2020 CVE Vulnerabilities
21,081 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-27449 | MEDIUM | 6.1 | 2.8% | Aug 11, 2023 | Cross Site Scripting (XSS) vulnerability in Query Report feature in Zoho ManageEngine Password Manager Pro version 11001... |
| CVE-2020-25915 | MEDIUM | 5.4 | 0.4% | Aug 11, 2023 | Cross Site Scripting (XSS) vulnerability in UserController.php in ThinkCMF version 5.1.5, allows attackers to execute ar... |
| CVE-2020-24950 | HIGH | 8.8 | 1.1% | Aug 11, 2023 | SQL Injection vulnerability in file Base_module_model.php in Daylight Studio FUEL-CMS version 1.4.9, allows remote attac... |
| CVE-2020-24922 | HIGH | 8.8 | 0.4% | Aug 11, 2023 | Cross Site Request Forgery (CSRF) vulnerability in xxl-job-admin/user/add in xuxueli xxl-job version 2.2.0, allows remot... |
| CVE-2020-24904 | MEDIUM | 6.5 | 0.7% | Aug 11, 2023 | An issue was discovered in attach parameter in GNOME Gmail version 2.5.4, allows remote attackers to gain sensitive info... |
| CVE-2020-24872 | MEDIUM | 6.1 | 0.5% | Aug 11, 2023 | Cross Site Scripting (XSS) vulnerability in backend/pages/modify.php in Lepton-CMS version 4.7.0, allows remote attacker... |
| CVE-2020-24804 | MEDIUM | 6.5 | 0.5% | Aug 11, 2023 | Plaintext Password vulnerability in AddAdmin.py in cms-dev/cms v1.4.rc1, allows attackers to gain sensitive information ... |
| CVE-2020-24222 | HIGH | 7.8 | 0.3% | Aug 11, 2023 | Buffer Overflow vulnerability in jfif_decode() function in rockcarry ffjpeg through version 1.0.0, allows local attacker... |
| CVE-2020-24221 | MEDIUM | 5.5 | 0.3% | Aug 11, 2023 | An issue was discovered in GetByte function in miniupnp ngiflib version 0.4, allows local attackers to cause a denial of... |
| CVE-2020-24187 | MEDIUM | 5.5 | 0.3% | Aug 11, 2023 | An issue was discovered in ecma-helpers.c in jerryscript version 2.3.0, allows local attackers to cause a denial of serv... |
| CVE-2020-24075 | MEDIUM | 6.1 | 0.5% | Aug 11, 2023 | Cross Site Scripting (XSS) vulnerability in Name Input Field in Contact Us form in Laborator Kalium before 3.0.4, allows... |
| CVE-2020-23595 | HIGH | 8.8 | 0.4% | Aug 11, 2023 | Cross Site Request Forgery (CSRF) vulnerability in yzmcms version 5.6, allows remote attackers to escalate privileges an... |
| CVE-2020-20523 | MEDIUM | 6.1 | 0.6% | Aug 11, 2023 | Cross Site Scripting (XSS) vulnerability in adm_user parameter in Gila CMS version 1.11.3, allows remote attackers to ex... |
| CVE-2020-19952 | MEDIUM | 6.1 | 0.5% | Aug 11, 2023 | Cross Site Scripting (XSS) vulnerability in Rendering Engine in jbt Markdown Editor thru commit 2252418c27dffbb35147acd8... |
| CVE-2020-23564 | HIGH | 7.2 | 0.8% | Aug 5, 2023 | File Upload vulnerability in SEMCMS 3.9 allows remote attackers to run arbitrary code via SEMCMS_Upfile.php. |
| CVE-2020-26082 | MEDIUM | 5.3 | 0.6% | Aug 4, 2023 | A vulnerability in the zip decompression engine of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could... |
| CVE-2020-26065 | MEDIUM | 6.5 | 1.7% | Aug 4, 2023 | A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, rem... |
| CVE-2020-26064 | HIGH | 8.1 | 0.7% | Aug 4, 2023 | A vulnerability in the web UI of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain rea... |
| CVE-2020-20808 | MEDIUM | 6.1 | 0.6% | Aug 3, 2023 | Cross Site Scripting vulnerability in Qibosoft qibosoft v.7 and before allows a remote attacker to execute arbitrary cod... |
| CVE-2020-10962 | HIGH | 7.8 | 0.2% | Aug 1, 2023 | In PowerShell App Deployment Toolkit (aka PSAppDeployToolkit) through 3.8.0, an incorrect access control vulnerability i... |
| CVE-2020-36763 | MEDIUM | 5.4 | 0.5% | Jul 31, 2023 | Cross Site Scripting (XSS) vulnerability in DuxCMS 2.1 allows remote attackers to run arbitrary code via the content, ti... |
| CVE-2020-21881 | MEDIUM | 6.5 | 0.3% | Jul 31, 2023 | Cross Site Request Forgery (CSRF) vulnerability in admin.php in DuxCMS 2.1 allows remote attackers to modtify applicatio... |
| CVE-2020-21662 | CRITICAL | 9.8 | 0.6% | Jul 31, 2023 | SQL injection vulnerability in yunyecms 2.0.2 allows remote attackers to run arbitrary SQL commands via XFF. |
| CVE-2020-4868 | MEDIUM | 5.3 | 0.5% | Jul 31, 2023 | IBM TRIRIGA 3.0, 4.0, and 4.4 could allow a remote attacker to obtain sensitive information when a detailed technical er... |
| CVE-2020-22623 | HIGH | 7.5 | 1.1% | Jul 27, 2023 | Directory traversal vulnerability in Jinfornet Jreport 15.6 allows unauthenticated attackers to gain sensitive informati... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now