2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-0027 | HIGH | 7.8 | 0.2% | Feb 13, 2020 | In HidRawSensor::batch of HidRawSensor.cpp, there is a possible out of bounds write due to an unexpected switch fallthro... |
| CVE-2020-0026 | HIGH | 7.8 | 0.2% | Feb 13, 2020 | In Parcel::continueWrite of Parcel.cpp, there is possible memory corruption due to a use after free. This could lead to ... |
| CVE-2020-0023 | MEDIUM | 5.5 | 0.3% | Feb 13, 2020 | In setPhonebookAccessPermission of AdapterService.java, there is a possible disclosure of user contacts over bluetooth d... |
| CVE-2020-0022 | HIGH | 8.8 | 5.4% | Feb 13, 2020 | In reassemble_and_dispatch of packet_fragmenter.cc, there is possible out of bounds write due to an incorrect bounds cal... |
| CVE-2020-0021 | MEDIUM | 6.5 | 0.8% | Feb 13, 2020 | In removeUnusedPackagesLPw of PackageManagerService.java, there is a possible permanent denial-of-service due to a missi... |
| CVE-2020-0020 | MEDIUM | 5.5 | 0.1% | Feb 13, 2020 | In getAttributeRange of ExifInterface.java, there is a possible failure to redact location information from media files ... |
| CVE-2020-0018 | MEDIUM | 4.4 | 0.2% | Feb 13, 2020 | In MotionEntry::appendDescription of InputDispatcher.cpp, there is a possible log information disclosure. This could lea... |
| CVE-2020-0017 | MEDIUM | 4.4 | 0.2% | Feb 13, 2020 | In multiple places, it was possible for the primary user’s dictionary to be visible to and modifiable by secondary users... |
| CVE-2020-0015 | HIGH | 7.8 | 0.2% | Feb 13, 2020 | In onCreate of CertInstaller.java, there is a possible way to overlay the Certificate Installation dialog by a malicious... |
| CVE-2020-0014 | MEDIUM | 5.5 | 1.0% | Feb 13, 2020 | It is possible for a malicious application to construct a TYPE_TOAST window manually and make that window clickable. Thi... |
| CVE-2020-0005 | MEDIUM | 6.7 | 0.2% | Feb 13, 2020 | In btm_read_remote_ext_features_complete of btm_acl.cc, there is a possible out of bounds write due to a missing bounds ... |
| CVE-2020-8962 | CRITICAL | 9.8 | 1.8% | Feb 13, 2020 | A stack-based buffer overflow was found on the D-Link DIR-842 REVC with firmware v3.13B09 HOTFIX due to the use of strcp... |
| CVE-2020-8953 | CRITICAL | 9.8 | 1.3% | Feb 13, 2020 | OpenVPN Access Server 2.8.x before 2.8.1 allows LDAP authentication bypass (except when a user is enrolled in two-factor... |
| CVE-2020-8964 | CRITICAL | 9.8 | 3.7% | Feb 13, 2020 | TimeTools SC7105 1.0.007, SC9205 1.0.007, SC9705 1.0.007, SR7110 1.0.007, SR9210 1.0.007, SR9750 1.0.007, SR9850 1.0.007... |
| CVE-2020-8963 | CRITICAL | 9.8 | 2.7% | Feb 13, 2020 | TimeTools SC7105 1.0.007, SC9205 1.0.007, SC9705 1.0.007, SR7110 1.0.007, SR9210 1.0.007, SR9750 1.0.007, SR9850 1.0.007... |
| CVE-2020-5239 | HIGH | 8.8 | 0.9% | Feb 13, 2020 | In Mailu before version 1.7, an authenticated user can exploit a vulnerability in Mailu fetchmail script and gain full a... |
| CVE-2020-7209 | CRITICAL | 9.8 | 98.8% | Feb 13, 2020 | LinuxKI v6.0-1 and earlier is vulnerable to an remote code execution which is resolved in release 6.0-2. |
| CVE-2020-7208 | MEDIUM | 6.1 | 0.9% | Feb 13, 2020 | LinuxKI v6.0-1 and earlier is vulnerable to an XSS which is resolved in release 6.0-2. |
| CVE-2020-6973 | MEDIUM | 6.2 | 0.8% | Feb 13, 2020 | Digi International ConnectPort LTS 32 MEI, Firmware Version 1.4.3 (82002228_K 08/09/2018), bios Version 1.2. Multiple cr... |
| CVE-2020-5241 | MEDIUM | 5.4 | 0.6% | Feb 13, 2020 | matestack-ui-core (RubyGem) before 0.7.4 is vulnerable to XSS/Script injection. This vulnerability is patched in version... |
| CVE-2020-6975 | MEDIUM | 4.9 | 0.8% | Feb 12, 2020 | Digi International ConnectPort LTS 32 MEI, Firmware Version 1.4.3 (82002228_K 08/09/2018), bios Version 1.2. Successful ... |
| CVE-2020-1977 | HIGH | 8.8 | 0.5% | Feb 12, 2020 | Insufficient Cross-Site Request Forgery (XSRF) protection on Expedition Migration Tool allows remote unauthenticated att... |
| CVE-2020-1976 | MEDIUM | 5.5 | 0.3% | Feb 12, 2020 | A denial-of-service (DoS) vulnerability in Palo Alto Networks GlobalProtect software running on Mac OS allows authentica... |
| CVE-2020-1975 | HIGH | 8.8 | 1.0% | Feb 12, 2020 | Missing XML validation vulnerability in the PAN-OS web interface on Palo Alto Networks PAN-OS software allows authentica... |
| CVE-2020-8955 | CRITICAL | 9.8 | 3.7% | Feb 12, 2020 | irc_mode_channel_update in plugins/irc/irc-mode.c in WeeChat through 2.7 allows remote attackers to cause a denial of se... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now