 2.0% | Mar 10, 2020 | In affected versions of dojox (NPM package), the jqMix method is vulnerable to Prototype Pollution. Prototype Pollution ... |
| CVE-2020-5258 | HIGH | 7.7 | 4.0% | Mar 10, 2020 | In affected versions of dojo (NPM package), the deepCopy method is vulnerable to Prototype Pollution. Prototype Pollutio... |
| CVE-2020-9440 | MEDIUM | 6.1 | 1.3% | Mar 10, 2020 | A cross-site scripting (XSS) vulnerability in the WSC plugin through 5.5.7.5 for CKEditor 4 allows remote attackers to r... |
| CVE-2020-5254 | HIGH | 8.1 | 1.1% | Mar 10, 2020 | In NetHack before 3.6.6, some out-of-bound values for the hilite_status option can be exploited. NetHack 3.6.6 resolves ... |
| CVE-2020-5253 | CRITICAL | 9.8 | 0.5% | Mar 10, 2020 | NetHack before version 3.6.0 allowed malicious use of escaping of characters in the configuration file (usually .nethack... |
| CVE-2020-10255 | CRITICAL | 9 | 2.5% | Mar 10, 2020 | Modern DRAM chips (DDR4 and LPDDR4 after 2015) are affected by a vulnerability in deployment of internal mitigations aga... |
| CVE-2020-4162 | MEDIUM | 5.4 | 0.6% | Mar 10, 2020 | IBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to cross-site scripting. This vulnerability allows users t... |
| CVE-2020-10251 | MEDIUM | 5.5 | 1.5% | Mar 10, 2020 | In ImageMagick 7.0.9, an out-of-bounds read vulnerability exists within the ReadHEICImageByID function in coders\heic.c.... |
| CVE-2020-10257 | CRITICAL | 9.8 | 8.9% | Mar 10, 2020 | The ThemeREX Addons plugin before 2020-03-09 for WordPress lacks access control on the /trx_addons/v2/get/sc_layout REST... |
| CVE-2020-5342 | HIGH | 7.8 | 0.4% | Mar 9, 2020 | Dell Digital Delivery versions prior to 3.5.2015 contain an incorrect default permissions vulnerability. A locally authe... |
| CVE-2020-9758 | CRITICAL | 9.6 | 2.5% | Mar 9, 2020 | An issue was discovered in chat.php in LiveZilla Live Chat 8.0.1.3 (Helpdesk). A blind JavaScript injection lies in the ... |
| CVE-2020-10250 | CRITICAL | 9.8 | 2.6% | Mar 9, 2020 | BWA DiREX-Pro 1.2181 devices allow remote attackers to execute arbitrary OS commands via shell metacharacters in the PKG... |
| CVE-2020-10249 | MEDIUM | 5.3 | 1.0% | Mar 9, 2020 | BWA DiREX-Pro 1.2181 devices allow full path disclosure via an invalid name array parameter to val_soft.php3. |
| CVE-2020-10248 | HIGH | 7.5 | 1.4% | Mar 9, 2020 | BWA DiREX-Pro 1.2181 devices allow remote attackers to discover passwords via a direct request to val_users.php3. |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now