2020 CVE Vulnerabilities

21,081 CVEs published in 2020.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2020-37028HIGH8.4Socusoft Photo to Video Converter Professional 8.07 contains a local buffer overflow vulnerability in the 'Output Folder...
CVE-2020-37025HIGH8.4Port Forwarding Wizard 4.8.0 contains a buffer overflow vulnerability that allows local attackers to execute arbitrary c...
CVE-2020-37024HIGH8.4Nidesoft DVD Ripper 5.2.18 contains a local buffer overflow vulnerability in the License Code registration parameter tha...
CVE-2020-37023HIGH8.8Koken CMS 0.22.24 contains a file upload vulnerability that allows authenticated attackers to bypass file extension rest...
CVE-2020-37060HIGH8.5Atomic Alarm Clock 6.3 contains a local privilege escalation vulnerability in its service configuration that allows atta...
CVE-2020-37059HIGH8.5Popcorn Time 6.2.1.14 contains an unquoted service path vulnerability that allows local non-privileged users to potentia...
CVE-2020-37058HIGH8.5Andrea ST Filters Service 1.0.64.7 contains an unquoted service path vulnerability in its Windows service configuration....
CVE-2020-37030HIGH8.5Outline Service 1.3.3 contains an unquoted service path vulnerability that allows local users to potentially execute arb...
CVE-2020-37021HIGH8.510-Strike Bandwidth Monitor 3.9 contains an unquoted service path vulnerability in multiple services that allows local a...
CVE-2020-37020HIGH7.8SonarQube 8.3.1 contains an unquoted service path vulnerability that allows local attackers to gain SYSTEM privileges by...
CVE-2020-37017HIGH8.5CodeMeter 6.60 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary ...
CVE-2020-37016HIGH8.5BarcodeOCR 19.3.6 contains an unquoted service path vulnerability that allows local attackers to execute code with eleva...
CVE-2020-37015HIGH7.5The Ruijie Networks Switch eWeb S29_RGOS version 11.4 contains a directory traversal vulnerability that allows unauthent...
CVE-2020-37013HIGH8.4Audio Playback Recorder 3.2.2 contains a local buffer overflow vulnerability in the eject and registration parameters th...
CVE-2020-37011HIGH8.4Gnome Fonts Viewer 3.34.0 contains a heap corruption vulnerability that allows attackers to trigger an out-of-bounds wri...
CVE-2020-37009HIGH8.8MedDream PACS Server 6.8.3.751 contains an authenticated remote code execution vulnerability that allows authorized user...
CVE-2020-37008HIGH8.7EasyPMS 1.0.0 contains an authentication bypass vulnerability that allows unprivileged users to manipulate SQL queries i...
CVE-2020-37006HIGH8.2berliCRM 1.0.24 contains a SQL injection vulnerability in the 'src_record' parameter that allows remote attackers to man...
CVE-2020-37005HIGH7.1TimeClock Software 1.01 contains an authenticated time-based SQL injection vulnerability that allows attackers to enumer...
CVE-2020-37004HIGH8.2The Ultimate Project Manager CRM PRO version 2.0.5 contains a blind SQL injection vulnerability that allows attackers to...
CVE-2020-37001HIGH8.4Frigate Professional 3.36.0.9 contains a local buffer overflow vulnerability in the Pack File feature that allows attack...
CVE-2020-36999HIGH8.8Elaniin CMS 1.0 contains an authentication bypass vulnerability that allows attackers to access the dashboard by manipul...
CVE-2020-36995HIGH7.5Mocha Telnet Lite for iOS 4.2 contains a denial of service vulnerability that allows attackers to crash the application ...
CVE-2020-36973HIGH8.7PDW File Browser 1.3 contains a remote code execution vulnerability that allows authenticated users to upload and rename...
CVE-2020-36972HIGH7.5SmartBlog 2.0.1 contains a blind SQL injection vulnerability in the 'id_post' parameter of the details controller that a...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now