2020 CVE Vulnerabilities
21,081 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-35698 | MEDIUM | 6.1 | 0.5% | Jul 25, 2023 | Thinkific Thinkific Online Course Creation Platform 1.0 is affected by: Cross Site Scripting (XSS). The impact is: execu... |
| CVE-2020-24275 | MEDIUM | 6.5 | 0.7% | Jul 20, 2023 | A HTTP response header injection vulnerability in Swoole v4.5.2 allows attackers to execute arbitrary code via supplying... |
| CVE-2020-22159 | HIGH | 8.8 | 0.8% | Jul 18, 2023 | EVERTZ devices 3080IPX exe-guest-v1.2-r26125, 7801FC 1.3 Build 27, and 7890IXG V494 are vulnerable to Arbitrary File Upl... |
| CVE-2020-36762 | CRITICAL | 9.8 | 1.9% | Jul 18, 2023 | A vulnerability was found in ONS Digital RAS Collection Instrument up to 2.0.27 and classified as critical. Affected by ... |
| CVE-2020-23911 | MEDIUM | 5.5 | 0.3% | Jul 18, 2023 | An issue was discovered in asn1c through v0.9.28. A NULL pointer dereference exists in the function _default_error_logge... |
| CVE-2020-23910 | MEDIUM | 5.5 | 0.3% | Jul 18, 2023 | Stack-based buffer overflow vulnerability in asn1c through v0.9.28 via function genhash_get in genhash.c. |
| CVE-2020-23909 | HIGH | 7.1 | 0.3% | Jul 18, 2023 | Heap-based buffer over-read in function png_convert_4 in file pngex.cc in AdvanceMAME through 2.1. |
| CVE-2020-36695 | HIGH | 7.8 | 0.1% | Jul 18, 2023 | Incorrect Default Permissions vulnerability in Hitachi Device Manager on Linux (Device Manager Server component), Hitach... |
| CVE-2020-20021 | HIGH | 7.5 | 1.3% | Jul 12, 2023 | An issue discovered in MikroTik Router v6.46.3 and earlier allows attacker to cause denial of service via misconfigurati... |
| CVE-2020-36761 | MEDIUM | 4.3 | 0.5% | Jul 12, 2023 | The Top 10 plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.10.4. Th... |
| CVE-2020-36760 | MEDIUM | 4.3 | 0.5% | Jul 12, 2023 | The Ocean Extra plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.6.5... |
| CVE-2020-36757 | MEDIUM | 4.3 | 0.4% | Jul 12, 2023 | The WP Hotel Booking plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, ... |
| CVE-2020-36756 | MEDIUM | 4.3 | 0.4% | Jul 12, 2023 | The 10WebAnalytics plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.... |
| CVE-2020-36752 | MEDIUM | 4.3 | 0.4% | Jul 12, 2023 | The Coming Soon & Maintenance Mode Page plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up ... |
| CVE-2020-36750 | MEDIUM | 4.3 | 0.3% | Jul 12, 2023 | The EWWW Image Optimizer plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and includi... |
| CVE-2020-20118 | MEDIUM | 5.5 | 0.2% | Jul 11, 2023 | Buffer Overflow vulnerability in Avast AntiVirus before v.19.7 allows a local attacker to cause a denial of service via ... |
| CVE-2020-8934 | MEDIUM | 4.3 | 0.2% | Jul 7, 2023 | The Site Kit by Google plugin for WordPress is vulnerable to Sensitive Information Disclosure in versions up to, and inc... |
| CVE-2020-22336 | CRITICAL | 9.8 | 1.1% | Jul 6, 2023 | An issue was discovered in pdfcrack 0.17 thru 0.18, allows attackers to execute arbitrary code via a stack overflow in t... |
| CVE-2020-21862 | HIGH | 8.1 | 0.8% | Jul 6, 2023 | Directory traversal vulnerability in DuxCMS 2.1 allows attackers to delete arbitrary files via /admin/AdminBackup/del. |
| CVE-2020-21861 | HIGH | 8.8 | 0.6% | Jul 6, 2023 | File upload vulnerability in DuxCMS 2.1 allows attackers to execute arbitrary php code via duxcms/AdminUpload/upload. |
| CVE-2020-23452 | MEDIUM | 6.1 | 0.4% | Jul 5, 2023 | A cross-site scripting (XSS) vulnerability in Selenium Grid v3.141.59 allows attackers to execute arbitrary web scripts ... |
| CVE-2020-25969 | CRITICAL | 9.8 | 0.9% | Jul 5, 2023 | gnuplot v5.5 was discovered to contain a buffer overflow via the function plotrequest(). |
| CVE-2020-22597 | CRITICAL | 9.8 | 1.1% | Jul 3, 2023 | An issue in Jerrscript- project Jerryscrip v. 2.3.0 allows a remote attacker to execute arbitrary code via the ecma_buil... |
| CVE-2020-22153 | CRITICAL | 9.8 | 1.2% | Jul 3, 2023 | File Upload vulnerability in FUEL-CMS v.1.4.6 allows a remote attacker to execute arbitrary code via a crafted .php file... |
| CVE-2020-22152 | MEDIUM | 5.4 | 0.5% | Jul 3, 2023 | Cross Site Scripting vulnerability in daylight studio FUEL- CMS v.1.4.6 allows a remote attacker to execute arbitrary co... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now