2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-26118 | HIGH | 8.8 | 3.8% | Jan 11, 2021 | In SmartBear Collaborator Server through 13.3.13302, use of the Google Web Toolkit (GWT) API introduces a post-authentic... |
| CVE-2020-23630 | HIGH | 8.8 | 1.3% | Jan 11, 2021 | A blind SQL injection vulnerability exists in zzcms ver201910 based on time (cookie injection). |
| CVE-2020-23849 | MEDIUM | 6.1 | 0.7% | Jan 11, 2021 | Stored XSS was discovered in the tree mode of jsoneditor before 9.0.2 through injecting and executing JavaScript. |
| CVE-2020-23644 | MEDIUM | 6.1 | 0.7% | Jan 11, 2021 | XSS exists in JIZHICMS 1.7.1 via index.php/Error/index?msg={XSS] to Home/c/ErrorController.php. |
| CVE-2020-23643 | MEDIUM | 6.1 | 0.7% | Jan 11, 2021 | XSS exists in JIZHICMS 1.7.1 via index.php/Wechat/checkWeixin?signature=1&echostr={XSS] to Home/c/WechatController.php. |
| CVE-2020-26800 | MEDIUM | 5.5 | 1.2% | Jan 11, 2021 | A stack overflow vulnerability in Aleth Ethereum C++ client version <= 1.8.0 using a specially crafted a config.json fil... |
| CVE-2020-17509 | HIGH | 7.5 | 1.8% | Jan 11, 2021 | ATS negative cache option is vulnerable to a cache poisoning attack. If you have this option enabled, please upgrade or ... |
| CVE-2020-17508 | HIGH | 7.5 | 2.0% | Jan 11, 2021 | The ATS ESI plugin has a memory disclosure vulnerability. If you are running the plugin please upgrade. Apache Traffic S... |
| CVE-2020-13922 | MEDIUM | 6.5 | 1.7% | Jan 11, 2021 | Versions of Apache DolphinScheduler prior to 1.3.2 allowed an ordinary user under any tenant to override another users p... |
| CVE-2020-11995 | CRITICAL | 9.8 | 5.8% | Jan 11, 2021 | A deserialization vulnerability existed in dubbo 2.7.5 and its earlier versions, which could lead to malicious code exec... |
| CVE-2020-35727 | MEDIUM | 5.4 | 1.3% | Jan 11, 2021 | Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via ... |
| CVE-2020-35726 | MEDIUM | 6.1 | 1.6% | Jan 11, 2021 | Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via ... |
| CVE-2020-35725 | MEDIUM | 6.1 | 1.6% | Jan 11, 2021 | Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via ... |
| CVE-2020-35724 | MEDIUM | 5.4 | 1.2% | Jan 11, 2021 | Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via ... |
| CVE-2020-35723 | MEDIUM | 5.4 | 1.3% | Jan 11, 2021 | Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via ... |
| CVE-2020-35722 | MEDIUM | 6.5 | 0.7% | Jan 11, 2021 | CSRF in Web Compliance Manager in Quest Policy Authority 8.1.2.200 allows remote attackers to force user modification/cr... |
| CVE-2020-35721 | MEDIUM | 5.4 | 1.3% | Jan 11, 2021 | Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via ... |
| CVE-2020-35720 | MEDIUM | 5.4 | 1.2% | Jan 11, 2021 | Stored XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to store malicious code in multiple fields (first... |
| CVE-2020-35719 | MEDIUM | 6.1 | 1.6% | Jan 11, 2021 | Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via ... |
| CVE-2020-35206 | MEDIUM | 6.1 | 1.3% | Jan 11, 2021 | Reflected XSS in Web Compliance Manager in Quest Policy Authority version 8.1.2.200 allows attackers to inject malicious... |
| CVE-2020-35205 | CRITICAL | 9.8 | 1.9% | Jan 11, 2021 | Server Side Request Forgery (SSRF) in Web Compliance Manager in Quest Policy Authority version 8.1.2.200 allows attacker... |
| CVE-2020-35204 | MEDIUM | 6.1 | 1.3% | Jan 11, 2021 | Reflected XSS in Quest Policy Authority version 8.1.2.200 allows attackers to inject malicious code into the browser via... |
| CVE-2020-35203 | MEDIUM | 6.1 | 1.3% | Jan 11, 2021 | Reflected XSS in Web Compliance Manager in Quest Policy Authority version 8.1.2.200 allows attackers to inject malicious... |
| CVE-2020-5147 | MEDIUM | 5.3 | 1.7% | Jan 9, 2021 | SonicWall NetExtender Windows client vulnerable to unquoted service path vulnerability, this allows a local attacker to ... |
| CVE-2020-5146 | HIGH | 7.2 | 1.9% | Jan 9, 2021 | A vulnerability in SonicWall SMA100 appliance allow an authenticated management-user to perform OS command injection usi... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now