2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-22535 | MEDIUM | 6.5 | 0.8% | Jul 9, 2021 | Incorrect Access Control vulnerability in PbootCMS 2.0.6 via the list parameter in the update function in upgradecontrol... |
| CVE-2020-23580 | CRITICAL | 9.8 | 2.5% | Jul 8, 2021 | Remote Code Execution vulnerability in PbootCMS 2.0.8 in the message board. |
| CVE-2020-20363 | MEDIUM | 4.8 | 0.8% | Jul 8, 2021 | Crossi Site Scripting (XSS) vulnerability in PbootCMS 2.0.3 in admin.php. |
| CVE-2020-18741 | MEDIUM | 5.3 | 0.9% | Jul 8, 2021 | Improper Authorization in ThinkSAAS v2.7 allows remote attackers to modify the description of any user's photo via the "... |
| CVE-2020-20586 | MEDIUM | 4.5 | 0.5% | Jul 8, 2021 | A cross site request forgery (CSRF) vulnerability in the /xyhai.php?s=/Auth/editUser URI of XYHCMS V3.6 allows attackers... |
| CVE-2020-20585 | HIGH | 7.5 | 1.8% | Jul 8, 2021 | A blind SQL injection in /admin/?n=logs&c=index&a=dode of Metinfo 7.0 beta allows attackers to access sensitive database... |
| CVE-2020-20584 | MEDIUM | 6.1 | 1.1% | Jul 8, 2021 | A cross site scripting vulnerability in baigo CMS v4.0-beta-1 allows attackers to execute arbitrary web scripts or HTML ... |
| CVE-2020-20583 | HIGH | 7.5 | 1.3% | Jul 8, 2021 | A SQL injection vulnerability in /question.php of LJCMS Version v4.3.R60321 allows attackers to obtain sensitive databas... |
| CVE-2020-20582 | HIGH | 7.5 | 1.1% | Jul 8, 2021 | A server side request forgery (SSRF) vulnerability in /ApiAdminDomainSettings.php of MipCMS 5.0.1 allows attackers to ac... |
| CVE-2020-28598 | HIGH | 7.8 | 1.3% | Jul 8, 2021 | An out-of-bounds write vulnerability exists in the Admesh stl_fix_normal_directions() functionality of Prusa Research Pr... |
| CVE-2020-20217 | MEDIUM | 6.5 | 2.0% | Jul 8, 2021 | Mikrotik RouterOs before 6.47 (stable tree) suffers from an uncontrolled resource consumption vulnerability in the /nova... |
| CVE-2020-23702 | MEDIUM | 4.8 | 0.6% | Jul 7, 2021 | Cross Site Scripting (XSS) vulnerability in PHP-Fusion 9.03.60 via 'New Shout' in /infusions/shoutbox_panel/shoutbox_adm... |
| CVE-2020-23700 | MEDIUM | 4.8 | 0.6% | Jul 7, 2021 | Cross Site Scripting (XSS) vulnerability in LavaLite-CMS 5.8.0 via the Menu Links feature. |
| CVE-2020-25925 | MEDIUM | 6.1 | 1.0% | Jul 7, 2021 | Cross Site Scripting (XSS) in Webmail Calender in IceWarp WebClient 10.3.5 allows remote attackers to inject arbitrary w... |
| CVE-2020-25868 | HIGH | 7.5 | 1.3% | Jul 7, 2021 | Pexip Infinity 22.x through 24.x before 24.2 has Improper Input Validation for call setup. An unauthenticated remote att... |
| CVE-2020-24149 | HIGH | 7.5 | 1.7% | Jul 7, 2021 | Server-side request forgery (SSRF) in the Podcast Importer SecondLine (podcast-importer-secondline) plugin 1.1.4 for Wor... |
| CVE-2020-24148 | CRITICAL | 9.1 | 14.7% | Jul 7, 2021 | Server-side request forgery (SSRF) in the Import XML and RSS Feeds (import-xml-feed) plugin 2.0.1 for WordPress via the ... |
| CVE-2020-24147 | CRITICAL | 9.1 | 1.6% | Jul 7, 2021 | Server-side request forgery (SSR) vulnerability in the WP Smart Import (wp-smart-import) plugin 1.0.0 for WordPress via ... |
| CVE-2020-24146 | HIGH | 8.1 | 1.7% | Jul 7, 2021 | Directory traversal in the CM Download Manager (aka cm-download-manager) plugin 2.7.0 for WordPress allows authorized us... |
| CVE-2020-24145 | MEDIUM | 6.1 | 1.0% | Jul 7, 2021 | Cross Site Scripting (XSS) vulnerability in the CM Download Manager (aka cm-download-manager) plugin 2.7.0 for WordPress... |
| CVE-2020-24144 | HIGH | 8.6 | 2.0% | Jul 7, 2021 | Directory traversal in the Media File Organizer (aka media-file-organizer) plugin 1.0.1 for WordPress lets an attacker g... |
| CVE-2020-24143 | HIGH | 7.5 | 2.0% | Jul 7, 2021 | Directory traversal in the Video Downloader for TikTok (aka downloader-tiktok) plugin 1.3 for WordPress lets an attacker... |
| CVE-2020-24142 | CRITICAL | 9.8 | 1.7% | Jul 7, 2021 | Server-side request forgery in the Video Downloader for TikTok (aka downloader-tiktok) plugin 1.3 for WordPress lets an ... |
| CVE-2020-24141 | MEDIUM | 5.3 | 0.9% | Jul 7, 2021 | Server-side request forgery in the WP-DownloadManager plugin 1.68.4 for WordPress lets an attacker send crafted requests... |
| CVE-2020-24038 | MEDIUM | 6.5 | 1.1% | Jul 7, 2021 | myFax version 229 logs sensitive information in the export log module which allows any user to access critical informati... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now