2020 CVE Vulnerabilities
21,081 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-37010 | CRITICAL | 9.8 | 0.4% | Jan 29, 2026 | BearShare Lite 5.2.5 contains a buffer overflow vulnerability in the Advanced Search keywords input that allows attacker... |
| CVE-2020-37009 | HIGH | 8.8 | 0.5% | Jan 29, 2026 | MedDream PACS Server 6.8.3.751 contains an authenticated remote code execution vulnerability that allows authorized user... |
| CVE-2020-37008 | HIGH | 8.7 | 0.5% | Jan 29, 2026 | EasyPMS 1.0.0 contains an authentication bypass vulnerability that allows unprivileged users to manipulate SQL queries i... |
| CVE-2020-37007 | MEDIUM | 4.3 | 0.2% | Jan 29, 2026 | Liman 0.7 contains a cross-site request forgery vulnerability that allows attackers to manipulate user account settings ... |
| CVE-2020-37006 | HIGH | 8.2 | 0.3% | Jan 29, 2026 | berliCRM 1.0.24 contains a SQL injection vulnerability in the 'src_record' parameter that allows remote attackers to man... |
| CVE-2020-37005 | HIGH | 7.1 | 0.3% | Jan 29, 2026 | TimeClock Software 1.01 contains an authenticated time-based SQL injection vulnerability that allows attackers to enumer... |
| CVE-2020-37004 | HIGH | 8.2 | 0.2% | Jan 29, 2026 | The Ultimate Project Manager CRM PRO version 2.0.5 contains a blind SQL injection vulnerability that allows attackers to... |
| CVE-2020-37002 | CRITICAL | 9.8 | 0.7% | Jan 29, 2026 | Ajenti 2.1.36 contains a post-authenticated remote command execution vulnerability that allows remote attackers to execu... |
| CVE-2020-37001 | HIGH | 8.4 | 0.1% | Jan 29, 2026 | Frigate Professional 3.36.0.9 contains a local buffer overflow vulnerability in the Pack File feature that allows attack... |
| CVE-2020-37000 | CRITICAL | 9.8 | 0.5% | Jan 29, 2026 | Free MP3 CD Ripper 2.8 contains a stack buffer overflow vulnerability that allows remote attackers to execute arbitrary ... |
| CVE-2020-36999 | HIGH | 8.8 | 0.3% | Jan 29, 2026 | Elaniin CMS 1.0 contains an authentication bypass vulnerability that allows attackers to access the dashboard by manipul... |
| CVE-2020-36997 | CRITICAL | 9.8 | 0.4% | Jan 29, 2026 | BacklinkSpeed 2.4 contains a buffer overflow vulnerability that allows attackers to corrupt the Structured Exception Han... |
| CVE-2020-36995 | HIGH | 7.5 | 0.4% | Jan 29, 2026 | Mocha Telnet Lite for iOS 4.2 contains a denial of service vulnerability that allows attackers to crash the application ... |
| CVE-2020-36994 | MEDIUM | 6.2 | 0.2% | Jan 29, 2026 | QlikView 12.50.20000.0 contains a denial of service vulnerability in the FTP server address input field that allows loca... |
| CVE-2020-36973 | HIGH | 8.7 | 0.4% | Jan 28, 2026 | PDW File Browser 1.3 contains a remote code execution vulnerability that allows authenticated users to upload and rename... |
| CVE-2020-36972 | HIGH | 7.5 | 0.3% | Jan 28, 2026 | SmartBlog 2.0.1 contains a blind SQL injection vulnerability in the 'id_post' parameter of the details controller that a... |
| CVE-2020-36971 | HIGH | 8.4 | 0.2% | Jan 28, 2026 | Nidesoft 3GP Video Converter 2.6.18 contains a local stack buffer overflow vulnerability in the license registration par... |
| CVE-2020-36970 | HIGH | 8.4 | 0.3% | Jan 28, 2026 | PMB 5.6 contains a local file disclosure vulnerability in getgif.php that allows attackers to read arbitrary system file... |
| CVE-2020-36969 | HIGH | 8.8 | 0.4% | Jan 28, 2026 | M/Monit 3.7.4 contains a privilege escalation vulnerability that allows authenticated users to modify user permissions b... |
| CVE-2020-36968 | HIGH | 7.1 | 0.4% | Jan 28, 2026 | M/Monit 3.7.4 contains an authentication vulnerability that allows authenticated attackers to retrieve user password has... |
| CVE-2020-36967 | CRITICAL | 9.8 | 0.5% | Jan 28, 2026 | Zortam Mp3 Media Studio 27.60 contains a buffer overflow vulnerability in the library creation file selection process th... |
| CVE-2020-36965 | HIGH | 8.4 | 0.1% | Jan 28, 2026 | docPrint Pro 8.0 contains a local buffer overflow vulnerability in the 'Add URL' input field that allows attackers to ex... |
| CVE-2020-36964 | CRITICAL | 9.8 | 0.4% | Jan 28, 2026 | YATinyWinFTP contains a denial of service vulnerability that allows attackers to crash the FTP service by sending a 272-... |
| CVE-2020-36963 | HIGH | 8.7 | 0.4% | Jan 28, 2026 | Intelbras Router RF 301K firmware version 1.1.2 contains an authentication bypass vulnerability that allows unauthentica... |
| CVE-2020-36962 | CRITICAL | 9.8 | 12.2% | Jan 28, 2026 | Tendenci 12.3.1 contains a CSV formula injection vulnerability in the contact form message field that allows attackers t... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now