2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-25122 | MEDIUM | 4.8 | 0.6% | Sep 3, 2020 | The Admin CP in vBulletin 5.6.3 allows XSS via a Rank Type to User Rank Manager. |
| CVE-2020-25121 | MEDIUM | 4.8 | 0.7% | Sep 3, 2020 | The Admin CP in vBulletin 5.6.3 allows XSS via the Paid Subscription Email Notification field in the Options. |
| CVE-2020-25120 | MEDIUM | 4.8 | 0.6% | Sep 3, 2020 | The Admin CP in vBulletin 5.6.3 allows XSS via the admincp/search.php?do=dosearch URI. |
| CVE-2020-25119 | MEDIUM | 4.8 | 0.7% | Sep 3, 2020 | The Admin CP in vBulletin 5.6.3 allows XSS via a Title of a Child Help Item in the Login/Logoff part of the User Manual. |
| CVE-2020-25118 | MEDIUM | 4.8 | 0.6% | Sep 3, 2020 | The Admin CP in vBulletin 5.6.3 allows XSS via a Style Options Settings Title to Styles Manager. |
| CVE-2020-25117 | MEDIUM | 4.8 | 0.6% | Sep 3, 2020 | The Admin CP in vBulletin 5.6.3 allows XSS via a Junior Member Title to User Title Manager. |
| CVE-2020-25116 | MEDIUM | 4.8 | 0.6% | Sep 3, 2020 | The Admin CP in vBulletin 5.6.3 allows XSS via an Announcement Title to Channel Manager. |
| CVE-2020-25115 | MEDIUM | 4.8 | 0.6% | Sep 3, 2020 | The Admin CP in vBulletin 5.6.3 allows XSS via an Occupation Title or Description to User Profile Field Manager. |
| CVE-2020-24193 | CRITICAL | 9.8 | 2.8% | Sep 3, 2020 | A SQL injection vulnerability in login in Sourcecodetester Daily Tracker System 1.0 allows unauthenticated user to execu... |
| CVE-2020-14373 | MEDIUM | 5.5 | 0.5% | Sep 3, 2020 | A use after free was found in igc_reloc_struct_ptr() of psi/igc.c of ghostscript-9.25. A local attacker could supply a s... |
| CVE-2020-11579 | HIGH | 7.5 | 26.5% | Sep 3, 2020 | An issue was discovered in Chadha PHPKB 9.0 Enterprise Edition. installer/test-connection.php (part of the installation ... |
| CVE-2020-10720 | MEDIUM | 5.5 | 0.3% | Sep 3, 2020 | A flaw was found in the Linux kernel's implementation of GRO in versions before 5.2. This flaw allows an attacker with l... |
| CVE-2020-25102 | MEDIUM | 6.1 | 0.9% | Sep 3, 2020 | silverstripe-advancedreports (aka the Advanced Reports module for SilverStripe) 1.0 through 2.0 is vulnerable to Cross-S... |
| CVE-2020-24876 | CRITICAL | 9.8 | 1.7% | Sep 3, 2020 | Use of a hard-coded cryptographic key in Pancake versions < 4.13.29 allows an attacker to forge session cookies, which m... |
| CVE-2020-24162 | HIGH | 7.8 | 0.4% | Sep 3, 2020 | The Shenzhen Tencent app 5.8.2.5300 for PC platforms (from Tencent App Center) has a DLL hijacking vulnerability. Attack... |
| CVE-2020-24161 | HIGH | 7.8 | 0.4% | Sep 3, 2020 | Guangzhou NetEase Mail Master 4.14.1.1004 on Windows has a DLL hijacking vulnerability. Attackers can use this vulnerabi... |
| CVE-2020-24160 | HIGH | 7.8 | 0.5% | Sep 3, 2020 | Shenzhen Tencent TIM Windows client 3.0.0.21315 has a DLL hijacking vulnerability, which can be exploited by attackers t... |
| CVE-2020-24159 | HIGH | 7.8 | 0.4% | Sep 3, 2020 | NetEase Youdao Dictionary has a DLL hijacking vulnerability, which can be exploited by attackers to gain server permissi... |
| CVE-2020-24158 | HIGH | 7.8 | 0.3% | Sep 3, 2020 | 360 Speed Browser 12.0.1247.0 has a DLL hijacking vulnerability, which can be exploited by attackers to execute maliciou... |
| CVE-2020-23814 | MEDIUM | 6.1 | 1.2% | Sep 3, 2020 | Multiple cross-site scripting (XSS) vulnerabilities in xxl-job v2.2.0 allow remote attackers to inject arbitrary web scr... |
| CVE-2020-23811 | HIGH | 7.5 | 1.2% | Sep 3, 2020 | xxl-job 2.2.0 allows Information Disclosure of username, model, and password via job/admin/controller/UserController.jav... |
| CVE-2020-25105 | CRITICAL | 9.8 | 1.1% | Sep 3, 2020 | eramba c2.8.1 and Enterprise before e2.19.3 has a weak password recovery token (createHash has only a million possibilit... |
| CVE-2020-25104 | MEDIUM | 5.4 | 0.6% | Sep 3, 2020 | eramba c2.8.1 and Enterprise before e2.19.3 allows XSS via a crafted filename for a file attached to an object. For exam... |
| CVE-2020-25068 | HIGH | 7.5 | 3.9% | Sep 3, 2020 | Setelsa Conacwin v3.7.1.2 is vulnerable to a local file inclusion vulnerability. This vulnerability allows a remote unau... |
| CVE-2020-25042 | HIGH | 7.2 | 18.1% | Sep 3, 2020 | An arbitrary file upload issue exists in Mara CMS 7.5. In order to exploit this, an attacker must have a valid authentic... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now