2020 CVE Vulnerabilities

21,081 CVEs published in 2020.

CVE IDSeverityCVSSDescription
CVE-2020-37037HIGH8.5Avast SecureLine 5.5.522.0 contains an unquoted service path vulnerability that allows local users to potentially execut...
CVE-2020-37057CRITICAL9.8Online-Exam-System 2015 contains a SQL injection vulnerability in the feedback module that allows attackers to manipulat...
CVE-2020-37056CRITICAL9.8Crystal Shard http-protection 0.2.0 contains an IP spoofing vulnerability that allows attackers to bypass protection mid...
CVE-2020-37054HIGH8.8Navigate CMS 2.8.7 contains a cross-site request forgery vulnerability that allows attackers to upload malicious extensi...
CVE-2020-37053MEDIUM6.5Navigate CMS 2.8.7 contains an authenticated SQL injection vulnerability that allows attackers to leak database informat...
CVE-2020-37052CRITICAL9.8AirControl 1.4.2 contains a pre-authentication remote code execution vulnerability that allows unauthenticated attackers...
CVE-2020-37051MEDIUM5.3Online-Exam-System 2015 contains a time-based blind SQL injection vulnerability in the feedback form that allows attacke...
CVE-2020-37050CRITICAL9.8Quick Player 1.3 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by crafting a ...
CVE-2020-37049HIGH8.4Frigate 3.36.0.9 contains a local buffer overflow vulnerability in the Command Line input field that allows attackers to...
CVE-2020-37046MEDIUM5.3Sistem Informasi Pengumuman Kelulusan Online 1.0 contains a cross-site request forgery vulnerability that allows attacke...
CVE-2020-37044MEDIUM6.1OpenCTI 3.3.1 is vulnerable to a reflected cross-site scripting (XSS) attack via the /graphql endpoint. An attacker can ...
CVE-2020-37043CRITICAL9.810-Strike Bandwidth Monitor 3.9 contains a buffer overflow vulnerability that allows attackers to bypass SafeSEH, ASLR, ...
CVE-2020-37042HIGH8.4Frigate Professional 3.36.0.9 contains a local buffer overflow vulnerability in the 'Find Computer' feature that allows ...
CVE-2020-37041HIGH7.5OpenCTI 3.3.1 is vulnerable to a directory traversal attack via the static/css endpoint. An unauthenticated attacker can...
CVE-2020-37040HIGH8.4Code Blocks 17.12 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by craf...
CVE-2020-37039HIGH7.5Frigate 2.02 contains a denial of service vulnerability that allows attackers to crash the application by sending oversi...
CVE-2020-37038HIGH7.5Code Blocks 20.03 contains a denial of service vulnerability that allows attackers to crash the application by manipulat...
CVE-2020-37036HIGH8.4RM Downloader 2.50.60 contains a local buffer overflow vulnerability in the 'Load' parameter that allows attackers to ex...
CVE-2020-37035HIGH8.8e-Learning PHP Script 0.1.0 contains a SQL injection vulnerability in the search functionality that allows attackers to ...
CVE-2020-37034HIGH8.7HelloWeb 2.0 contains an arbitrary file download vulnerability that allows remote attackers to download system files by ...
CVE-2020-37033HIGH8.8Infor Storefront B2B 1.0 contains a SQL injection vulnerability that allows attackers to manipulate database queries thr...
CVE-2020-37032HIGH8.8Wing FTP Server 6.3.8 contains a remote code execution vulnerability in its Lua-based web console that allows authentica...
CVE-2020-37031HIGH8.6Simple Startup Manager 1.17 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary co...
CVE-2020-37029HIGH8.4FTPDummy 4.80 contains a local buffer overflow vulnerability in its preference file handling that allows attackers to ex...
CVE-2020-37028HIGH8.4Socusoft Photo to Video Converter Professional 8.07 contains a local buffer overflow vulnerability in the 'Output Folder...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now