2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-19268 | MEDIUM | 5.7 | 0.3% | Sep 9, 2021 | A cross-site request forgery (CSRF) in index.php/Dswjcms/User/tfAdd of Dswjcms 1.6.4 allows authenticated attackers to a... |
| CVE-2020-19267 | CRITICAL | 9.8 | 1.6% | Sep 9, 2021 | An issue in index.php/Dswjcms/Basis/resources of Dswjcms 1.6.4 allows attackers to execute arbitrary code via uploading ... |
| CVE-2020-19266 | MEDIUM | 6.1 | 0.6% | Sep 9, 2021 | A stored cross-site scripting (XSS) vulnerability in the index.php/Dswjcms/Site/articleList component of Dswjcms 1.6.4 a... |
| CVE-2020-19265 | MEDIUM | 6.1 | 0.6% | Sep 9, 2021 | A stored cross-site scripting (XSS) vulnerability in the index.php/Dswjcms/Basis/links component of Dswjcms 1.6.4 allows... |
| CVE-2020-19264 | MEDIUM | 6.5 | 0.5% | Sep 9, 2021 | A cross-site request forgery (CSRF) in MipCMS v5.0.1 allows attackers to arbitrarily add users via index.php?s=/user/Api... |
| CVE-2020-19263 | HIGH | 8.8 | 0.6% | Sep 9, 2021 | A cross-site request forgery (CSRF) in MipCMS v5.0.1 allows attackers to arbitrarily escalate user privileges to adminis... |
| CVE-2020-19515 | MEDIUM | 6.1 | 2.0% | Sep 9, 2021 | qdPM V9.1 is vulnerable to Cross Site Scripting (XSS) via qdPM\install\modules\database_config.php. |
| CVE-2020-19144 | MEDIUM | 6.5 | 1.5% | Sep 9, 2021 | Buffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the 'in _TIFFmemcpy' funtion in the... |
| CVE-2020-19143 | MEDIUM | 6.5 | 1.4% | Sep 9, 2021 | Buffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the "TIFFVGetField" funtion in the ... |
| CVE-2020-7874 | HIGH | 8.8 | 0.6% | Sep 9, 2021 | Download of code without integrity check vulnerability in NEXACRO14 Runtime ActiveX control of tobesoft Co., Ltd allows ... |
| CVE-2020-7873 | CRITICAL | 9.8 | 0.6% | Sep 9, 2021 | Download of code without integrity check vulnerability in ActiveX control of Younglimwon Co., Ltd allows the attacker to... |
| CVE-2020-26300 | CRITICAL | 9.8 | 1.4% | Sep 9, 2021 | systeminformation is an npm package that provides system and OS information library for node.js. In systeminformation be... |
| CVE-2020-26772 | CRITICAL | 9.8 | 4.0% | Sep 8, 2021 | Command Injection in PPGo_Jobs v2.8.0 allows remote attackers to execute arbitrary code via the 'AjaxRun()' function. |
| CVE-2020-19138 | CRITICAL | 9.8 | 5.6% | Sep 8, 2021 | Unrestricted Upload of File with Dangerous Type in DotCMS v5.2.3 and earlier allow remote attackers to execute arbitrary... |
| CVE-2020-19137 | HIGH | 7.5 | 0.9% | Sep 8, 2021 | Incorrect Access Control in Autumn v1.0.4 and earlier allows remote attackers to obtain clear-text login credentials via... |
| CVE-2020-24672 | CRITICAL | 9.8 | 0.5% | Sep 8, 2021 | A vulnerability in Base Software for SoftControl allows an attacker to insert and run arbitrary code in a computer runni... |
| CVE-2020-27942 | HIGH | 7.8 | 1.2% | Sep 8, 2021 | A logic issue was addressed with improved state management. This issue is fixed in Security Update 2021-002 Catalina, Se... |
| CVE-2020-27940 | MEDIUM | 4.3 | 0.7% | Sep 8, 2021 | This issue was addressed with improved file handling. This issue is fixed in Apple TV app for Fire OS 6.1.0.6A142:7.1.0.... |
| CVE-2020-11301 | HIGH | 7.5 | 11.1% | Sep 8, 2021 | Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information disclosur... |
| CVE-2020-11264 | CRITICAL | 9.8 | 13.2% | Sep 8, 2021 | Improper authentication of Non-EAPOL/WAPI plaintext frames during four-way handshake can lead to arbitrary network packe... |
| CVE-2020-29012 | MEDIUM | 5.3 | 0.5% | Sep 8, 2021 | An insufficient session expiration vulnerability in FortiSandbox versions 3.2.1 and below may allow an attacker to reuse... |
| CVE-2020-19855 | MEDIUM | 6.1 | 0.6% | Sep 8, 2021 | phpwcms v1.9 contains a cross-site scripting (XSS) vulnerability in /image_zoom.php. |
| CVE-2020-19853 | CRITICAL | 9.8 | 1.1% | Sep 8, 2021 | BlueCMS v1.6 contains a SQL injection vulnerability via /ad_js.php. |
| CVE-2020-19769 | HIGH | 7.5 | 0.5% | Sep 7, 2021 | A lack of target address verification in the BurnMe() function of Rob The Bank 1.0 allows attackers to steal tokens from... |
| CVE-2020-19768 | HIGH | 7.5 | 0.5% | Sep 7, 2021 | A lack of target address verification in the selfdestructs() function of ICOVO 1.0 allows attackers to steal tokens from... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now