2020 CVE Vulnerabilities
21,081 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-24930 | HIGH | 8.1 | 1.1% | Sep 27, 2021 | Beijing Wuzhi Internet Technology Co., Ltd. Wuzhi CMS 4.0.1 is an open source content management system. The five finger... |
| CVE-2020-20514 | HIGH | 8.1 | 0.4% | Sep 24, 2021 | A Cross-Site Request Forgery (CSRF) in Maccms v10 via admin.php/admin/admin/del/ids/<id>.html allows authenticated attac... |
| CVE-2020-19951 | HIGH | 8.8 | 0.5% | Sep 23, 2021 | A cross-site request forgery (CSRF) in /controller/pay.class.php of YzmCMS v5.5 allows attackers to access sensitive com... |
| CVE-2020-23478 | HIGH | 7.5 | 1.2% | Sep 22, 2021 | Leo Editor v6.2.1 was discovered to contain a regular expression denial of service (ReDoS) vulnerability in the componen... |
| CVE-2020-23469 | HIGH | 7.5 | 1.2% | Sep 22, 2021 | gmate v0.12+bionic contains a regular expression denial of service (ReDoS) vulnerability in the gedit3 plugin. |
| CVE-2020-23267 | HIGH | 7.1 | 0.7% | Sep 22, 2021 | An issue was discovered in gpac 0.8.0. The gf_hinter_track_process function in isom_hinter_track_process.c has a heap-ba... |
| CVE-2020-19551 | HIGH | 8.8 | 1.7% | Sep 21, 2021 | Blacklist bypass issue exists in WUZHI CMS up to and including 4.1.0 in common.func.php, which when uploaded can cause r... |
| CVE-2020-21468 | HIGH | 7.5 | 1.2% | Sep 20, 2021 | A segmentation fault in the redis-server component of Redis 5.0.7 leads to a denial of service (DOS). NOTE: the vendor c... |
| CVE-2020-20898 | HIGH | 8.8 | 1.2% | Sep 20, 2021 | Integer Overflow vulnerability in function filter16_prewitt in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows atta... |
| CVE-2020-20896 | HIGH | 8.8 | 1.1% | Sep 20, 2021 | An issue was discovered in function latm_write_packet in libavformat/latmenc.c in Ffmpeg 4.2.1, allows attackers to caus... |
| CVE-2020-20892 | HIGH | 8.8 | 1.1% | Sep 20, 2021 | An issue was discovered in function filter_frame in libavfilter/vf_lenscorrection.c in Ffmpeg 4.2.1, allows attackers to... |
| CVE-2020-20891 | HIGH | 8.8 | 1.2% | Sep 20, 2021 | Buffer Overflow vulnerability in function config_input in libavfilter/vf_gblur.c in Ffmpeg 4.2.1, allows attackers to ca... |
| CVE-2020-21548 | HIGH | 8.8 | 1.0% | Sep 17, 2021 | Libsixel 1.8.3 contains a heap-based buffer overflow in the sixel_encode_highcolor function in tosixel.c. |
| CVE-2020-21547 | HIGH | 8.8 | 1.0% | Sep 17, 2021 | Libsixel 1.8.2 contains a heap-based buffer overflow in the dither_func_fs function in tosixel.c. |
| CVE-2020-12080 | HIGH | 7.5 | 2.0% | Sep 17, 2021 | A Denial of Service vulnerability has been identified in FlexNet Publisher's lmadmin.exe version 11.16.6. A certain mess... |
| CVE-2020-21598 | HIGH | 8.8 | 1.7% | Sep 16, 2021 | libde265 v1.0.4 contains a heap buffer overflow in the ff_hevc_put_unweighted_pred_8_sse function, which can be exploite... |
| CVE-2020-14109 | HIGH | 7.2 | 2.2% | Sep 16, 2021 | There is command injection in the meshd program in the routing system, resulting in command execution under administrato... |
| CVE-2020-21483 | HIGH | 7.2 | 1.6% | Sep 15, 2021 | An arbitrary file upload vulnerability in Jizhicms v1.5 allows attackers to execute arbitrary code via a crafted .jpg fi... |
| CVE-2020-21481 | HIGH | 7.2 | 1.6% | Sep 15, 2021 | An arbitrary file upload vulnerability in RGCMS v1.06 allows attackers to execute arbitrary code via a crafted .txt file... |
| CVE-2020-21480 | HIGH | 7.2 | 1.6% | Sep 15, 2021 | An arbitrary file write vulnerability in RGCMS v1.06 allows attackers to execute arbitrary code via a crafted PHP file. |
| CVE-2020-21126 | HIGH | 8.8 | 0.6% | Sep 15, 2021 | MetInfo 7.0.0 contains a Cross-Site Request Forgery (CSRF) via admin/?n=admin&c=index&a=doSaveInfo. |
| CVE-2020-19159 | HIGH | 8.8 | 1.0% | Sep 15, 2021 | Cross Site Request Forgery (CSRF) in LaikeTui v3 allows remote attackers to execute arbitrary code via the component '/i... |
| CVE-2020-19155 | HIGH | 8.8 | 7.3% | Sep 15, 2021 | Improper Access Control in Jfinal CMS v4.7.1 and earlier allows remote attackers to obtain sensitive information and/or ... |
| CVE-2020-19151 | HIGH | 8.8 | 4.8% | Sep 15, 2021 | Command Injection in Jfinal CMS v4.7.1 and earlier allows remote attackers to execute arbitrary code by uploading a mali... |
| CVE-2020-19150 | HIGH | 8.1 | 3.4% | Sep 15, 2021 | Improper Access Control in Jfinal CMS v4.7.1 and earlier allows remote attackers to obtain sensitive information or caus... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now