2020 CVE Vulnerabilities
21,081 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-37160 | HIGH | 8.5 | 0.1% | Feb 7, 2026 | SprintWork 2.3.1 contains multiple local privilege escalation vulnerabilities through insecure file, service, and folder... |
| CVE-2020-37159 | CRITICAL | 9.8 | 0.6% | Feb 7, 2026 | Parallaxis Cuckoo Clock 5.0 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by ... |
| CVE-2020-37157 | HIGH | 8.7 | 0.4% | Feb 7, 2026 | DBPower C300 HD Camera contains a configuration disclosure vulnerability that allows unauthenticated attackers to retrie... |
| CVE-2020-37155 | HIGH | 7.5 | 0.4% | Feb 7, 2026 | Core FTP Lite 1.3 contains a buffer overflow vulnerability in the username input field that allows attackers to crash th... |
| CVE-2020-37154 | HIGH | 7.1 | 0.4% | Feb 7, 2026 | eLection 2.0 contains an authenticated SQL injection vulnerability in the candidate management endpoint that allows atta... |
| CVE-2020-37147 | HIGH | 7.1 | 0.3% | Feb 7, 2026 | ATutor 2.2.4 contains a SQL injection vulnerability in the admin user deletion page that allows authenticated attackers ... |
| CVE-2020-37146 | HIGH | 8.7 | 0.4% | Feb 7, 2026 | ACE Security WiP-90113 HD Camera contains a configuration disclosure vulnerability that allows unauthenticated attackers... |
| CVE-2020-37141 | HIGH | 8.8 | 0.3% | Feb 7, 2026 | AMSS++ version 4.31 contains a SQL injection vulnerability in the mail module's maildetail.php script through the 'id' p... |
| CVE-2020-37135 | CRITICAL | 9.3 | 0.4% | Feb 7, 2026 | AMSS++ 4.7 contains an authentication bypass vulnerability that allows attackers to access administrative accounts using... |
| CVE-2020-37122 | HIGH | 7.5 | 0.4% | Feb 7, 2026 | SpotFTP-FTP Password Recover 2.4.8 contains a denial of service vulnerability that allows attackers to crash the applica... |
| CVE-2020-37109 | HIGH | 7.5 | 0.4% | Feb 7, 2026 | aSc TimeTables 2020.11.4 contains a denial of service vulnerability that allows attackers to crash the application by ov... |
| CVE-2020-37107 | HIGH | 7.5 | 0.4% | Feb 7, 2026 | Core FTP LE 2.2 contains a denial of service vulnerability that allows attackers to crash the application by overwriting... |
| CVE-2020-37106 | MEDIUM | 5.3 | 0.2% | Feb 7, 2026 | Business Live Chat Software 1.0 contains a cross-site request forgery vulnerability that allows attackers to change user... |
| CVE-2020-37095 | CRITICAL | 9.8 | 0.7% | Feb 7, 2026 | Cyberoam Authentication Client 2.1.2.7 contains a buffer overflow vulnerability that allows remote attackers to execute ... |
| CVE-2020-37079 | LOW | 3.5 | 0.2% | Feb 7, 2026 | Wing FTP Server versions prior to 6.2.7 contain a cross-site request forgery (CSRF) vulnerability in the web administrat... |
| CVE-2020-37152 | MEDIUM | 6.1 | 0.2% | Feb 5, 2026 | PHP-Fusion 9.03.50 panels.php is vulnerable to cross-site scripting (XSS) via the 'panel_content' POST parameter. The ap... |
| CVE-2020-37150 | HIGH | 8.7 | 0.7% | Feb 5, 2026 | Edimax EW-7438RPn-v3 Mini 1.27 allows unauthenticated attackers to access the /wizard_reboot.asp page in unsetup mode, w... |
| CVE-2020-37149 | HIGH | 8.8 | 0.3% | Feb 5, 2026 | Edimax EW-7438RPn-v3 Mini 1.27 is vulnerable to cross-site request forgery (CSRF) that can lead to command execution. An... |
| CVE-2020-37148 | MEDIUM | 5.1 | 0.3% | Feb 5, 2026 | P5 FNIP-8x16A/FNIP-4xSH versions 1.0.20 and 1.0.11 suffer from a stored cross-site scripting vulnerability. Input passed... |
| CVE-2020-37145 | MEDIUM | 5.1 | 0.2% | Feb 5, 2026 | HRSALE 1.1.8 contains a cross-site request forgery vulnerability that allows attackers to add unauthorized administrativ... |
| CVE-2020-37144 | MEDIUM | 5.3 | 0.2% | Feb 5, 2026 | Exagate SYSGuard 6001 contains a cross-site request forgery vulnerability that allows attackers to create unauthorized a... |
| CVE-2020-37143 | HIGH | 7.5 | 0.3% | Feb 5, 2026 | ProficySCADA for iOS 5.0.25920 contains a denial of service vulnerability that allows attackers to crash the application... |
| CVE-2020-37142 | HIGH | 8.4 | 0.3% | Feb 5, 2026 | 10-Strike Network Inventory Explorer 8.54 contains a structured exception handler buffer overflow vulnerability that all... |
| CVE-2020-37140 | MEDIUM | 5.5 | 0.2% | Feb 5, 2026 | Everest, later referred to as AIDA64, 5.50.2100 contains a denial of service vulnerability that allows local attackers t... |
| CVE-2020-37139 | HIGH | 8.4 | 0.2% | Feb 5, 2026 | Odin Secure FTP Expert 7.6.3 contains a local denial of service vulnerability that allows attackers to crash the applica... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now