2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-18982 | MEDIUM | 5.4 | 0.6% | Jul 12, 2021 | Cross Sie Scripting (XSS) vulnerability in Halo 0.4.3 via CommentAuthorUrl. |
| CVE-2020-4938 | HIGH | 8.8 | 0.4% | Jul 12, 2021 | IBM MQ Appliance 9.1 and 9.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malici... |
| CVE-2020-19204 | MEDIUM | 5.4 | 0.7% | Jul 12, 2021 | An authenticated Stored Cross-Site Scriptiong (XSS) vulnerability exists in Lightning Wire Labs IPFire 2.21 (x86_64) - C... |
| CVE-2020-19203 | MEDIUM | 5.4 | 1.1% | Jul 12, 2021 | An authenticated Cross-Site Scripting (XSS) vulnerability was found in widgets/widgets/wake_on_lan_widget.php, a compone... |
| CVE-2020-19201 | MEDIUM | 5.4 | 3.5% | Jul 12, 2021 | A Stored Cross-Site Scripting (XSS) vulnerability was found in status_filter_reload.php, a page in the pfSense software ... |
| CVE-2020-18980 | CRITICAL | 9.8 | 1.5% | Jul 12, 2021 | Remote Code Executon vulnerability in Halo 0.4.3 via the remoteAddr and themeName parameters. |
| CVE-2020-18979 | MEDIUM | 6.1 | 0.7% | Jul 12, 2021 | Cross Siste Scripting (XSS) vulnerablity in Halo 0.4.3 via the X-forwarded-for Header parameter. |
| CVE-2020-7872 | HIGH | 7.8 | 0.9% | Jul 12, 2021 | DaviewIndy v8.98.7.0 and earlier versions have a Integer overflow vulnerability, triggered when the user opens a malform... |
| CVE-2020-21133 | CRITICAL | 9.8 | 1.7% | Jul 12, 2021 | SQL Injection vulnerability in Metinfo 7.0.0 beta in member/getpassword.php?lang=cn&a=dovalid. |
| CVE-2020-21132 | CRITICAL | 9.8 | 1.7% | Jul 12, 2021 | SQL Injection vulnerability in Metinfo 7.0.0beta in index.php. |
| CVE-2020-21131 | HIGH | 7.2 | 1.2% | Jul 12, 2021 | SQL Injection vulnerability in MetInfo 7.0.0beta via admin/?n=language&c=language_web&a=doAddLanguage. |
| CVE-2020-35987 | MEDIUM | 5.4 | 1.3% | Jul 9, 2021 | A stored cross site scripting (XSS) vulnerability in the 'Entities List' feature of Rukovoditel 2.7.2 allows authenticat... |
| CVE-2020-35986 | MEDIUM | 5.4 | 1.3% | Jul 9, 2021 | A stored cross site scripting (XSS) vulnerability in the 'Users Access Groups' feature of Rukovoditel 2.7.2 allows authe... |
| CVE-2020-35985 | MEDIUM | 5.4 | 1.3% | Jul 9, 2021 | A stored cross site scripting (XSS) vulnerability in the 'Global Lists" feature of Rukovoditel 2.7.2 allows authenticate... |
| CVE-2020-35984 | MEDIUM | 5.4 | 1.3% | Jul 9, 2021 | A stored cross site scripting (XSS) vulnerability in the 'Users Alerts' feature of Rukovoditel 2.7.2 allows authenticate... |
| CVE-2020-25879 | MEDIUM | 5.4 | 0.5% | Jul 9, 2021 | A stored cross site scripting (XSS) vulnerability in the 'Manage Users' feature of Codoforum v5.0.2 allows authenticated... |
| CVE-2020-25878 | MEDIUM | 4.8 | 0.5% | Jul 9, 2021 | A stored cross site scripting (XSS) vulnerability in the 'Admin-Tools' feature of BlackCat CMS 1.3.6 allows authenticate... |
| CVE-2020-25877 | MEDIUM | 5.4 | 0.5% | Jul 9, 2021 | A stored cross site scripting (XSS) vulnerability in the 'Add Page' feature of BlackCat CMS 1.3.6 allows authenticated a... |
| CVE-2020-25876 | MEDIUM | 5.4 | 0.5% | Jul 9, 2021 | A stored cross site scripting (XSS) vulnerability in the 'Pages' feature of Codoforum v5.0.2 allows authenticated attack... |
| CVE-2020-25875 | MEDIUM | 5.4 | 0.5% | Jul 9, 2021 | A stored cross site scripting (XSS) vulnerability in the 'Smileys' feature of Codoforum v5.0.2 allows authenticated atta... |
| CVE-2020-25394 | MEDIUM | 5.4 | 0.4% | Jul 9, 2021 | A stored cross site scripting (XSS) vulnerability in moziloCMS 2.0 allows authenticated attackers to execute arbitrary w... |
| CVE-2020-25392 | MEDIUM | 5.4 | 0.4% | Jul 9, 2021 | A cross site scripting (XSS) vulnerability in CSZ CMS 1.2.9 allows attackers to execute arbitrary web scripts or HTML vi... |
| CVE-2020-25391 | MEDIUM | 5.4 | 0.4% | Jul 9, 2021 | A cross site scripting vulnerability in CSZ CMS 1.2.9 allows attackers to execute arbitrary web scripts or HTML via a cr... |
| CVE-2020-29014 | MEDIUM | 5.3 | 0.5% | Jul 9, 2021 | A concurrent execution using shared resource with improper synchronization ('race condition') in the command shell of Fo... |
| CVE-2020-21333 | MEDIUM | 5.4 | 0.5% | Jul 9, 2021 | Cross Site Scripting (XSS) vulnerability in PublicCMS 4.0 to get an admin cookie when the Administrator reviews submit c... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now