2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-18875 | HIGH | 8.8 | 2.0% | Aug 18, 2021 | Incorrect Access Control in DotCMS versions before 5.1 allows remote attackers to gain privileges by injecting client co... |
| CVE-2020-18746 | HIGH | 7.2 | 1.8% | Aug 18, 2021 | SQL Injection in AiteCMS v1.0 allows remote attackers to execute arbitrary code via the component "aitecms/login/diy_lis... |
| CVE-2020-23341 | MEDIUM | 6.1 | 0.8% | Aug 17, 2021 | A reflected cross site scripting (XSS) vulnerability in the /header.tmpl.php component of ATutor 2.2.4 allows attackers ... |
| CVE-2020-23334 | HIGH | 7.5 | 1.3% | Aug 17, 2021 | A WRITE memory access in the AP4_NullTerminatedStringAtom::AP4_NullTerminatedStringAtom component of Bento4 version 06c3... |
| CVE-2020-23333 | HIGH | 7.5 | 1.2% | Aug 17, 2021 | A heap-based buffer overflow exists in the AP4_CttsAtom::AP4_CttsAtom component located in /Core/Ap4Utils.h of Bento4 ve... |
| CVE-2020-23332 | HIGH | 7.5 | 1.3% | Aug 17, 2021 | A heap-based buffer overflow exists in the AP4_StdcFileByteStream::ReadPartial component located in /StdC/Ap4StdCFileByt... |
| CVE-2020-23331 | HIGH | 7.5 | 1.2% | Aug 17, 2021 | An issue was discovered in Bento4 version 06c39d9. A NULL pointer dereference exists in the AP4_DescriptorListWriter::Ac... |
| CVE-2020-23330 | HIGH | 7.5 | 1.3% | Aug 17, 2021 | An issue was discovered in Bento4 version 06c39d9. A NULL pointer dereference exists in the AP4_Stz2Atom::GetSampleSize ... |
| CVE-2020-28594 | HIGH | 7.8 | 1.3% | Aug 17, 2021 | A use-after-free vulnerability exists in the _3MF_Importer::_handle_end_model() functionality of Prusa Research PrusaSli... |
| CVE-2020-18164 | CRITICAL | 9.8 | 1.1% | Aug 17, 2021 | SQL Injection vulnerability exists in tp-shop 2.x-3.x via the /index.php/home/api/shop fBill parameter. |
| CVE-2020-13589 | HIGH | 8.8 | 1.0% | Aug 17, 2021 | An exploitable SQL injection vulnerability exists in the ‘entities/fields’ page of the Rukovoditel Project Management Ap... |
| CVE-2020-13588 | HIGH | 8.8 | 1.0% | Aug 17, 2021 | An exploitable SQL injection vulnerability exists in the ‘entities/fields’ page of the Rukovoditel Project Management Ap... |
| CVE-2020-22937 | CRITICAL | 9.8 | 2.8% | Aug 17, 2021 | A remote code execution (RCE) in e/install/index.php of EmpireCMS 7.5 allows attackers to execute arbitrary PHP code via... |
| CVE-2020-29548 | HIGH | 8.1 | 1.1% | Aug 17, 2021 | An issue was discovered in SmarterTools SmarterMail through 100.0.7537. Meddler-in-the-middle attackers can pipeline com... |
| CVE-2020-15955 | MEDIUM | 5.9 | 0.9% | Aug 17, 2021 | In s/qmail through 4.0.07, an active MitM can inject arbitrary plaintext commands into a STARTTLS encrypted session betw... |
| CVE-2020-28846 | MEDIUM | 6.5 | 0.4% | Aug 17, 2021 | Cross Site Request Forgery (CSRF) vulnerability exists in SeaCMS 10.7 in admin_manager.php, which could let a malicious ... |
| CVE-2020-4992 | MEDIUM | 6.5 | 0.4% | Aug 17, 2021 | IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.16 is vulnerable to cross-site request forgery which could allow an at... |
| CVE-2020-4706 | MEDIUM | 5.4 | 0.9% | Aug 17, 2021 | IBM API Connect 5.0.0.0 through 5.0.8.10 is vulnerable to HTTP header injection, caused by improper validation of input ... |
| CVE-2020-18705 | CRITICAL | 9.8 | 2.8% | Aug 16, 2021 | XML External Entities (XXE) in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the component 'quokka... |
| CVE-2020-18704 | CRITICAL | 9.8 | 2.9% | Aug 16, 2021 | Unrestricted Upload of File with Dangerous Type in Django-Widgy v0.8.4 allows remote attackers to execute arbitrary code... |
| CVE-2020-18703 | CRITICAL | 9.8 | 2.8% | Aug 16, 2021 | XML External Entities (XXE) in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the component 'quokka... |
| CVE-2020-18702 | MEDIUM | 6.1 | 1.3% | Aug 16, 2021 | Cross Site Scripting (XSS) in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the 'Username' paramet... |
| CVE-2020-18701 | CRITICAL | 9.8 | 2.3% | Aug 16, 2021 | Incorrect Access Control in Lin-CMS-Flask v0.1.1 allows remote attackers to obtain sensitive information and/or gain pri... |
| CVE-2020-18699 | MEDIUM | 6.1 | 1.3% | Aug 16, 2021 | Cross Site Scripting (XSS) in Lin-CMS-Flask v0.1.1 allows remote attackers to execute arbitrary code by entering scripts... |
| CVE-2020-18698 | CRITICAL | 9.8 | 2.0% | Aug 16, 2021 | Improper Authentication in Lin-CMS-Flask v0.1.1 allows remote attackers to launch brute force login attempts without res... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now