CVEs from 2020
Total
4,012
critical
critical 194
high
high 478
medium
medium 683
low
low 58
% Critical
4.8%
% with KEV
3.6%
% with exploit
4.0%
Top products
- retail_xstore_point_of_service 33
- banking_digital_experience 30
- primavera_unifier 29
- retail_service_backbone 15
- financial_services_institutional_performance_analytics 13
- insurance_policy_administration_j2ee 11
- communications_network_charging_and_control 10
- enterprise_manager_base_platform 10
| CVE | Severity | CVSS | Risk | Flags | OS | Vendor | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2020-26145 | medium | — | 5.5 | 5y ago | An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept second (or subsequent) broadcast fragments even when sent in plaintext and proces… | |||
| CVE-2020-26141 | medium | — | 5.5 | 5y ago | An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The Wi-Fi implementation does not verify the Message Integrity Check (authenticity) of fragmented TKIP frames. An adver… | |||
| CVE-2020-29368 | medium | — | 5.5 | 5y ago | An issue was discovered in __split_huge_pmd in mm/huge_memory.c in the Linux kernel before 5.7.5. The copy-on-write implementation can grant unintended write access because of a race condition in a T… | |||
| CVE-2020-29660 | medium | — | 5.5 | 5y ago | A locking inconsistency issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_io.c and drivers/tty/tty_jobctrl.c may allow a read-after-free attack against TIO… | |||
| CVE-2020-26140 | medium | — | 5.5 | 5y ago | Moderate: kernel security, bug fix, and enhancement update | |||
| CVE-2020-26146 | medium | — | 5.5 | 5y ago | Moderate: kernel security, bug fix, and enhancement update | |||
| CVE-2020-36312 | medium | — | 5.5 | 5y ago | An issue was discovered in the Linux kernel before 5.8.10. virt/kvm/kvm_main.c has a kvm_io_bus_unregister_dev memory leak upon a kmalloc failure, aka CID-f65886606c2d. | |||
| CVE-2020-24587 | medium | — | 5.5 | 5y ago | The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that all fragments of a frame are encrypted under the same key. An a… | |||
| CVE-2020-24586 | medium | — | 5.5 | 5y ago | The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that received fragments be cleared from memory after (re)connecting … | |||
| CVE-2020-24504 | medium | — | 5.5 | 5y ago | Uncontrolled resource consumption in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user to potentially enable denial of service via local acces… | |||
| CVE-2020-26144 | medium | — | 5.5 | 5y ago | Moderate: kernel security, bug fix, and enhancement update | |||
| CVE-2020-24503 | medium | — | 5.5 | 5y ago | Moderate: kernel security, bug fix, and enhancement update | |||
| CVE-2020-36386 | medium | — | 5.5 | 5y ago | An issue was discovered in the Linux kernel before 5.8.1. net/bluetooth/hci_event.c has a slab out-of-bounds read in hci_extended_inquiry_result_evt, aka CID-51c19bf3d5cf. | |||
| CVE-2020-24588 | medium | — | 5.5 | 5y ago | The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that the A-MSDU flag in the plaintext QoS header field is authentica… | |||
| CVE-2020-0427 | medium | — | 5.5 | 5y ago | In create_pinctrl of core.c, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User inter… | |||
