2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-25759 | HIGH | 8.8 | 2.3% | Dec 15, 2020 | An issue was discovered on D-Link DSR-250 3.17 devices. Certain functionality in the Unified Services Router web interfa... |
| CVE-2020-25758 | HIGH | 8.8 | 1.2% | Dec 15, 2020 | An issue was discovered on D-Link DSR-250 3.17 devices. Insufficient validation of configuration file checksums could al... |
| CVE-2020-25757 | HIGH | 8.8 | 2.0% | Dec 15, 2020 | A lack of input validation and access controls in Lua CGIs on D-Link DSR VPN routers may result in arbitrary input being... |
| CVE-2020-25195 | HIGH | 7.5 | 1.5% | Dec 15, 2020 | The length of the input fields of Host Engineering H0-ECOM100, H2-ECOM100, and H4-ECOM100 modules are verified only on t... |
| CVE-2020-29487 | HIGH | 7.5 | 1.4% | Dec 15, 2020 | An issue was discovered in Xen XAPI before 2020-12-15. Certain xenstore keys provide feedback from the guest, and are th... |
| CVE-2020-29481 | HIGH | 8.8 | 0.3% | Dec 15, 2020 | An issue was discovered in Xen through 4.14.x. Access rights of Xenstore nodes are per domid. Unfortunately, existing gr... |
| CVE-2020-29479 | HIGH | 8.8 | 0.3% | Dec 15, 2020 | An issue was discovered in Xen through 4.14.x. In the Ocaml xenstored implementation, the internal representation of the... |
| CVE-2020-29569 | HIGH | 8.8 | 0.4% | Dec 15, 2020 | An issue was discovered in the Linux kernel through 5.10.1, as used with Xen through 4.14.x. The Linux kernel PV block b... |
| CVE-2020-27055 | HIGH | 7.5 | 0.6% | Dec 15, 2020 | In isSubmittable and showWarningMessagesIfAppropriate of WifiConfigController.java and WifiConfigController2.java, there... |
| CVE-2020-27054 | HIGH | 7.8 | 0.1% | Dec 15, 2020 | In onFactoryReset of BluetoothManagerService.java, there is a missing permission check. This could lead to local escalat... |
| CVE-2020-27052 | HIGH | 7.8 | 0.1% | Dec 15, 2020 | In getLockTaskLaunchMode of ActivityRecord.java, there is a possible way for any app to start in Lock Task Mode due to a... |
| CVE-2020-27051 | HIGH | 7.8 | 0.4% | Dec 15, 2020 | In NFA_RwI93WriteMultipleBlocks of nfa_rw_api.cc, there is a possible out of bounds write due to an integer overflow. Th... |
| CVE-2020-27050 | HIGH | 7.8 | 0.4% | Dec 15, 2020 | In rw_i93_send_cmd_write_multi_blocks of rw_i93.cc, there is a possible out of bounds write due to a heap buffer overflo... |
| CVE-2020-27049 | HIGH | 7.8 | 0.4% | Dec 15, 2020 | In rw_t3t_send_raw_frame of rw_t3t.cc, there is a possible out of bounds write due to a missing bounds check. This could... |
| CVE-2020-27048 | HIGH | 7.8 | 0.4% | Dec 15, 2020 | In RW_SendRawFrame of rw_main.cc, there is a possible out of bounds write due to a missing bounds check. This could lead... |
| CVE-2020-27045 | HIGH | 7.8 | 0.4% | Dec 15, 2020 | In CE_SendRawFrame of ce_main.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead... |
| CVE-2020-27044 | HIGH | 7.8 | 0.1% | Dec 15, 2020 | In restartWrite of Parcel.cpp, there is a possible memory corruption due to a use after free. This could lead to local e... |
| CVE-2020-25712 | HIGH | 7.8 | 0.3% | Dec 15, 2020 | A flaw was found in xorg-x11-server before 1.20.10. A heap-buffer overflow in XkbSetDeviceInfo may lead to a privilege e... |
| CVE-2020-27030 | HIGH | 7.8 | 0.1% | Dec 15, 2020 | In onCreate of HandleApiCalls.java, there is a possible permission bypass due to a confused deputy. This could lead to l... |
| CVE-2020-27024 | HIGH | 7.5 | 0.9% | Dec 15, 2020 | In smp_br_state_machine_event of smp_br_main.cc, there is a possible out of bounds read due to a missing bounds check. T... |
| CVE-2020-0489 | HIGH | 8.8 | 0.7% | Dec 15, 2020 | In Parse_data of eas_mdls.c, there is a possible out of bounds write due to a missing bounds check. This could lead to r... |
| CVE-2020-0486 | HIGH | 7.8 | 0.1% | Dec 15, 2020 | In openAssetFileListener of ContactsProvider2.java, there is a possible permission bypass due to an insecure default val... |
| CVE-2020-0485 | HIGH | 7.8 | 0.1% | Dec 15, 2020 | In areFunctionsSupported of UsbBackend.java, there is a possible access to tethering from a guest account due to a missi... |
| CVE-2020-0480 | HIGH | 7.8 | 0.4% | Dec 15, 2020 | In callUnchecked of DocumentsProvider.java, there is a possible permissions bypass due to a missing permission check. Th... |
| CVE-2020-0479 | HIGH | 7.8 | 0.4% | Dec 15, 2020 | In callUnchecked of DocumentsProvider.java, there is a possible permissions bypass. This could lead to local escalation ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now