2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-20693 | HIGH | 8.8 | 0.7% | Sep 27, 2021 | A Cross-Site Request Forgery (CSRF) in GilaCMS v1.11.4 allows authenticated attackers to arbitrarily add administrator a... |
| CVE-2020-20692 | HIGH | 7.2 | 1.2% | Sep 27, 2021 | GilaCMS v1.11.4 was discovered to contain a SQL injection vulnerability via the $_GET parameter in /src/core/controllers... |
| CVE-2020-20691 | MEDIUM | 6.5 | 0.9% | Sep 27, 2021 | An issue in Monstra CMS v3.0.4 allows attackers to execute arbitrary web scripts or HTML via bypassing the file extensio... |
| CVE-2020-24930 | HIGH | 8.1 | 1.1% | Sep 27, 2021 | Beijing Wuzhi Internet Technology Co., Ltd. Wuzhi CMS 4.0.1 is an open source content management system. The five finger... |
| CVE-2020-20514 | HIGH | 8.1 | 0.4% | Sep 24, 2021 | A Cross-Site Request Forgery (CSRF) in Maccms v10 via admin.php/admin/admin/del/ids/<id>.html allows authenticated attac... |
| CVE-2020-20508 | MEDIUM | 6.1 | 0.7% | Sep 24, 2021 | Shopkit v2.7 contains a reflective cross-site scripting (XSS) vulnerability in the /account/register component, which al... |
| CVE-2020-19951 | HIGH | 8.8 | 0.5% | Sep 23, 2021 | A cross-site request forgery (CSRF) in /controller/pay.class.php of YzmCMS v5.5 allows attackers to access sensitive com... |
| CVE-2020-19950 | MEDIUM | 4.8 | 0.6% | Sep 23, 2021 | A cross-site scripting (XSS) vulnerability in the /banner/add.html component of YzmCMS v5.3 allows attackers to execute ... |
| CVE-2020-19949 | MEDIUM | 4.8 | 0.6% | Sep 23, 2021 | A cross-site scripting (XSS) vulnerability in the /link/add.html component of YzmCMS v5.3 allows attackers to execute ar... |
| CVE-2020-24327 | MEDIUM | 5.3 | 1.0% | Sep 23, 2021 | Server Side Request Forgery (SSRF) vulnerability exists in Discourse 2.3.2 and 2.6 via the email function. When writing ... |
| CVE-2020-4941 | MEDIUM | 4.3 | 0.7% | Sep 23, 2021 | IBM Edge 4.2 could reveal sensitive version information about the server from error pages that could aid an attacker in ... |
| CVE-2020-4809 | LOW | 3.3 | 0.2% | Sep 23, 2021 | IBM Edge 4.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 1896... |
| CVE-2020-4805 | LOW | 3.3 | 0.2% | Sep 23, 2021 | IBM Edge 4.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 1895... |
| CVE-2020-4803 | LOW | 3.3 | 0.2% | Sep 23, 2021 | IBM Edge 4.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 1895... |
| CVE-2020-4690 | CRITICAL | 9.8 | 1.1% | Sep 23, 2021 | IBM Security Guardium 11.3 contains hard-coded credentials, such as a password or cryptographic key, which it uses for i... |
| CVE-2020-23481 | MEDIUM | 5.4 | 0.5% | Sep 22, 2021 | CMS Made Simple 2.2.14 was discovered to contain a cross-site scripting (XSS) vulnerability which allows attackers to ex... |
| CVE-2020-23478 | HIGH | 7.5 | 1.2% | Sep 22, 2021 | Leo Editor v6.2.1 was discovered to contain a regular expression denial of service (ReDoS) vulnerability in the componen... |
| CVE-2020-23469 | HIGH | 7.5 | 1.2% | Sep 22, 2021 | gmate v0.12+bionic contains a regular expression denial of service (ReDoS) vulnerability in the gedit3 plugin. |
| CVE-2020-23273 | MEDIUM | 5.5 | 0.6% | Sep 22, 2021 | Heap-buffer overflow in the randomize_iparp function in edit_packet.c. of Tcpreplay v4.3.2 allows attackers to cause a d... |
| CVE-2020-23269 | MEDIUM | 5.5 | 0.6% | Sep 22, 2021 | An issue was discovered in gpac 0.8.0. The stbl_GetSampleSize function in isomedia/stbl_read.c has a heap-based buffer o... |
| CVE-2020-23267 | HIGH | 7.1 | 0.7% | Sep 22, 2021 | An issue was discovered in gpac 0.8.0. The gf_hinter_track_process function in isom_hinter_track_process.c has a heap-ba... |
| CVE-2020-23266 | MEDIUM | 5.5 | 0.6% | Sep 22, 2021 | An issue was discovered in gpac 0.8.0. The OD_ReadUTF8String function in odf_code.c has a heap-based buffer overflow whi... |
| CVE-2020-35541 | — | — | — | Sep 21, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2020-35540 | — | — | — | Sep 21, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2020-19554 | MEDIUM | 6.1 | 0.6% | Sep 21, 2021 | Cross Site Scripting (XSS) vulnerability exists in ManageEngine OPManager <=12.5.174 when the API key contains an XML-ba... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now