2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-18658 | MEDIUM | 6.1 | 1.4% | Jun 23, 2021 | Cross Site Scriptiong (XSS) vulnerability in GetSimpleCMS <=3.3.15 via the timezone parameter to settings.php. |
| CVE-2020-18657 | MEDIUM | 6.1 | 1.4% | Jun 23, 2021 | Cross Site Scripting (XSS) vulnerability in GetSimpleCMS <= 3.3.15 in admin/changedata.php via the redirect_url paramete... |
| CVE-2020-20392 | CRITICAL | 9.8 | 1.4% | Jun 23, 2021 | SQL Injection vulnerability in imcat v5.2 via the fm[auser] parameters in coms/add_coms.php. |
| CVE-2020-20391 | MEDIUM | 5.4 | 0.6% | Jun 23, 2021 | Cross Site Scripting vulnerability in GetSimpleCMS 3.4.0a in admin/snippets.php via (1) Add Snippet and (2) Save snippet... |
| CVE-2020-20389 | MEDIUM | 4.8 | 0.6% | Jun 23, 2021 | Cross Site Scripting (XSS) vulnerability in GetSimpleCMS 3.4.0a in admin/edit.php. |
| CVE-2020-36394 | HIGH | 7 | 0.3% | Jun 22, 2021 | pam_setquota.c in the pam_setquota module before 2020-05-29 for Linux-PAM allows local attackers to set their quota on a... |
| CVE-2020-18654 | MEDIUM | 6.1 | 1.5% | Jun 22, 2021 | Cross Site Scripting (XSS) in Wuzhi CMS v4.1.0 allows remote attackers to execute arbitrary code via the "Title" paramet... |
| CVE-2020-22176 | HIGH | 7.5 | 2.1% | Jun 22, 2021 | PHPGurukul Hospital Management System in PHP v4.0 has a sensitive information disclosure vulnerability in multiple areas... |
| CVE-2020-22175 | HIGH | 7.5 | 2.2% | Jun 22, 2021 | PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\admin\betweendates-detailsre... |
| CVE-2020-22174 | HIGH | 7.5 | 2.2% | Jun 22, 2021 | PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\book-appointment.php. Remote... |
| CVE-2020-22173 | HIGH | 7.5 | 2.2% | Jun 22, 2021 | PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\edit-profile.php. Remote una... |
| CVE-2020-22172 | HIGH | 7.5 | 2.2% | Jun 22, 2021 | PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\get_doctor.php. Remote unaut... |
| CVE-2020-22171 | HIGH | 7.5 | 2.2% | Jun 22, 2021 | PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\registration.php. Remote una... |
| CVE-2020-22170 | HIGH | 7.5 | 2.2% | Jun 22, 2021 | PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\get_doctor.php. Remote unaut... |
| CVE-2020-22169 | HIGH | 7.5 | 2.2% | Jun 22, 2021 | PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\appointment-history.php. Rem... |
| CVE-2020-22168 | HIGH | 7.5 | 2.4% | Jun 22, 2021 | PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\change-emaild.php. Remote un... |
| CVE-2020-22167 | MEDIUM | 5.4 | 0.5% | Jun 22, 2021 | PHPGurukul Hospital Management System in PHP v4.0 has a Persistent Cross-Site Scripting vulnerability in \hms\admin\appo... |
| CVE-2020-22166 | HIGH | 7.5 | 2.2% | Jun 22, 2021 | PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\forgot-password.php. Remote ... |
| CVE-2020-22165 | HIGH | 7.5 | 6.3% | Jun 22, 2021 | PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\user-login.php. Remote unaut... |
| CVE-2020-22164 | HIGH | 7.5 | 2.2% | Jun 22, 2021 | PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\check_availability.php. Remo... |
| CVE-2020-18648 | HIGH | 8.8 | 0.7% | Jun 22, 2021 | Cross Site Request Forgery (CSRF) in JuQingCMS v1.0 allows remote attackers to gain local privileges via the component "... |
| CVE-2020-18647 | HIGH | 7.5 | 1.5% | Jun 22, 2021 | Information Disclosure in NoneCMS v1.3 allows remote attackers to obtain sensitive information via the component "/nonec... |
| CVE-2020-18646 | HIGH | 7.5 | 1.5% | Jun 22, 2021 | Information Disclosure in NoneCMS v1.3 allows remote attackers to obtain sensitive information via the component "/publi... |
| CVE-2020-15732 | HIGH | 7.5 | 0.5% | Jun 22, 2021 | Improper Certificate Validation vulnerability in the Online Threat Prevention module as used in Bitdefender Total Securi... |
| CVE-2020-27511 | HIGH | 7.5 | 2.5% | Jun 21, 2021 | An issue was discovered in the stripTags and unescapeHTML components in Prototype 1.7.3 where an attacker can cause a Re... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now