2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-28365 | MEDIUM | 6.1 | 0.7% | Dec 30, 2020 | Sentrifugo 3.2 allows Stored Cross-Site Scripting (XSS) vulnerability by inserting a payload within the X-Forwarded-For ... |
| CVE-2020-27848 | HIGH | 8.8 | 1.2% | Dec 30, 2020 | dotCMS before 20.10.1 allows SQL injection, as demonstrated by the /api/v1/containers orderby parameter. The PaginatorOr... |
| CVE-2020-26247 | MEDIUM | 4.3 | 1.3% | Dec 30, 2020 | Nokogiri is a Rubygem providing HTML, XML, SAX, and Reader parsers with XPath and CSS selector support. In Nokogiri befo... |
| CVE-2020-5811 | MEDIUM | 6.5 | 9.4% | Dec 30, 2020 | An authenticated path traversal vulnerability exists during package installation in Umbraco CMS <= 8.9.1 or current, whi... |
| CVE-2020-5810 | MEDIUM | 5.4 | 66.2% | Dec 30, 2020 | A stored XSS vulnerability exists in Umbraco CMS <= 8.9.1 or current. An authenticated user authorized to upload media c... |
| CVE-2020-5809 | MEDIUM | 5.4 | 0.7% | Dec 30, 2020 | A stored XSS vulnerability exists in Umbraco CMS <= 8.9.1 or current. An authenticated user can inject arbitrary JavaScr... |
| CVE-2020-35241 | MEDIUM | 4.8 | 2.1% | Dec 30, 2020 | FlatPress 1.0.3 is affected by cross-site scripting (XSS) in the Blog Content component. This vulnerability can allow an... |
| CVE-2020-35240 | MEDIUM | 4.8 | 1.0% | Dec 30, 2020 | FluxBB 1.5.11 is affected by cross-site scripting (XSS in the Blog Content component. This vulnerability can allow an at... |
| CVE-2020-29477 | MEDIUM | 4.8 | 1.1% | Dec 30, 2020 | Invision Community 4.5.4 is affected by cross-site scripting (XSS) in the Field Name field. This vulnerability can allow... |
| CVE-2020-29469 | MEDIUM | 5.4 | 1.4% | Dec 30, 2020 | WonderCMS 3.1.3 is affected by cross-site scripting (XSS) in the Menu component. This vulnerability can allow an attacke... |
| CVE-2020-29233 | MEDIUM | 5.4 | 1.3% | Dec 30, 2020 | WonderCMS 3.1.3 is affected by cross-site scripting (XSS) in the Page description component. This vulnerability can allo... |
| CVE-2020-29594 | CRITICAL | 9.8 | 1.6% | Dec 30, 2020 | Rocket.Chat before 0.74.4, 1.x before 1.3.4, 2.x before 2.4.13, 3.x before 3.7.3, 3.8.x before 3.8.3, and 3.9.x before 3... |
| CVE-2020-35850 | MEDIUM | 6.5 | 1.6% | Dec 30, 2020 | An SSRF issue was discovered in cockpit-project.org Cockpit 234. NOTE: this is unrelated to the Agentejo Cockpit product... |
| CVE-2020-35848 | CRITICAL | 9.8 | 75.0% | Dec 30, 2020 | Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php newpassword function. |
| CVE-2020-35847 | CRITICAL | 9.8 | 98.3% | Dec 30, 2020 | Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php resetpassword function. |
| CVE-2020-35846 | CRITICAL | 9.8 | 93.2% | Dec 30, 2020 | Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php check function. |
| CVE-2020-35842 | MEDIUM | 5.4 | 0.5% | Dec 30, 2020 | Certain NETGEAR devices are affected by stored XSS. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JNR1010v... |
| CVE-2020-35841 | HIGH | 7.6 | 0.6% | Dec 30, 2020 | Certain NETGEAR devices are affected by stored XSS. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JNR1010v... |
| CVE-2020-35840 | MEDIUM | 5.4 | 0.5% | Dec 30, 2020 | Certain NETGEAR devices are affected by stored XSS. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JNR1010v... |
| CVE-2020-35839 | HIGH | 8.1 | 0.7% | Dec 30, 2020 | Certain NETGEAR devices are affected by Stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 b... |
| CVE-2020-35838 | MEDIUM | 4.8 | 0.6% | Dec 30, 2020 | Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 b... |
| CVE-2020-35837 | MEDIUM | 4.8 | 0.7% | Dec 30, 2020 | Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 b... |
| CVE-2020-35836 | MEDIUM | 4.8 | 0.6% | Dec 30, 2020 | Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 b... |
| CVE-2020-35835 | MEDIUM | 4.8 | 0.6% | Dec 30, 2020 | Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 b... |
| CVE-2020-35834 | MEDIUM | 4.8 | 0.6% | Dec 30, 2020 | Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 b... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now