| CVE-2020-36158 | medium | — | 5.5 | 5y ago | mwifiex_cmd_802_11_ad_hoc_start in drivers/net/wireless/marvell/mwifiex/join.c in the Linux kernel through 5.10.4 might allow remote attackers to execute arbitrary code via a long SSID value, aka CID… | |||
| CVE-2020-26143 | medium | — | 5.5 | 5y ago | Moderate: kernel security, bug fix, and enhancement update | |||
| CVE-2020-24502 | medium | — | 5.5 | 5y ago | Moderate: kernel security, bug fix, and enhancement update | |||
| CVE-2020-27777 | medium | — | 5.5 | 5y ago | A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On a locked down (usually due to Secure Boot) guest system running on top of PowerVM or KVM hypervisors … | |||
| CVE-2020-26147 | medium | — | 5.5 | 5y ago | An issue was discovered in the Linux kernel 5.8.9. The WEP, WPA, WPA2, and WPA3 implementations reassemble fragments even though some of them were sent in plaintext. This vulnerability can be abused … | |||
| CVE-2020-1946 | medium | — | 5.5 | 5y ago | Moderate: spamassassin security update | |||
| CVE-2020-17541 | medium | — | 5.5 | 5y ago | Moderate: libjpeg-turbo security and bug fix update | |||
| CVE-2020-18032 | medium | — | 5.5 | 5y ago | Moderate: graphviz security update | |||
| CVE-2020-27842 | medium | — | 5.5 | 5y ago | Moderate: openjpeg2 security update | |||
| CVE-2020-27843 | medium | — | 5.5 | 5y ago | Moderate: openjpeg2 security update | |||
| CVE-2020-15389 | medium | — | 5.5 | 5y ago | Moderate: openjpeg2 security update | |||
| CVE-2020-27845 | medium | — | 5.5 | 5y ago | Moderate: openjpeg2 security update | |||
| CVE-2020-27814 | medium | — | 5.5 | 5y ago | Moderate: openjpeg2 security update | |||
| CVE-2020-27824 | medium | — | 5.5 | 5y ago | Moderate: openjpeg2 security update | |||
| CVE-2020-27823 | medium | — | 5.5 | 5y ago | Moderate: openjpeg2 security update | |||
| CVE-2020-35523 | medium | — | 5.5 | 5y ago | Moderate: libtiff security and bug fix update | |||
| CVE-2020-35521 | medium | — | 5.5 | 5y ago | Moderate: libtiff security and bug fix update | |||
| CVE-2020-35524 | medium | — | 5.5 | 5y ago | Moderate: libtiff security and bug fix update | |||
| CVE-2020-35522 | medium | — | 5.5 | 5y ago | Moderate: libtiff security and bug fix update | |||
| CVE-2020-27828 | medium | — | 5.5 | 5y ago | Moderate: jasper security update | |||
| CVE-2020-36331 | medium | — | 5.5 | 5y ago | Moderate: libwebp security update | |||
| CVE-2020-36332 | medium | — | 5.5 | 5y ago | Moderate: libwebp security update | |||
| CVE-2020-36330 | medium | — | 5.5 | 5y ago | Moderate: libwebp security update | |||
| CVE-2020-7070 | medium | — | 5.5 | 5y ago | Moderate: php:7.4 security, bug fix, and enhancement update | |||
| CVE-2020-7068 | medium | — | 5.5 | 5y ago | Moderate: php:7.4 security, bug fix, and enhancement update | |||
| CVE-2020-7071 | medium | — | 5.5 | 5y ago | Moderate: php:7.4 security, bug fix, and enhancement update | |||
| CVE-2020-7069 | medium | — | 5.5 | 5y ago | Moderate: php:7.4 security, bug fix, and enhancement update | |||
| CVE-2020-15859 | medium | — | 5.5 | 5y ago | Moderate: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update | |||
| CVE-2020-28896 | medium | — | 5.5 | 5y ago | Moderate: mutt security, bug fix, and enhancement update | |||
| CVE-2020-27619 | medium | — | 5.5 | 5y ago | In Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on content retrieved via HTTP. | |||
