2020 CVE Vulnerabilities
21,085 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-23774 | MEDIUM | 6.1 | 0.6% | Jan 26, 2021 | A reflected XSS vulnerability exists in tohtml/convert.php of Winmail 6.5, which can cause JavaScript code to be execute... |
| CVE-2020-8293 | MEDIUM | 6.5 | 1.6% | Jan 26, 2021 | A missing input validation in Nextcloud Server before 20.0.2, 19.0.5, 18.0.11 allows users to store unlimited data in wo... |
| CVE-2020-8292 | MEDIUM | 5.4 | 0.9% | Jan 26, 2021 | Rocket.Chat server before 3.9.0 is vulnerable to a self cross-site scripting (XSS) vulnerability via the drag & drop fun... |
| CVE-2020-8288 | MEDIUM | 5.4 | 0.8% | Jan 26, 2021 | The `specializedRendering` function in Rocket.Chat server before 3.9.2 allows a cross-site scripting (XSS) vulnerability... |
| CVE-2020-6780 | MEDIUM | 4.9 | 0.6% | Jan 26, 2021 | Use of Password Hash With Insufficient Computational Effort in the database of Bosch FSM-2500 server and Bosch FSM-5000 ... |
| CVE-2020-36220 | MEDIUM | 5.9 | 0.8% | Jan 26, 2021 | An issue was discovered in the va-ts crate before 0.0.4 for Rust. Because Demuxer<T> omits a required T: Send bound, a d... |
| CVE-2020-36219 | MEDIUM | 5.9 | 1.1% | Jan 26, 2021 | An issue was discovered in the atomic-option crate through 2020-10-31 for Rust. Because AtomicOption<T> implements Sync ... |
| CVE-2020-36218 | MEDIUM | 5.9 | 1.1% | Jan 26, 2021 | An issue was discovered in the buttplug crate before 1.0.4 for Rust. ButtplugFutureStateShared does not properly conside... |
| CVE-2020-36217 | MEDIUM | 5.9 | 1.1% | Jan 26, 2021 | An issue was discovered in the may_queue crate through 2020-11-10 for Rust. Because Queue does not have bounds on its Se... |
| CVE-2020-36216 | MEDIUM | 5.9 | 1.1% | Jan 26, 2021 | An issue was discovered in Input<R> in the eventio crate before 0.5.1 for Rust. Because a non-Send type can be sent to a... |
| CVE-2020-36214 | MEDIUM | 5.9 | 1.1% | Jan 26, 2021 | An issue was discovered in the multiqueue2 crate before 0.1.7 for Rust. Because a non-Send type can be sent to a differe... |
| CVE-2020-36205 | MEDIUM | 5.5 | 0.4% | Jan 26, 2021 | An issue was discovered in the xcb crate through 2020-12-10 for Rust. base::Error does not have soundness. Because of th... |
| CVE-2020-36204 | MEDIUM | 4.7 | 0.3% | Jan 26, 2021 | An issue was discovered in the im crate through 2020-11-09 for Rust. Because TreeFocus does not have bounds on its Send ... |
| CVE-2020-36203 | MEDIUM | 4.7 | 0.2% | Jan 26, 2021 | An issue was discovered in the reffers crate through 2020-12-01 for Rust. ARefss can contain a !Send,!Sync object, leadi... |
| CVE-2020-36202 | MEDIUM | 6.1 | 0.8% | Jan 26, 2021 | An issue was discovered in the async-h1 crate before 2.3.0 for Rust. Request smuggling can occur when used behind a reve... |
| CVE-2020-36200 | MEDIUM | 6.5 | 0.8% | Jan 26, 2021 | TinyCheck before commits 9fd360d and ea53de8 allowed an authenticated attacker to send an HTTP GET request to the crafte... |
| CVE-2020-36011 | MEDIUM | 4.8 | 0.7% | Jan 26, 2021 | A cross-site scripting (XSS) issue in Add Patient Form in QDOCS Smart Hospital Management System 3.1 allows a remote att... |
| CVE-2020-35854 | MEDIUM | 4.8 | 0.7% | Jan 26, 2021 | Textpattern 4.8.4 is affected by cross-site scripting (XSS) in the Body parameter. |
| CVE-2020-35853 | MEDIUM | 4.8 | 0.6% | Jan 26, 2021 | 4images Image Gallery Management System 1.7.11 is affected by cross-site scripting (XSS) in the Image URL. This vulnerab... |
| CVE-2020-35843 | MEDIUM | 5.5 | 0.7% | Jan 26, 2021 | FastStone Image Viewer 7.5 has an out-of-bounds write (via a crafted image file) at FSViewer.exe+0x956e. |
| CVE-2020-35753 | MEDIUM | 6.1 | 0.9% | Jan 26, 2021 | The job posting recommendation form in Persis Human Resource Management Portal (Versions 17.2.00 through 17.2.35 and 19.... |
| CVE-2020-35513 | MEDIUM | 4.9 | 1.3% | Jan 26, 2021 | A flaw incorrect umask during file or directory modification in the Linux kernel NFS (network file system) functionality... |
| CVE-2020-35309 | MEDIUM | 4.8 | 0.7% | Jan 26, 2021 | Bakeshop Online Ordering System in PHP/MySQLi 1.0 is affected by cross-site scripting (XSS) which allows remote attacker... |
| CVE-2020-29241 | MEDIUM | 4.8 | 0.6% | Jan 26, 2021 | Online News Portal using PHP/MySQLi 1.0 is affected by cross-site scripting (XSS) which allows remote attackers to injec... |
| CVE-2020-27735 | MEDIUM | 6.1 | 5.6% | Jan 26, 2021 | An XSS issue was discovered in Wing FTP 6.4.4. An arbitrary IFRAME element can be included in the help pages via a craft... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now