2020 CVE Vulnerabilities

21,086 CVEs published in 2020.

CVE IDSeverityCVSSDescription
CVE-2020-36499MEDIUM5.4TAO Open Source Assessment Platform v3.3.0 RC02 was discovered to contain a cross-site scripting (XSS) vulnerability in ...
CVE-2020-36498MEDIUM5.4Macrob7 Macs Framework Content Management System - 1.14f contains a cross-site scripting (XSS) vulnerability in the acco...
CVE-2020-36497MEDIUM6.1DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component makehtml...
CVE-2020-36496MEDIUM6.1DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component sys_admi...
CVE-2020-36495MEDIUM6.1DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component file_man...
CVE-2020-36494MEDIUM6.1DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component mychanne...
CVE-2020-36493MEDIUM5.4DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component media_ma...
CVE-2020-36492MEDIUM5.4DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component select_m...
CVE-2020-36491MEDIUM5.4DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component tags_mai...
CVE-2020-36490MEDIUM5.4DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component file_man...
CVE-2020-36489MEDIUM5.4Dropouts Technologies LLP Air Share v1.2 was discovered to contain a cross-site scripting (XSS) vulnerability in the dev...
CVE-2020-36488MEDIUM6.5An issue in the FTP server of Sky File v2.1.0 allows attackers to perform directory traversal via `/null//` path command...
CVE-2020-36486MEDIUM6.1Swift File Transfer Mobile v1.1.2 and below was discovered to contain a cross-site scripting (XSS) vulnerability via the...
CVE-2020-36485HIGH7.8Portable Ltd Playable v9.18 was discovered to contain an arbitrary file upload vulnerability in the filename parameter o...
CVE-2020-28969HIGH7.8Aplioxio PDF ShapingUp 5.0.0.139 contains a buffer overflow which allows attackers to cause a denial of service (DoS) vi...
CVE-2020-28968MEDIUM5.4Draytek VigorAP 1000C contains a stored cross-site scripting (XSS) vulnerability in the RADIUS Setting - RADIUS Server C...
CVE-2020-28967HIGH8.8FlashGet v1.9.6 was discovered to contain a buffer overflow in the 'current path directory' function. This vulnerability...
CVE-2020-28964MEDIUM6.7Internet Download Manager 6.37.11.1 was discovered to contain a stack buffer overflow in the Search function. This vulne...
CVE-2020-28963HIGH7.8Passcovery Co. Ltd ZIP Password Recovery v3.70.69.0 was discovered to contain a buffer overflow via the decompress funct...
CVE-2020-28961MEDIUM5.4Perfex CRM v2.4.4 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the component ./clients...
CVE-2020-28960CRITICAL9.8Chichen Tech CMS v1.0 was discovered to contain multiple SQL injection vulnerabilities in the file product_list.php via ...
CVE-2020-28957MEDIUM5.4Multiple cross-site scripting (XSS) vulnerabilities in the Customer Add module of Foxlor v0.10.16 allows attackers to ex...
CVE-2020-28956MEDIUM5.4Multiple cross-site scripting (XSS) vulnerabilities in the Sales module of SugarCRM v6.5.18 allows attackers to execute ...
CVE-2020-28955MEDIUM5.4SugarCRM v6.5.18 was discovered to contain a cross-site scripting (XSS) vulnerability in the Create Employee module. Thi...
CVE-2020-23061HIGH7.5Dropouts Technologies LLP Super Backup v2.0.5 was discovered to contain an issue in the path parameter of the `list` and...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now