| CVE-2020-8561 | medium | — | 5.5 | 5y ago | A security issue was discovered in Kubernetes where actors that control the responses of MutatingWebhookConfiguration or ValidatingWebhookConfiguration requests are able to redirect kube-apiserver re… | |||
| CVE-2020-14777 | medium | — | 5.5 | 5y ago | Moderate: mysql:8.0 security, bug fix, and enhancement update | |||
| CVE-2020-14790 | medium | — | 5.5 | 5y ago | Moderate: mysql:8.0 security, bug fix, and enhancement update | |||
| CVE-2020-14860 | medium | — | 5.5 | 5y ago | Moderate: mysql:8.0 security, bug fix, and enhancement update | |||
| CVE-2020-14837 | medium | — | 5.5 | 5y ago | Moderate: mysql:8.0 security, bug fix, and enhancement update | |||
| CVE-2020-14786 | medium | — | 5.5 | 5y ago | Moderate: mysql:8.0 security, bug fix, and enhancement update | |||
| CVE-2020-14800 | medium | — | 5.5 | 5y ago | Moderate: mysql:8.0 security, bug fix, and enhancement update | |||
| CVE-2020-14866 | medium | — | 5.5 | 5y ago | Moderate: mysql:8.0 security, bug fix, and enhancement update | |||
| CVE-2020-14791 | medium | — | 5.5 | 5y ago | Moderate: mysql:8.0 security, bug fix, and enhancement update | |||
| CVE-2020-14828 | medium | — | 5.5 | 5y ago | Moderate: mysql:8.0 security, bug fix, and enhancement update | |||
| CVE-2020-14830 | medium | — | 5.5 | 5y ago | Moderate: mysql:8.0 security, bug fix, and enhancement update | |||
| CVE-2020-14829 | medium | — | 5.5 | 5y ago | Moderate: mysql:8.0 security, bug fix, and enhancement update | |||
| CVE-2020-14836 | medium | — | 5.5 | 5y ago | Moderate: mysql:8.0 security, bug fix, and enhancement update | |||
| CVE-2020-14845 | medium | — | 5.5 | 5y ago | Moderate: mysql:8.0 security, bug fix, and enhancement update | |||
| CVE-2020-14867 | medium | — | 5.5 | 5y ago | Moderate: mysql:8.0 security, bug fix, and enhancement update | |||
| CVE-2020-14773 | medium | — | 5.5 | 5y ago | Moderate: mysql:8.0 security, bug fix, and enhancement update | |||
| CVE-2020-14839 | medium | — | 5.5 | 5y ago | Moderate: mysql:8.0 security, bug fix, and enhancement update | |||
| CVE-2020-14888 | medium | — | 5.5 | 5y ago | Moderate: mysql:8.0 security, bug fix, and enhancement update | |||
| CVE-2020-14804 | medium | — | 5.5 | 5y ago | Moderate: mysql:8.0 security, bug fix, and enhancement update | |||
| CVE-2020-14821 | medium | — | 5.5 | 5y ago | Moderate: mysql:8.0 security, bug fix, and enhancement update | |||
| CVE-2020-14844 | medium | — | 5.5 | 5y ago | Moderate: mysql:8.0 security, bug fix, and enhancement update | |||
| CVE-2020-14838 | medium | — | 5.5 | 5y ago | Moderate: mysql:8.0 security, bug fix, and enhancement update | |||
| CVE-2020-14775 | medium | — | 5.5 | 5y ago | Moderate: mysql:8.0 security, bug fix, and enhancement update | |||
| CVE-2020-14846 | medium | — | 5.5 | 5y ago | Moderate: mysql:8.0 security, bug fix, and enhancement update | |||
| CVE-2020-14848 | medium | — | 5.5 | 5y ago | Moderate: mysql:8.0 security, bug fix, and enhancement update | |||
| CVE-2020-14852 | medium | — | 5.5 | 5y ago | Moderate: mysql:8.0 security, bug fix, and enhancement update | |||
| CVE-2020-14861 | medium | — | 5.5 | 5y ago | Moderate: mysql:8.0 security, bug fix, and enhancement update | |||
| CVE-2020-14893 | medium | — | 5.5 | 5y ago | Moderate: mysql:8.0 security, bug fix, and enhancement update | |||
