2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-21658 | MEDIUM | 6.5 | 0.5% | Oct 6, 2021 | A Cross-Site Request Forgery (CSRF) in WDJA CMS v1.5.2 allows attackers to arbitrarily add administrator accounts via a ... |
| CVE-2020-21656 | MEDIUM | 5.4 | 0.4% | Oct 6, 2021 | XYHCMS v3.6 contains a stored cross-site scripting (XSS) vulnerability in the component xyhai.php?s=/Link/index. |
| CVE-2020-21654 | HIGH | 7.2 | 1.1% | Oct 6, 2021 | emlog v6.0 contains a vulnerability in the component admin\template.php, which allows attackers to getshell via a crafte... |
| CVE-2020-21653 | CRITICAL | 9.1 | 1.2% | Oct 6, 2021 | Myucms v2.2.1 contains a server-side request forgery (SSRF) in the component \controller\index.php, which can be exploit... |
| CVE-2020-21652 | CRITICAL | 9.8 | 2.7% | Oct 6, 2021 | Myucms v2.2.1 contains a remote code execution (RCE) vulnerability in the component \controller\Config.php, which can be... |
| CVE-2020-21651 | CRITICAL | 9.8 | 3.2% | Oct 6, 2021 | Myucms v2.2.1 contains a remote code execution (RCE) vulnerability in the component \controller\point.php, which can be ... |
| CVE-2020-21650 | HIGH | 8.8 | 3.1% | Oct 6, 2021 | Myucms v2.2.1 contains a remote code execution (RCE) vulnerability in the component \controller\Config.php, which can be... |
| CVE-2020-21649 | HIGH | 8.1 | 0.8% | Oct 6, 2021 | Myucms v2.2.1 contains a server-side request forgery (SSRF) in the component \controller\index.php, which can be exploit... |
| CVE-2020-21648 | CRITICAL | 9.1 | 1.3% | Oct 6, 2021 | WDJA CMS v1.5.2 contains an arbitrary file deletion vulnerability in the component admin/cache/manage.php. |
| CVE-2020-19003 | MEDIUM | 5.3 | 0.8% | Oct 6, 2021 | An issue in Gate One 1.2.0 allows attackers to bypass to the verification check done by the origins list and connect to ... |
| CVE-2020-15941 | MEDIUM | 5.4 | 1.1% | Oct 6, 2021 | A path traversal vulnerability [CWE-22] in FortiClientEMS versions 6.4.1 and below; 6.2.8 and below may allow an authent... |
| CVE-2020-21506 | MEDIUM | 6.1 | 0.6% | Oct 5, 2021 | waimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component /admin.php?m=Config&a=add... |
| CVE-2020-21505 | MEDIUM | 6.1 | 0.6% | Oct 5, 2021 | waimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component /admin.php/Link/addsave. |
| CVE-2020-21504 | MEDIUM | 6.1 | 0.6% | Oct 5, 2021 | waimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component /admin.php?&m=Public&a=lo... |
| CVE-2020-21503 | HIGH | 7.5 | 1.0% | Oct 5, 2021 | waimai Super Cms 20150505 has a logic flaw allowing attackers to modify a price, before form submission, by observing da... |
| CVE-2020-21496 | MEDIUM | 6.1 | 0.7% | Oct 4, 2021 | A cross-site scripting (XSS) vulnerability in the component /admin/?setting-base.htm of Xiuno BBS 4.0.4 allows attackers... |
| CVE-2020-21495 | MEDIUM | 6.1 | 0.7% | Oct 4, 2021 | A cross-site scripting (XSS) vulnerability in the component /admin/?setting-base.htm of Xiuno BBS 4.0.4 allows attackers... |
| CVE-2020-21494 | MEDIUM | 6.1 | 0.7% | Oct 4, 2021 | A cross-site scripting (XSS) vulnerability in the component install\install.sql of Xiuno BBS 4.0.4 allows attackers to e... |
| CVE-2020-21493 | MEDIUM | 5.3 | 1.0% | Oct 4, 2021 | An issue in the component route\user.php of Xiuno BBS v4.0.4 allows attackers to enumerate usernames. |
| CVE-2020-21434 | MEDIUM | 5.4 | 0.5% | Oct 4, 2021 | Maccms 10 contains a cross-site scripting (XSS) vulnerability in the Editing function under the Member module. This vuln... |
| CVE-2020-21431 | MEDIUM | 6.5 | 0.9% | Oct 4, 2021 | HongCMS v3.0 contains an arbitrary file read and write vulnerability in the component /admin/index.php/template/edit. |
| CVE-2020-21387 | MEDIUM | 6.1 | 0.6% | Oct 4, 2021 | A cross-site scripting (XSS) vulnerability in the parameter type_en of Maccms 10 allows attackers to obtain the administ... |
| CVE-2020-21386 | HIGH | 8.8 | 0.4% | Oct 4, 2021 | A Cross-Site Request Forgery (CSRF) in the component admin.php/admin/type/info.html of Maccms 10 allows attackers to gai... |
| CVE-2020-28119 | MEDIUM | 6.1 | 0.7% | Oct 4, 2021 | Cross site scripting vulnerability in 53KF < 2.0.0.2 that allows for arbitrary code to be executed via crafted HTML stat... |
| CVE-2020-21228 | MEDIUM | 6.1 | 1.0% | Oct 1, 2021 | JIZHICMS 1.5.1 contains a cross-site scripting (XSS) vulnerability in the component /user/release.html, which allows att... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now