2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-22212 | CRITICAL | 9.8 | 1.4% | Jun 16, 2021 | SQL Injection in 74cms 3.2.0 via the id parameter to wap/wap-company-show.php. |
| CVE-2020-22211 | CRITICAL | 9.8 | 7.9% | Jun 16, 2021 | SQL Injection in 74cms 3.2.0 via the key parameter to plus/ajax_street.php. |
| CVE-2020-22210 | CRITICAL | 9.8 | 8.6% | Jun 16, 2021 | SQL Injection in 74cms 3.2.0 via the x parameter to ajax_officebuilding.php. |
| CVE-2020-22209 | CRITICAL | 9.8 | 8.6% | Jun 16, 2021 | SQL Injection in 74cms 3.2.0 via the query parameter to plus/ajax_common.php. |
| CVE-2020-22208 | CRITICAL | 9.8 | 9.7% | Jun 16, 2021 | SQL Injection in 74cms 3.2.0 via the x parameter to plus/ajax_street.php. |
| CVE-2020-22206 | CRITICAL | 9.8 | 1.4% | Jun 16, 2021 | SQL Injection in ECShop 3.0 via the aid parameter to admin/affiliate_ck.php. |
| CVE-2020-22205 | CRITICAL | 9.8 | 1.4% | Jun 16, 2021 | SQL Injection in ECShop 3.0 via the id parameter to admin/shophelp.php. |
| CVE-2020-22204 | CRITICAL | 9.8 | 1.4% | Jun 16, 2021 | SQL Injection in ECShop 2.7.6 via the goods_number parameter to flow.php. . |
| CVE-2020-22203 | CRITICAL | 9.8 | 1.1% | Jun 16, 2021 | SQL Injection in phpCMS 2008 sp4 via the genre parameter to yp/job.php. |
| CVE-2020-22201 | HIGH | 8.8 | 1.5% | Jun 16, 2021 | phpCMS 2008 sp4 allowas remote malicious users to execute arbitrary php commands via the pagesize parameter to yp/produc... |
| CVE-2020-22200 | MEDIUM | 5.3 | 1.4% | Jun 16, 2021 | Directory Traversal vulnerability in phpCMS 9.1.13 via the q parameter to public_get_suggest_keyword. |
| CVE-2020-22199 | CRITICAL | 9.8 | 1.2% | Jun 16, 2021 | SQL Injection vulnerability in phpCMS 2007 SP6 build 0805 via the digg_mod parameter to digg_add.php. |
| CVE-2020-35762 | LOW | 2.7 | 1.0% | Jun 16, 2021 | bloofoxCMS 0.5.2.1 is infected with Path traversal in the 'fileurl' parameter that allows attackers to read local files. |
| CVE-2020-35761 | MEDIUM | 5.4 | 0.8% | Jun 16, 2021 | bloofoxCMS 0.5.2.1 is infected with XSS that allows remote attackers to execute arbitrary JS/HTML Code. |
| CVE-2020-35760 | CRITICAL | 9.8 | 1.9% | Jun 16, 2021 | bloofoxCMS 0.5.2.1 is infected with Unrestricted File Upload that allows attackers to upload malicious files (ex: php fi... |
| CVE-2020-35759 | MEDIUM | 6.5 | 0.8% | Jun 16, 2021 | bloofoxCMS 0.5.2.1 is infected with a CSRF Attack that leads to an attacker editing any file content (Locally/Remotely). |
| CVE-2020-27339 | MEDIUM | 6.7 | 0.3% | Jun 16, 2021 | In the kernel in Insyde InsydeH2O 5.x, certain SMM drivers did not correctly validate the CommBuffer and CommBufferSize ... |
| CVE-2020-24939 | HIGH | 7.5 | 1.7% | Jun 16, 2021 | Prototype pollution in Stampit supermixer 1.0.3 allows an attacker to modify the prototype of a base object which can va... |
| CVE-2020-22198 | CRITICAL | 9.8 | 1.7% | Jun 16, 2021 | SQL Injection vulnerability in DedeCMS 5.7 via mdescription parameter to member/ajax_membergroup.php. |
| CVE-2020-20444 | HIGH | 7.2 | 1.1% | Jun 16, 2021 | Jact OpenClinic 0.8.20160412 allows the attacker to read server files after login to the the admin account by an infecte... |
| CVE-2020-8300 | MEDIUM | 6.5 | 3.0% | Jun 16, 2021 | Citrix ADC and Citrix/NetScaler Gateway before 13.0-82.41, 12.1-62.23, 11.1-65.20 and Citrix ADC 12.1-FIPS before 12.1-5... |
| CVE-2020-8299 | MEDIUM | 6.5 | 0.4% | Jun 16, 2021 | Citrix ADC and Citrix/NetScaler Gateway 13.0 before 13.0-76.29, 12.1-61.18, 11.1-65.20, Citrix ADC 12.1-FIPS before 12.1... |
| CVE-2020-9493 | CRITICAL | 9.8 | 4.6% | Jun 16, 2021 | A deserialization flaw was found in Apache Chainsaw versions prior to 2.1.0 which could lead to malicious code execution... |
| CVE-2020-7864 | CRITICAL | 9.8 | 1.0% | Jun 15, 2021 | Parameter manipulation can bypass authentication to cause file upload and execution. This will execute the remote code. ... |
| CVE-2020-5000 | MEDIUM | 5.4 | 0.5% | Jun 15, 2021 | IBM Financial Transaction Manager 3.2.0 through 3.2.8 is vulnerable to cross-site scripting. This vulnerability allows u... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now