CVE 2020 document archive · 27
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
1,491 documents · Identifier year 2020 · 27 / 30
- CVE-2020-6800Mozilla: Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5
- CVE-2020-6799Mozilla: Arbitrary code execution when opening pdf links from other applications, when Firefox is configured as default pdf reader
- CVE-2020-6798Mozilla: Incorrect parsing of template tag could result in JavaScript injection
- CVE-2020-6797Mozilla: Extensions granted downloads.open permission could open arbitrary applications on Mac OSX
- CVE-2020-6796Mozilla: Missing bounds check on shared memory read in the parent process
- CVE-2020-6795Mozilla: Crash processing S/MIME messages with multiple signatures
- CVE-2020-6794Mozilla: Setting a master password post-Thunderbird 52 does not delete unencrypted previously stored passwords
- CVE-2020-6793Mozilla: Out-of-bounds read when processing certain email messages
- CVE-2020-6792Mozilla: Message ID calculation was based on uninitialized data
- CVE-2020-6750glib: Mishandling of proxy_addr field in GSocketClient may lead to proxy being ignored
- CVE-2020-6514chromium-browser: Inappropriate implementation in WebRTC
- CVE-2020-6463chromium-browser: Use after free in ANGLE
- CVE-2020-6405sqlite: Out-of-bounds read in SELECT with ON/USING clause
- CVE-2020-6096glibc: signed comparison vulnerability in the ARMv7 memcpy function
- CVE-2020-5496fontforge: heap-based buffer overflow in the Type2NotDefSplines() function in splinesave.c
- CVE-2020-5395fontforge: out-of-bounds write in SFD_GetFontMetaData function in sfd.c
- CVE-2020-5313python-pillow: out-of-bounds read in ImagingFliDecode when loading FLI images
- CVE-2020-5312python-pillow: improperly restricted operations on memory buffer in libImaging/PcxDecode.c
- CVE-2020-5311python-pillow: out-of-bounds write in expandrow in libImaging/SgiRleDecode.c
- CVE-2020-5310python-pillow: Integer overflow leading to buffer overflow in ImagingLibTiffDecode
- CVE-2020-5291bubblewrap: privilege escalation in some kernel configurations
- CVE-2020-5260git: Crafted URL containing new lines can cause credential leak
- CVE-2020-5238cmark-gfm: Exponential time to parse certain inputs could lead to DoS
- CVE-2020-5208ipmitool: Buffer overflow in read_fru_area_section function in lib/ipmi_fru.c
- CVE-2020-4788kernel: speculation on incompletely validated data on IBM Power9
- CVE-2020-4051dojo: Cross-site scripting vulnerability in the editor's LinkDialog plugin
- CVE-2020-4033freerdp: out-of-bounds read in RLEDECOMPRESS
- CVE-2020-4032freerdp: integer casting vulnerability in update_recv_secondary_order
- CVE-2020-4031freerdp: use-after-free in gdi_SelectObject
- CVE-2020-4030freerdp: out of bounds read in TrioParse
- CVE-2020-3902webkitgtk: Input validation issue leading to cross-site script attack
- CVE-2020-3901webkitgtk: Type confusion leading to arbitrary code execution
- CVE-2020-3900webkitgtk: Memory corruption triggered by a malicious web content
- CVE-2020-3899webkitgtk: Memory consumption issue leading to arbitrary code execution
- CVE-2020-3898cups: heap based buffer overflow in libcups's ppdFindOption() in ppd-mark.c
- CVE-2020-3897webkitgtk: Type confusion leading to arbitrary code execution
- CVE-2020-3895webkitgtk: Memory corruption triggered by a malicious web content
- CVE-2020-3894webkitgtk: Race condition allows reading of restricted memory
- CVE-2020-3885webkitgtk: Incorrect processing of file URLs
- CVE-2020-3868webkitgtk: Multiple memory corruption issues leading to arbitrary code execution
- CVE-2020-3867webkitgtk: Incorrect state management leading to universal cross-site scripting
- CVE-2020-3865webkitgtk: Incorrect security check for a top-level DOM object context
- CVE-2020-3864webkitgtk: Non-unique security origin for DOM object contexts
- CVE-2020-3862webkitgtk: Denial of service via incorrect memory handling
- CVE-2020-3702kernel: ath9k: information disclosure via specifically timed and handcrafted traffic
- CVE-2020-2934mysql-connector-java: allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors which could result in unauthorized update, insert or delete
- CVE-2020-2933mysql-connector-java: allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors which could result in unauthorized partial DoS
- CVE-2020-2930mysql: Server: Parser unspecified vulnerability (CPU Apr 2020)
- CVE-2020-2928mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2020)
- CVE-2020-2926mysql: Server: Group Replication GCS unspecified vulnerability (CPU Apr 2020)