2020 CVE Vulnerabilities
21,081 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-37066 | CRITICAL | 9.8 | 0.4% | Feb 3, 2026 | GoldWave 5.70 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by crafting malic... |
| CVE-2020-37065 | CRITICAL | 9.8 | 0.3% | Feb 3, 2026 | StreamRipper32 version 2.6 contains a buffer overflow vulnerability in the Station/Song Section that allows attackers to... |
| CVE-2020-37116 | HIGH | 8.8 | 0.4% | Feb 3, 2026 | GUnet OpenEclass 1.7.3 includes phpMyAdmin 2.10.0.2 by default, which allows remote logins. Attackers with access to the... |
| CVE-2020-37115 | MEDIUM | 4.9 | 0.3% | Feb 3, 2026 | GUnet OpenEclass 1.7.3 stores user credentials in plaintext, allowing administrators to view all registered users' usern... |
| CVE-2020-37114 | MEDIUM | 6.5 | 0.3% | Feb 3, 2026 | GUnet OpenEclass 1.7.3 allows unauthenticated and authenticated users to access sensitive information, including system ... |
| CVE-2020-37113 | HIGH | 8.8 | 0.8% | Feb 3, 2026 | GUnet OpenEclass 1.7.3 allows authenticated users to bypass file extension restrictions when uploading files. By renamin... |
| CVE-2020-37112 | MEDIUM | 6.5 | 0.3% | Feb 3, 2026 | GUnet OpenEclass 1.7.3 contains multiple SQL injection vulnerabilities that allow authenticated attackers to manipulate ... |
| CVE-2020-37111 | MEDIUM | 6.1 | 0.3% | Feb 3, 2026 | 60CycleCMS 2.5.2 contains a cross-site scripting (XSS) vulnerability in news.php that allows attackers to inject malicio... |
| CVE-2020-37110 | CRITICAL | 9.8 | 0.3% | Feb 3, 2026 | 60CycleCMS 2.5.2 contains an SQL injection vulnerability in news.php and common/lib.php that allows attackers to manipul... |
| CVE-2020-37108 | HIGH | 7.1 | 0.3% | Feb 3, 2026 | PhpIX 2012 Professional contains a SQL injection vulnerability in the 'id' parameter of product_detail.php that allows r... |
| CVE-2020-37105 | HIGH | 7.1 | 0.2% | Feb 3, 2026 | PMB 5.6 contains a SQL injection vulnerability in the administration download script that allows authenticated attackers... |
| CVE-2020-37103 | MEDIUM | 5.4 | 0.3% | Feb 3, 2026 | DotNetNuke 9.5 contains a persistent cross-site scripting vulnerability that allows normal users to upload malicious XML... |
| CVE-2020-37102 | HIGH | 8.5 | 0.1% | Feb 3, 2026 | Adaware Web Companion 4.9.2159 contains an unquoted service path vulnerability in the WCAssistantService that allows loc... |
| CVE-2020-37101 | HIGH | 8.5 | 0.1% | Feb 3, 2026 | VPN Unlimited 6.1 contains an unquoted service path vulnerability that allows local attackers to inject malicious execut... |
| CVE-2020-37100 | HIGH | 8.5 | 0.2% | Feb 3, 2026 | Sync Breeze Enterprise 12.4.18 contains an unquoted service path vulnerability that allows local attackers to execute ar... |
| CVE-2020-37099 | HIGH | 8.5 | 0.1% | Feb 3, 2026 | Disk Savvy Enterprise 12.3.18 contains an unquoted service path vulnerability in its service configuration that allows l... |
| CVE-2020-37098 | HIGH | 8.5 | 0.1% | Feb 3, 2026 | Disk Sorter Enterprise 12.4.16 contains an unquoted service path vulnerability that allows local attackers to execute ar... |
| CVE-2020-37064 | HIGH | 8.5 | 0.1% | Feb 1, 2026 | EPSON EasyMP Network Projection 2.81 contains an unquoted service path vulnerability in the EMP_NSWLSV service that allo... |
| CVE-2020-37063 | HIGH | 8.5 | 0.1% | Feb 1, 2026 | TFTP Turbo 4.6.1273 contains an unquoted service path vulnerability that allows local attackers to potentially execute a... |
| CVE-2020-37062 | HIGH | 8.5 | 0.1% | Feb 1, 2026 | DHCP Turbo 4.61298 contains an unquoted service path vulnerability that allows local attackers to potentially execute ar... |
| CVE-2020-37061 | HIGH | 8.5 | 0.1% | Feb 1, 2026 | BOOTP Turbo 2.0.1214 contains an unquoted service path vulnerability that allows local attackers to potentially execute ... |
| CVE-2020-37055 | HIGH | 8.5 | 0.1% | Feb 1, 2026 | SpyHunter 4 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary cod... |
| CVE-2020-37048 | HIGH | 8.5 | 0.1% | Feb 1, 2026 | Iskysoft Application Framework Service 2.4.3.241 contains an unquoted service path vulnerability that allows local users... |
| CVE-2020-37047 | HIGH | 8.5 | 0.1% | Feb 1, 2026 | Deep Instinct Windows Agent 1.2.29.0 contains an unquoted service path vulnerability in the DeepMgmtService that allows ... |
| CVE-2020-37045 | HIGH | 8.5 | 0.1% | Feb 1, 2026 | Veritas NetBackup 7.0 contains an unquoted service path vulnerability in the NetBackup INET Daemon service that allows l... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now