2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-4857 | MEDIUM | 5.4 | 0.7% | Mar 4, 2021 | IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitra... |
| CVE-2020-4856 | MEDIUM | 5.4 | 0.5% | Mar 4, 2021 | IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitra... |
| CVE-2020-15938 | HIGH | 7.5 | 0.7% | Mar 4, 2021 | When traffic other than HTTP/S (eg: SSH traffic, etc...) traverses the FortiGate in version below 6.2.5 and below 6.4.2 ... |
| CVE-2020-35329 | MEDIUM | 6.5 | 1.3% | Mar 4, 2021 | Courier Management System 1.0 1.0 is affected by SQL Injection via 'MULTIPART street '. |
| CVE-2020-35328 | MEDIUM | 5.4 | 0.7% | Mar 4, 2021 | Courier Management System 1.0 - 'First Name' Stored XSS |
| CVE-2020-35327 | MEDIUM | 6.5 | 1.3% | Mar 4, 2021 | SQL injection vulnerability was discovered in Courier Management System 1.0, which can be exploited via the ref_no (POST... |
| CVE-2020-24914 | CRITICAL | 9.8 | 5.6% | Mar 4, 2021 | A PHP object injection bug in profile.php in qcubed (all versions including 3.1.1) unserializes the untrusted data of th... |
| CVE-2020-24913 | CRITICAL | 9.8 | 43.3% | Mar 4, 2021 | A SQL injection vulnerability in qcubed (all versions including 3.1.1) in profile.php via the strQuery parameter allows ... |
| CVE-2020-24912 | MEDIUM | 6.1 | 6.3% | Mar 4, 2021 | A reflected cross-site scripting (XSS) vulnerability in qcubed (all versions including 3.1.1) in profile.php via the stQ... |
| CVE-2020-24036 | HIGH | 8.8 | 2.9% | Mar 4, 2021 | PHP object injection in the Ajax endpoint of the backend in ForkCMS below version 5.8.3 allows an authenticated remote u... |
| CVE-2020-8296 | MEDIUM | 6.7 | 0.5% | Mar 3, 2021 | Nextcloud Server prior to 20.0.0 stores passwords in a recoverable format even when external storage is not configured. |
| CVE-2020-29047 | CRITICAL | 9.8 | 14.3% | Mar 3, 2021 | The wp-hotel-booking plugin through 1.10.2 for WordPress allows remote attackers to execute arbitrary code because of an... |
| CVE-2020-28597 | HIGH | 7.5 | 1.0% | Mar 3, 2021 | A predictable seed vulnerability exists in the password reset functionality of Epignosis EfrontPro 5.2.21. By predicting... |
| CVE-2020-28591 | MEDIUM | 6.5 | 1.9% | Mar 3, 2021 | An out-of-bounds read vulnerability exists in the AMF File AMFParserContext::endElement() functionality of Slic3r libsli... |
| CVE-2020-13558 | HIGH | 8.8 | 1.8% | Mar 3, 2021 | A code execution vulnerability exists in the AudioSourceProviderGStreamer functionality of Webkit WebKitGTK 2.30.1. A sp... |
| CVE-2020-27779 | HIGH | 7.5 | 0.4% | Mar 3, 2021 | A flaw was found in grub2 in versions prior to 2.06. The cutmem command does not honor secure boot locking allowing an p... |
| CVE-2020-27749 | MEDIUM | 6.7 | 0.6% | Mar 3, 2021 | A flaw was found in grub2 in versions prior to 2.06. Variable names present are expanded in the supplied command line in... |
| CVE-2020-25647 | HIGH | 7.6 | 0.8% | Mar 3, 2021 | A flaw was found in grub2 in versions prior to 2.06. During USB device initialization, descriptors are read with very li... |
| CVE-2020-25632 | HIGH | 8.2 | 1.2% | Mar 3, 2021 | A flaw was found in grub2 in versions prior to 2.06. The rmmod implementation allows the unloading of a module used as a... |
| CVE-2020-14372 | HIGH | 7.5 | 1.7% | Mar 3, 2021 | A flaw was found in grub2 in versions prior to 2.06, where it incorrectly enables the usage of the ACPI command when Sec... |
| CVE-2020-13554 | HIGH | 7.8 | 0.5% | Mar 3, 2021 | An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCAD... |
| CVE-2020-35296 | HIGH | 7.5 | 2.2% | Mar 3, 2021 | ThinkAdmin v6 has default administrator credentials, which allows attackers to gain unrestricted administratior dashboar... |
| CVE-2020-15937 | MEDIUM | 6.1 | 0.8% | Mar 3, 2021 | An improper neutralization of input vulnerability in FortiGate version 6.2.x below 6.2.5 and 6.4.x below 6.4.1 may allow... |
| CVE-2020-10519 | HIGH | 8.8 | 3.0% | Mar 3, 2021 | A remote code execution vulnerability was identified in GitHub Enterprise Server that could be exploited when building a... |
| CVE-2020-12530 | MEDIUM | 6.1 | 0.6% | Mar 2, 2021 | An issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2. There ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now