2020 CVE Vulnerabilities
21,081 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-36850 | HIGH | 8.7 | 0.4% | Jul 25, 2025 | An information disclosure vulnerability exits in Sitecore JSS React Sample Application 11.0.0 - 14.0.1 that may cause pa... |
| CVE-2020-26799 | CRITICAL | 9.8 | 0.5% | Jul 21, 2025 | A reflected cross-site scripting (XSS) vulnerability was discovered in index.php on Luxcal 4.5.2 which allows an unauthe... |
| CVE-2020-36849 | CRITICAL | 9.8 | 4.7% | Jul 12, 2025 | The AIT CSV import/export plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validati... |
| CVE-2020-36848 | HIGH | 7.5 | 1.1% | Jul 12, 2025 | The Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid plugin for WordPress is vulnerable to Sens... |
| CVE-2020-36847 | CRITICAL | 9.8 | 12.6% | Jul 12, 2025 | The Simple-File-List Plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 4.2.2... |
| CVE-2020-36846 | CRITICAL | 9.8 | 0.5% | May 30, 2025 | A buffer overflow, as described in CVE-2020-8927, exists in the embedded Brotli library. Versions of IO::Compress::Brot... |
| CVE-2020-36791 | HIGH | 7.1 | 0.2% | May 7, 2025 | In the Linux kernel, the following vulnerability has been resolved: net_sched: keep alloc_hash updated after hash alloc... |
| CVE-2020-36790 | MEDIUM | 5.5 | 0.1% | May 1, 2025 | In the Linux kernel, the following vulnerability has been resolved: nvmet: fix a memory leak We forgot to free new_mod... |
| CVE-2020-36845 | MEDIUM | 6.1 | 0.2% | Apr 20, 2025 | The KnowBe4 Security Awareness Training application before 2020-01-10 contains a redirect function that does not validat... |
| CVE-2020-36844 | MEDIUM | 6.1 | 0.2% | Apr 20, 2025 | The KnowBe4 Security Awareness Training application before 2020-01-10 allows reflected XSS. The response has a SCRIPT el... |
| CVE-2020-36789 | MEDIUM | 5.5 | 0.2% | Apr 17, 2025 | In the Linux kernel, the following vulnerability has been resolved: can: dev: can_get_echo_skb(): prevent call to kfree... |
| CVE-2020-18243 | MEDIUM | 6.5 | 0.4% | Apr 15, 2025 | SQL injection vulnerability found in Enricozab CMS v.1.0 allows a remote attacker to execute arbitrary code via /hdo/hdo... |
| CVE-2020-6645 | — | — | — | Mar 17, 2025 | Rejected reason: Not used |
| CVE-2020-9295 | HIGH | 7.5 | 0.3% | Mar 17, 2025 | FortiOS 6.2 running AV engine version 6.00142 and below, FortiOS 6.4 running AV engine version 6.00144 and below and For... |
| CVE-2020-29010 | MEDIUM | 5 | 0.5% | Mar 17, 2025 | An exposure of sensitive information to an unauthorized actor vulnerability in FortiOS version 6.2.4 and below, version ... |
| CVE-2020-36843 | MEDIUM | 4.3 | 0.1% | Mar 13, 2025 | The implementation of EdDSA in EdDSA-Java (aka ed25519-java) through 0.3.0 exhibits signature malleability and does not ... |
| CVE-2020-23438 | HIGH | 7.8 | 0.2% | Mar 4, 2025 | Wondershare filmora 9.2.11 is affected by Trojan Dll hijacking leading to privilege escalation. |
| CVE-2020-3122 | MEDIUM | 5.3 | 0.4% | Mar 4, 2025 | A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Content Security Management Appliance (... |
| CVE-2020-19248 | MEDIUM | 5.1 | 0.2% | Feb 21, 2025 | SQL Injection vulnerability in PbootCMS 1.4.1 in parsing if statements in templates, resulting in a malicious user's abi... |
| CVE-2020-6158 | MEDIUM | 4.7 | 0.3% | Feb 21, 2025 | Opera Mini for Android before version 52.2 is vulnerable to an address bar spoofing attack. The vulnerability allows a m... |
| CVE-2020-35546 | CRITICAL | 9.1 | 0.3% | Feb 19, 2025 | Lexmark MX6500 LW75.JD.P296 and previous devices have Incorrect Access Control via the access control settings. |
| CVE-2020-13481 | MEDIUM | 6.1 | 0.3% | Feb 19, 2025 | Certain Lexmark products through 2020-05-25 allow XSS which allows an attacker to obtain session credentials and other s... |
| CVE-2020-10095 | HIGH | 8.1 | 0.2% | Feb 19, 2025 | Various Lexmark devices have CSRF that allows an attacker to modify the configuration of the device. |
| CVE-2020-3432 | MEDIUM | 5.6 | 0.2% | Feb 12, 2025 | A vulnerability in the uninstaller component of Cisco AnyConnect Secure Mobility Client for Mac OS could allow an authen... |
| CVE-2020-36085 | MEDIUM | 6.3 | 0.3% | Feb 6, 2025 | Stored Cross Site Scripting(XSS) vulnerability in Egavilan Media Resumes Management and Job Application Website 1.0 allo... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now