2020 CVE Vulnerabilities
21,081 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-36136 | HIGH | 7.5 | 0.5% | Aug 11, 2023 | SQL Injection vulnerability in cskaza cszcms version 1.2.9, allows attackers to gain sensitive information via pm_sendma... |
| CVE-2020-36037 | HIGH | 8.8 | 0.8% | Aug 11, 2023 | An issue was disocvered in wuzhicms version 4.1.0, allows remote attackers to execte arbitrary code via the setting para... |
| CVE-2020-35141 | HIGH | 7.5 | 0.7% | Aug 11, 2023 | An issue was discovered in OFPQueueGetConfigReply in parser.py in Faucet SDN Ryu version 4.34, allows remote attackers t... |
| CVE-2020-35139 | HIGH | 7.5 | 0.7% | Aug 11, 2023 | An issue was discovered in OFPBundleCtrlMsg in parser.py in Faucet SDN Ryu version 4.34, allows remote attackers to caus... |
| CVE-2020-28848 | HIGH | 8.8 | 0.9% | Aug 11, 2023 | CSV Injection vulnerability in ChurchCRM version 4.2.0, allows remote attackers to execute arbitrary code via crafted CS... |
| CVE-2020-28840 | HIGH | 7.8 | 0.3% | Aug 11, 2023 | Buffer Overflow vulnerability in jpgfile.c in Matthias-Wandel jhead version 3.04, allows local attackers to execute arbi... |
| CVE-2020-24950 | HIGH | 8.8 | 1.1% | Aug 11, 2023 | SQL Injection vulnerability in file Base_module_model.php in Daylight Studio FUEL-CMS version 1.4.9, allows remote attac... |
| CVE-2020-24922 | HIGH | 8.8 | 0.4% | Aug 11, 2023 | Cross Site Request Forgery (CSRF) vulnerability in xxl-job-admin/user/add in xuxueli xxl-job version 2.2.0, allows remot... |
| CVE-2020-24222 | HIGH | 7.8 | 0.3% | Aug 11, 2023 | Buffer Overflow vulnerability in jfif_decode() function in rockcarry ffjpeg through version 1.0.0, allows local attacker... |
| CVE-2020-23595 | HIGH | 8.8 | 0.4% | Aug 11, 2023 | Cross Site Request Forgery (CSRF) vulnerability in yzmcms version 5.6, allows remote attackers to escalate privileges an... |
| CVE-2020-23564 | HIGH | 7.2 | 0.8% | Aug 5, 2023 | File Upload vulnerability in SEMCMS 3.9 allows remote attackers to run arbitrary code via SEMCMS_Upfile.php. |
| CVE-2020-26064 | HIGH | 8.1 | 0.7% | Aug 4, 2023 | A vulnerability in the web UI of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain rea... |
| CVE-2020-10962 | HIGH | 7.8 | 0.2% | Aug 1, 2023 | In PowerShell App Deployment Toolkit (aka PSAppDeployToolkit) through 3.8.0, an incorrect access control vulnerability i... |
| CVE-2020-22623 | HIGH | 7.5 | 1.1% | Jul 27, 2023 | Directory traversal vulnerability in Jinfornet Jreport 15.6 allows unauthenticated attackers to gain sensitive informati... |
| CVE-2020-22159 | HIGH | 8.8 | 0.8% | Jul 18, 2023 | EVERTZ devices 3080IPX exe-guest-v1.2-r26125, 7801FC 1.3 Build 27, and 7890IXG V494 are vulnerable to Arbitrary File Upl... |
| CVE-2020-23909 | HIGH | 7.1 | 0.3% | Jul 18, 2023 | Heap-based buffer over-read in function png_convert_4 in file pngex.cc in AdvanceMAME through 2.1. |
| CVE-2020-36695 | HIGH | 7.8 | 0.1% | Jul 18, 2023 | Incorrect Default Permissions vulnerability in Hitachi Device Manager on Linux (Device Manager Server component), Hitach... |
| CVE-2020-20021 | HIGH | 7.5 | 1.3% | Jul 12, 2023 | An issue discovered in MikroTik Router v6.46.3 and earlier allows attacker to cause denial of service via misconfigurati... |
| CVE-2020-21862 | HIGH | 8.1 | 0.8% | Jul 6, 2023 | Directory traversal vulnerability in DuxCMS 2.1 allows attackers to delete arbitrary files via /admin/AdminBackup/del. |
| CVE-2020-21861 | HIGH | 8.8 | 0.6% | Jul 6, 2023 | File upload vulnerability in DuxCMS 2.1 allows attackers to execute arbitrary php code via duxcms/AdminUpload/upload. |
| CVE-2020-36745 | HIGH | 8.8 | 0.4% | Jul 1, 2023 | The WP Project Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including... |
| CVE-2020-36740 | HIGH | 8.8 | 0.4% | Jul 1, 2023 | The Radio Buttons for Taxonomies plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and... |
| CVE-2020-26710 | HIGH | 7.5 | 0.7% | Jun 29, 2023 | easy-parse v0.1.1 was discovered to contain a XML External Entity Injection (XXE) vulnerability which allows attackers t... |
| CVE-2020-26709 | HIGH | 7.5 | 0.7% | Jun 29, 2023 | py-xml v1.0 was discovered to contain an XML External Entity Injection (XXE) vulnerability which allows attackers to exe... |
| CVE-2020-26708 | HIGH | 7.5 | 0.7% | Jun 29, 2023 | requests-xml v0.2.3 was discovered to contain an XML External Entity Injection (XXE) vulnerability which allows attacker... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now