2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-6126 | HIGH | 8.8 | 1.4% | Sep 1, 2020 | SQL injection vulnerability exists in the CoursePeriodModal.php page of OS4Ed openSIS 7.3. The course_period_id paramete... |
| CVE-2020-6125 | HIGH | 8.8 | 1.8% | Sep 1, 2020 | An exploitable SQL injection vulnerability exists in the GetSchool.php functionality of OS4Ed openSIS 7.3. A specially c... |
| CVE-2020-6124 | HIGH | 8.8 | 1.4% | Sep 1, 2020 | An exploitable sql injection vulnerability exists in the email parameter functionality of OS4Ed openSIS 7.3. The email p... |
| CVE-2020-7669 | HIGH | 7.5 | 1.8% | Sep 1, 2020 | This affects all versions of package github.com/u-root/u-root/pkg/tarutil. It is vulnerable to both leading and non-lead... |
| CVE-2020-7666 | HIGH | 7.5 | 1.5% | Sep 1, 2020 | This affects all versions of package github.com/u-root/u-root/pkg/cpio. It is vulnerable to leading, non-leading relativ... |
| CVE-2020-7665 | HIGH | 7.5 | 1.8% | Sep 1, 2020 | This affects all versions of package github.com/u-root/u-root/pkg/uzip. It is vulnerable to both leading and non-leading... |
| CVE-2020-6131 | HIGH | 8.8 | 1.4% | Sep 1, 2020 | SQL injection vulnerabilities exist in the course_period_id parameters used in OS4Ed openSIS 7.3 pages. The course_perio... |
| CVE-2020-6130 | HIGH | 8.8 | 1.4% | Sep 1, 2020 | SQL injection vulnerabilities exist in the course_period_id parameters used in OS4Ed openSIS 7.3 pages. The course_perio... |
| CVE-2020-6129 | HIGH | 8.8 | 1.4% | Sep 1, 2020 | SQL injection vulnerabilities exist in the course_period_id parameters used in OS4Ed openSIS 7.3 pages. The course_perio... |
| CVE-2020-6123 | HIGH | 8.8 | 1.4% | Sep 1, 2020 | An exploitable sql injection vulnerability exists in the email parameter functionality of OS4Ed openSIS 7.3. The email p... |
| CVE-2020-6122 | HIGH | 8.8 | 1.4% | Sep 1, 2020 | SQL injection vulnerability exists in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3. The mn parameter in the p... |
| CVE-2020-6121 | HIGH | 8.8 | 1.4% | Sep 1, 2020 | SQL injection vulnerabilities exist in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3. The ln parameter in the ... |
| CVE-2020-6120 | HIGH | 8.8 | 1.4% | Sep 1, 2020 | SQL injection vulnerability exists in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3. The fn parameter in the p... |
| CVE-2020-6119 | HIGH | 8.8 | 1.4% | Sep 1, 2020 | SQL injection vulnerabilities exist in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3. The byear parameter in t... |
| CVE-2020-6118 | HIGH | 8.8 | 1.4% | Sep 1, 2020 | SQL injection vulnerabilities exist in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3. The bmonth parameter in ... |
| CVE-2020-6117 | HIGH | 8.8 | 1.4% | Sep 1, 2020 | SQL injection vulnerabilities exist in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3. The bday parameter in th... |
| CVE-2020-2245 | HIGH | 7.1 | 0.9% | Sep 1, 2020 | Jenkins Valgrind Plugin 0.28 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. |
| CVE-2020-2241 | HIGH | 8.8 | 0.7% | Sep 1, 2020 | A cross-site request forgery (CSRF) vulnerability in Jenkins database Plugin 1.6 and earlier allows attackers to connect... |
| CVE-2020-2240 | HIGH | 8.8 | 0.7% | Sep 1, 2020 | A cross-site request forgery (CSRF) vulnerability in Jenkins database Plugin 1.6 and earlier allows attackers to execute... |
| CVE-2020-24554 | HIGH | 7.5 | 1.8% | Sep 1, 2020 | The redirect module in Liferay Portal before 7.3.3 does not limit the number of URLs resulting in a 404 error that is re... |
| CVE-2020-24584 | HIGH | 7.5 | 3.3% | Sep 1, 2020 | An issue was discovered in Django 2.2 before 2.2.16, 3.0 before 3.0.10, and 3.1 before 3.1.1 (when Python 3.7+ is used).... |
| CVE-2020-24583 | HIGH | 7.5 | 4.0% | Sep 1, 2020 | An issue was discovered in Django 2.2 before 2.2.16, 3.0 before 3.0.10, and 3.1 before 3.1.1 (when Python 3.7+ is used).... |
| CVE-2020-8023 | HIGH | 7.8 | 0.4% | Sep 1, 2020 | A acceptance of Extraneous Untrusted Data With Trusted Data vulnerability in the start script of openldap2 of SUSE Enter... |
| CVE-2020-7720 | HIGH | 7.3 | 3.2% | Sep 1, 2020 | The package node-forge before 0.10.0 is vulnerable to Prototype Pollution via the util.setPath function. Note: Version 0... |
| CVE-2020-12776 | HIGH | 7.2 | 0.8% | Sep 1, 2020 | Openfind Mail2000 contains Broken Access Control vulnerability, which can be used to execute unauthorized commands after... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now