2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-21081 | MEDIUM | 6.5 | 0.4% | Sep 14, 2021 | A cross-site request forgery (CSRF) in Maccms 8.0 causes administrators to add and modify articles without their knowled... |
| CVE-2020-21050 | MEDIUM | 6.5 | 1.5% | Sep 14, 2021 | Libsixel prior to v1.8.3 contains a stack buffer overflow in the function gif_process_raster at fromgif.c. |
| CVE-2020-21049 | MEDIUM | 6.5 | 1.3% | Sep 14, 2021 | An invalid read in the stb_image.h component of libsixel prior to v1.8.5 allows attackers to cause a denial of service (... |
| CVE-2020-21048 | MEDIUM | 6.5 | 1.3% | Sep 14, 2021 | An issue in the dither.c component of libsixel prior to v1.8.4 allows attackers to cause a denial of service (DOS) via a... |
| CVE-2020-20672 | HIGH | 7.8 | 0.9% | Sep 13, 2021 | An arbitrary file upload vulnerability in /admin/upload/uploadfile of KiteCMS V1.1 allows attackers to getshell via a cr... |
| CVE-2020-20671 | HIGH | 8.8 | 0.5% | Sep 13, 2021 | A cross-site request forgery (CSRF) in KiteCMS V1.1 allows attackers to arbitrarily add an administrator account. |
| CVE-2020-20670 | HIGH | 8.8 | 1.7% | Sep 13, 2021 | An arbitrary file upload vulnerability in /admin/media/upload of ZKEACMS V3.2.0 allows attackers to execute arbitrary co... |
| CVE-2020-27970 | MEDIUM | 5.3 | 1.3% | Sep 13, 2021 | Yandex Browser before 20.10.0 allows remote attackers to spoof the address bar |
| CVE-2020-27969 | HIGH | 7.3 | 0.5% | Sep 13, 2021 | Yandex Browser for Android 20.8.4 allows remote attackers to perform SOP bypass and addresss bar spoofing |
| CVE-2020-19295 | MEDIUM | 6.1 | 3.3% | Sep 9, 2021 | A reflected cross-site scripting (XSS) vulnerability in the /weibo/topic component of Jeesns 1.4.2 allows attackers to e... |
| CVE-2020-19294 | MEDIUM | 5.4 | 0.5% | Sep 9, 2021 | A stored cross-site scripting (XSS) vulnerability in the /article/comment component of Jeesns 1.4.2 allows attackers to ... |
| CVE-2020-19293 | MEDIUM | 5.4 | 0.5% | Sep 9, 2021 | A stored cross-site scripting (XSS) vulnerability in the /article/add component of Jeesns 1.4.2 allows attackers to exec... |
| CVE-2020-19292 | MEDIUM | 5.4 | 0.5% | Sep 9, 2021 | A stored cross-site scripting (XSS) vulnerability in the /question/ask component of Jeesns 1.4.2 allows attackers to exe... |
| CVE-2020-19291 | MEDIUM | 5.4 | 0.6% | Sep 9, 2021 | A stored cross-site scripting (XSS) vulnerability in the /weibo/publishdata component of Jeesns 1.4.2 allows attackers t... |
| CVE-2020-19290 | MEDIUM | 5.4 | 0.5% | Sep 9, 2021 | A stored cross-site scripting (XSS) vulnerability in the /weibo/comment component of Jeesns 1.4.2 allows attackers to ex... |
| CVE-2020-19289 | MEDIUM | 5.4 | 0.6% | Sep 9, 2021 | A stored cross-site scripting (XSS) vulnerability in the /member/picture/album component of Jeesns 1.4.2 allows attacker... |
| CVE-2020-19288 | MEDIUM | 5.4 | 0.5% | Sep 9, 2021 | A stored cross-site scripting (XSS) vulnerability in the /localhost/u component of Jeesns 1.4.2 allows attackers to exec... |
| CVE-2020-19287 | MEDIUM | 5.4 | 0.6% | Sep 9, 2021 | A stored cross-site scripting (XSS) vulnerability in the /group/post component of Jeesns 1.4.2 allows attackers to execu... |
| CVE-2020-19286 | MEDIUM | 5.4 | 0.5% | Sep 9, 2021 | A stored cross-site scripting (XSS) vulnerability in the /question/detail component of Jeesns 1.4.2 allows attackers to ... |
| CVE-2020-19285 | MEDIUM | 5.4 | 0.6% | Sep 9, 2021 | A stored cross-site scripting (XSS) vulnerability in the /group/apply component of Jeesns 1.4.2 allows attackers to exec... |
| CVE-2020-19284 | MEDIUM | 5.4 | 0.5% | Sep 9, 2021 | A stored cross-site scripting (XSS) vulnerability in the /group/comment component of Jeesns 1.4.2 allows attackers to ex... |
| CVE-2020-19283 | MEDIUM | 6.1 | 3.0% | Sep 9, 2021 | A reflected cross-site scripting (XSS) vulnerability in the /newVersion component of Jeesns 1.4.2 allows attackers to ex... |
| CVE-2020-19282 | MEDIUM | 6.1 | 3.0% | Sep 9, 2021 | A reflected cross-site scripting (XSS) vulnerability in Jeesns 1.4.2 allows attackers to execute arbitrary web scripts o... |
| CVE-2020-19281 | MEDIUM | 5.4 | 0.5% | Sep 9, 2021 | A stored cross-site scripting (XSS) vulnerability in the /manage/loginusername component of Jeesns 1.4.2 allows attacker... |
| CVE-2020-19280 | HIGH | 8.8 | 0.8% | Sep 9, 2021 | Jeesns 1.4.2 contains a cross-site request forgery (CSRF) which allows attackers to escalate privileges and perform sens... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now