2020 CVE Vulnerabilities
21,081 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-36840 | CRITICAL | 9.8 | 0.4% | Oct 16, 2024 | The Timetable and Event Schedule by MotoPress plugin for WordPress is vulnerable to authorization bypass due to a missin... |
| CVE-2020-36839 | HIGH | 8.3 | 0.2% | Oct 16, 2024 | The WP Lead Plus X plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 0.... |
| CVE-2020-36838 | HIGH | 7.4 | 0.3% | Oct 16, 2024 | The Facebook Chat Plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the wp... |
| CVE-2020-36837 | CRITICAL | 9.9 | 0.6% | Oct 16, 2024 | The ThemeGrill Demo Importer plugin for WordPress is vulnerable to authentication bypass due to a missing capability che... |
| CVE-2020-36836 | HIGH | 8 | 1.4% | Oct 16, 2024 | The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized arbitrary file deletion in versions up to, and i... |
| CVE-2020-36835 | MEDIUM | 6.5 | 0.5% | Oct 16, 2024 | The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to sensitive information disclosure of a Wor... |
| CVE-2020-36834 | MEDIUM | 6.3 | 0.3% | Oct 16, 2024 | The Discount Rules for WooCommerce plugin for WordPress is vulnerable to missing authorization via several AJAX actions ... |
| CVE-2020-36833 | MEDIUM | 6.3 | 0.3% | Oct 16, 2024 | The Indeed Membership Pro plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on... |
| CVE-2020-36832 | CRITICAL | 9.8 | 0.7% | Oct 16, 2024 | The Ultimate Membership Pro plugin for WordPress is vulnerable to Authentication Bypass in versions between, and includi... |
| CVE-2020-36831 | MEDIUM | 6.5 | 0.5% | Oct 16, 2024 | The NextScripts: Social Networks Auto-Poster plugin for WordPress is vulnerable to authorization bypass due to missing c... |
| CVE-2020-24061 | MEDIUM | 4.3 | 0.3% | Sep 12, 2024 | Cross Site Scripting (XSS) Vulnerability in Firewall menu in Control Panel in KASDA KW5515 version 4.3.1.0, allows attac... |
| CVE-2020-36830 | HIGH | 7.5 | 0.8% | Sep 2, 2024 | A vulnerability was found in nescalante urlregex up to 0.5.0 and classified as problematic. This issue affects some unkn... |
| CVE-2020-11847 | HIGH | 7.8 | 0.3% | Aug 21, 2024 | SSH authenticated user when access the PAM server can execute an OS command to gain the full system access using bash. T... |
| CVE-2020-11846 | HIGH | 7.5 | 0.3% | Aug 21, 2024 | A vulnerability found in OpenText Privileged Access Manager that issues a token. on successful issuance of the token, a ... |
| CVE-2020-11850 | MEDIUM | 6.1 | 0.3% | Aug 21, 2024 | Improper Input Validation vulnerability in OpenText Self Service Password Reset allows Cross-Site Scripting (XSS). This ... |
| CVE-2020-11640 | HIGH | 8.8 | 0.4% | Jul 23, 2024 | AdvaBuild uses a command queue to launch certain operations. An attacker who gains access to the command queue can use i... |
| CVE-2020-11639 | HIGH | 7.8 | 0.1% | Jul 23, 2024 | An attacker could exploit the vulnerability by injecting garbage data or specially crafted data. Depending on the data i... |
| CVE-2020-24102 | HIGH | 7.6 | 0.9% | Jul 22, 2024 | Directory Traversal vulnerability in Punkbuster pbsv.d64 2.351, allows remote attackers to execute arbitrary code. |
| CVE-2020-36765 | MEDIUM | 6.5 | 0.3% | Jul 16, 2024 | Insufficient policy enforcement in Navigation in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak c... |
| CVE-2020-25836 | MEDIUM | 6.3 | 0.3% | Jul 16, 2024 | Exposure of Sensitive Information to an Unauthorized Access vulnerability in OpenText NetIQ Directory and Resource Admin... |
| CVE-2020-27352 | HIGH | 8.8 | 0.3% | Jun 21, 2024 | When generating the systemd service units for the docker snap (and other similar snaps), snapd does not specify Delegate... |
| CVE-2020-35162 | — | — | — | Jun 21, 2024 | Rejected reason: CVE ID was once reserved, but never used. |
| CVE-2020-35161 | — | — | — | Jun 21, 2024 | Rejected reason: CVE ID was once reserved, but never used. |
| CVE-2020-35160 | — | — | — | Jun 21, 2024 | Rejected reason: CVE ID was once reserved, but never used. |
| CVE-2020-35159 | — | — | — | Jun 21, 2024 | Rejected reason: CVE ID was once reserved, but never used. |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now