2020 CVE Vulnerabilities
21,085 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-36669 | HIGH | 8.8 | 0.4% | Mar 7, 2023 | The JetBackup – WP Backup, Migrate & Restore plugin for WordPress is vulnerable to Cross-Site Request Forgery in version... |
| CVE-2020-36668 | MEDIUM | 4.3 | 0.6% | Mar 7, 2023 | The JetBackup – WP Backup, Migrate & Restore plugin for WordPress is vulnerable to sensitive information disclosure in v... |
| CVE-2020-36667 | MEDIUM | 5.4 | 0.5% | Mar 7, 2023 | The JetBackup – WP Backup, Migrate & Restore plugin for WordPress is vulnerable to unauthorized back-up location changes... |
| CVE-2020-36665 | MEDIUM | 6.1 | 0.6% | Mar 4, 2023 | A vulnerability was found in Artesãos SEOTools up to 0.17.1 and classified as critical. This issue affects the function ... |
| CVE-2020-36664 | MEDIUM | 6.1 | 0.6% | Mar 4, 2023 | A vulnerability has been found in Artesãos SEOTools up to 0.17.1 and classified as problematic. This vulnerability affec... |
| CVE-2020-36663 | MEDIUM | 6.1 | 0.6% | Mar 4, 2023 | A vulnerability, which was classified as problematic, was found in Artesãos SEOTools up to 0.17.1. This affects the func... |
| CVE-2020-5026 | HIGH | 7.5 | 0.7% | Mar 1, 2023 | IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.2.0 through 3.2.7 could allow a remote attac... |
| CVE-2020-5001 | HIGH | 7.5 | 1.0% | Mar 1, 2023 | IBM Financial Transaction Manager 3.2.0 through 3.2.7 could allow a remote attacker to traverse directories on the syst... |
| CVE-2020-36652 | HIGH | 7.1 | 0.1% | Feb 28, 2023 | Incorrect Default Permissions vulnerability in Hitachi Automation Director on Linux, Hitachi Infrastructure Analytics Ad... |
| CVE-2020-9846 | MEDIUM | 5.3 | 0.4% | Feb 27, 2023 | A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.0.1. A malicious ap... |
| CVE-2020-36656 | MEDIUM | 5.4 | 0.5% | Feb 21, 2023 | The Spectra WordPress plugin before 1.15.0 does not sanitize user input as it reaches its style HTML attribute, allowing... |
| CVE-2020-19824 | HIGH | 7 | 0.2% | Feb 17, 2023 | An issue in MPV v.0.29.1 fixed in v0.30 allows attackers to execute arbitrary code and crash program via the ao_c parame... |
| CVE-2020-29168 | CRITICAL | 9.8 | 1.2% | Feb 17, 2023 | SQL Injection vulnerability in Projectworlds Online Doctor Appointment Booking System, allows attackers to gain sensitiv... |
| CVE-2020-6817 | HIGH | 7.5 | 0.7% | Feb 16, 2023 | bleach.clean behavior parsing style attributes could result in a regular expression denial of service (ReDoS). Calls to ... |
| CVE-2020-12413 | MEDIUM | 5.9 | 0.6% | Feb 16, 2023 | The Raccoon attack is a timing attack on DHE ciphersuites inherit in the TLS specification. To mitigate this vulnerabili... |
| CVE-2020-21120 | CRITICAL | 9.8 | 1.0% | Feb 15, 2023 | SQL Injection vulnerability in file home\controls\cart.class.php in UQCMS 2.1.3, allows attackers execute arbitrary comm... |
| CVE-2020-21119 | CRITICAL | 9.8 | 0.9% | Feb 15, 2023 | SQL Injection vulnerability in Kliqqi-CMS 2.0.2 in admin/admin_update_module_widgets.php in recordIDValue parameter, all... |
| CVE-2020-19825 | CRITICAL | 9.6 | 0.7% | Feb 15, 2023 | Cross Site Scripting (XSS) vulnerability in kevinpapst kimai2 1.30.0 in /src/Twig/Runtime/MarkdownExtension.php, allows ... |
| CVE-2020-36661 | HIGH | 7.5 | 0.9% | Feb 12, 2023 | A vulnerability was found in Kong lua-multipart 0.5.8-1. It has been declared as problematic. This vulnerability affects... |
| CVE-2020-36660 | MEDIUM | 4.3 | 0.7% | Feb 6, 2023 | A vulnerability was found in paxswill EVE Ship Replacement Program 0.12.11. It has been rated as problematic. This issue... |
| CVE-2020-24307 | HIGH | 7.8 | 0.4% | Feb 2, 2023 | An issue in mRemoteNG v1.76.20 allows attackers to escalate privileges via a crafted executable file. NOTE: third partie... |
| CVE-2020-14395 | — | — | — | Feb 1, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes:... |
| CVE-2020-20402 | HIGH | 7.5 | 0.7% | Jan 31, 2023 | Westbrookadmin portfolioCMS v1.05 allows attackers to bypass password validation and access sensitive information via se... |
| CVE-2020-36659 | HIGH | 8.1 | 0.4% | Jan 27, 2023 | In Apache::Session::Browseable before 1.3.6, validity of the X.509 certificate is not checked by default when connecting... |
| CVE-2020-36658 | HIGH | 8.1 | 0.4% | Jan 27, 2023 | In Apache::Session::LDAP before 0.5, validity of the X.509 certificate is not checked by default when connecting to remo... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now