2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-23370 | MEDIUM | 5.4 | 0.7% | May 10, 2021 | In YzmCMS 5.6, stored XSS exists via the common/static/plugin/ueditor/1.4.3.3/php/controller.php action parameter, which... |
| CVE-2020-23369 | MEDIUM | 6.1 | 0.9% | May 10, 2021 | In YzmCMS 5.6, XSS was discovered in member/member_content/init.html via the SRC attribute of an IFRAME element because ... |
| CVE-2020-28600 | HIGH | 7.8 | 1.3% | May 10, 2021 | An out-of-bounds write vulnerability exists in the import_stl.cc:import_stl() functionality of Openscad openscad-2020.12... |
| CVE-2020-27232 | HIGH | 8.8 | 1.0% | May 10, 2021 | An exploitable SQL injection vulnerability exists in ‘manageServiceStocks.jsp’ page of OpenClinic GA 5.173.3. A speciall... |
| CVE-2020-18102 | MEDIUM | 6.1 | 1.2% | May 10, 2021 | Cross Site Scripting (XSS) in Hotels_Server v1.0 allows remote attackers to execute arbitrary code by injecting crafted ... |
| CVE-2020-28588 | MEDIUM | 5.5 | 1.1% | May 10, 2021 | An information disclosure vulnerability exists in the /proc/pid/syscall functionality of Linux Kernel 5.1 Stable and 5.4... |
| CVE-2020-27231 | HIGH | 8.8 | 0.8% | May 10, 2021 | A number of exploitable SQL injection vulnerabilities exists in ‘patientslist.do’ page of OpenClinic GA 5.173.3 applicat... |
| CVE-2020-27230 | HIGH | 8.8 | 0.8% | May 10, 2021 | A number of exploitable SQL injection vulnerabilities exists in ‘patientslist.do’ page of OpenClinic GA 5.173.3 applicat... |
| CVE-2020-27229 | HIGH | 8.8 | 0.8% | May 10, 2021 | A number of exploitable SQL injection vulnerabilities exists in ‘patientslist.do’ page of OpenClinic GA 5.173.3 applicat... |
| CVE-2020-27226 | HIGH | 8.8 | 1.0% | May 10, 2021 | An exploitable SQL injection vulnerability exists in ‘quickFile.jsp’ page of OpenClinic GA 5.173.3. A specially crafted ... |
| CVE-2020-19199 | HIGH | 8.8 | 0.9% | May 10, 2021 | A Cross Site Request Forgery (CSRF) vulnerability exists in PHPOK 5.2.060 via admin.php?c=admin&f=save, which could let ... |
| CVE-2020-13529 | MEDIUM | 6.1 | 1.4% | May 10, 2021 | An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cau... |
| CVE-2020-22809 | HIGH | 7.8 | 0.4% | May 10, 2021 | In Windscribe v1.83 Build 20, 'WindscribeService' has an Unquoted Service Path that facilitates privilege escalation. |
| CVE-2020-4901 | MEDIUM | 6.5 | 1.1% | May 7, 2021 | IBM Robotic Process Automation with Automation Anywhere 11.0 could allow an attacker on the network to obtain sensitive ... |
| CVE-2020-14009 | MEDIUM | 6.3 | 0.3% | May 7, 2021 | Proofpoint Enterprise Protection (PPS/PoD) before 8.16.4 contains a vulnerability that could allow an attacker to delive... |
| CVE-2020-36128 | HIGH | 8.2 | 1.2% | May 7, 2021 | Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by a token spoofing vulnerability. Each payment term... |
| CVE-2020-36127 | MEDIUM | 6.5 | 0.7% | May 7, 2021 | Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by an information disclosure vulnerability. Through ... |
| CVE-2020-36126 | HIGH | 8.1 | 1.4% | May 7, 2021 | Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by incorrect access control that can lead to remote ... |
| CVE-2020-36125 | HIGH | 7.1 | 0.9% | May 7, 2021 | Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by incorrect access control where password revalidat... |
| CVE-2020-36124 | MEDIUM | 6.5 | 1.3% | May 7, 2021 | Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by XML External Entity (XXE) injection. An authentic... |
| CVE-2020-11295 | HIGH | 7.8 | 0.1% | May 7, 2021 | Use after free in camera If the threadmanager is being cleaned up while the worker thread is processing objects in Snapd... |
| CVE-2020-11294 | HIGH | 7.8 | 0.1% | May 7, 2021 | Out of bound write in logger due to prefix size is not validated while prepended to logging string in Snapdragon Auto, S... |
| CVE-2020-11293 | MEDIUM | 6 | 0.1% | May 7, 2021 | Out of bound read can happen in Widevine TA while copying data to buffer from user data due to lack of check of buffer l... |
| CVE-2020-11289 | HIGH | 7.8 | 0.2% | May 7, 2021 | Out of bound write can occur in TZ command handler due to lack of validation of command ID in Snapdragon Auto, Snapdrago... |
| CVE-2020-11288 | HIGH | 7.8 | 0.2% | May 7, 2021 | Out of bound write can occur in playready while processing command due to lack of input validation in Snapdragon Auto, S... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now