2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-35972 | MEDIUM | 4.3 | 0.6% | Jun 3, 2021 | An issue was discovered in YzmCMS V5.8. There is a CSRF vulnerability that can add member user accounts via member/membe... |
| CVE-2020-35971 | MEDIUM | 5.4 | 0.5% | Jun 3, 2021 | A storage XSS vulnerability is found in YzmCMS v5.8, which can be used by attackers to inject JS code and attack malicio... |
| CVE-2020-35970 | HIGH | 7.5 | 1.3% | Jun 3, 2021 | An issue was discovered in YzmCMS 5.8. There is a SSRF vulnerability in the background collection management that allows... |
| CVE-2020-28469 | HIGH | 7.5 | 4.5% | Jun 3, 2021 | This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure con... |
| CVE-2020-21005 | MEDIUM | 6.5 | 0.8% | Jun 3, 2021 | WellCMS 2.0 beta3 is vulnerable to File Upload. A user can log in to the CMS background and upload a picture. Because th... |
| CVE-2020-21003 | MEDIUM | 4.8 | 0.5% | Jun 3, 2021 | Pbootcms v2.0.3 is vulnerable to Cross Site Scripting (XSS) via admin.php. |
| CVE-2020-35442 | CRITICAL | 9.8 | 1.7% | Jun 2, 2021 | FDCMS (also known as Fangfa Content Management System) 4.0 allows remote attackers to get a webshell in the background v... |
| CVE-2020-35441 | CRITICAL | 9.8 | 1.1% | Jun 2, 2021 | FDCMS (aka Fangfa Content Management System) 4.0 contains a front-end SQL injection via Admin/Lib/Action/FloginAction.cl... |
| CVE-2020-5030 | MEDIUM | 5.4 | 0.5% | Jun 2, 2021 | IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users... |
| CVE-2020-4977 | MEDIUM | 5.4 | 0.5% | Jun 2, 2021 | IBM Engineering Lifecycle Optimization - Publishing is vulnerable to stored cross-site scripting. This vulnerability all... |
| CVE-2020-4732 | MEDIUM | 6.5 | 0.8% | Jun 2, 2021 | IBM Jazz Foundation and IBM Engineering products could allow an authenticated user to obtain sensitive information due t... |
| CVE-2020-4495 | HIGH | 8.8 | 2.6% | Jun 2, 2021 | IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to bypass security restrictions, caused b... |
| CVE-2020-22056 | MEDIUM | 6.5 | 0.9% | Jun 2, 2021 | A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the config_input function in af_acrossove... |
| CVE-2020-22054 | MEDIUM | 6.5 | 1.3% | Jun 2, 2021 | A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the av_dict_set function in dict.c. |
| CVE-2020-25362 | HIGH | 7.5 | 2.1% | Jun 2, 2021 | The id paramater in Online Shopping Alphaware 1.0 has been discovered to be vulnerable to an Error-Based blind SQL injec... |
| CVE-2020-24862 | HIGH | 7.5 | 2.1% | Jun 2, 2021 | The catID parameter in Pharmacy Medical Store and Sale Point v1.0 has been found to be vulnerable to a Time-Based blind ... |
| CVE-2020-22051 | MEDIUM | 6.5 | 1.0% | Jun 2, 2021 | A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the filter_frame function in vf_tile.c. |
| CVE-2020-6950 | MEDIUM | 6.5 | 10.1% | Jun 2, 2021 | Directory traversal in Eclipse Mojarra before 2.3.14 allows attackers to read arbitrary files via the loc parameter or c... |
| CVE-2020-27661 | MEDIUM | 6.5 | 0.3% | Jun 2, 2021 | A divide-by-zero issue was found in dwc2_handle_packet in hw/usb/hcd-dwc2.c in the hcd-dwc2 USB host controller emulatio... |
| CVE-2020-24870 | HIGH | 8.8 | 1.6% | Jun 2, 2021 | Libraw before 0.20.1 has a stack buffer overflow via LibRaw::identify_process_dng_fields in identify.cpp. |
| CVE-2020-22049 | MEDIUM | 6.5 | 1.3% | Jun 2, 2021 | A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the wtvfile_open_sector function in wtvde... |
| CVE-2020-22048 | MEDIUM | 6.5 | 0.9% | Jun 2, 2021 | A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the ff_frame_pool_get function in framepo... |
| CVE-2020-22046 | MEDIUM | 6.5 | 1.0% | Jun 2, 2021 | A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the avpriv_float_dsp_allocl function in l... |
| CVE-2020-35514 | HIGH | 7 | 0.2% | Jun 2, 2021 | An insecure modification flaw in the /etc/kubernetes/kubeconfig file was found in OpenShift. This flaw allows an attacke... |
| CVE-2020-35510 | MEDIUM | 5.9 | 1.1% | Jun 2, 2021 | A flaw was found in jboss-remoting in versions before 5.0.20.SP1-redhat-00001. A malicious attacker could cause threads ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now