CVEs from 2020

3,789 normalized CVEs published or assigned in this year.

Total
3,789
critical
critical 206
high
high 563
medium
medium 744
low
low 60
% Critical
5.4%
% with KEV
3.9%
% with exploit
5.4%

Top products

  • retail_xstore_point_of_service 33
  • banking_digital_experience 30
  • primavera_unifier 29
  • retail_service_backbone 15
  • financial_services_institutional_performance_analytics 13
  • insurance_policy_administration_j2ee 11
  • communications_network_charging_and_control 10
  • enterprise_manager_base_platform 10
0
KEVHas exploit
Reset
CVE Severity CVSS Risk Flags OS Vendor Published Description
CVE-2020-13614 unknown An issue was discovered in ssl.c in Axel before 2.17.8. The TLS implementation lacks hostname verification.
CVE-2020-15863 unknown hw/net/xgmac.c in the XGMAC Ethernet controller in QEMU before 07-20-2020 has a buffer overflow. This occurs during packet transmission and affects the highbank and midway emulated machines. A guest …
CVE-2020-15469 unknown In QEMU 4.2.0, a MemoryRegionOps object may lack read/write callback methods, leading to a NULL pointer dereference.
CVE-2020-22283 unknown A buffer overflow vulnerability in the icmp6_send_response_with_addrs_and_netif() function of Free Software Foundation lwIP version git head allows attackers to access sensitive information via a cra…
CVE-2020-14394 unknown An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block (TRB) Ring. This flaw allows a privileged guest user to hang the …
CVE-2020-13362 unknown In QEMU 5.0.0 and earlier, megasas_lookup_frame in hw/scsi/megasas.c has an out-of-bounds read via a crafted reply_queue_head field from a guest OS user.
CVE-2020-13361 unknown In QEMU 5.0.0 and earlier, es1370_transfer_audio in hw/audio/es1370.c does not properly validate the frame count, which allows guest OS users to trigger an out-of-bounds access during an es1370_write…
CVE-2020-12829 unknown In QEMU through 5.0.0, an integer overflow was found in the SM501 display driver implementation. This flaw occurs in the COPY_AREA macro while handling MMIO write operations through the sm501_2d_engi…
CVE-2020-11102 unknown hw/net/tulip.c in QEMU 4.2.0 has a buffer overflow during the copying of tx/rx buffers because the frame size is not validated against the r/w data length.
CVE-2020-10717 unknown A potential DoS flaw was found in the virtio-fs shared file system daemon (virtiofsd) implementation of the QEMU version >= v5.0. Virtio-fs is meant to share a host file system directory with a guest…
CVE-2020-24379 unknown WebDAV implementation in Yaws web server versions 1.81 to 2.0.7 is vulnerable to XXE injection.
CVE-2020-12771 unknown An issue was discovered in the Linux kernel through 5.6.11. btree_gc_coalesce in drivers/md/bcache/btree.c has a deadlock if a coalescing operation fails.
CVE-2020-8832 unknown The fix for the Linux kernel in Ubuntu 18.04 LTS for CVE-2019-14615 ("The Linux kernel did not properly clear data structures on context switches for certain Intel graphics processors.") was discover…
CVE-2020-14304 unknown A memory disclosure flaw was found in the Linux kernel's ethernet drivers, in the way it read data from the EEPROM of the device. This flaw allows a local user to read uninitialized values from the k…
CVE-2020-14390 unknown A flaw was found in the Linux kernel in versions before 5.9-rc6. When changing screen size, an out-of-bounds memory write can occur leading to memory corruption or a denial of service. Due to the nat…
CVE-2020-36387 unknown An issue was discovered in the Linux kernel before 5.8.2. fs/io_uring.c has a use-after-free related to io_async_task_func and ctx reference holding, aka CID-6d816e088c35.
CVE-2020-14416 unknown In the Linux kernel before 5.4.16, a race condition in tty->disc_data handling in the slip and slcan line discipline could lead to a use-after-free, aka CID-0ace17d56824. This affects drivers/net/sli…
CVE-2020-12652 unknown The __mptctl_ioctl function in drivers/message/fusion/mptctl.c in the Linux kernel before 5.4.14 allows local users to hold an incorrect lock during the ioctl operation and trigger a race condition, …
CVE-2020-0429 unknown In l2tp_session_delete and related functions of l2tp_core.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privil…
CVE-2020-0423 unknown In binder_release_work of binder.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with no additional execution privileges …
CVE-2020-25668 unknown A flaw was found in Linux Kernel because access to the global variable fg_console is not properly synchronized leading to a use after free in con_font_op.
CVE-2020-25672 unknown A memory leak vulnerability was found in Linux kernel in llcp_sock_connect
CVE-2020-36310 unknown An issue was discovered in the Linux kernel before 5.8. arch/x86/kvm/svm/svm.c allows a set_memory_region_test infinite loop for certain nested page faults, aka CID-e72436bc3a52.
