2020 CVE Vulnerabilities
21,081 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-37027 | CRITICAL | 9.8 | 2.3% | Jan 30, 2026 | Sickbeard alpha contains a remote command injection vulnerability that allows unauthenticated attackers to execute arbit... |
| CVE-2020-37026 | MEDIUM | 5.3 | 0.2% | Jan 30, 2026 | Sickbeard alpha contains a cross-site request forgery vulnerability that allows attackers to disable authentication by s... |
| CVE-2020-37025 | HIGH | 8.4 | 0.2% | Jan 30, 2026 | Port Forwarding Wizard 4.8.0 contains a buffer overflow vulnerability that allows local attackers to execute arbitrary c... |
| CVE-2020-37024 | HIGH | 8.4 | 0.2% | Jan 30, 2026 | Nidesoft DVD Ripper 5.2.18 contains a local buffer overflow vulnerability in the License Code registration parameter tha... |
| CVE-2020-37023 | HIGH | 8.8 | 0.6% | Jan 30, 2026 | Koken CMS 0.22.24 contains a file upload vulnerability that allows authenticated attackers to bypass file extension rest... |
| CVE-2020-37060 | HIGH | 8.5 | 0.2% | Jan 30, 2026 | Atomic Alarm Clock 6.3 contains a local privilege escalation vulnerability in its service configuration that allows atta... |
| CVE-2020-37059 | HIGH | 8.5 | 0.1% | Jan 30, 2026 | Popcorn Time 6.2.1.14 contains an unquoted service path vulnerability that allows local non-privileged users to potentia... |
| CVE-2020-37058 | HIGH | 8.5 | 0.1% | Jan 30, 2026 | Andrea ST Filters Service 1.0.64.7 contains an unquoted service path vulnerability in its Windows service configuration.... |
| CVE-2020-37030 | HIGH | 8.5 | 0.1% | Jan 30, 2026 | Outline Service 1.3.3 contains an unquoted service path vulnerability that allows local users to potentially execute arb... |
| CVE-2020-37022 | MEDIUM | 6.4 | 0.3% | Jan 30, 2026 | OpenZ ERP 3.6.60 contains a persistent cross-site scripting vulnerability in the Employee module's name and description ... |
| CVE-2020-37019 | MEDIUM | 6.4 | 0.4% | Jan 30, 2026 | Orchard Core RC1 contains a persistent cross-site scripting vulnerability that allows remote attackers to inject malicio... |
| CVE-2020-37014 | MEDIUM | 6.4 | 0.3% | Jan 30, 2026 | Tryton 5.4 contains a persistent cross-site scripting vulnerability in the user profile name input that allows remote at... |
| CVE-2020-37003 | MEDIUM | 6.4 | 0.3% | Jan 30, 2026 | Sellacious eCommerce 4.6 contains a persistent cross-site scripting vulnerability in the Manage Your Addresses module th... |
| CVE-2020-36998 | MEDIUM | 6.4 | 0.3% | Jan 30, 2026 | Forma.lms The E-Learning Suite 2.3.0.2 contains a persistent cross-site scripting vulnerability in multiple course and p... |
| CVE-2020-36996 | MEDIUM | 6.4 | 0.2% | Jan 30, 2026 | PHPFusion 9.03.50 contains a persistent cross-site scripting vulnerability in the print.php page that fails to properly ... |
| CVE-2020-36966 | MEDIUM | 6.4 | 0.2% | Jan 30, 2026 | Dolibarr 11.0.3 contains a persistent cross-site scripting vulnerability in LDAP synchronization settings that allows at... |
| CVE-2020-37021 | HIGH | 8.5 | 0.1% | Jan 29, 2026 | 10-Strike Bandwidth Monitor 3.9 contains an unquoted service path vulnerability in multiple services that allows local a... |
| CVE-2020-37020 | HIGH | 7.8 | 0.1% | Jan 29, 2026 | SonarQube 8.3.1 contains an unquoted service path vulnerability that allows local attackers to gain SYSTEM privileges by... |
| CVE-2020-37018 | MEDIUM | 6.4 | 0.3% | Jan 29, 2026 | GOautodial 4.0 contains a persistent cross-site scripting vulnerability that allows authenticated agents to inject malic... |
| CVE-2020-37017 | HIGH | 8.5 | 0.1% | Jan 29, 2026 | CodeMeter 6.60 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary ... |
| CVE-2020-37016 | HIGH | 8.5 | 0.1% | Jan 29, 2026 | BarcodeOCR 19.3.6 contains an unquoted service path vulnerability that allows local attackers to execute code with eleva... |
| CVE-2020-37015 | HIGH | 7.5 | 0.6% | Jan 29, 2026 | The Ruijie Networks Switch eWeb S29_RGOS version 11.4 contains a directory traversal vulnerability that allows unauthent... |
| CVE-2020-37013 | HIGH | 8.4 | 0.2% | Jan 29, 2026 | Audio Playback Recorder 3.2.2 contains a local buffer overflow vulnerability in the eject and registration parameters th... |
| CVE-2020-37012 | CRITICAL | 9.8 | 0.8% | Jan 29, 2026 | Tea LaTex 1.0 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary ... |
| CVE-2020-37011 | HIGH | 8.4 | 0.4% | Jan 29, 2026 | Gnome Fonts Viewer 3.34.0 contains a heap corruption vulnerability that allows attackers to trigger an out-of-bounds wri... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now