2020 CVE Vulnerabilities
21,085 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-18982 | MEDIUM | 5.4 | 0.6% | Jul 12, 2021 | Cross Sie Scripting (XSS) vulnerability in Halo 0.4.3 via CommentAuthorUrl. |
| CVE-2020-19204 | MEDIUM | 5.4 | 0.7% | Jul 12, 2021 | An authenticated Stored Cross-Site Scriptiong (XSS) vulnerability exists in Lightning Wire Labs IPFire 2.21 (x86_64) - C... |
| CVE-2020-19203 | MEDIUM | 5.4 | 1.1% | Jul 12, 2021 | An authenticated Cross-Site Scripting (XSS) vulnerability was found in widgets/widgets/wake_on_lan_widget.php, a compone... |
| CVE-2020-19201 | MEDIUM | 5.4 | 3.5% | Jul 12, 2021 | A Stored Cross-Site Scripting (XSS) vulnerability was found in status_filter_reload.php, a page in the pfSense software ... |
| CVE-2020-18979 | MEDIUM | 6.1 | 0.7% | Jul 12, 2021 | Cross Siste Scripting (XSS) vulnerablity in Halo 0.4.3 via the X-forwarded-for Header parameter. |
| CVE-2020-35987 | MEDIUM | 5.4 | 1.3% | Jul 9, 2021 | A stored cross site scripting (XSS) vulnerability in the 'Entities List' feature of Rukovoditel 2.7.2 allows authenticat... |
| CVE-2020-35986 | MEDIUM | 5.4 | 1.3% | Jul 9, 2021 | A stored cross site scripting (XSS) vulnerability in the 'Users Access Groups' feature of Rukovoditel 2.7.2 allows authe... |
| CVE-2020-35985 | MEDIUM | 5.4 | 1.3% | Jul 9, 2021 | A stored cross site scripting (XSS) vulnerability in the 'Global Lists" feature of Rukovoditel 2.7.2 allows authenticate... |
| CVE-2020-35984 | MEDIUM | 5.4 | 1.3% | Jul 9, 2021 | A stored cross site scripting (XSS) vulnerability in the 'Users Alerts' feature of Rukovoditel 2.7.2 allows authenticate... |
| CVE-2020-25879 | MEDIUM | 5.4 | 0.5% | Jul 9, 2021 | A stored cross site scripting (XSS) vulnerability in the 'Manage Users' feature of Codoforum v5.0.2 allows authenticated... |
| CVE-2020-25878 | MEDIUM | 4.8 | 0.5% | Jul 9, 2021 | A stored cross site scripting (XSS) vulnerability in the 'Admin-Tools' feature of BlackCat CMS 1.3.6 allows authenticate... |
| CVE-2020-25877 | MEDIUM | 5.4 | 0.5% | Jul 9, 2021 | A stored cross site scripting (XSS) vulnerability in the 'Add Page' feature of BlackCat CMS 1.3.6 allows authenticated a... |
| CVE-2020-25876 | MEDIUM | 5.4 | 0.5% | Jul 9, 2021 | A stored cross site scripting (XSS) vulnerability in the 'Pages' feature of Codoforum v5.0.2 allows authenticated attack... |
| CVE-2020-25875 | MEDIUM | 5.4 | 0.5% | Jul 9, 2021 | A stored cross site scripting (XSS) vulnerability in the 'Smileys' feature of Codoforum v5.0.2 allows authenticated atta... |
| CVE-2020-25394 | MEDIUM | 5.4 | 0.4% | Jul 9, 2021 | A stored cross site scripting (XSS) vulnerability in moziloCMS 2.0 allows authenticated attackers to execute arbitrary w... |
| CVE-2020-25392 | MEDIUM | 5.4 | 0.4% | Jul 9, 2021 | A cross site scripting (XSS) vulnerability in CSZ CMS 1.2.9 allows attackers to execute arbitrary web scripts or HTML vi... |
| CVE-2020-25391 | MEDIUM | 5.4 | 0.4% | Jul 9, 2021 | A cross site scripting vulnerability in CSZ CMS 1.2.9 allows attackers to execute arbitrary web scripts or HTML via a cr... |
| CVE-2020-29014 | MEDIUM | 5.3 | 0.5% | Jul 9, 2021 | A concurrent execution using shared resource with improper synchronization ('race condition') in the command shell of Fo... |
| CVE-2020-21333 | MEDIUM | 5.4 | 0.5% | Jul 9, 2021 | Cross Site Scripting (XSS) vulnerability in PublicCMS 4.0 to get an admin cookie when the Administrator reviews submit c... |
| CVE-2020-22535 | MEDIUM | 6.5 | 0.8% | Jul 9, 2021 | Incorrect Access Control vulnerability in PbootCMS 2.0.6 via the list parameter in the update function in upgradecontrol... |
| CVE-2020-20363 | MEDIUM | 4.8 | 0.8% | Jul 8, 2021 | Crossi Site Scripting (XSS) vulnerability in PbootCMS 2.0.3 in admin.php. |
| CVE-2020-18741 | MEDIUM | 5.3 | 0.9% | Jul 8, 2021 | Improper Authorization in ThinkSAAS v2.7 allows remote attackers to modify the description of any user's photo via the "... |
| CVE-2020-20586 | MEDIUM | 4.5 | 0.5% | Jul 8, 2021 | A cross site request forgery (CSRF) vulnerability in the /xyhai.php?s=/Auth/editUser URI of XYHCMS V3.6 allows attackers... |
| CVE-2020-20584 | MEDIUM | 6.1 | 1.1% | Jul 8, 2021 | A cross site scripting vulnerability in baigo CMS v4.0-beta-1 allows attackers to execute arbitrary web scripts or HTML ... |
| CVE-2020-20217 | MEDIUM | 6.5 | 2.0% | Jul 8, 2021 | Mikrotik RouterOs before 6.47 (stable tree) suffers from an uncontrolled resource consumption vulnerability in the /nova... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now