2020 CVE Vulnerabilities
21,081 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-18416 | MEDIUM | 6.8 | 0.3% | Jun 27, 2023 | An cross site request forgery (CSRF) vulnerability discovered in Jymusic v2.0.0.,that allows attackers to execute arbitr... |
| CVE-2020-18413 | MEDIUM | 4.8 | 0.4% | Jun 27, 2023 | Stored cross site scripting (XSS) vulnerability in /index.php?admin-master-navmenu-add of Chaoji CMS v2.18 that allows a... |
| CVE-2020-18410 | MEDIUM | 4.8 | 0.3% | Jun 27, 2023 | A stored cross site scripting (XSS) vulnerability in /index.php?admin-master-article-edit of Chaoji CMS v2.18 that allow... |
| CVE-2020-18406 | HIGH | 7.5 | 0.3% | Jun 27, 2023 | An issue was discovered in cmseasy v7.0.0 that allows user credentials to be sent in clear text due to no encryption of ... |
| CVE-2020-18418 | HIGH | 8.8 | 0.3% | Jun 27, 2023 | A Cross site request forgery (CSRF) vulnerability was discovered in FeiFeiCMS v4.1.190209, which allows attackers to cre... |
| CVE-2020-23066 | — | — | — | Jun 26, 2023 | Rejected reason: DO NOT USE THIS CVE ID NUMBER. Consult IDs: CVE-2020-17480. Reason: This CVE Record is a duplicate of C... |
| CVE-2020-23065 | MEDIUM | 5.4 | 0.4% | Jun 26, 2023 | Cross Site Scripting vulnerabiltiy in eZ Systems AS eZPublish Platform v.5.4 and eZ Publish Legacy v.5.4 allows a remote... |
| CVE-2020-23064 | — | — | — | Jun 26, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-11023. Reason: This candidate is a duplicate of ... |
| CVE-2020-20210 | HIGH | 8.8 | 1.0% | Jun 26, 2023 | Bludit 3.9.2 is vulnerable to Remote Code Execution (RCE) via /admin/ajax/upload-images. |
| CVE-2020-21489 | CRITICAL | 9.8 | 1.3% | Jun 20, 2023 | File Upload vulnerability in Feehicms v.2.0.8 allows a remote attacker to execute arbitrary code via the /admin/index.ph... |
| CVE-2020-21486 | HIGH | 7.5 | 0.9% | Jun 20, 2023 | SQL injection vulnerability in PHPOK v.5.4. allows a remote attacker to obtain sensitive information via the _userlist f... |
| CVE-2020-21485 | MEDIUM | 6.1 | 0.5% | Jun 20, 2023 | Cross Site Scripting vulnerability in Alluxio v.1.8.1 allows a remote attacker to executea arbitrary code via the path p... |
| CVE-2020-21474 | CRITICAL | 9.8 | 1.2% | Jun 20, 2023 | File Upload vulnerability in NucleusCMS v.3.71 allows a remote attacker to execute arbitrary code via the /nucleus/plugi... |
| CVE-2020-21400 | HIGH | 7.2 | 1.1% | Jun 20, 2023 | SQL injection vulnerability in gaozhifeng PHPMyWind v.5.6 allows a remote attacker to execute arbitrary code via the id ... |
| CVE-2020-21366 | HIGH | 8 | 0.3% | Jun 20, 2023 | Cross Site Request Forgery vulnerability in GreenCMS v.2.3 allows an attacker to gain privileges via the adduser functio... |
| CVE-2020-21325 | HIGH | 8.8 | 1.3% | Jun 20, 2023 | An issue in WUZHI CMS v.4.1.0 allows a remote attacker to execute arbitrary code via the set_chache method of the functi... |
| CVE-2020-21268 | MEDIUM | 6.1 | 0.6% | Jun 20, 2023 | Cross Site Scripting vulnerability in EasySoft ZenTao v.11.6.4 allows a remote attacker to execute arbitrary code via th... |
| CVE-2020-21252 | HIGH | 8.8 | 0.4% | Jun 20, 2023 | Cross Site Request Forgery vulnerability in Neeke HongCMS 3.0.0 allows a remote attacker to execute arbitrary code and e... |
| CVE-2020-21246 | MEDIUM | 5.4 | 0.6% | Jun 20, 2023 | Cross Site Scripting vulnerability in YiiCMS v.1.0 allows a remote attacker to execute arbitrary code via the news funct... |
| CVE-2020-21174 | CRITICAL | 9.8 | 1.3% | Jun 20, 2023 | File Upload vulenrability in liufee CMS v.2.0.7.1 allows a remote attacker to execute arbitrary code via the image suffi... |
| CVE-2020-21058 | MEDIUM | 6.1 | 0.6% | Jun 20, 2023 | Cross Site Scripting vulnerability in Typora v.0.9.79 allows a remote attacker to execute arbitrary code via the mermaid... |
| CVE-2020-21052 | MEDIUM | 6.1 | 0.6% | Jun 20, 2023 | Cross Site Scripting vulnerability in zrlog zrlog v.2.1.3 allows a remote attacker to execute arbitrary code via the nic... |
| CVE-2020-20969 | HIGH | 7.2 | 6.3% | Jun 20, 2023 | File Upload vulnerability in PluckCMS v.4.7.10 allows a remote attacker to execute arbitrary code via the trashcan_resto... |
| CVE-2020-20919 | HIGH | 7.2 | 1.3% | Jun 20, 2023 | File upload vulnerability in Pluck CMS v.4.7.10-dev2 allows a remote attacker to execute arbitrary code and access sensi... |
| CVE-2020-20918 | HIGH | 7.2 | 1.1% | Jun 20, 2023 | An issue discovered in Pluck CMS v.4.7.10-dev2 allows a remote attacker to execute arbitrary php code via the hidden par... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now