2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-35907 | MEDIUM | 5.5 | 0.4% | Dec 31, 2020 | An issue was discovered in the futures-task crate before 0.3.5 for Rust. futures_task::noop_waker_ref allows a NULL poin... |
| CVE-2020-35905 | MEDIUM | 4.7 | 0.3% | Dec 31, 2020 | An issue was discovered in the futures-util crate before 0.3.7 for Rust. MutexGuard::map can cause a data race for certa... |
| CVE-2020-35904 | MEDIUM | 5.5 | 0.4% | Dec 31, 2020 | An issue was discovered in the crossbeam-channel crate before 0.4.4 for Rust. It has incorrect expectations about the re... |
| CVE-2020-35903 | MEDIUM | 5.5 | 0.4% | Dec 31, 2020 | An issue was discovered in the dync crate before 0.5.0 for Rust. VecCopy allows misaligned element access because u8 is ... |
| CVE-2020-35900 | MEDIUM | 5.5 | 0.4% | Dec 31, 2020 | An issue was discovered in the array-queue crate through 2020-09-26 for Rust. A pop_back() call may lead to a use-after-... |
| CVE-2020-35899 | MEDIUM | 5.5 | 0.4% | Dec 31, 2020 | An issue was discovered in the actix-service crate before 1.0.6 for Rust. The Cell implementation allows obtaining more ... |
| CVE-2020-35741 | MEDIUM | 6.1 | 0.6% | Dec 31, 2020 | HGiga MailSherlock does not validate user parameters on multiple login pages. Attackers can use the vulnerability to inj... |
| CVE-2020-35740 | MEDIUM | 6.1 | 0.6% | Dec 31, 2020 | HGiga MailSherlock does not validate specific URL parameters properly that allows attackers to inject JavaScript syntax ... |
| CVE-2020-26291 | MEDIUM | 6.5 | 1.7% | Dec 31, 2020 | URI.js is a javascript URL mutation library (npm package urijs). In URI.js before version 1.19.4, the hostname can be sp... |
| CVE-2020-27534 | MEDIUM | 5.3 | 1.7% | Dec 30, 2020 | util/binfmt_misc/check.go in Builder in Docker Engine before 19.03.9 calls os.OpenFile with a potentially unsafe qemu-ch... |
| CVE-2020-28413 | MEDIUM | 6.5 | 4.9% | Dec 30, 2020 | In MantisBT 2.24.3, SQL Injection can occur in the parameter "access" of the mc_project_get_users function through the A... |
| CVE-2020-26288 | MEDIUM | 6.5 | 0.8% | Dec 30, 2020 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. It is an npm pac... |
| CVE-2020-29231 | MEDIUM | 5.4 | 0.6% | Dec 30, 2020 | EGavilanMedia User Registration and Login System With Admin Panel 1.0 is affected by cross-site scripting (XSS) in the A... |
| CVE-2020-29230 | MEDIUM | 6.1 | 0.8% | Dec 30, 2020 | EGavilanMedia User Registration and Login System With Admin Panel 1.0 is affected by cross-site scripting (XSS) in the A... |
| CVE-2020-28925 | MEDIUM | 5.3 | 1.1% | Dec 30, 2020 | Bolt before 3.7.2 does not restrict filter options in a Request in the Twig context, and is therefore inconsistent with ... |
| CVE-2020-28365 | MEDIUM | 6.1 | 0.7% | Dec 30, 2020 | Sentrifugo 3.2 allows Stored Cross-Site Scripting (XSS) vulnerability by inserting a payload within the X-Forwarded-For ... |
| CVE-2020-26247 | MEDIUM | 4.3 | 1.3% | Dec 30, 2020 | Nokogiri is a Rubygem providing HTML, XML, SAX, and Reader parsers with XPath and CSS selector support. In Nokogiri befo... |
| CVE-2020-5811 | MEDIUM | 6.5 | 9.4% | Dec 30, 2020 | An authenticated path traversal vulnerability exists during package installation in Umbraco CMS <= 8.9.1 or current, whi... |
| CVE-2020-5810 | MEDIUM | 5.4 | 66.2% | Dec 30, 2020 | A stored XSS vulnerability exists in Umbraco CMS <= 8.9.1 or current. An authenticated user authorized to upload media c... |
| CVE-2020-5809 | MEDIUM | 5.4 | 0.7% | Dec 30, 2020 | A stored XSS vulnerability exists in Umbraco CMS <= 8.9.1 or current. An authenticated user can inject arbitrary JavaScr... |
| CVE-2020-35241 | MEDIUM | 4.8 | 2.1% | Dec 30, 2020 | FlatPress 1.0.3 is affected by cross-site scripting (XSS) in the Blog Content component. This vulnerability can allow an... |
| CVE-2020-35240 | MEDIUM | 4.8 | 1.0% | Dec 30, 2020 | FluxBB 1.5.11 is affected by cross-site scripting (XSS in the Blog Content component. This vulnerability can allow an at... |
| CVE-2020-29477 | MEDIUM | 4.8 | 1.1% | Dec 30, 2020 | Invision Community 4.5.4 is affected by cross-site scripting (XSS) in the Field Name field. This vulnerability can allow... |
| CVE-2020-29469 | MEDIUM | 5.4 | 1.4% | Dec 30, 2020 | WonderCMS 3.1.3 is affected by cross-site scripting (XSS) in the Menu component. This vulnerability can allow an attacke... |
| CVE-2020-29233 | MEDIUM | 5.4 | 1.3% | Dec 30, 2020 | WonderCMS 3.1.3 is affected by cross-site scripting (XSS) in the Page description component. This vulnerability can allo... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now