2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-18998 | MEDIUM | 6.1 | 1.2% | Aug 27, 2021 | Cross Site Scripting (XSS) in Blog_mini v1.0 allows remote attackers to execute arbitrary code via the component '/admin... |
| CVE-2020-23226 | MEDIUM | 6.1 | 2.4% | Aug 27, 2021 | Multiple Cross Site Scripting (XSS) vulneratiblities exist in Cacti 1.2.12 in (1) reports_admin.php, (2) data_queries.ph... |
| CVE-2020-20675 | CRITICAL | 9.8 | 1.1% | Aug 26, 2021 | Nuishop v2.3 contains a SQL injection vulnerability in /goods/getGoodsListByConditions/. |
| CVE-2020-18477 | HIGH | 8.8 | 0.9% | Aug 26, 2021 | SQL Injection vulnerability in Hucart CMS 5.7.4 via the purchase enquiry field found in the Message con_content field. |
| CVE-2020-18476 | HIGH | 8.8 | 0.9% | Aug 26, 2021 | SQL Injection vulnerability in Hucart CMS 5.7.4 via the basic information field found in the avatar usd_image field. |
| CVE-2020-18475 | MEDIUM | 5.4 | 0.4% | Aug 26, 2021 | Cross Site Scripting (XSS) vulnerabilty exists in Hucart CMS 5.7.4 is via the mes_title field. The first user inserts a ... |
| CVE-2020-18470 | MEDIUM | 5.4 | 0.5% | Aug 26, 2021 | Stored cross-site scripting (XSS) vulnerability in the Name of application field found in the General Configuration page... |
| CVE-2020-18469 | MEDIUM | 5.4 | 0.5% | Aug 26, 2021 | Stored cross-site scripting (XSS) vulnerability in the Copyright Text field found in the Application page under the Conf... |
| CVE-2020-18468 | MEDIUM | 5.4 | 0.4% | Aug 26, 2021 | Cross Site Scripting (XSS) vulnerability exists in qdPM 9.1 in the Heading field found in the Login Page page under the ... |
| CVE-2020-18467 | MEDIUM | 5.4 | 0.5% | Aug 26, 2021 | Cross Site Scripting (XSS) vulnerabilty exists in BigTree-CMS 4.4.3 in the tag name field found in the Tags page under t... |
| CVE-2020-14161 | MEDIUM | 6.1 | 0.9% | Aug 26, 2021 | It is possible to inject HTML and/or JavaScript in the HTML to PDF conversion in Gotenberg through 6.2.1 via the /conver... |
| CVE-2020-14160 | HIGH | 7.5 | 1.7% | Aug 26, 2021 | An SSRF vulnerability in Gotenberg through 6.2.1 exists in the remote URL to PDF conversion, which results in a remote a... |
| CVE-2020-19822 | HIGH | 7.2 | 2.8% | Aug 26, 2021 | A remote code execution (RCE) vulnerability in template_user.php of ZZCMS version 2018 allows attackers to execute arbit... |
| CVE-2020-19821 | HIGH | 8.8 | 0.9% | Aug 26, 2021 | A SQL injection vulnerability in admin.php of DOYOCMS 2.3 allows attackers to execute arbitrary SQL commands via the ord... |
| CVE-2020-19709 | MEDIUM | 6.1 | 0.6% | Aug 26, 2021 | Insufficient filtering of the tag parameters in feehicms 0.1.3 allows attackers to execute arbitrary web or HTML via a c... |
| CVE-2020-19705 | CRITICAL | 9.8 | 1.0% | Aug 26, 2021 | thinkphp-zcms as of 20190715 allows SQL injection via index.php?m=home&c=message&a=add. |
| CVE-2020-19704 | MEDIUM | 5.4 | 0.5% | Aug 26, 2021 | A stored cross-site scripting (XSS) vulnerability via ResourceController.java in spring-boot-admin as of 20190710 allows... |
| CVE-2020-19703 | MEDIUM | 6.1 | 0.7% | Aug 26, 2021 | A cross-site scripting (XSS) vulnerability in the referer parameter of Dzzoffice 2.02 allows attackers to execute arbitr... |
| CVE-2020-19547 | MEDIUM | 6.5 | 1.2% | Aug 25, 2021 | Directory Traversal vulnerability exists in PopojiCMS 2.0.1 via the id parameter in admin.php. |
| CVE-2020-18065 | MEDIUM | 5.4 | 0.5% | Aug 25, 2021 | Cross Site Scripting (XSS) vulnerability exists in PopojiCMS 2.0.1 in admin.php?mod=menumanager--------- edit menu. |
| CVE-2020-18976 | MEDIUM | 5.5 | 0.7% | Aug 25, 2021 | Buffer Overflow in Tcpreplay v4.3.2 allows attackers to cause a Denial of Service via the 'do_checksum' function in 'che... |
| CVE-2020-18974 | LOW | 3.3 | 0.8% | Aug 25, 2021 | Buffer Overflow in Netwide Assembler (NASM) v2.15.xx allows attackers to cause a denial of service via 'crc64i' in the c... |
| CVE-2020-18972 | MEDIUM | 5.5 | 0.8% | Aug 25, 2021 | Exposure of Sensitive Information to an Unauthorized Actor in PoDoFo v0.9.6 allows attackers to obtain sensitive informa... |
| CVE-2020-18971 | MEDIUM | 5.5 | 0.7% | Aug 25, 2021 | Stack-based Buffer Overflow in PoDoFo v0.9.6 allows attackers to cause a denial of service via the component 'src/base/P... |
| CVE-2020-18917 | HIGH | 8.8 | 0.8% | Aug 24, 2021 | The plus/search.php component in DedeCMS 5.7 SP2 allows remote attackers to execute arbitrary PHP code via the typename ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now