2020 CVE Vulnerabilities
21,081 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-18282 | MEDIUM | 6.1 | 0.5% | May 8, 2023 | Cross-site scripting (XSS) vulnerability in NoneCms 1.3.0 allows remote attackers to inject arbitrary web script or HTML... |
| CVE-2020-18132 | MEDIUM | 4.8 | 0.4% | May 8, 2023 | Cross Site Scripting (XSS) vulnerability in MIPCMS 3.6.0 allows attackers to execute arbitrary code via the category nam... |
| CVE-2020-4914 | MEDIUM | 4.2 | 0.1% | May 5, 2023 | IBM Cloud Pak System Suite 2.3.3.0 through 2.3.3.5 does not invalidate session after logout which could allow a local us... |
| CVE-2020-23647 | MEDIUM | 6.1 | 0.5% | Apr 28, 2023 | Cross Site Scripting (XSS) vulnerability in BoxBilling 4.19, 4.19.1, 4.20, and 4.21 allows remote attackers to run arbit... |
| CVE-2020-21643 | MEDIUM | 6.1 | 0.4% | Apr 28, 2023 | Cross Site Scripting (XSS) vulnerability in HongCMS 3.0 allows attackers to run arbitrary code via the callback paramete... |
| CVE-2020-4729 | MEDIUM | 5.3 | 0.6% | Apr 28, 2023 | IBM Counter Fraud Management for Safer Payments 5.7.0.00 through 5.7.0.10, 6.0.0.00 through 6.0.0.07, 6.1.0.00 through 6... |
| CVE-2020-28163 | MEDIUM | 6.5 | 0.8% | Apr 16, 2023 | libdwarf before 20201201 allows a dwarf_print_lines.c NULL pointer dereference and application crash via a DWARF5 line-t... |
| CVE-2020-27545 | MEDIUM | 6.5 | 0.8% | Apr 16, 2023 | libdwarf before 20201017 has a one-byte out-of-bounds read because of an invalid pointer dereference via an invalid line... |
| CVE-2020-24736 | MEDIUM | 5.5 | 0.3% | Apr 11, 2023 | Buffer Overflow vulnerability found in SQLite3 v.3.27.1 and before allows a local attacker to cause a denial of service ... |
| CVE-2020-11935 | MEDIUM | 5.5 | 0.2% | Apr 7, 2023 | It was discovered that aufs improperly managed inode reference counts in the vfsub_dentry_open() method. A local attacke... |
| CVE-2020-23327 | MEDIUM | 6.1 | 0.4% | Apr 4, 2023 | Cross Site Scripting vulnerability found in ZblogCN ZblogPHP v.1.0 allows a local attacker to execute arbitrary code via... |
| CVE-2020-22533 | MEDIUM | 6.1 | 0.5% | Apr 4, 2023 | Cross Site Scripting vulnerability found in Zentao allows a remote attacker to execute arbitrary code via the lang param... |
| CVE-2020-20522 | MEDIUM | 6.1 | 0.6% | Apr 4, 2023 | Cross Site Scripting vulnerability found in KiteCMS v.1.1 allows a remote attacker to execute arbitrary code via the reg... |
| CVE-2020-20521 | MEDIUM | 6.1 | 0.6% | Apr 4, 2023 | Cross Site Scripting vulnerability found in KiteCMS v.1.1 allows a remote attacker to execute arbitrary code via the com... |
| CVE-2020-19850 | MEDIUM | 6.5 | 1.1% | Apr 4, 2023 | An issue found in Directus API v.2.2.0 allows a remote attacker to cause a denial of service via a great amount of HTTP ... |
| CVE-2020-19699 | MEDIUM | 6.1 | 0.6% | Apr 4, 2023 | Cross Site Scripting vulnerability found in KOHGYLW Kiftd v.1.0.18 allows a remote attacker to execute arbitrary code vi... |
| CVE-2020-19698 | MEDIUM | 6.1 | 0.7% | Apr 4, 2023 | Cross Site Scripting vulnerability found in Pandao Editor.md v.1.5.0 allows a remote attacker to execute arbitrary code ... |
| CVE-2020-19697 | MEDIUM | 6.1 | 0.7% | Apr 4, 2023 | Cross Site Scripting vulnerability found in Pandao Editor.md v.1.5.0 allows a remote attacker to execute arbitrary code ... |
| CVE-2020-19277 | MEDIUM | 5.4 | 0.5% | Apr 4, 2023 | Cross Site Scripting vulnerability found in Phachon mm-wiki v.0.1.2 allows a remote attacker to execute arbitrary code v... |
| CVE-2020-36692 | MEDIUM | 5.4 | 0.6% | Apr 4, 2023 | A reflected XSS via POST vulnerability in report scheduler of Sophos Web Appliance versions older than 4.3.10.4 allows e... |
| CVE-2020-36691 | MEDIUM | 5.5 | 0.3% | Mar 24, 2023 | An issue was discovered in the Linux kernel before 5.8. lib/nlattr.c allows attackers to cause a denial of service (unbo... |
| CVE-2020-24857 | MEDIUM | 6.1 | 0.4% | Mar 23, 2023 | Cross Site Scripting vulnerabilty found in IXPManager v.5.6.0 allows attackers to excute arbitrary code via the looking ... |
| CVE-2020-36670 | MEDIUM | 6.3 | 0.6% | Mar 7, 2023 | The NEX-Forms. plugin for WordPress is vulnerable to unauthorized disclosure and modification of data in versions up to,... |
| CVE-2020-36668 | MEDIUM | 4.3 | 0.6% | Mar 7, 2023 | The JetBackup – WP Backup, Migrate & Restore plugin for WordPress is vulnerable to sensitive information disclosure in v... |
| CVE-2020-36667 | MEDIUM | 5.4 | 0.5% | Mar 7, 2023 | The JetBackup – WP Backup, Migrate & Restore plugin for WordPress is vulnerable to unauthorized back-up location changes... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now