2020 CVE Vulnerabilities
21,069 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-22226 | CRITICAL | 9.8 | 1.1% | Nov 5, 2021 | Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a SQL injection vulnerability via the pjActionS... |
| CVE-2020-22225 | CRITICAL | 9.8 | 1.1% | Nov 5, 2021 | Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a SQL injection vulnerability via the pjActionL... |
| CVE-2020-22224 | MEDIUM | 6.1 | 0.6% | Nov 5, 2021 | Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via ... |
| CVE-2020-22223 | CRITICAL | 9.8 | 1.1% | Nov 5, 2021 | Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a SQL injection vulnerability via the pjActionL... |
| CVE-2020-22222 | MEDIUM | 6.1 | 0.7% | Nov 5, 2021 | Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via ... |
| CVE-2020-23567 | MEDIUM | 5.5 | 0.9% | Nov 5, 2021 | Irfanview v4.53 allows attackers to to cause a denial of service (DoS) via a crafted JPEG 2000 file. Related to "Integer... |
| CVE-2020-23566 | MEDIUM | 5.5 | 0.8% | Nov 5, 2021 | Irfanview v4.53 was discovered to contain an infinity loop via JPEG2000!ShowPlugInSaveOptions_W+0x1ecd8. |
| CVE-2020-23565 | HIGH | 7.8 | 1.1% | Nov 5, 2021 | Irfanview v4.53 allows attackers to execute arbitrary code via a crafted JPEG 2000 file. Related to a "Data from Faultin... |
| CVE-2020-21139 | MEDIUM | 6.5 | 0.5% | Nov 4, 2021 | EC Cloud E-Commerce System v1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to ... |
| CVE-2020-25368 | CRITICAL | 9.8 | 12.6% | Nov 4, 2021 | A command injection vulnerability was discovered in the HNAP1 protocol in D-Link DIR-823G devices with firmware V1.0.2B0... |
| CVE-2020-25366 | CRITICAL | 9.1 | 3.3% | Nov 4, 2021 | An issue in the component /cgi-bin/upload_firmware.cgi of D-Link DIR-823G REVA1 1.02B05 allows attackers to cause a deni... |
| CVE-2020-25367 | CRITICAL | 9.8 | 12.6% | Nov 4, 2021 | A command injection vulnerability was discovered in the HNAP1 protocol in D-Link DIR-823G devices with firmware V1.0.2B0... |
| CVE-2020-6931 | HIGH | 7.8 | 0.3% | Nov 3, 2021 | HP Print and Scan Doctor may potentially be vulnerable to local elevation of privilege. |
| CVE-2020-28416 | HIGH | 7.8 | 0.4% | Nov 3, 2021 | HP has identified a security vulnerability with the I.R.I.S. OCR (Optical Character Recognition) software available with... |
| CVE-2020-18263 | HIGH | 7.5 | 0.9% | Nov 3, 2021 | PHP-CMS v1.0 was discovered to contain a SQL injection vulnerability in the component search.php via the search paramete... |
| CVE-2020-18262 | CRITICAL | 9.8 | 1.0% | Nov 3, 2021 | ED01-CMS v1.0 was discovered to contain a SQL injection in the component cposts.php via the cid parameter. |
| CVE-2020-18261 | CRITICAL | 9.8 | 1.3% | Nov 3, 2021 | An arbitrary file upload vulnerability in the image upload function of ED01-CMS v1.0 allows attackers to execute arbitra... |
| CVE-2020-18259 | MEDIUM | 6.1 | 0.6% | Nov 3, 2021 | ED01-CMS v1.0 was discovered to contain a reflective cross-site scripting (XSS) vulnerability in the component sposts.ph... |
| CVE-2020-24743 | CRITICAL | 9.8 | 2.7% | Nov 3, 2021 | An issue was found in /showReports.do Zoho ManageEngine Applications Manager up to 14550, allows attackers to gain escal... |
| CVE-2020-24000 | CRITICAL | 9.8 | 2.3% | Nov 3, 2021 | SQL Injection vulnerability in eyoucms cms v1.4.7, allows attackers to execute arbitrary code and disclose sensitive inf... |
| CVE-2020-23680 | HIGH | 7.8 | 0.6% | Nov 3, 2021 | An issue was discovered in function StartPage in text2pdf.c in pdfcorner text2pdf 1.1, allows attackers to cause denial ... |
| CVE-2020-23679 | CRITICAL | 9.8 | 1.8% | Nov 3, 2021 | Buffer overflow vulnerability in Renleilei1992 Linux_Network_Project 1.0, allows attackers to execute arbitrary code, vi... |
| CVE-2020-23126 | MEDIUM | 6.1 | 0.6% | Nov 3, 2021 | Chamilo LMS version 1.11.10 contains an XSS vulnerability in the personal profile edition form, affecting the user him/h... |
| CVE-2020-23109 | HIGH | 8.1 | 1.2% | Nov 3, 2021 | Buffer overflow vulnerability in function convert_colorspace in heif_colorconversion.cc in libheif v1.6.2, allows attack... |
| CVE-2020-20982 | CRITICAL | 9.6 | 6.1% | Nov 3, 2021 | Cross Site Scripting (XSS) vulnerability in shadoweb wdja v1.5.1, allows attackers to execute arbitrary code and gain es... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now