CVE-2020-29373 unknown An issue was discovered in fs/io_uring.c in the Linux kernel before 5.6. It unsafely handles the root directory during path lookups, and thus a process inside a mount namespace can escape to unintend…
CVE-2020-29374 unknown An issue was discovered in the Linux kernel before 5.7.3, related to mm/gup.c and mm/huge_memory.c. The get_user_pages (aka gup) implementation, when used for a copy-on-write page, does not properly …
CVE-2020-29534 unknown An issue was discovered in the Linux kernel before 5.9.3. io_uring takes a non-refcounted reference to the files_struct of the process that submitted a request, causing execve() to incorrectly optimi…
CVE-2020-35513 unknown A flaw incorrect umask during file or directory modification in the Linux kernel NFS (network file system) functionality was found in the way user create and delete object using NFSv4.2 or newer if b…
CVE-2020-25756 unknown A buffer overflow vulnerability exists in the mg_get_http_header function in Cesanta Mongoose 6.18 due to a lack of bounds checking. A crafted HTTP header can exploit this bug. NOTE: a committer has …
CVE-2020-10702 unknown A flaw was found in QEMU in the implementation of the Pointer Authentication (PAuth) support for ARM introduced in version 4.0 and fixed in version 5.0.0. A general failure of the signature generatio…
CVE-2020-13253 unknown sd_wp_addr in hw/sd/sd.c in QEMU 4.2.0 uses an unvalidated address, which leads to an out-of-bounds read during sdhci_write() operations. A guest OS user can crash the QEMU process.
CVE-2020-14401 unknown An issue was discovered in LibVNCServer before 0.9.13. libvncserver/scale.c has a pixel_value integer overflow.
CVE-2020-8834 unknown KVM in the Linux kernel on Power8 processors has a conflicting use of HSTATE_HOST_R1 to store r1 state in kvmppc_hv_entry plus in kvmppc_{save,restore}_tm, leading to a stack corruption. Because of t…
CVE-2020-37127 unknown 12d ago Dnsmasq vulnerability
CVE-2020-36843 unknown 1y ago Ed25519 Signature Malleability in ed25519-java Due to Missing Scalar Range Check
CVE-2020-27534 unknown 2y ago util/binfmt_misc/check.go in Builder in Docker Engine before 19.03.9 calls os.OpenFile with a potentially unsafe qemu-check temporary pathname, constructed with an empty first argument in an ioutil.T…
CVE-2020-15136 unknown 2y ago In ectd before versions 3.4.10 and 3.3.23, gateway TLS authentication is only applied to endpoints detected in DNS SRV records. When starting a gateway, TLS authentication will only be attempted on e…
CVE-2020-15114 unknown 2y ago In etcd before versions 3.3.23 and 3.4.10, the etcd gateway is a simple TCP proxy to allow for basic service discovery and access. However, it is possible to include the gateway address as an endpoin…
CVE-2020-15113 unknown 2y ago In etcd before versions 3.3.23 and 3.4.10, certain directory paths are created (etcd data directory and the directory path when provided to automatically generate self-signed certificates for TLS con…
CVE-2020-24922 unknown 3y ago xuxueli xxl-job Cross-Site Request Forgery Vulnerability
CVE-2020-21485 unknown 3y ago Alluxio Cross Site Scripting vulnerability
CVE-2020-22755 unknown 3y ago MCMS vulnerable to arbitrary code execution via crafted thumbnail
CVE-2020-20913 unknown 3y ago Ming-Soft MCMS vulnerable to SQL injection
CVE-2020-36640 unknown 4y ago bonita-connector-webservice XML External Entity vulnerability
CVE-2020-36641 unknown 4y ago aXMLRPC XML External Entity vulnerability
CVE-2020-15115 unknown 4y ago etcd before versions 3.3.23 and 3.4.10 does not perform any password length validation, which allows for very short passwords, such as those with a length of one. This may allow an attacker to guess …
CVE-2020-15106 unknown 4y ago In etcd before versions 3.3.23 and 3.4.10, a large slice causes panic in decodeRecord method. The size of a record is stored in the length field of a WAL file and no additional validation is done on …
CVE-2020-15112 unknown 4y ago In etcd before versions 3.3.23 and 3.4.10, it is possible to have an entry index greater then the number of entries in the ReadAll method in wal/wal.go. This could cause issues when WAL entries are b…
CVE-2020-23622 unknown 4y ago 4thline cling uPnP protocol issue can lead to denial of service
CVE-2020-7677 unknown 4y ago thenify before 3.3.1 made use of unsafe calls to `eval`.
