2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-26705 | CRITICAL | 9.1 | 1.3% | Oct 31, 2021 | The parseXML function in Easy-XML 0.5.0 was discovered to have a XML External Entity (XXE) vulnerability which allows fo... |
| CVE-2020-25912 | CRITICAL | 9.1 | 1.4% | Oct 31, 2021 | A XML External Entity (XXE) vulnerability was discovered in symphony\lib\toolkit\class.xmlelement.php in Symphony 2.7.10... |
| CVE-2020-25911 | CRITICAL | 9.1 | 2.3% | Oct 31, 2021 | A XML External Entity (XXE) vulnerability was discovered in the modRestServiceRequest component in MODX CMS 2.7.3 which ... |
| CVE-2020-25881 | MEDIUM | 5.5 | 1.2% | Oct 29, 2021 | A vulnerability was discovered in the filename parameter in pathindex.php?r=cms-backend/attachment/delete&sub=&filename=... |
| CVE-2020-25873 | MEDIUM | 6.5 | 1.1% | Oct 29, 2021 | A directory traversal vulnerability in the component system/manager/class/web/database.php was discovered in Baijiacms V... |
| CVE-2020-25872 | MEDIUM | 4.9 | 1.1% | Oct 29, 2021 | A vulnerability exists within the FileManagerController.php function in FrogCMS 0.9.5 which allows an attacker to perfor... |
| CVE-2020-22079 | CRITICAL | 9.8 | 4.0% | Oct 29, 2021 | Stack-based buffer overflow in Tenda AC-10U AC1200 Router US_AC10UV1.0RTL_V15.03.06.48_multi_TDE01 allows remote attacke... |
| CVE-2020-23549 | HIGH | 7.8 | 0.9% | Oct 28, 2021 | IrfanView 4.54 allows attackers to cause a denial of service or possibly other unspecified impacts via a crafted .cr2 fi... |
| CVE-2020-23546 | HIGH | 7.8 | 1.0% | Oct 28, 2021 | IrfanView 4.54 allows attackers to cause a denial of service or possibly other unspecified impacts via a crafted XBM fil... |
| CVE-2020-9897 | HIGH | 7.8 | 0.9% | Oct 28, 2021 | An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 14.2 and iPadOS 14.2, ma... |
| CVE-2020-29629 | MEDIUM | 5.5 | 0.6% | Oct 28, 2021 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1. A malic... |
| CVE-2020-25422 | MEDIUM | 5.4 | 0.5% | Oct 28, 2021 | A cross site scripting (XSS) vulnerability in menuedit.php of Mara CMS 7.5 allows attackers to execute arbitrary web scr... |
| CVE-2020-10005 | MEDIUM | 6.5 | 1.3% | Oct 28, 2021 | A resource exhaustion issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1. A... |
| CVE-2020-7875 | HIGH | 8.8 | 0.6% | Oct 28, 2021 | DEXT5 Upload 5.0.0.117 and earlier versions contain a vulnerability, which could allow remote attacker to download and e... |
| CVE-2020-22312 | MEDIUM | 6.1 | 0.7% | Oct 28, 2021 | A cross-site scripting (XSS) vulnerability was discovered in the OJ/admin-tool /cal_scores.php function of HZNUOJ v1.0. |
| CVE-2020-21250 | CRITICAL | 9.8 | 1.1% | Oct 27, 2021 | CSZ CMS v1.2.4 was discovered to contain an arbitrary file upload vulnerability in the component /core/MY_Security.php. |
| CVE-2020-24932 | CRITICAL | 9.8 | 1.6% | Oct 27, 2021 | An SQL Injection vulnerability exists in Sourcecodester Complaint Management System 1.0 via the cid parameter in complai... |
| CVE-2020-7867 | HIGH | 7.8 | 0.8% | Oct 27, 2021 | An improper input validation vulnerability in Helpu solution could allow a local attacker to arbitrary file creation and... |
| CVE-2020-22864 | MEDIUM | 6.1 | 0.8% | Oct 26, 2021 | A cross site scripting (XSS) vulnerability in the Insert Video function of Froala WYSIWYG Editor 3.1.0 allows attackers ... |
| CVE-2020-5669 | MEDIUM | 5.4 | 0.6% | Oct 26, 2021 | Cross-site scripting vulnerability in Movable Type Movable Type Premium 1.37 and earlier and Movable Type Premium Advanc... |
| CVE-2020-20908 | MEDIUM | 5.4 | 0.6% | Oct 25, 2021 | Akaunting v1.3.17 was discovered to contain a stored cross-site scripting (XSS) vulnerability which allows attackers to ... |
| CVE-2020-7859 | — | — | — | Oct 25, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No... |
| CVE-2020-14264 | LOW | 3.9 | 0.2% | Oct 25, 2021 | "HCL Traveler Companion is vulnerable to an iOS weak cryptographic process vulnerability via the included MobileIron App... |
| CVE-2020-36502 | MEDIUM | 6.1 | 0.7% | Oct 22, 2021 | Swift File Transfer Mobile v1.1.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the devicenam... |
| CVE-2020-36501 | MEDIUM | 5.4 | 0.6% | Oct 22, 2021 | Multiple cross-site scripting (XSS) vulnerabilities in the Support module of SugarCRM v6.5.18 allows attackers to execut... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now