2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-3454 | HIGH | 7.2 | 2.6% | Aug 27, 2020 | A vulnerability in the Call Home feature of Cisco NX-OS Software could allow an authenticated, remote attacker to inject... |
| CVE-2020-3415 | HIGH | 8.8 | 0.8% | Aug 27, 2020 | A vulnerability in the Data Management Engine (DME) of Cisco NX-OS Software could allow an unauthenticated, adjacent att... |
| CVE-2020-3398 | HIGH | 8.6 | 1.8% | Aug 27, 2020 | A vulnerability in the Border Gateway Protocol (BGP) Multicast VPN (MVPN) implementation of Cisco NX-OS Software could a... |
| CVE-2020-3397 | HIGH | 8.6 | 1.8% | Aug 27, 2020 | A vulnerability in the Border Gateway Protocol (BGP) Multicast VPN (MVPN) implementation of Cisco NX-OS Software could a... |
| CVE-2020-3394 | HIGH | 7.8 | 0.3% | Aug 27, 2020 | A vulnerability in the Enable Secret feature of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in... |
| CVE-2020-3338 | HIGH | 7.5 | 1.8% | Aug 27, 2020 | A vulnerability in the Protocol Independent Multicast (PIM) feature for IPv6 networks (PIM6) of Cisco NX-OS Software cou... |
| CVE-2020-24706 | MEDIUM | 6.1 | 0.8% | Aug 27, 2020 | An issue was discovered in certain WSO2 products. The Try It tool allows Reflected XSS. This affects API Manager through... |
| CVE-2020-24705 | HIGH | 8.8 | 1.1% | Aug 27, 2020 | An issue was discovered in certain WSO2 products. A valid Carbon Management Console session cookie may be sent to an att... |
| CVE-2020-24704 | MEDIUM | 6.1 | 0.7% | Aug 27, 2020 | An issue was discovered in certain WSO2 products. The Try It tool allows Reflected XSS. This affects API Manager 2.2.0, ... |
| CVE-2020-24703 | HIGH | 8.8 | 1.1% | Aug 27, 2020 | An issue was discovered in certain WSO2 products. A valid Carbon Management Console session cookie may be sent to an att... |
| CVE-2020-24390 | MEDIUM | 6.1 | 1.0% | Aug 27, 2020 | eonweb in EyesOfNetwork before 5.3-7 does not properly escape the username on the /module/admin_logs page, which might a... |
| CVE-2020-23576 | MEDIUM | 5.4 | 0.5% | Aug 27, 2020 | Laborator Neon dashboard v3 is affected by stored Cross Site Scripting (XSS) via the chat tab. |
| CVE-2020-16142 | LOW | 3.5 | 0.8% | Aug 27, 2020 | On Mercedes-Benz C Class AMG Premium Plus c220 BlueTec vehicles, the Bluetooth stack mishandles %x and %c format-string ... |
| CVE-2020-14415 | LOW | 3.3 | 0.5% | Aug 27, 2020 | oss_write in audio/ossaudio.c in QEMU before 5.0.0 mishandles a buffer position. |
| CVE-2020-23984 | MEDIUM | 5.4 | 0.6% | Aug 27, 2020 | Online Hotel Booking System Pro PHP Version 1.3 has Persistent Cross-site Scripting in Customer registration-form all-ta... |
| CVE-2020-23983 | MEDIUM | 5.4 | 0.6% | Aug 27, 2020 | Michael-design iChat Realtime PHP Live Support System 1.6 has persistent Cross-site Scripting via chat,text-filed tags. |
| CVE-2020-23982 | MEDIUM | 6.1 | 0.5% | Aug 27, 2020 | DesignMasterEvents Conference management 1.0.0 has cross site scripting via the 'certificate.php' |
| CVE-2020-23981 | MEDIUM | 6.1 | 0.8% | Aug 27, 2020 | 13enforme CMS 1.0 has Cross Site Scripting via the "content.php" id parameter. |
| CVE-2020-23979 | CRITICAL | 9.8 | 1.9% | Aug 27, 2020 | 13enforme CMS 1.0 has SQL Injection via the 'content.php' id parameter. |
| CVE-2020-23978 | CRITICAL | 9.8 | 2.1% | Aug 27, 2020 | SQL injection can occur in Soluzione Globale Ecommerce CMS v1 via the parameter " offerta.php" |
| CVE-2020-23977 | MEDIUM | 6.1 | 0.8% | Aug 27, 2020 | KandNconcepts Club CMS 1.1 and 1.2 has cross site scripting via the 'team.php,player.php,club.php' id parameter. |
| CVE-2020-23976 | CRITICAL | 9.8 | 2.2% | Aug 27, 2020 | Webexcels Ecommerce CMS 2.x, 2017, 2018, 2019, 2020 has SQL Injection via the 'content.php' id parameter. |
| CVE-2020-23975 | MEDIUM | 6.1 | 0.9% | Aug 27, 2020 | Webexcels Ecommerce CMS 2.x, 2017, 2018, 2019, 2020 has cross site scripting via the 'search.php' id parameter. |
| CVE-2020-23974 | MEDIUM | 5.4 | 0.6% | Aug 27, 2020 | Create-Project Manager 1.07 has Multi Persistent Cross-site Scripting and HTML injection in via Online chat, Social feed... |
| CVE-2020-23973 | CRITICAL | 9.8 | 1.6% | Aug 27, 2020 | KandNconcepts Club CMS 1.1 and 1.2 has SQL Injection via the 'team.php,player.php,club.php' id parameter. |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now