2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-20699 | MEDIUM | 4.8 | 0.5% | Jul 30, 2021 | A cross site scripting (XSS) vulnerability in S-CMS PHP v3.0 allows attackers to execute arbitrary web scripts or HTML v... |
| CVE-2020-20698 | HIGH | 7.2 | 1.9% | Jul 30, 2021 | A remote code execution (RCE) vulnerability in /1.com.php of S-CMS PHP v3.0 allows attackers to getshell via modificatio... |
| CVE-2020-19118 | MEDIUM | 5.4 | 0.5% | Jul 30, 2021 | Cross Site Scripting (XSS) vulnerabiity in YzmCMS 5.2 via the site_code parameter in admin/index/init.html. |
| CVE-2020-18175 | CRITICAL | 9.8 | 1.5% | Jul 30, 2021 | SQL Injection vulnerability in Metinfo 6.1.3 via a dosafety_emailadd action in basic.php. |
| CVE-2020-18158 | MEDIUM | 5.4 | 0.6% | Jul 30, 2021 | Cross Site Scripting (XSS) vulnerability in HuCart 5.7.4 via nickname in index.php. |
| CVE-2020-18157 | HIGH | 8.8 | 0.7% | Jul 30, 2021 | Cross Site Request Forgery (CSRF) vulnerability in MetInfo 6.1.3 via a doaddsave action in admin/index.php. |
| CVE-2020-18013 | CRITICAL | 9.8 | 1.4% | Jul 30, 2021 | SQL Injextion vulnerability exists in Whatsns 4.0 via the ip parameter in index.php?admin_banned/add.htm. |
| CVE-2020-16839 | HIGH | 7.5 | 1.2% | Jul 30, 2021 | On Crestron DM-NVX-DIR, DM-NVX-DIR80, and DM-NVX-ENT devices before the DM-XIO/1-0-3-802 patch, the password can be chan... |
| CVE-2020-15948 | MEDIUM | 6.1 | 0.9% | Jul 30, 2021 | eGain Chat 15.5.5 allows XSS via the Name (aka full_name) field. |
| CVE-2020-14999 | HIGH | 7.5 | 1.1% | Jul 30, 2021 | A logic bug in system monitoring driver of Acronis Agent after 12.5.21540 and before 12.5.23094 allowed to bypass Window... |
| CVE-2020-11511 | HIGH | 8.1 | 3.2% | Jul 30, 2021 | The LearnPress plugin before 3.2.6.9 for WordPress allows remote attackers to escalate the privileges of any user to LP ... |
| CVE-2020-10590 | HIGH | 7.5 | 1.3% | Jul 30, 2021 | Replicated Classic 2.x versions have an improperly secured API that exposes sensitive data from the Replicated Admin Con... |
| CVE-2020-5353 | HIGH | 8.8 | 1.0% | Jul 29, 2021 | The Dell Isilon OneFS versions 8.2.2 and earlier and Dell EMC PowerScale OneFS version 9.0.0 default configuration for N... |
| CVE-2020-5329 | MEDIUM | 6.1 | 0.9% | Jul 29, 2021 | Dell EMC Avamar Server contains an open redirect vulnerability. A remote unauthenticated attacker may exploit this vulne... |
| CVE-2020-36239 | CRITICAL | 9.8 | 48.9% | Jul 29, 2021 | Jira Data Center, Jira Core Data Center, Jira Software Data Center from version 6.3.0 before 8.5.16, from 8.6.0 before 8... |
| CVE-2020-5004 | MEDIUM | 5.4 | 0.5% | Jul 28, 2021 | IBM Jazz Foundation products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary ... |
| CVE-2020-4974 | MEDIUM | 6.3 | 0.6% | Jul 28, 2021 | IBM Jazz Foundation products are vulnerable to server side request forgery (SSRF). This may allow an authenticated attac... |
| CVE-2020-5351 | HIGH | 7.5 | 1.1% | Jul 28, 2021 | Dell EMC Data Protection Advisor versions 6.4, 6.5 and 18.1 contain an undocumented account with limited privileges that... |
| CVE-2020-5341 | CRITICAL | 9.8 | 4.3% | Jul 28, 2021 | Deserialization of Untrusted Data Vulnerability Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2, 19.1 and 19.2... |
| CVE-2020-26180 | HIGH | 8.8 | 0.6% | Jul 28, 2021 | Dell EMC Isilon OneFS supported versions 8.1 and later and Dell EMC PowerScale OneFS supported version 9.0.0 contain an ... |
| CVE-2020-18430 | HIGH | 7.5 | 1.3% | Jul 26, 2021 | tinyexr 0.9.5 was discovered to contain an array index error in the tinyexr::DecodeEXRImage component, which can lead to... |
| CVE-2020-18428 | HIGH | 7.5 | 1.2% | Jul 26, 2021 | tinyexr commit 0.9.5 was discovered to contain an array index error in the tinyexr::SaveEXR component, which can lead to... |
| CVE-2020-23243 | MEDIUM | 4.8 | 0.5% | Jul 26, 2021 | Cross Site Scripting (XSS) vulnerability in NavigateCMS NavigateCMS 2.9 via the name="wrong_path_redirect" feature. |
| CVE-2020-23242 | MEDIUM | 4.8 | 0.5% | Jul 26, 2021 | Cross Site Scripting (XSS) vulnerability in NavigateCMS 2.9 when performing a Create or Edit via the Tools feature. |
| CVE-2020-23241 | MEDIUM | 4.8 | 0.5% | Jul 26, 2021 | Cross Site Scripting (XSS) vulnerability in CMS Made Simple 2.2.14 in "Extra" via 'News > Article" feature. |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now