2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-21139 | MEDIUM | 6.5 | 0.5% | Nov 4, 2021 | EC Cloud E-Commerce System v1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to ... |
| CVE-2020-25368 | CRITICAL | 9.8 | 12.6% | Nov 4, 2021 | A command injection vulnerability was discovered in the HNAP1 protocol in D-Link DIR-823G devices with firmware V1.0.2B0... |
| CVE-2020-25366 | CRITICAL | 9.1 | 3.3% | Nov 4, 2021 | An issue in the component /cgi-bin/upload_firmware.cgi of D-Link DIR-823G REVA1 1.02B05 allows attackers to cause a deni... |
| CVE-2020-25367 | CRITICAL | 9.8 | 12.6% | Nov 4, 2021 | A command injection vulnerability was discovered in the HNAP1 protocol in D-Link DIR-823G devices with firmware V1.0.2B0... |
| CVE-2020-6931 | HIGH | 7.8 | 0.3% | Nov 3, 2021 | HP Print and Scan Doctor may potentially be vulnerable to local elevation of privilege. |
| CVE-2020-28416 | HIGH | 7.8 | 0.4% | Nov 3, 2021 | HP has identified a security vulnerability with the I.R.I.S. OCR (Optical Character Recognition) software available with... |
| CVE-2020-18263 | HIGH | 7.5 | 0.9% | Nov 3, 2021 | PHP-CMS v1.0 was discovered to contain a SQL injection vulnerability in the component search.php via the search paramete... |
| CVE-2020-18262 | CRITICAL | 9.8 | 1.0% | Nov 3, 2021 | ED01-CMS v1.0 was discovered to contain a SQL injection in the component cposts.php via the cid parameter. |
| CVE-2020-18261 | CRITICAL | 9.8 | 1.3% | Nov 3, 2021 | An arbitrary file upload vulnerability in the image upload function of ED01-CMS v1.0 allows attackers to execute arbitra... |
| CVE-2020-18259 | MEDIUM | 6.1 | 0.6% | Nov 3, 2021 | ED01-CMS v1.0 was discovered to contain a reflective cross-site scripting (XSS) vulnerability in the component sposts.ph... |
| CVE-2020-24743 | CRITICAL | 9.8 | 2.7% | Nov 3, 2021 | An issue was found in /showReports.do Zoho ManageEngine Applications Manager up to 14550, allows attackers to gain escal... |
| CVE-2020-24000 | CRITICAL | 9.8 | 2.3% | Nov 3, 2021 | SQL Injection vulnerability in eyoucms cms v1.4.7, allows attackers to execute arbitrary code and disclose sensitive inf... |
| CVE-2020-23680 | HIGH | 7.8 | 0.6% | Nov 3, 2021 | An issue was discovered in function StartPage in text2pdf.c in pdfcorner text2pdf 1.1, allows attackers to cause denial ... |
| CVE-2020-23679 | CRITICAL | 9.8 | 1.8% | Nov 3, 2021 | Buffer overflow vulnerability in Renleilei1992 Linux_Network_Project 1.0, allows attackers to execute arbitrary code, vi... |
| CVE-2020-23126 | MEDIUM | 6.1 | 0.6% | Nov 3, 2021 | Chamilo LMS version 1.11.10 contains an XSS vulnerability in the personal profile edition form, affecting the user him/h... |
| CVE-2020-23109 | HIGH | 8.1 | 1.2% | Nov 3, 2021 | Buffer overflow vulnerability in function convert_colorspace in heif_colorconversion.cc in libheif v1.6.2, allows attack... |
| CVE-2020-20982 | CRITICAL | 9.6 | 6.1% | Nov 3, 2021 | Cross Site Scripting (XSS) vulnerability in shadoweb wdja v1.5.1, allows attackers to execute arbitrary code and gain es... |
| CVE-2020-5955 | CRITICAL | 9.8 | 1.4% | Nov 3, 2021 | An issue was discovered in Int15MicrocodeSmm in Insyde InsydeH2O before 2021-10-14 on Intel client chipsets. A caller ma... |
| CVE-2020-27820 | MEDIUM | 4.7 | 0.5% | Nov 3, 2021 | A vulnerability was found in Linux kernel, where a use-after-frees in nouveau's postclose() handler could happen if remo... |
| CVE-2020-6492 | CRITICAL | 9.6 | 0.7% | Nov 2, 2021 | Use after free in ANGLE in Google Chrome prior to 83.0.4103.97 allowed a remote attacker to potentially perform a sandbo... |
| CVE-2020-16048 | MEDIUM | 6.5 | 0.6% | Nov 2, 2021 | Out of bounds read in ANGLE allowed a remote attacker to obtain sensitive data via a crafted HTML page. |
| CVE-2020-15935 | MEDIUM | 4.3 | 0.5% | Nov 2, 2021 | A cleartext storage of sensitive information in GUI in FortiADC versions 5.4.3 and below, 6.0.0 and below may allow a re... |
| CVE-2020-23754 | CRITICAL | 9.6 | 1.6% | Nov 2, 2021 | Cross Site Scripting (XSS) vulnerability in infusions/member_poll_panel/poll_admin.php in PHP-Fusion 9.03.50, allows att... |
| CVE-2020-23719 | CRITICAL | 9.6 | 1.3% | Nov 2, 2021 | Cross site scripting (XSS) vulnerability in application/controllers/AdminController.php in xujinliang zibbs 1.0, allows ... |
| CVE-2020-23718 | CRITICAL | 9.6 | 1.3% | Nov 2, 2021 | Cross site scripting (XSS) vulnerability in xujinliang zibbs 1.0, allows attackers to execute arbitrary code via the rou... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now