2020 CVE Vulnerabilities
21,081 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-20735 | CRITICAL | 9.8 | 1.1% | Jun 20, 2023 | File Upload vulnerability in LJCMS v.4.3.R60321 allows a remote attacker to execute arbitrary code via the ljcms/index.p... |
| CVE-2020-20726 | HIGH | 8.8 | 0.7% | Jun 20, 2023 | Cross Site Request Forgery vulnerability in Gila GilaCMS v.1.11.4 allows a remote attacker to execute arbitrary code via... |
| CVE-2020-20725 | MEDIUM | 6.1 | 0.5% | Jun 20, 2023 | Cross Site Scripting vulnerability in taogogo taoCMS v.2.5 beta5.1 allows remote attacker to execute arbitrary code via ... |
| CVE-2020-20718 | CRITICAL | 9.8 | 1.3% | Jun 20, 2023 | File Upload vulnerability in PluckCMS v.4.7.10 dev versions allows a remote attacker to execute arbitrary code via a cra... |
| CVE-2020-20703 | CRITICAL | 9.8 | 1.5% | Jun 20, 2023 | Buffer Overflow vulnerability in VIM v.8.1.2135 allows a remote attacker to execute arbitrary code via the operand param... |
| CVE-2020-20697 | MEDIUM | 4.8 | 0.5% | Jun 20, 2023 | Cross Site Scripting vulnerability in khodakhah NodCMS v.3.0 allows a remote attacker to execute arbitrary code and gain... |
| CVE-2020-20636 | HIGH | 7.5 | 0.7% | Jun 20, 2023 | SQL injection vulnerability found in Joyplus-cms v.1.6.0 allows a remote attacker to access sensitive information via th... |
| CVE-2020-20502 | MEDIUM | 6.5 | 0.5% | Jun 20, 2023 | Cross Site Request Forgery found in yzCMS v.2.0 allows a remote attacker to execute arbitrary code via the token check f... |
| CVE-2020-20491 | HIGH | 7.2 | 1.1% | Jun 20, 2023 | SQL injection vulnerability in OpenCart v.2.2.00 thru 3.0.3.2 allows a remote attacker to execute arbitrary code via the... |
| CVE-2020-20413 | CRITICAL | 9.8 | 1.3% | Jun 20, 2023 | SQL injection vulnerability found in WUZHICMS v.4.1.0 allows a remote attacker to execute arbitrary code via the checkti... |
| CVE-2020-20335 | HIGH | 7.5 | 1.0% | Jun 20, 2023 | Buffer Overflow vulnerability in Antirez Kilo before commit 7709a04ae8520c5b04d261616098cebf742f5a23 allows a remote att... |
| CVE-2020-20070 | MEDIUM | 6.1 | 0.6% | Jun 20, 2023 | Cross Site Scripting vulnerability found in wkeyuan DWSurvey 1.0 allows a remote attacker to execute arbitrary code via ... |
| CVE-2020-20067 | HIGH | 8.8 | 1.3% | Jun 20, 2023 | File upload vulnerability in ebCMS v.1.1.0 allows a remote attacker to execute arbitrary code via the upload type parame... |
| CVE-2020-22402 | MEDIUM | 6.1 | 0.4% | Jun 14, 2023 | Cross Site Scripting (XSS) vulnerability in SOGo Web Mail before 4.3.1 allows attackers to obtain user sensitive informa... |
| CVE-2020-36732 | MEDIUM | 5.3 | 1.1% | Jun 12, 2023 | The crypto-js package before 3.2.1 for Node.js generates random numbers by concatenating the string "0." with an integer... |
| CVE-2020-36728 | CRITICAL | 9.8 | 3.2% | Jun 7, 2023 | The Adning Advertising plugin for WordPress is vulnerable to file deletion via path traversal in versions up to, and inc... |
| CVE-2020-36705 | CRITICAL | 9.8 | 6.9% | Jun 7, 2023 | The Adning Advertising plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation ... |
| CVE-2020-36731 | MEDIUM | 6.1 | 1.3% | Jun 7, 2023 | The Flexible Checkout Fields for WooCommerce plugin for WordPress is vulnerable to Unauthenticated Arbitrary Plugin Set... |
| CVE-2020-36730 | CRITICAL | 9.3 | 2.3% | Jun 7, 2023 | The CMP for WordPress is vulnerable to authorization bypass due to a missing capability check on the cmp_get_post_detail... |
| CVE-2020-36729 | MEDIUM | 4.3 | 0.7% | Jun 7, 2023 | The 2J-SlideShow Plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the 'tw... |
| CVE-2020-36727 | CRITICAL | 9.8 | 1.6% | Jun 7, 2023 | The Newsletter Manager plugin for WordPress is vulnerable to insecure deserialization in versions up to, and including, ... |
| CVE-2020-36726 | CRITICAL | 9.8 | 1.6% | Jun 7, 2023 | The Ultimate Reviews plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 2.1.32... |
| CVE-2020-36725 | HIGH | 8.1 | 1.1% | Jun 7, 2023 | The TI WooCommerce Wishlist and TI WooCommerce Wishlist Pro plugins for WordPress are vulnerable to an Options Change vu... |
| CVE-2020-36724 | CRITICAL | 9.8 | 1.5% | Jun 7, 2023 | The Wordable plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.1.1. This i... |
| CVE-2020-36723 | MEDIUM | 5.3 | 1.6% | Jun 7, 2023 | The ListingPro - WordPress Directory & Listing Theme for WordPress is vulnerable to Sensitive Data Exposure in versions ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now