2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-23686 | HIGH | 8.8 | 0.6% | Nov 2, 2021 | Cross site request forgery (CSRF) vulnerability in AyaCMS 3.1.2 allows attackers to change an administrators password or... |
| CVE-2020-23685 | CRITICAL | 9.8 | 1.6% | Nov 2, 2021 | SQL Injection vulnerability in 188Jianzhan v2.1.0, allows attackers to execute arbitrary code and gain escalated privile... |
| CVE-2020-21574 | HIGH | 7.5 | 0.9% | Nov 2, 2021 | Buffer overflow vulnerability in YotsuyaNight c-http v0.1.0, allows attackers to cause a denial of service via a long ur... |
| CVE-2020-21573 | MEDIUM | 5.5 | 0.5% | Nov 2, 2021 | An issue was discoverered in in abhijitnathwani image-processing v0.1.0, allows local attackers to cause a denial of ser... |
| CVE-2020-21572 | HIGH | 7.5 | 1.2% | Nov 2, 2021 | Buffer overflow vulnerability in function src_parser_trans_stage_1_2_3 trgil gilcc before commit 803969389ca9c06237075a7... |
| CVE-2020-20658 | HIGH | 7.5 | 1.0% | Nov 2, 2021 | Buffer overflow vulnerability in fcovatti libiec_iccp_mod v1.5, allows attackers to cause a denail of service when tryin... |
| CVE-2020-20657 | HIGH | 7.5 | 1.0% | Nov 2, 2021 | Buffer overflow vulnerability in fcovatti libiec_iccp_mod v1.5, allows attackers to cause a denial of service via an une... |
| CVE-2020-18440 | CRITICAL | 9.8 | 1.6% | Nov 2, 2021 | Buffer overflow vulnerability in framework/init.php in qinggan phpok 5.1, allows attackers to execute arbitrary code. |
| CVE-2020-18439 | CRITICAL | 9.1 | 1.0% | Nov 2, 2021 | An issue was discoverered in in function edit_save_f in framework/admin/tpl_control.php in qinggan phpok 5.1, allows att... |
| CVE-2020-18438 | HIGH | 7.5 | 1.6% | Nov 2, 2021 | Directory traversal vulnerability in qinggan phpok 5.1, allows attackers to disclose sensitive information, via the titl... |
| CVE-2020-15940 | MEDIUM | 5.4 | 0.7% | Nov 2, 2021 | An improper neutralization of input vulnerability [CWE-79] in FortiClientEMS versions 6.4.1 and below and 6.2.9 and belo... |
| CVE-2020-12814 | MEDIUM | 5.4 | 0.5% | Nov 2, 2021 | A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiAnalyzer version... |
| CVE-2020-35249 | MEDIUM | 6.1 | 1.1% | Nov 2, 2021 | Cross Site Scripting (XSS) vulnerability in ElkarBackup 1.3.3, allows attackers to execute arbitrary code via the name p... |
| CVE-2020-27406 | MEDIUM | 5.4 | 0.8% | Nov 2, 2021 | Cross Site Scripting (XSS) vulnerability in DynPG 4.9.1, allows authenticated attackers to execute arbitrary code via th... |
| CVE-2020-28702 | HIGH | 7.5 | 1.1% | Nov 1, 2021 | A SQL injection vulnerability in TopicMapper.xml of PybbsCMS v5.2.1 allows attackers to access sensitive database inform... |
| CVE-2020-36505 | MEDIUM | 6.5 | 0.6% | Nov 1, 2021 | The Delete All Comments Easily WordPress plugin through 1.3 is lacking Cross-Site Request Forgery (CSRF) checks, which c... |
| CVE-2020-36504 | MEDIUM | 6.5 | 0.6% | Nov 1, 2021 | The WP-Pro-Quiz WordPress plugin through 0.37 does not have CSRF check in place when deleting a quiz, which could allow ... |
| CVE-2020-36503 | HIGH | 8 | 1.2% | Nov 1, 2021 | The Connections Business Directory WordPress plugin before 9.7 does not validate or sanitise some connections' fields, w... |
| CVE-2020-36381 | CRITICAL | 9.8 | 1.8% | Oct 31, 2021 | An issue was discovered in the singleCrunch function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary cod... |
| CVE-2020-36380 | CRITICAL | 9.8 | 2.1% | Oct 31, 2021 | An issue was discovered in the crunch function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code via ... |
| CVE-2020-36379 | CRITICAL | 9.8 | 1.8% | Oct 31, 2021 | An issue was discovered in the remove function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code via ... |
| CVE-2020-36378 | CRITICAL | 9.8 | 1.8% | Oct 31, 2021 | An issue was discovered in the packageCmd function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code ... |
| CVE-2020-36377 | CRITICAL | 9.8 | 1.8% | Oct 31, 2021 | An issue was discovered in the dump function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code via th... |
| CVE-2020-36376 | CRITICAL | 9.8 | 1.8% | Oct 31, 2021 | An issue was discovered in the list function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code via th... |
| CVE-2020-26707 | CRITICAL | 9.8 | 1.8% | Oct 31, 2021 | An issue was discovered in the add function in Shenzhim AAPTJS 1.3.1 which allows attackers to execute arbitrary code vi... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now