2020 CVE Vulnerabilities

21,081 CVEs published in 2020.

CVE IDSeverityCVSSDescription
CVE-2020-36866MEDIUM5.4Nagios XI versions prior to 5.7.3 are vulnerable to cross-site scripting (XSS) via the Manage Users page of the Admin in...
CVE-2020-36865MEDIUM5.4Nagios XI versions prior to 5.7.2 are vulnerable to cross-site scripting (XSS) via the BPI (Business Process Intelligenc...
CVE-2020-36864MEDIUM5.4Nagios XI versions prior to 5.7.2 are vulnerable to cross-site scripting (XSS) via the background color settings in Dash...
CVE-2020-36863HIGH8.8Nagios XI versions prior to 5.7.2 allow PHP files to be uploaded to the Audio Import directory and executed from that lo...
CVE-2020-36862MEDIUM6.1Nagios XI versions prior to 5.6.11 contain unauthenticated vulnerabilities in the Highcharts local exporting tool. Craft...
CVE-2020-36861MEDIUM5.4The Core Config Manager (CCM) in Nagios XI versions prior to CCM 3.0.8 / Nagios XI 5.7.5 contains multiple cross-site sc...
CVE-2020-36860MEDIUM5.4The Core Config Manager (CCM) in Nagios XI versions prior to CCM 3.0.7 / Nagios XI 5.7.4 contains multiple cross-site sc...
CVE-2020-36859HIGH8.8The Core Config Manager (CCM) in Nagios XI versions prior to CCM 3.0.7 / Nagios XI 5.7.4 contains multiple SQL injection...
CVE-2020-36858MEDIUM5.4Nagios Log Server versions prior to 2.1.6 contain cross-site scripting (XSS) vulnerabilities via the web interface on th...
CVE-2020-36857HIGH7.2Nagios XI versions prior to 5.6.14 contain a post-authentication SQL injection vulnerability in the SNMP Trap Interface ...
CVE-2020-36856HIGH8.8Nagios XI versions prior to 5.6.14 contain an authenticated remote command execution vulnerability in the CCM command_te...
CVE-2020-36855MEDIUM5.5A security vulnerability has been detected in DCMTK up to 3.6.5. The affected element is the function parseQuota of the ...
CVE-2020-36854MEDIUM6.4The Async JavaScript plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including,...
CVE-2020-36853HIGH7.2The 10WebMapBuilder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Plugin Settings Change in vers...
CVE-2020-36852CRITICAL9.1The Custom Searchable Data Entry System plugin for WordPress is vulnerable to unauthenticated database wiping in version...
CVE-2020-36851CRITICAL9.5Rob--W cors-anywhere instances configured as an open proxy allow unauthenticated external users to induce the server to ...
CVE-2020-36824——Rejected reason: ** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was in a CNA pool that w...
CVE-2020-36823——Rejected reason: ** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was in a CNA pool that w...
CVE-2020-36822——Rejected reason: ** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was in a CNA pool that w...
CVE-2020-36821——Rejected reason: ** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was in a CNA pool that w...
CVE-2020-36820——Rejected reason: ** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was in a CNA pool that w...
CVE-2020-36819——Rejected reason: ** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was in a CNA pool that w...
CVE-2020-36818——Rejected reason: ** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was in a CNA pool that w...
CVE-2020-36817——Rejected reason: ** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was in a CNA pool that w...
CVE-2020-36816——Rejected reason: ** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was in a CNA pool that w...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now