PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2020 document archive · 20

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,491 documents · Identifier year 2020 · 20 / 30

  1. CVE-2020-12417Mozilla: Memory corruption due to missing sign-extension for ValueTags on ARM64
  2. CVE-2020-12416Mozilla: Use-after-free in WebRTC VideoBroadcaster
  3. CVE-2020-12415Mozilla: AppCache manifest poisoning due to url encoded character processing
  4. CVE-2020-12413nss: Information exposure when DH secret are reused across multiple TLS connections
  5. CVE-2020-12412firefox: address bar spoof using history navigation and blocked ports
  6. CVE-2020-12410Mozilla: Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  7. CVE-2020-12406Mozilla: JavaScript Type confusion with NativeTypes
  8. CVE-2020-12405Mozilla: Use-after-free in SharedWorkerService
  9. CVE-2020-12403nss: CHACHA20-POLY1305 decryption with undersized tag leads to out-of-bounds read
  10. CVE-2020-12402nss: Side channel vulnerabilities during RSA key generation
  11. CVE-2020-12401nss: ECDSA timing attack mitigation bypass
  12. CVE-2020-12400nss: P-384 and P-521 implementation uses a side-channel vulnerable modular inversion function
  13. CVE-2020-12399nss: Timing attack on DSA signature generation
  14. CVE-2020-12398Mozilla: Security downgrade with IMAP STARTTLS leads to information leakage
  15. CVE-2020-12397Mozilla: Sender Email Address Spoofing using encoded Unicode characters
  16. CVE-2020-12396Mozilla: Memory safety bugs fixed in Firefox 76
  17. CVE-2020-12395Mozilla: Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8
  18. CVE-2020-12394Mozilla: URL spoofing in location bar when unfocussed
  19. CVE-2020-12393Mozilla: Devtools' 'Copy as cURL' feature did not fully escape website-controlled data, potentially leading to command injection
  20. CVE-2020-12392Mozilla: Arbitrary local file access with 'Copy as cURL'
  21. CVE-2020-12391Mozilla: Content-Security-Policy bypass using object elements
  22. CVE-2020-12390Mozilla: Incorrect serialization of nsIPrincipal.origin for IPv6 addresses
  23. CVE-2020-12389Mozilla: Sandbox escape with improperly separated process types
  24. CVE-2020-12388Mozilla: Sandbox escape with improperly guarded Access Tokens
  25. CVE-2020-12387Mozilla: Use-after-free during worker shutdown
  26. CVE-2020-12364kernel: Null pointer dereference in some Intel(R) Graphics Drivers
  27. CVE-2020-12363kernel: Improper input validation in some Intel(R) Graphics Drivers
  28. CVE-2020-12362kernel: Integer overflow in Intel(R) Graphics Drivers
  29. CVE-2020-12352kernel: net: bluetooth: information leak when processing certain AMP packets
  30. CVE-2020-12351kernel: net: bluetooth: type confusion while processing AMP packets
  31. CVE-2020-12321hardware: buffer overflow in bluetooth firmware
  32. CVE-2020-12279libgit2: NTFS protections inactive when running Git in the Windows Subsystem for Linux
  33. CVE-2020-12278libgit2: files inside the .git directory may be overwritten during cloning via NTFS Alternate Data Streams
  34. CVE-2020-12268jbig2dec: heap-based buffer overflow in jbig2_image_compose in jbig2_image.c
  35. CVE-2020-12267qt: use-after-free related to QTextMarkdownImporter::insertBlock
  36. CVE-2020-12245grafana: XSS via column.title or cellLinkTooltip
  37. CVE-2020-12243openldap: denial of service via nested boolean expressions in LDAP search filters
  38. CVE-2020-12137mailman: XSS via file attachments in list archives
  39. CVE-2020-12114kernel: DoS by corrupting mountpoint reference counter
  40. CVE-2020-12108mailman: arbitrary content injection via the options login page
  41. CVE-2020-12100dovecot: Resource exhaustion via deeply nested MIME parts
  42. CVE-2020-12063postfix: an attacker may send an email from an arbitrary-looking sender via a homoglyph attack
  43. CVE-2020-12062openssh: scp can send duplicate responses to the server upon a utimes system call failure leading to overwrite of arbitrary files
  44. CVE-2020-12059ceph: specially crafted XML payload on POST requests leads to DoS by crashing RGW
  45. CVE-2020-12052grafana: XSS annotation popup vulnerability
  46. CVE-2020-12049dbus: denial of service via file descriptor leak
  47. CVE-2020-11996tomcat: specially crafted sequence of HTTP/2 requests can lead to DoS
  48. CVE-2020-11993httpd: mod_http2 concurrent pool usage
  49. CVE-2020-11988xmlgraphics-commons: SSRF due to improper input validation by the XMPParser
  50. CVE-2020-11987batik: SSRF due to improper input validation by the NodePickerPanel
CVE 2020 document archive — Page 20 | PulseLinux