Total
414052 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2020-22875 | 1 Jsish | 1 Jsish | 2026-06-17 | 7.5 HIGH | 9.8 CRITICAL |
| Integer overflow vulnerability in function Jsi_ObjSetLength in jsish before 3.0.6, allows remote attackers to execute arbitrary code. | |||||
| CVE-2020-22874 | 1 Jsish | 1 Jsish | 2026-06-17 | 7.5 HIGH | 9.8 CRITICAL |
| Integer overflow vulnerability in function Jsi_ObjArraySizer in jsish before 3.0.8, allows remote attackers to execute arbitrary code. | |||||
| CVE-2020-22873 | 1 Jsish | 1 Jsish | 2026-06-17 | 7.5 HIGH | 9.8 CRITICAL |
| Buffer overflow vulnerability in function NumberToPrecisionCmd in jsish before 3.0.7, allows remote attackers to execute arbitrary code. | |||||
| CVE-2020-22864 | 1 Froala | 1 Froala Editor | 2026-06-17 | 4.3 MEDIUM | 6.1 MEDIUM |
| A cross site scripting (XSS) vulnerability in the Insert Video function of Froala WYSIWYG Editor 3.1.0 allows attackers to execute arbitrary web scripts or HTML. | |||||
| CVE-2020-22848 | 1 Chshcms | 1 Cscms | 2026-06-17 | 7.5 HIGH | 9.8 CRITICAL |
| A remote code execution (RCE) vulnerability in the \Playsong.php component of cscms v4.1 allows attackers to execute arbitrary commands. | |||||
| CVE-2020-22845 | 1 Mikrotik | 1 Routeros | 2026-06-17 | 7.8 HIGH | 7.5 HIGH |
| A buffer overflow in Mikrotik RouterOS 6.47 allows unauthenticated attackers to cause a denial of service (DOS) via crafted FTP requests. | |||||
| CVE-2020-22844 | 1 Mikrotik | 1 Routeros | 2026-06-17 | 5.0 MEDIUM | 7.5 HIGH |
| A buffer overflow in Mikrotik RouterOS 6.47 allows unauthenticated attackers to cause a denial of service (DOS) via crafted SMB requests. | |||||
| CVE-2020-22842 | 1 Cmsmadesimple | 1 Cms Made Simple | 2026-06-17 | 3.5 LOW | 5.4 MEDIUM |
| CMS Made Simple before 2.2.15 allows XSS via the m1_mod parameter in a ModuleManager local_uninstall action to admin/moduleinterface.php. | |||||
| CVE-2020-22841 | 1 B2evolution | 1 B2evolution | 2026-06-17 | 3.5 LOW | 4.8 MEDIUM |
| Stored XSS in b2evolution CMS version 6.11.6 and prior allows an attacker to perform malicious JavaScript code execution via the plugin name input field in the plugin module. | |||||
| CVE-2020-22840 | 1 B2evolution | 1 B2evolution | 2026-06-17 | 5.8 MEDIUM | 6.1 MEDIUM |
| Open redirect vulnerability in b2evolution CMS version prior to 6.11.6 allows an attacker to perform malicious open redirects to an attacker controlled resource via redirect_to parameter in email_passthrough.php. | |||||
| CVE-2020-22839 | 1 B2evolution | 1 B2evolution Cms | 2026-06-17 | 4.3 MEDIUM | 6.1 MEDIUM |
| Reflected cross-site scripting vulnerability (XSS) in the evoadm.php file in b2evolution cms version 6.11.6-stable allows remote attackers to inject arbitrary webscript or HTML code via the tab3 parameter. | |||||
| CVE-2020-22820 | 1 Mkcms Project | 1 Mkcms | 2026-06-17 | N/A | 9.8 CRITICAL |
| MKCMS V6.2 has SQL injection via the /ucenter/repass.php name parameter. | |||||
| CVE-2020-22819 | 1 Mkcms Project | 1 Mkcms | 2026-06-17 | N/A | 9.8 CRITICAL |
| MKCMS V6.2 has SQL injection via the /ucenter/active.php verify parameter. | |||||
| CVE-2020-22818 | 1 Mkcms Project | 1 Mkcms | 2026-06-17 | N/A | 9.8 CRITICAL |
| MKCMS V6.2 has SQL injection via /ucenter/reg.php name parameter. | |||||
| CVE-2020-22809 | 1 Windscribe | 1 Windscribe | 2026-06-17 | 4.6 MEDIUM | 7.8 HIGH |
| In Windscribe v1.83 Build 20, 'WindscribeService' has an Unquoted Service Path that facilitates privilege escalation. | |||||
| CVE-2020-22808 | 1 Fecmall Project | 1 Fecmall | 2026-06-17 | 4.3 MEDIUM | 6.1 MEDIUM |
| An issue was found in yii2_fecshop 2.x. There is a reflected XSS vulnerability in the check cart page. | |||||
| CVE-2020-22807 | 1 Vtiger | 1 Vtiger Crm | 2026-06-17 | 7.5 HIGH | 9.8 CRITICAL |
| An issue was dicovered in vtiger crm 7.2. Union sql injection in the calendar exportdata feature. | |||||
| CVE-2020-22790 | 1 Safe | 1 Fme Server | 2026-06-17 | 3.5 LOW | 5.4 MEDIUM |
| Authenticated Stored XSS in FME Server versions 2019.2 and 2020.0 Beta allows a remote attacker to execute codeby injecting arbitrary web script or HTML via modifying the name of the users. The XSS is executed when an administrator access the logs. | |||||
| CVE-2020-22789 | 1 Safe | 1 Fme Server | 2026-06-17 | 4.3 MEDIUM | 6.1 MEDIUM |
| Unauthenticated Stored XSS in FME Server versions 2019.2 and 2020.0 Beta allows a remote attacker to gain admin privileges by injecting arbitrary web script or HTML via the login page. The XSS is executed when an administrator accesses the logs. | |||||
| CVE-2020-22785 | 1 Etherpad | 1 Etherpad | 2026-06-17 | 5.0 MEDIUM | 7.5 HIGH |
| Etherpad < 1.8.3 is affected by a missing lock check which could cause a denial of service. Aggressively targeting random pad import endpoints with empty data would flatten all pads due to lack of rate limiting and missing ownership check. | |||||