2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-36402 | HIGH | 7.8 | 1.0% | Jul 1, 2021 | Solidity 0.7.5 has a stack-use-after-return issue in smtutil::CHCSmtLib2Interface::querySolver. NOTE: c39a5e2b7a3fabbf68... |
| CVE-2020-36401 | HIGH | 7.8 | 1.0% | Jul 1, 2021 | mruby 2.1.2 has a double free in mrb_default_allocf (called from mrb_free and obj_free). |
| CVE-2020-36400 | CRITICAL | 9.8 | 1.8% | Jul 1, 2021 | ZeroMQ libzmq 4.3.3 has a heap-based buffer overflow in zmq::tcp_read, a different vulnerability than CVE-2021-20235. |
| CVE-2020-36196 | MEDIUM | 6.1 | 0.6% | Jul 1, 2021 | A stored XSS vulnerability has been reported to affect QNAP NAS running QuLog Center. If exploited, this vulnerability a... |
| CVE-2020-36194 | MEDIUM | 6.1 | 0.6% | Jul 1, 2021 | An XSS vulnerability has been reported to affect QNAP NAS running QTS and QuTS hero. If exploited, this vulnerability al... |
| CVE-2020-18066 | MEDIUM | 6.1 | 0.6% | Jun 29, 2021 | Cross Site Scripting vulnerability in ZrLog 2.1.0 via the (1) userName and (2) email parameters in post/addComment. |
| CVE-2020-21394 | HIGH | 8.8 | 1.2% | Jun 29, 2021 | SQL Injection vulnerability in Zhong Bang Technology Co., Ltd CRMEB mall system V2.60 and V3.1 via the tablename paramet... |
| CVE-2020-7870 | HIGH | 7.2 | 0.7% | Jun 29, 2021 | A memory corruption vulnerability exists when ezPDF improperly handles the parameter. This vulnerability exists due to i... |
| CVE-2020-7869 | HIGH | 8.8 | 1.6% | Jun 29, 2021 | An improper input validation vulnerability of ZOOK software (remote administration tool) could allow a remote attacker t... |
| CVE-2020-7868 | CRITICAL | 9.8 | 2.7% | Jun 29, 2021 | A remote code execution vulnerability exists in helpUS(remote administration tool) due to improper validation of paramet... |
| CVE-2020-7871 | CRITICAL | 9.8 | 0.9% | Jun 29, 2021 | A vulnerability of Helpcom could allow an unauthenticated attacker to execute arbitrary command. This vulnerability exis... |
| CVE-2020-21142 | MEDIUM | 6.1 | 0.7% | Jun 28, 2021 | Cross Site Scripting (XSS) vulnerabilty in IPFire 2.23 via the IPfire web UI in the mail.cgi. |
| CVE-2020-22609 | MEDIUM | 6.1 | 0.7% | Jun 28, 2021 | Cross Site Scripting (XSS) vulnerability in Enhancesoft osTicket before v1.12.6 via the queue-name parameter in include/... |
| CVE-2020-22608 | MEDIUM | 6.1 | 0.7% | Jun 28, 2021 | Cross Site Scripting vulnerability in Enhancesoft osTicket before v1.12.6 via the queue-name parameter to include/ajax.s... |
| CVE-2020-22607 | MEDIUM | 6.1 | 0.7% | Jun 28, 2021 | Cross Site Scripting vulnerabilty in LimeSurvey 4.1.11+200316 via the (1) name and (2) description parameters in applica... |
| CVE-2020-20640 | MEDIUM | 6.1 | 1.0% | Jun 28, 2021 | Cross Site Scripting (XSS) vulnerability in ECShop 4.0 due to security filtering issues, in the user.php file, we can us... |
| CVE-2020-23715 | HIGH | 8.6 | 1.7% | Jun 28, 2021 | Directory Traversal vulnerability in Webport CMS 1.19.10.17121 via the file parameter to file/download. |
| CVE-2020-23711 | CRITICAL | 9.8 | 1.5% | Jun 28, 2021 | SQL Injection vulnerability in NavigateCMS 2.9 via the URL encoded GET input category in navigate.php. |
| CVE-2020-23710 | MEDIUM | 5.4 | 0.6% | Jun 28, 2021 | Cross Site Scripting (XSS) vulneraiblity in LimeSurvey 4.2.5 on textbox via the Notifications & data feature. |
| CVE-2020-28200 | MEDIUM | 4.3 | 2.0% | Jun 28, 2021 | The Sieve engine in Dovecot before 2.3.15 allows Uncontrolled Resource Consumption, as demonstrated by a situation with ... |
| CVE-2020-15303 | MEDIUM | 6.5 | 0.9% | Jun 28, 2021 | Infoblox NIOS before 8.5.2 allows entity expansion during an XML upload operation, a related issue to CVE-2003-1564. |
| CVE-2020-4610 | HIGH | 7.8 | 0.2% | Jun 25, 2021 | IBM Security Secret Server (IBM Security Verify Privilege Manager 10.8.2 ) could allow a local user to execute code due ... |
| CVE-2020-4609 | HIGH | 7.8 | 0.3% | Jun 25, 2021 | IBM Security Sevret Server (IBM Security Verify Privilege Manager 10.8.2) is vulnerable to a buffer overflow, caused by ... |
| CVE-2020-26801 | MEDIUM | 5.4 | 0.7% | Jun 25, 2021 | A stored cross-site scripting (XSS) vulnerability was discovered in /Forms/device_vars_1 on TrippLite SU2200RTXL2Ua with... |
| CVE-2020-17759 | HIGH | 8.8 | 2.5% | Jun 24, 2021 | An issue was found in the Evernote client for Windows 10, 7, and 2008 in the protocol handler. This enables attackers fo... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now