CVE-2020-28191 unknown 4y ago Togglz console missing cross-site request forgery (CSRF) protection
CVE-2020-10650 unknown 4y ago A deserialization flaw was discovered in jackson-databind through 2.9.10.4. It could allow an unauthenticated user to perform code execution via ignite-jta or quartz-core: org.apache.ignite.cache.jta…
CVE-2020-28865 unknown 4y ago Insufficiently Protected Credentials in PowerJob
CVE-2020-28088 unknown 4y ago Jeecg-Boot CMS arbitrary file upload vulnerability
CVE-2020-7021 unknown 4y ago Insertion of Sensitive Information into Log File in Elasticsearch
CVE-2020-29582 unknown 4y ago Incorrect Default Permissions in JetBrains Kotlin
CVE-2020-25476 unknown 4y ago Liferay Portal Vulnerable to Cross-Site Scripting (XSS) via User Name Parameter
CVE-2020-8920 unknown 4y ago Information leak in Gerrit
CVE-2020-16971 unknown 4y ago Azure SDK for Java Security Feature Bypass Vulnerability
CVE-2020-27822 unknown 4y ago Wildfly has a memory leak vulnerability
CVE-2020-2320 unknown 4y ago Jenkins Plugin Installation Manager Tool did not verify plugin downloads
CVE-2020-2324 unknown 4y ago XXE vulnerability in Jenkins CVS Plugin
CVE-2020-2323 unknown 4y ago Missing permission checks in Jenkins Chaos Monkey Plugin
CVE-2020-2322 unknown 4y ago Missing permission checks in Jenkins Chaos Monkey Plugin
CVE-2020-2321 unknown 4y ago CSRF vulnerability in Jenkins Shelve Project Plugin
CVE-2020-2318 unknown 4y ago Passwords stored in plain text by Mail Commander Plugin for Jenkins-ci Plugin
CVE-2020-2319 unknown 4y ago Password stored in plain text by Jenkins VMware Lab Manager Slaves Plugin
CVE-2020-2313 unknown 4y ago Missing permission checks in Jenkins Azure Key Vault Plugin allow enumerating credentials IDs
CVE-2020-2308 unknown 4y ago Missing Authorization in Jenkins Kubernetes Plugin
CVE-2020-2310 unknown 4y ago Missing permission checks in Jenkins Ansible Plugin allow enumerating credentials IDs
CVE-2020-2314 unknown 4y ago Password stored in plain text by Jenkins AppSpider Plugin
CVE-2020-2312 unknown 4y ago Password written to the build log by Jenkins SQLPlus Script Runner Plugin
CVE-2020-2315 unknown 4y ago XXE vulnerability in Jenkins Visualworks Store Plugin
CVE-2020-2309 unknown 4y ago Missing authorization in Jenkins Kubernetes Plugin
CVE-2020-2316 unknown 4y ago Stored XSS vulnerability in Jenkins Static Analysis Utilities Plugin
CVE-2020-2311 unknown 4y ago Missing permission check in Jenkins AWS Global Configuration Plugin allows replacing plugin configuration
CVE-2020-2299 unknown 4y ago Improper Authentication in Jenkins Active Directory Plugin
CVE-2020-2307 unknown 4y ago Exposure of Sensitive Information to an Unauthorized Actor in Jenkins Kubernetes Plugin
CVE-2020-2301 unknown 4y ago Authentication cache in Active Directory Jenkins Plugin allows logging in with any password
CVE-2020-2300 unknown 4y ago Improper Authentication (empty password) in Jenkins Active Directory Plugin
CVE-2020-2302 unknown 4y ago Missing permission check in Jenkins Active Directory Plugin allows accessing domain health check page
CVE-2020-2303 unknown 4y ago CSRF vulnerability in Jenkins Active Directory Plugin
CVE-2020-2304 unknown 4y ago XXE vulnerability in Jenkins Subversion Plugin
CVE-2020-2305 unknown 4y ago XXE vulnerability in Jenkins Mercurial Plugin
CVE-2020-2306 unknown 4y ago Missing Authorization in Jenkins Mercurial Plugin
CVE-2020-25689 unknown 4y ago Uncontrolled Resource Consumption in WildFly
CVE-2020-10721 unknown 4y ago fabric8-maven-plugin: insecure way to construct Yaml Object leading to remote code execution
CVE-2020-2294 unknown 4y ago Missing permission checks in Jenkins Maven Cascade Release Plugin
CVE-2020-2298 unknown 4y ago XXE vulnerability in Jenkins Nerrvana Plugin
CVE-2020-2295 unknown 4y ago CSRF vulnerability in Jenkins Maven Cascade Release Plugin
CVE-2020-2297 unknown 4y ago Access token stored in plain text by Jenkins SMS Notification Plugin
CVE-2020-2291 unknown 4y ago Password stored in plain text by Jenkins couchdb-statistics Plugin
CVE-2020-2296 unknown 4y ago CSRF vulnerability in Jenkins Shared Objects Plugin
CVE-2020-2288 unknown 4y ago Incorrect default pattern in Jenkins Audit Trail Plugin
CVE-2020-2292 unknown 4y ago Stored XSS vulnerability in Jenkins Release Plugin
CVE-2020-2290 unknown 4y ago Stored XSS vulnerability in Jenkins Active Choices Plugin
CVE-2020-2289 unknown 4y ago Stored XSS vulnerability in Jenkins Active Choices Plugin
CVE-2020-2293 unknown 4y ago Arbitrary file read vulnerability in Jenkins Persona Plugin
CVE-2020-25644 unknown 4y ago Wildfly-OpenSSL memory leak flaw
CVE-2020-15840 unknown 4y ago Liferay Portal and Liferay DXP Bypass via Double Encoded URL
CVE-2020-2279 unknown 4y ago Sandbox bypass vulnerability in Jenkins Script Security Plugin