2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-6139 | CRITICAL | 9.8 | 2.6% | Sep 1, 2020 | SQL injection vulnerability exists in the password reset functionality of OS4Ed openSIS 7.3. The username_stf_email para... |
| CVE-2020-6138 | CRITICAL | 9.8 | 2.6% | Sep 1, 2020 | SQL injection vulnerability exists in the password reset functionality of OS4Ed openSIS 7.3. The uname parameter in the ... |
| CVE-2020-6137 | CRITICAL | 9.8 | 2.6% | Sep 1, 2020 | SQL injection vulnerability exists in the password reset functionality of OS4Ed openSIS 7.3. The password_stf_email para... |
| CVE-2020-5777 | CRITICAL | 9.8 | 23.9% | Sep 1, 2020 | MAGMI versions prior to 0.7.24 are vulnerable to a remote authentication bypass due to allowing default credentials in t... |
| CVE-2020-5776 | HIGH | 8.8 | 14.7% | Sep 1, 2020 | Currently, all versions of MAGMI are vulnerable to CSRF due to the lack of CSRF tokens. RCE (via phpcli command) is poss... |
| CVE-2020-25070 | HIGH | 8.8 | 0.5% | Sep 1, 2020 | USVN (aka User-friendly SVN) before 1.0.10 allows CSRF, related to the lack of the SameSite Strict feature. |
| CVE-2020-25069 | CRITICAL | 9.8 | 1.9% | Sep 1, 2020 | USVN (aka User-friendly SVN) before 1.0.10 allows attackers to execute arbitrary code in the commit view. |
| CVE-2020-16210 | CRITICAL | 9 | 3.2% | Sep 1, 2020 | The affected product is vulnerable to reflected cross-site scripting, which may allow an attacker to remotely execute ar... |
| CVE-2020-16208 | HIGH | 8.8 | 1.2% | Sep 1, 2020 | The affected product is vulnerable to cross-site request forgery, which may allow an attacker to modify different config... |
| CVE-2020-16206 | CRITICAL | 9 | 3.2% | Sep 1, 2020 | The affected product is vulnerable to stored cross-site scripting, which may allow an attacker to remotely execute arbit... |
| CVE-2020-16204 | CRITICAL | 9.8 | 5.5% | Sep 1, 2020 | The affected product is vulnerable due to an undocumented interface found on the device, which may allow an attacker to ... |
| CVE-2020-13946 | MEDIUM | 5.9 | 3.0% | Sep 1, 2020 | In Apache Cassandra, all versions prior to 2.1.22, 2.2.18, 3.0.22, 3.11.8 and 4.0-beta2, it is possible for a local atta... |
| CVE-2020-24559 | HIGH | 7.8 | 0.8% | Sep 1, 2020 | A vulnerability in Trend Micro Apex One, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services... |
| CVE-2020-24558 | HIGH | 7.1 | 0.6% | Sep 1, 2020 | A vulnerability in an Trend Micro Apex One, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Servi... |
| CVE-2020-24557 | HIGH | 7.8 | 2.6% | Sep 1, 2020 | A vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 on Microsoft Windows may allow an atta... |
| CVE-2020-24556 | HIGH | 7.8 | 0.8% | Sep 1, 2020 | A vulnerability in Trend Micro Apex One, OfficeScan XG SP1, Worry-Free Business Security 10 SP1 and Worry-Free Business ... |
| CVE-2020-6141 | CRITICAL | 9.8 | 3.9% | Sep 1, 2020 | An exploitable SQL injection vulnerability exists in the login functionality of OS4Ed openSIS 7.3. A specially crafted H... |
| CVE-2020-6136 | HIGH | 8.8 | 1.8% | Sep 1, 2020 | An exploitable SQL injection vulnerability exists in the DownloadWindow.php functionality of OS4Ed openSIS 7.3. A specia... |
| CVE-2020-24034 | HIGH | 8.8 | 3.7% | Sep 1, 2020 | Sagemcom F@ST 5280 routers using firmware version 1.150.61 have insecure deserialization that allows any authenticated u... |
| CVE-2020-17405 | HIGH | 8.8 | 2.0% | Sep 1, 2020 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Senstar Symp... |
| CVE-2020-6135 | HIGH | 8.8 | 1.8% | Sep 1, 2020 | An exploitable SQL injection vulnerability exists in the Validator.php functionality of OS4Ed openSIS 7.3. A specially c... |
| CVE-2020-23839 | MEDIUM | 6.1 | 10.5% | Sep 1, 2020 | A Reflected Cross-Site Scripting (XSS) vulnerability in GetSimple CMS v3.3.16, in the admin/index.php login portal webpa... |
| CVE-2020-23836 | HIGH | 8.8 | 0.6% | Sep 1, 2020 | A Cross-Site Request Forgery (CSRF) vulnerability in edit_user.php in OSWAPP Warehouse Inventory System (aka OSWA-INV) t... |
| CVE-2020-23835 | MEDIUM | 6.1 | 2.3% | Sep 1, 2020 | A Reflected Cross-Site Scripting (XSS) vulnerability in the index.php login-portal webpage of SourceCodester Tailor Mana... |
| CVE-2020-23831 | MEDIUM | 6.1 | 0.8% | Sep 1, 2020 | A Reflected Cross-Site Scripting (XSS) vulnerability in the index.php login-portal webpage of SourceCodester Stock Manag... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now