2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-21014 | MEDIUM | 6.5 | 0.9% | Oct 1, 2021 | emlog v6.0.0 contains an arbitrary file deletion vulnerability in admin/plugin.php. |
| CVE-2020-21013 | HIGH | 7.2 | 1.0% | Oct 1, 2021 | emlog v6.0.0 contains a SQL injection via /admin/comment.php. |
| CVE-2020-21012 | CRITICAL | 9.8 | 3.5% | Oct 1, 2021 | Sourcecodester Hotel and Lodge Management System 2.0 is vulnerable to unauthenticated SQL injection and can allow remote... |
| CVE-2020-20799 | MEDIUM | 5.4 | 0.5% | Sep 30, 2021 | JeeCMS 1.0.1 contains a stored cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary web ... |
| CVE-2020-20797 | CRITICAL | 9.8 | 1.1% | Sep 30, 2021 | FlameCMS 3.3.5 contains a time-based blind SQL injection vulnerability in /account/register.php. |
| CVE-2020-20796 | CRITICAL | 9.8 | 1.0% | Sep 30, 2021 | FlameCMS 3.3.5 contains a SQL injection vulnerability in /master/article.php via the "Id" parameter. |
| CVE-2020-20746 | HIGH | 7.2 | 2.8% | Sep 30, 2021 | A stack-based buffer overflow in the httpd server on Tenda AC9 V15.03.06.60_EN allows remote attackers to execute arbitr... |
| CVE-2020-20665 | HIGH | 7.5 | 1.1% | Sep 30, 2021 | rudp v0.6 was discovered to contain a memory leak in the component main.c. |
| CVE-2020-20664 | MEDIUM | 6.5 | 0.8% | Sep 30, 2021 | libiec_iccp_mod v1.5 contains a segmentation violation in the component server_example1.c. |
| CVE-2020-20663 | MEDIUM | 6.5 | 0.8% | Sep 30, 2021 | libiec_iccp_mod v1.5 contains a heap-buffer-overflow in the component mms_client_connection.c. |
| CVE-2020-20662 | MEDIUM | 6.5 | 0.8% | Sep 30, 2021 | libiec_iccp_mod v1.5 contains a heap-buffer-overflow in the component mms_client_example1.c. |
| CVE-2020-18685 | CRITICAL | 9.8 | 1.3% | Sep 30, 2021 | Floodlight through 1.2 has poor input validation in checkFlow in StaticFlowEntryPusherResource.java because of unchecked... |
| CVE-2020-18684 | CRITICAL | 9.8 | 1.3% | Sep 30, 2021 | Floodlight through 1.2 has an integer overflow in checkFlow in StaticFlowEntryPusherResource.java via priority or port n... |
| CVE-2020-18683 | CRITICAL | 9.8 | 1.3% | Sep 30, 2021 | Floodlight through 1.2 has poor input validation in checkFlow in StaticFlowEntryPusherResource.java because of undefined... |
| CVE-2020-20781 | MEDIUM | 5.4 | 0.5% | Sep 29, 2021 | A stored cross-site scripting (XSS) vulnerability in /ucms/index.php?do=list_edit of UCMS 1.4.7 allows attackers to exec... |
| CVE-2020-20131 | MEDIUM | 5.4 | 0.6% | Sep 29, 2021 | LaraCMS v1.0.1 contains a stored cross-site scripting (XSS) vulnerability which allows atackers to execute arbitrary web... |
| CVE-2020-20129 | MEDIUM | 5.4 | 0.6% | Sep 29, 2021 | LaraCMS v1.0.1 contains a stored cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary we... |
| CVE-2020-20128 | HIGH | 7.5 | 0.8% | Sep 29, 2021 | LaraCMS v1.0.1 transmits sensitive information in cleartext which can be intercepted by attackers. |
| CVE-2020-12030 | CRITICAL | 10 | 1.1% | Sep 29, 2021 | There is a flaw in the code used to configure the internal gateway firewall when the gateway's VLAN feature is enabled. ... |
| CVE-2020-20125 | MEDIUM | 6.1 | 0.6% | Sep 28, 2021 | EARCLINK ESPCMS-P8 contains a cross-site scripting (XSS) vulnerability in espcms_web\espcms_load.php. |
| CVE-2020-20124 | HIGH | 8.8 | 2.8% | Sep 28, 2021 | Wuzhi CMS v4.1.0 contains a remote code execution (RCE) vulnerability in \attachment\admin\index.php. |
| CVE-2020-20122 | CRITICAL | 9.8 | 1.2% | Sep 28, 2021 | Wuzhi CMS v4.1 contains a SQL injection vulnerability in the checktitle() function in /coreframe/app/content/admin/conte... |
| CVE-2020-20120 | CRITICAL | 9.8 | 1.7% | Sep 28, 2021 | ThinkPHP v3.2.3 and below contains a SQL injection vulnerability which is triggered when the array is not passed to the ... |
| CVE-2020-20696 | MEDIUM | 5.4 | 0.5% | Sep 27, 2021 | A cross-site scripting (XSS) vulnerability in /admin/content/post of GilaCMS v1.11.4 allows attackers to execute arbitra... |
| CVE-2020-20695 | MEDIUM | 5.4 | 0.5% | Sep 27, 2021 | A stored cross-site scripting (XSS) vulnerability in GilaCMS v1.11.4 allows attackers to execute arbitrary web scripts o... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now