2020 CVE Vulnerabilities
21,081 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-36950 | HIGH | 8.7 | 0.3% | Jan 27, 2026 | Laravel Nova 3.7.0 contains a denial of service vulnerability that allows authenticated users to crash the application b... |
| CVE-2020-36949 | HIGH | 7.5 | 0.4% | Jan 27, 2026 | TapinRadio 2.13.7 contains a denial of service vulnerability in the application proxy settings that allows attackers to ... |
| CVE-2020-36948 | CRITICAL | 9.8 | 0.6% | Jan 27, 2026 | VestaCP 0.9.8-26 contains a session token vulnerability in the LoginAs module that allows remote attackers to manipulate... |
| CVE-2020-36947 | MEDIUM | 6.5 | 0.5% | Jan 27, 2026 | LibreNMS 1.46 contains an authenticated SQL injection vulnerability in the MAC accounting graph endpoint that allows rem... |
| CVE-2020-36946 | HIGH | 8.7 | 0.6% | Jan 27, 2026 | SyncBreeze 10.0.28 contains a denial of service vulnerability in the login endpoint that allows remote attackers to cras... |
| CVE-2020-36942 | HIGH | 8.8 | 0.6% | Jan 27, 2026 | Victor CMS 1.0 contains a file upload vulnerability that allows authenticated users to upload malicious PHP files throug... |
| CVE-2020-36941 | CRITICAL | 9.8 | 0.5% | Jan 27, 2026 | Knockpy 4.1.1 contains a CSV injection vulnerability that allows attackers to inject malicious formulas into CSV reports... |
| CVE-2020-36940 | CRITICAL | 9.8 | 0.2% | Jan 27, 2026 | Easy CD & DVD Cover Creator 4.13 contains a buffer overflow vulnerability in the serial number input field that allows a... |
| CVE-2020-36939 | HIGH | 7.5 | 2.9% | Jan 27, 2026 | Cassandra Web 0.5.0 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary... |
| CVE-2020-36938 | HIGH | 8.8 | 0.2% | Jan 27, 2026 | WinAVR version 20100110 contains an insecure permissions vulnerability that allows authenticated users to modify system ... |
| CVE-2020-36960 | MEDIUM | 6.4 | 0.2% | Jan 26, 2026 | Forma LMS 2.3 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious scripts int... |
| CVE-2020-36959 | HIGH | 8.5 | 0.1% | Jan 26, 2026 | IDT PC Audio 1.0.6499.0 contains an unquoted service path vulnerability that allows local users to potentially execute a... |
| CVE-2020-36958 | HIGH | 8.5 | 0.1% | Jan 26, 2026 | Kite 1.2020.1119.0 contains an unquoted service path vulnerability in the KiteService Windows service that allows local ... |
| CVE-2020-36957 | HIGH | 8.5 | 0.1% | Jan 26, 2026 | PDF Complete 3.5.310.2002 contains an unquoted service path vulnerability in its pdfsvc.exe service configuration. Attac... |
| CVE-2020-36956 | MEDIUM | 6.4 | 0.3% | Jan 26, 2026 | Openfire 4.6.0 contains a stored cross-site scripting vulnerability in the nodejs plugin that allows attackers to inject... |
| CVE-2020-36955 | MEDIUM | 6.4 | 0.6% | Jan 26, 2026 | Grav CMS 1.6.30 with Admin Plugin 1.9.18 contains a persistent cross-site scripting vulnerability that allows authentica... |
| CVE-2020-36954 | MEDIUM | 6.4 | 0.3% | Jan 26, 2026 | Xeroneit Library Management System 3.1 contains a stored cross-site scripting vulnerability in the Book Category feature... |
| CVE-2020-36953 | HIGH | 8.5 | 0.2% | Jan 26, 2026 | MiniTool ShadowMaker 3.2 contains an unquoted service path vulnerability in the MTAgentService that allows local attacke... |
| CVE-2020-36952 | HIGH | 8.5 | 0.2% | Jan 26, 2026 | IObit Uninstaller 10 Pro contains an unquoted service path vulnerability that allows local users to potentially execute ... |
| CVE-2020-36937 | HIGH | 8.5 | 0.1% | Jan 25, 2026 | Microvirt MEMU Play 3.7.0 contains an unquoted service path vulnerability in the MEmusvc Windows service that allows loc... |
| CVE-2020-36936 | HIGH | 8.5 | 0.1% | Jan 25, 2026 | Magic Mouse 2 Utilities 2.20 contains an unquoted service path vulnerability in its Windows service configuration. Attac... |
| CVE-2020-36935 | HIGH | 8.5 | 0.1% | Jan 25, 2026 | KMSpico 17.1.0.0 contains an unquoted service path vulnerability in the Service KMSELDI configuration that allows local ... |
| CVE-2020-36934 | HIGH | 8.5 | 0.2% | Jan 25, 2026 | Deep Instinct Windows Agent 1.2.24.0 contains an unquoted service path vulnerability in the DeepNetworkService that allo... |
| CVE-2020-36933 | HIGH | 8.5 | 0.2% | Jan 25, 2026 | HTC IPTInstaller 4.0.9 contains an unquoted service path vulnerability in the PassThru Service configuration. Attackers ... |
| CVE-2020-36932 | MEDIUM | 6.1 | 0.2% | Jan 25, 2026 | SeaCMS 11.1 contains a stored cross-site scripting vulnerability in the checkuser parameter of the admin settings page. ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now