| CVE-2020-14769 | medium | — | 5.5 | 5y ago | Moderate: mysql:8.0 security, bug fix, and enhancement update | |||
| CVE-2020-14873 | medium | — | 5.5 | 5y ago | Moderate: mysql:8.0 security, bug fix, and enhancement update | |||
| CVE-2020-14870 | medium | — | 5.5 | 5y ago | Moderate: mysql:8.0 security, bug fix, and enhancement update | |||
| CVE-2020-14672 | medium | — | 5.5 | 5y ago | Moderate: mysql:8.0 security, bug fix, and enhancement update | |||
| CVE-2020-14785 | medium | — | 5.5 | 5y ago | Moderate: mysql:8.0 security, bug fix, and enhancement update | |||
| CVE-2020-14809 | medium | — | 5.5 | 5y ago | Moderate: mysql:8.0 security, bug fix, and enhancement update | |||
| CVE-2020-14868 | medium | — | 5.5 | 5y ago | Moderate: mysql:8.0 security, bug fix, and enhancement update | |||
| CVE-2020-14891 | medium | — | 5.5 | 5y ago | Moderate: mysql:8.0 security, bug fix, and enhancement update | |||
| CVE-2020-14814 | medium | — | 5.5 | 5y ago | Moderate: mysql:8.0 security, bug fix, and enhancement update | |||
| CVE-2020-14794 | medium | — | 5.5 | 5y ago | Moderate: mysql:8.0 security, bug fix, and enhancement update | |||
| CVE-2020-14793 | medium | — | 5.5 | 5y ago | Moderate: mysql:8.0 security, bug fix, and enhancement update | |||
| CVE-2020-25648 | medium | — | 5.5 | 5y ago | Moderate: nss and nspr security, bug fix, and enhancement update | |||
| CVE-2020-27617 | medium | — | 5.5 | 5y ago | Moderate: virt:rhel and virt-devel:rhel security and bug fix update | |||
| CVE-2020-13754 | medium | — | 5.5 | 5y ago | Moderate: virt:rhel and virt-devel:rhel security and bug fix update | |||
| CVE-2020-26264 | medium | — | 5.5 | 5y ago | Nil pointer dereference via malicious RPC message in github.com/ethereum/go-ethereum | |||
| CVE-2020-10933 | medium | — | 5.5 | 5y ago | Moderate: ruby:2.5 security, bug fix, and enhancement update | |||
| CVE-2020-27846 | medium | — | 5.5 | 5y ago | Moderate: grafana security, bug fix, and enhancement update | |||
| CVE-2020-26284 | medium | — | 5.5 | 5y ago | Hugo is a fast and Flexible Static Site Generator built in Go. Hugo depends on Go's `os/exec` for certain features, e.g. for rendering of Pandoc documents if these binaries are found in the system `%… | |||
| CVE-2020-26137 | medium | — | 5.5 | 5y ago | Moderate: python27:2.7 security and bug fix update | |||
| CVE-2020-28924 | medium | — | 5.5 | 5y ago | An issue was discovered in Rclone before 1.53.3. Due to the use of a weak random number generator, the password generator has been producing weak passwords with much less entropy than advertised. The… | |||
| CVE-2020-13956 | medium | — | 5.5 | 5y ago | Cross-site scripting in Apache HttpClient | |||
| CVE-2020-14040 | medium | — | 5.5 | 5y ago | Moderate: container-tools:rhel8 security, bug fix, and enhancement update | |||
| CVE-2020-5238 | medium | — | 5.5 | 5y ago | Moderate: pandoc security update | |||
| CVE-2020-13630 | medium | — | 5.5 | 5y ago | Moderate: mingw packages security and bug fix update | |||
| CVE-2020-13631 | medium | — | 5.5 | 5y ago | Moderate: mingw packages security and bug fix update | |||
| CVE-2020-13434 | medium | — | 5.5 | 5y ago | Moderate: mingw packages security and bug fix update | |||
| CVE-2020-13632 | medium | — | 5.5 | 5y ago | Moderate: mingw packages security and bug fix update |