2020 CVE Vulnerabilities
21,081 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-22533 | MEDIUM | 6.1 | 0.5% | Apr 4, 2023 | Cross Site Scripting vulnerability found in Zentao allows a remote attacker to execute arbitrary code via the lang param... |
| CVE-2020-21514 | HIGH | 8.8 | 0.8% | Apr 4, 2023 | An issue was discovered in Fluent-ui v.1.2.2 allows attackers to gain escalated privileges and execute arbitrary code du... |
| CVE-2020-21487 | CRITICAL | 9.6 | 0.7% | Apr 4, 2023 | Cross Site Scripting vulnerability found in Netgate pfSense 2.4.4 and ACME package v.0.6.3 allows attackers to execute a... |
| CVE-2020-21060 | HIGH | 8.8 | 0.9% | Apr 4, 2023 | SQL injection vulnerability found in PHPMyWind v.5.6 allows a remote attacker to gain privileges via the delete function... |
| CVE-2020-20915 | CRITICAL | 9.8 | 1.1% | Apr 4, 2023 | SQL Injection vulnerability found in PublicCMS v.4.0 allows a remote attacker to execute arbitrary code via sql paramete... |
| CVE-2020-20914 | CRITICAL | 9.8 | 1.1% | Apr 4, 2023 | SQL Injection vulnerability found in San Luan PublicCMS v.4.0 allows a remote attacker to execute arbitrary code via the... |
| CVE-2020-20913 | CRITICAL | 9.8 | 1.4% | Apr 4, 2023 | SQL Injection vulnerability found in Ming-Soft MCMS v.4.7.2 allows a remote attacker to execute arbitrary code via basic... |
| CVE-2020-20522 | MEDIUM | 6.1 | 0.6% | Apr 4, 2023 | Cross Site Scripting vulnerability found in KiteCMS v.1.1 allows a remote attacker to execute arbitrary code via the reg... |
| CVE-2020-20521 | MEDIUM | 6.1 | 0.6% | Apr 4, 2023 | Cross Site Scripting vulnerability found in KiteCMS v.1.1 allows a remote attacker to execute arbitrary code via the com... |
| CVE-2020-19850 | MEDIUM | 6.5 | 1.1% | Apr 4, 2023 | An issue found in Directus API v.2.2.0 allows a remote attacker to cause a denial of service via a great amount of HTTP ... |
| CVE-2020-19699 | MEDIUM | 6.1 | 0.6% | Apr 4, 2023 | Cross Site Scripting vulnerability found in KOHGYLW Kiftd v.1.0.18 allows a remote attacker to execute arbitrary code vi... |
| CVE-2020-19698 | MEDIUM | 6.1 | 0.7% | Apr 4, 2023 | Cross Site Scripting vulnerability found in Pandao Editor.md v.1.5.0 allows a remote attacker to execute arbitrary code ... |
| CVE-2020-19697 | MEDIUM | 6.1 | 0.7% | Apr 4, 2023 | Cross Site Scripting vulnerability found in Pandao Editor.md v.1.5.0 allows a remote attacker to execute arbitrary code ... |
| CVE-2020-19695 | CRITICAL | 9.8 | 1.3% | Apr 4, 2023 | Buffer Overflow found in Nginx NJS allows a remote attacker to execute arbitrary code via the njs_object_property parame... |
| CVE-2020-19693 | CRITICAL | 9.8 | 0.8% | Apr 4, 2023 | An issue found in Espruino Espruino 6ea4c0a allows an attacker to execute arbitrrary code via oldFunc parameter of the j... |
| CVE-2020-19692 | CRITICAL | 9.8 | 1.3% | Apr 4, 2023 | Buffer Overflow vulnerabilty found in Nginx NJS v.0feca92 allows a remote attacker to execute arbitrary code via the njs... |
| CVE-2020-19279 | CRITICAL | 9.8 | 1.1% | Apr 4, 2023 | Directory Traversal vulnerability found in B3log Wide allows a an attacker to escalate privileges via symbolic links. |
| CVE-2020-19278 | HIGH | 8.8 | 0.5% | Apr 4, 2023 | Cross Site Request Forgery vulnerability found in Phachon mm-wiki v.0.1.2 allows a remote attacker to execute arbitrary ... |
| CVE-2020-19277 | MEDIUM | 5.4 | 0.5% | Apr 4, 2023 | Cross Site Scripting vulnerability found in Phachon mm-wiki v.0.1.2 allows a remote attacker to execute arbitrary code v... |
| CVE-2020-36692 | MEDIUM | 5.4 | 0.6% | Apr 4, 2023 | A reflected XSS via POST vulnerability in report scheduler of Sophos Web Appliance versions older than 4.3.10.4 allows e... |
| CVE-2020-14140 | HIGH | 7.5 | 1.0% | Mar 29, 2023 | When Xiaomi router firmware is updated in 2020, there is an unauthenticated API that can reveal WIFI password vulnerabil... |
| CVE-2020-8889 | HIGH | 7.5 | 1.0% | Mar 28, 2023 | The ShipStation.com plugin 1.0 for CS-Cart allows remote attackers to obtain sensitive information (via action=export) b... |
| CVE-2020-36666 | HIGH | 8.8 | 0.9% | Mar 27, 2023 | The directory-pro WordPress plugin before 1.9.5, final-user-wp-frontend-user-profiles WordPress plugin before 1.2.2, pro... |
| CVE-2020-36691 | MEDIUM | 5.5 | 0.3% | Mar 24, 2023 | An issue was discovered in the Linux kernel before 5.8. lib/nlattr.c allows attackers to cause a denial of service (unbo... |
| CVE-2020-24857 | MEDIUM | 6.1 | 0.4% | Mar 23, 2023 | Cross Site Scripting vulnerabilty found in IXPManager v.5.6.0 allows attackers to excute arbitrary code via the looking ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now