2020 CVE Vulnerabilities
21,069 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-20265 | MEDIUM | 6.5 | 2.1% | May 11, 2021 | Mikrotik RouterOs before 6.47 (stable tree) suffers from a memory corruption vulnerability in the /ram/pckg/wireless/nov... |
| CVE-2020-35438 | MEDIUM | 6.1 | 0.7% | May 11, 2021 | Cross Site Scripting (XSS) vulnerability in the kk Star Ratings plugin before 4.1.5. |
| CVE-2020-23376 | MEDIUM | 6.1 | 0.4% | May 10, 2021 | NoneCMS v1.3 has a CSRF vulnerability in public/index.php/admin/nav/add.html, as demonstrated by adding a navigation col... |
| CVE-2020-23374 | MEDIUM | 5.4 | 0.8% | May 10, 2021 | Cross-site scripting (XSS) vulnerability in admin/article/add.html in noneCMS v1.3.0 allows remote authenticated attacke... |
| CVE-2020-23373 | MEDIUM | 5.4 | 0.8% | May 10, 2021 | Cross-site scripting (XSS) vulnerability in admin/nav/add.html in noneCMS v1.3.0 allows remote authenticated attackers t... |
| CVE-2020-23371 | MEDIUM | 6.1 | 0.9% | May 10, 2021 | Cross-site scripting (XSS) vulnerability in static/admin/js/kindeditor/plugins/multiimage/images/swfupload.swf in noneCm... |
| CVE-2020-23370 | MEDIUM | 5.4 | 0.7% | May 10, 2021 | In YzmCMS 5.6, stored XSS exists via the common/static/plugin/ueditor/1.4.3.3/php/controller.php action parameter, which... |
| CVE-2020-23369 | MEDIUM | 6.1 | 0.9% | May 10, 2021 | In YzmCMS 5.6, XSS was discovered in member/member_content/init.html via the SRC attribute of an IFRAME element because ... |
| CVE-2020-18102 | MEDIUM | 6.1 | 1.2% | May 10, 2021 | Cross Site Scripting (XSS) in Hotels_Server v1.0 allows remote attackers to execute arbitrary code by injecting crafted ... |
| CVE-2020-28588 | MEDIUM | 5.5 | 1.1% | May 10, 2021 | An information disclosure vulnerability exists in the /proc/pid/syscall functionality of Linux Kernel 5.1 Stable and 5.4... |
| CVE-2020-13529 | MEDIUM | 6.1 | 1.4% | May 10, 2021 | An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cau... |
| CVE-2020-4901 | MEDIUM | 6.5 | 1.1% | May 7, 2021 | IBM Robotic Process Automation with Automation Anywhere 11.0 could allow an attacker on the network to obtain sensitive ... |
| CVE-2020-14009 | MEDIUM | 6.3 | 0.3% | May 7, 2021 | Proofpoint Enterprise Protection (PPS/PoD) before 8.16.4 contains a vulnerability that could allow an attacker to delive... |
| CVE-2020-36127 | MEDIUM | 6.5 | 0.7% | May 7, 2021 | Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by an information disclosure vulnerability. Through ... |
| CVE-2020-36124 | MEDIUM | 6.5 | 1.3% | May 7, 2021 | Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by XML External Entity (XXE) injection. An authentic... |
| CVE-2020-11293 | MEDIUM | 6 | 0.1% | May 7, 2021 | Out of bound read can happen in Widevine TA while copying data to buffer from user data due to lack of check of buffer l... |
| CVE-2020-11254 | MEDIUM | 5.5 | 0.1% | May 7, 2021 | Memory corruption during buffer allocation due to dereferencing session ctx pointer without checking if pointer is valid... |
| CVE-2020-29445 | MEDIUM | 4.3 | 1.2% | May 7, 2021 | Affected versions of Confluence Server before 7.4.8, and versions from 7.5.0 before 7.11.0 allow attackers to identify i... |
| CVE-2020-29444 | MEDIUM | 5.4 | 0.9% | May 7, 2021 | Affected versions of Team Calendar in Confluence Server before 7.11.0 allow attackers to inject arbitrary HTML or Javasc... |
| CVE-2020-23263 | MEDIUM | 6.1 | 0.8% | May 6, 2021 | Persistent Cross-site scripting vulnerability on Fork CMS version 5.8.2 allows remote attackers to inject arbitrary Java... |
| CVE-2020-18889 | MEDIUM | 6.5 | 0.5% | May 6, 2021 | Cross Site Request Forgery (CSRF) vulnerability in puppyCMS v5.1 that can change the admin's password via /admin/setting... |
| CVE-2020-28014 | MEDIUM | 6.1 | 0.9% | May 6, 2021 | Exim 4 before 4.94.2 allows Execution with Unnecessary Privileges. The -oP option is available to the exim user, and all... |
| CVE-2020-23128 | MEDIUM | 4.9 | 0.9% | May 6, 2021 | Chamilo LMS 1.11.10 does not properly manage privileges which could allow a user with Sessions administrator privilege t... |
| CVE-2020-4993 | MEDIUM | 4.9 | 1.3% | May 5, 2021 | IBM QRadar SIEM 7.3 and 7.4 when decompressing or verifying signature of zip files processes data in a way that may be v... |
| CVE-2020-4929 | MEDIUM | 5.4 | 0.5% | May 5, 2021 | IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Ja... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now