2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-0008 | MEDIUM | 4.7 | 0.1% | Jan 8, 2020 | In LowEnergyClient::MtuChangedCallback of low_energy_client.cc, there is a possible out of bounds read due to a race con... |
| CVE-2020-0007 | MEDIUM | 5.5 | 0.2% | Jan 8, 2020 | In flattenString8 of Sensor.cpp, there is a possible information disclosure of heap memory due to uninitialized data. Th... |
| CVE-2020-0006 | MEDIUM | 6.5 | 0.8% | Jan 8, 2020 | In rw_i93_send_cmd_write_single_block of rw_i93.cc, there is a possible information disclosure of heap memory due to uni... |
| CVE-2020-0004 | MEDIUM | 5.5 | 0.1% | Jan 8, 2020 | In generateCrop of WallpaperManagerService.java, there is a possible sysui crash due to image exceeding maximum texture ... |
| CVE-2020-0003 | MEDIUM | 6.7 | 0.1% | Jan 8, 2020 | In onCreate of InstallStart.java, there is a possible package validation bypass due to a time-of-check time-of-use vulne... |
| CVE-2020-0002 | HIGH | 8.8 | 1.4% | Jan 8, 2020 | In ih264d_init_decoder of ih264d_api.c, there is a possible out of bounds write due to a use after free. This could lead... |
| CVE-2020-0001 | HIGH | 7.8 | 0.4% | Jan 8, 2020 | In getProcessRecordLocked of ActivityManagerService.java isolated apps are not handled correctly. This could lead to loc... |
| CVE-2020-5511 | HIGH | 8.8 | 1.7% | Jan 8, 2020 | PHPGurukul Small CRM v2.0 was found vulnerable to authentication bypass via SQL injection when logging into the administ... |
| CVE-2020-5510 | CRITICAL | 9.8 | 2.1% | Jan 8, 2020 | PHPGurukul Hostel Management System v2.0 allows SQL injection via the id parameter in the full-profile.php file. |
| CVE-2020-5183 | HIGH | 7.5 | 2.0% | Jan 8, 2020 | FTPGetter Professional 5.97.0.223 is vulnerable to a memory corruption bug when a user sends a specially crafted string ... |
| CVE-2020-0009 | MEDIUM | 5.5 | 0.7% | Jan 8, 2020 | In calc_vm_may_flags of ashmem.c, there is a possible arbitrary write to shared memory due to a permissions bypass. This... |
| CVE-2020-6170 | CRITICAL | 9.8 | 7.3% | Jan 8, 2020 | An authentication bypass vulnerability on Genexis Platinum-4410 v2.1 P4410-V2 1.28 devices allows attackers to obtain cl... |
| CVE-2020-6163 | MEDIUM | 6.1 | 0.7% | Jan 8, 2020 | The WikibaseMediaInfo extension 1.35 for MediaWiki allows XSS because of improper template syntax within the PropertySug... |
| CVE-2020-5841 | CRITICAL | 9.8 | 1.2% | Jan 7, 2020 | An issue was discovered in OpServices OpMon 9.3.1-1. Using password change parameters, an attacker could perform SQL inj... |
| CVE-2020-5842 | MEDIUM | 6.1 | 1.8% | Jan 7, 2020 | Codoforum 4.8.3 allows XSS in the user registration page: via the username field to the index.php?u=/user/register URI. ... |
| CVE-2020-5307 | CRITICAL | 9.8 | 15.7% | Jan 7, 2020 | PHPGurukul Dairy Farm Shop Management System 1.0 is vulnerable to SQL injection, as demonstrated by the username paramet... |
| CVE-2020-5393 | MEDIUM | 6.1 | 0.7% | Jan 7, 2020 | In Appspace On-Prem through 7.1.3, an adversary can steal a session token via XSS. |
| CVE-2020-5843 | MEDIUM | 4.8 | 0.5% | Jan 7, 2020 | Codoforum 4.8.3 allows XSS in the admin dashboard via a category to the Manage Users screen. |
| CVE-2020-5846 | HIGH | 8.8 | 1.4% | Jan 6, 2020 | An insecure file upload and code execution issue was discovered in Ahsay Cloud Backup Suite 8.3.0.30 via a "PUT /obs/obm... |
| CVE-2020-5513 | MEDIUM | 6.8 | 25.8% | Jan 6, 2020 | Gila CMS 1.11.8 allows /cm/delete?t=../ Directory Traversal. |
| CVE-2020-5512 | MEDIUM | 6.8 | 18.9% | Jan 6, 2020 | Gila CMS 1.11.8 allows /admin/media?path=../ Path Traversal. |
| CVE-2020-5204 | HIGH | 8.8 | 1.1% | Jan 6, 2020 | In uftpd before 2.11, there is a buffer overflow vulnerability in handle_PORT in ftpcmd.c that is caused by a buffer tha... |
| CVE-2020-5515 | HIGH | 7.2 | 26.5% | Jan 6, 2020 | Gila CMS 1.11.8 allows /admin/sql?query= SQL Injection. |
| CVE-2020-5514 | CRITICAL | 9.1 | 44.1% | Jan 6, 2020 | Gila CMS 1.11.8 allows Unrestricted Upload of a File with a Dangerous Type via .phar or .phtml to the lzld/thumb?src= UR... |
| CVE-2020-5840 | HIGH | 7.5 | 1.5% | Jan 6, 2020 | An issue was discovered in HashBrown CMS before 1.3.2. Server/Entity/Resource/Connection.js allows an attacker to reach ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now