2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-0478 | HIGH | 7.8 | 0.5% | Dec 15, 2020 | In extend_frame_lowbd of restoration.c, there is a possible out of bounds write due to a missing bounds check. This coul... |
| CVE-2020-0475 | HIGH | 7.8 | 0.4% | Dec 15, 2020 | In createInputConsumer of WindowManagerService.java, there is a possible way to block and intercept input events due to ... |
| CVE-2020-0474 | HIGH | 7 | 0.1% | Dec 15, 2020 | In HalCamera::requestNewFrame of HalCamera.cpp, there is a possible use-after-free due to a race condition. This could l... |
| CVE-2020-8935 | HIGH | 7.8 | 0.1% | Dec 15, 2020 | An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allow an attacker to make an Ecall_restore fun... |
| CVE-2020-35471 | HIGH | 7.5 | 2.4% | Dec 15, 2020 | Envoy before 1.16.1 mishandles dropped and truncated datagrams, as demonstrated by a segmentation fault for a UDP packet... |
| CVE-2020-35470 | HIGH | 8.8 | 1.0% | Dec 15, 2020 | Envoy before 1.16.1 logs an incorrect downstream address because it considers only the directly connected peer, not the ... |
| CVE-2020-35457 | HIGH | 7.8 | 0.6% | Dec 14, 2020 | GNOME GLib before 2.65.3 has an integer overflow, that might lead to an out-of-bounds write, in g_option_group_add_entri... |
| CVE-2020-0016 | HIGH | 7.8 | 0.2% | Dec 14, 2020 | In the Broadcom Nexus firmware, there is an insecure default password. This could lead to local escalation of privilege ... |
| CVE-2020-0466 | HIGH | 7.8 | 0.3% | Dec 14, 2020 | In do_epoll_ctl and ep_loop_check_proc of eventpoll.c, there is a possible use after free due to a logic error. This cou... |
| CVE-2020-0463 | HIGH | 7.5 | 1.4% | Dec 14, 2020 | In sdp_server_handle_client_req of sdp_server.cc, there is a possible out of bounds read due to a missing bounds check. ... |
| CVE-2020-0460 | HIGH | 7.5 | 0.7% | Dec 14, 2020 | In createNameCredentialDialog of CertInstaller.java, there exists the possibility of improperly installed certificates d... |
| CVE-2020-0458 | HIGH | 7.8 | 1.5% | Dec 14, 2020 | In SPDIFEncoder::writeBurstBufferBytes and related methods of SPDIFEncoder.cpp, there is a possible out of bounds write ... |
| CVE-2020-0444 | HIGH | 7.8 | 0.2% | Dec 14, 2020 | In audit_free_lsm_field of auditfilter.c, there is a possible bad kfree due to a logic error in audit_data_to_entry. Thi... |
| CVE-2020-0440 | HIGH | 7.8 | 0.2% | Dec 14, 2020 | In createVirtualDisplay of DisplayManagerService.java, there is a possible way to create a trusted virtual display due t... |
| CVE-2020-0099 | HIGH | 7.8 | 0.5% | Dec 14, 2020 | In addWindow of WindowManagerService.java, there is a possible window overlay attack due to an insecure default value. T... |
| CVE-2020-28396 | HIGH | 7.3 | 0.6% | Dec 14, 2020 | A vulnerability has been identified in SICAM A8000 CP-8000 (All versions < V16), SICAM A8000 CP-8021 (All versions < V16... |
| CVE-2020-25235 | HIGH | 7.5 | 1.1% | Dec 14, 2020 | A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). The password used for a... |
| CVE-2020-25234 | HIGH | 7.7 | 0.3% | Dec 14, 2020 | A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3), LOGO! Soft Comfort (All... |
| CVE-2020-25232 | HIGH | 7.5 | 0.7% | Dec 14, 2020 | A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Due to the usage of an ... |
| CVE-2020-25230 | HIGH | 7.5 | 0.4% | Dec 14, 2020 | A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Due to the usage of an ... |
| CVE-2020-25229 | HIGH | 7.5 | 0.6% | Dec 14, 2020 | A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). The implemented encrypt... |
| CVE-2020-15796 | HIGH | 7.5 | 1.6% | Dec 14, 2020 | A vulnerability has been identified in SIMATIC ET 200SP Open Controller (incl. SIPLUS variants) (V20.8), SIMATIC S7-1500... |
| CVE-2020-14368 | HIGH | 7.1 | 0.5% | Dec 14, 2020 | A flaw was found in Eclipse Che in versions prior to 7.14.0 that impacts CodeReady Workspaces. When configured with cook... |
| CVE-2020-8286 | HIGH | 7.5 | 4.6% | Dec 14, 2020 | curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verificatio... |
| CVE-2020-8285 | HIGH | 7.5 | 9.8% | Dec 14, 2020 | curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcar... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now