CVE 2020 document archive · 14
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
1,491 documents · Identifier year 2020 · 14 / 30
- CVE-2020-15115etcd: improper validation of passwords allow an attacker to guess or brute-force user's passwords
- CVE-2020-15114etcd: gateway can include itself as an endpoint resulting in resource exhaustion and leads to DoS
- CVE-2020-15113etcd: directories created via os.MkdirAll are not checked for permissions
- CVE-2020-15103freerdp: integer overflow due to missing input sanitation in rdpegfx channel
- CVE-2020-15095npm: sensitive information exposure through logs
- CVE-2020-15049squid: Request smuggling and poisoning attack against the HTTP cache
- CVE-2020-15025ntp: Resource exhaustion via memory leak with CMAC keys
- CVE-2020-15011mailman: arbitrary content injection via the private archive login page
- CVE-2020-14954mutt: response Injection via STARTTLS in SMTP, POP3 and IMAP
- CVE-2020-14928evolution-data-server: Response injection via STARTTLS in SMTP and POP3
- CVE-2020-14893mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)
- CVE-2020-14891mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)
- CVE-2020-14888mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)
- CVE-2020-14878mysql: Server: Security: LDAP Auth unspecified vulnerability (CPU Oct 2020)
- CVE-2020-14873mysql: Server: Logging unspecified vulnerability (CPU Oct 2020)
- CVE-2020-14870mysql: Server: X Plugin unspecified vulnerability (CPU Oct 2020)
- CVE-2020-14869mysql: Server: Security: LDAP Auth unspecified vulnerability (CPU Oct 2020)
- CVE-2020-14868mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)
- CVE-2020-14867mysql: Server: DDL unspecified vulnerability (CPU Oct 2020)
- CVE-2020-14866mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)
- CVE-2020-14861mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)
- CVE-2020-14860mysql: Server: Security: Roles unspecified vulnerability (CPU Oct 2020)
- CVE-2020-14852mysql: Server: Charsets unspecified vulnerability (CPU Oct 2020)
- CVE-2020-14848mysql: InnoDB unspecified vulnerability (CPU Oct 2020)
- CVE-2020-14846mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)
- CVE-2020-14845mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)
- CVE-2020-14844mysql: Server: PS unspecified vulnerability (CPU Oct 2020)
- CVE-2020-14839mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)
- CVE-2020-14838mysql: Server: Security: Privileges unspecified vulnerability (CPU Oct 2020)
- CVE-2020-14837mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)
- CVE-2020-14836mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)
- CVE-2020-14830mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)
- CVE-2020-14829mysql: InnoDB unspecified vulnerability (CPU Oct 2020)
- CVE-2020-14828mysql: Server: DML unspecified vulnerability (CPU Oct 2020)
- CVE-2020-14827mysql: Server: Security: LDAP Auth unspecified vulnerability (CPU Oct 2020)
- CVE-2020-14821mysql: InnoDB unspecified vulnerability (CPU Oct 2020)
- CVE-2020-14814mysql: Server: DML unspecified vulnerability (CPU Oct 2020)
- CVE-2020-14812mysql: Server: Locking unspecified vulnerability (CPU Oct 2020)
- CVE-2020-14809mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)
- CVE-2020-14804mysql: Server: FTS unspecified vulnerability (CPU Oct 2020)
- CVE-2020-14803OpenJDK: Race condition in NIO Buffer boundary checks (Libraries, 8244136)
- CVE-2020-14800mysql: Server: Security: Encryption unspecified vulnerability (CPU Oct 2020)
- CVE-2020-14799mysql: Server: Security: Encryption unspecified vulnerability (CPU Oct 2020)
- CVE-2020-14798OpenJDK: Missing maximum length check in WindowsNativeDispatcher.asNativeBuffer() (Libraries, 8242695)
- CVE-2020-14797OpenJDK: Incomplete check for invalid characters in URI to path conversion (Libraries, 8242685)
- CVE-2020-14796OpenJDK: Missing permission check in path to URI conversion (Libraries, 8242680)
- CVE-2020-14794mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)
- CVE-2020-14793mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)
- CVE-2020-14792OpenJDK: Integer overflow leading to out-of-bounds access (Hotspot, 8241114)
- CVE-2020-14791mysql: InnoDB unspecified vulnerability (CPU Oct 2020)