2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-23060 | HIGH | 7.1 | 0.4% | Oct 22, 2021 | Internet Download Manager 6.37.11.1 was discovered to contain a stack buffer overflow in the Export/Import function. Thi... |
| CVE-2020-23058 | MEDIUM | 4.6 | 0.4% | Oct 22, 2021 | An issue in the authentication mechanism in Nong Ge File Explorer v1.4 unauthenticated allows to access sensitive data. |
| CVE-2020-23055 | MEDIUM | 5.4 | 0.6% | Oct 22, 2021 | ANCOM WLAN Controller (Wireless Series & Hotspot) WLC-1000 & WLC-4006 was discovered to contain multiple cross-site scri... |
| CVE-2020-23054 | MEDIUM | 6.1 | 0.7% | Oct 22, 2021 | A cross-site scripting (XSS) vulnerability in NSK User Agent String Switcher Service v0.3.5 allows attackers to execute ... |
| CVE-2020-23052 | MEDIUM | 5.4 | 0.6% | Oct 22, 2021 | Catalyst IT Ltd Mahara CMS v19.10.2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the... |
| CVE-2020-23051 | MEDIUM | 6.1 | 0.7% | Oct 22, 2021 | Phpgurukul User Registration & User Management System v2.0 was discovered to contain multiple stored cross-site scriptin... |
| CVE-2020-23050 | HIGH | 8 | 1.1% | Oct 22, 2021 | TAO Open Source Assessment Platform v3.3.0 RC02 was discovered to contain a HTML injection vulnerability in the userFirs... |
| CVE-2020-23049 | MEDIUM | 5.4 | 0.6% | Oct 22, 2021 | Fork CMS Content Management System v5.8.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the `D... |
| CVE-2020-23048 | MEDIUM | 6.1 | 0.7% | Oct 22, 2021 | SeedDMS Content Management System v6.0.7 contains a persistent cross-site scripting (XSS) vulnerability in the component... |
| CVE-2020-23047 | MEDIUM | 6.1 | 0.7% | Oct 22, 2021 | Macrob7 Macs Framework Content Management System - 1.14f was discovered to contain a cross-site scripting (XSS) vulnerab... |
| CVE-2020-23046 | MEDIUM | 6.1 | 0.8% | Oct 22, 2021 | DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component tpl.php ... |
| CVE-2020-23045 | HIGH | 7.2 | 1.1% | Oct 22, 2021 | Macrob7 Macs Framework Content Management System - 1.14f was discovered to contain a SQL injection vulnerability via the... |
| CVE-2020-23044 | MEDIUM | 5.4 | 0.6% | Oct 22, 2021 | DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component file_pic... |
| CVE-2020-23043 | HIGH | 8.8 | 1.7% | Oct 22, 2021 | Tran Tu Air Sender v1.0.2 was discovered to contain an arbitrary file upload vulnerability in the upload module. This vu... |
| CVE-2020-23042 | MEDIUM | 6.1 | 0.7% | Oct 22, 2021 | Dropouts Technologies LLP Super Backup v2.0.5 was discovered to contain a cross-site scripting (XSS) vulnerability in th... |
| CVE-2020-23041 | MEDIUM | 6.1 | 0.7% | Oct 22, 2021 | Dropouts Technologies LLP Air Share v1.2 was discovered to contain a cross-site scripting (XSS) vulnerability in the pat... |
| CVE-2020-23040 | HIGH | 7.5 | 1.7% | Oct 22, 2021 | Sky File v2.1.0 contains a directory traversal vulnerability in the FTP server which allows attackers to access sensitiv... |
| CVE-2020-23039 | MEDIUM | 5.4 | 0.6% | Oct 22, 2021 | Folder Lock v3.4.5 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Create Folder func... |
| CVE-2020-23038 | HIGH | 7.5 | 2.9% | Oct 22, 2021 | Swift File Transfer Mobile v1.1.2 and below was discovered to contain an information disclosure vulnerability in the pat... |
| CVE-2020-23037 | CRITICAL | 9.8 | 1.4% | Oct 22, 2021 | Portable Ltd Playable v9.18 contains a code injection vulnerability in the filename parameter, which allows attackers to... |
| CVE-2020-23036 | MEDIUM | 5.9 | 1.1% | Oct 22, 2021 | MEDIA NAVI Inc SMACom v1.2 was discovered to contain an insecure session validation vulnerability in the session handlin... |
| CVE-2020-14263 | LOW | 3.9 | 0.2% | Oct 21, 2021 | "HCL Traveler Companion is vulnerable to an iOS weak cryptographic process vulnerability via the included MobileIron App... |
| CVE-2020-27304 | CRITICAL | 9.8 | 3.1% | Oct 21, 2021 | The CivetWeb web library does not validate uploaded filepaths when running on an OS other than Windows, when using the b... |
| CVE-2020-11303 | HIGH | 8.6 | 0.7% | Oct 20, 2021 | Accepting AMSDU frames with mismatched destination and source address can lead to information disclosure in Snapdragon A... |
| CVE-2020-12141 | CRITICAL | 9.1 | 1.5% | Oct 19, 2021 | An out-of-bounds read in the SNMP stack in Contiki-NG 4.4 and earlier allows an attacker to cause a denial of service an... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now