Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 68 of 215.
- CVE-2020-37220 Huawei HG630 V2 Router Authentication Bypass via Serial Number
- CVE-2020-3722 Memory corruption in Adobe Framemaker
- CVE-2020-37219 Joomla com_fabrik 3.9.11 Directory Traversal via image.php
- CVE-2020-37218 Joomla com_hdwplayer 4.2 SQL Injection via search.php
- CVE-2020-37217 Easy2Pilot 7 Cross-Site Request Forgery via admin.php
- CVE-2020-37216 Hirschmann HiOS EtherNet/IP Stack Denial of Service
- CVE-2020-37215 MSN Password Recovery 1.30 - Denial of Service
- CVE-2020-37214 Voyager 1.3.0 - Directory Traversal
- CVE-2020-37213 TextCrawler Pro3.1.1 - Denial of Service
- CVE-2020-37212 SpotMSN 2.4.6 - 'Name' Denial of Service
- CVE-2020-37211 SpotIM 2.2 - 'Name' Denial Of Service
- CVE-2020-37210 SpotIE 2.9.5 - 'Key' Denial of Service
- CVE-2020-3721 Memory corruption in Adobe Framemaker
- CVE-2020-37209 SpotFTP FTP Password Recovery 3.0.0.0 - 'Name' Denial of Service
- CVE-2020-37208 SpotFTP FTP Password Recovery 3.0.0.0 - 'Key' Denial of Service
- CVE-2020-37207 SpotDialup 1.6.7 - 'Key' Denial of Service
- CVE-2020-37206 ShareAlarmPro Advanced Network Access Control - 'Key' Denial of Service
- CVE-2020-37205 RemShutdown 2.9.0.0 - 'Name' Denial of Service
- CVE-2020-37204 RemShutdown 2.9.0.0 - 'Key' Denial of Service
- CVE-2020-37203 Office Product Key Finder 1.5.4 - Denial of Service
- CVE-2020-37202 NetworkSleuth 3.0.0.0 - 'Key' Denial of Service
- CVE-2020-37201 NetShareWatcher 1.5.8.0 - 'Name' Denial Of Service
- CVE-2020-37200 NetShareWatcher 1.5.8.0 - 'Key' Denial of Service
- CVE-2020-3720 Memory corruption in Adobe Framemaker
- CVE-2020-37199 NBMonitor 1.6.6.0 - 'Key' Denial of Service
- CVE-2020-37198 Duplicate Cleaner Pro 4 - Denial of Service
- CVE-2020-37197 Dnss Domain Name Search Software - 'Name' Denial of Service
- CVE-2020-37196 Dnss Domain Name Search Software - 'Key' Denial of Service
- CVE-2020-37195 BlueAuditor 1.7.2.0 - 'Name' Denial of Service
- CVE-2020-37194 Backup Key Recovery Recover Keys Crashed Hard Disk Drive 2.2.5 - 'Key' Denial of Service
- CVE-2020-37193 ZIP Password Recovery 2.30 - 'ZIP File' Denial of Service
- CVE-2020-37192 MSN Password Recovery 1.30 - XML External Entity Injection
- CVE-2020-37191 Top Password Software Dialup Password Recovery 1.30 - Denial of Service
- CVE-2020-37190 Top Password Firefox Password Recovery 2.8 - Denial of Service
- CVE-2020-3719 Magento sql injection vulnerability
- CVE-2020-37189 TaskCanvas 1.4.0 - 'Registration' Denial Of Service
- CVE-2020-37188 SpotOutlook 1.2.6 - 'Name' Denial of Service
- CVE-2020-37187 SpotDialup 1.6.7 - 'Name' Denial of Service
- CVE-2020-37186 Chevereto 3.13.4 Core - Remote Code Execution
- CVE-2020-37185 Backup Key Recovery 2.2.5 - 'Name' Denial of Service
- CVE-2020-37184 Allok Video Converter 4.6.1217 - Stack Overflow (SEH)
- CVE-2020-37183 Allok RM RMVB to AVI MPEG DVD Converter 3.6.1217 - Stack Overflow (SEH)
- CVE-2020-37182 Redir 3.3 - Denial of Service
- CVE-2020-37181 Torrent FLV Converter 1.51 Build 117 - Stack Oveflow (SEH partial overwrite)
- CVE-2020-37180 GTalk Password Finder 2.2.1 - 'Key' Denial of Service
- CVE-2020-3718 Magento security bypass vulnerability
- CVE-2020-37179 APKF Product Key Finder 2.5.8.0 - 'Name' Denial of Service
- CVE-2020-37178 KeePass 2.44 - Denial of Service (PoC)
- CVE-2020-37177 BOOTP Turbo 2.0 - Denial of Service (SEH)
- CVE-2020-37176 Torrent 3GP Converter 1.51 - Stack Overflow (SEH)
- CVE-2020-37175 P2PWIFICAM2 for iOS 10.4.1 - 'Camera ID' Denial of Service
- CVE-2020-37174 WOOF / Products Filter Professional for WooCommerce 1.2.3 Persistent XSS
- CVE-2020-37173 AVideo Platform 8.1 - Information Disclosure (User Enumeration)
- CVE-2020-37172 AVideo Platform 8.1 - Cross Site Request Forgery (Password Reset)
- CVE-2020-37171 TapinRadio 2.12.3 - 'username' Denial of Service
- CVE-2020-37170 TapinRadio 2.12.3 - 'address' Denial of Service
- CVE-2020-3717 Magento Path Traversal
- CVE-2020-37169 WordPress Plugin ultimate-member 2.1.3 Local File Inclusion
- CVE-2020-37168 Ecommerce Systempay 1.0 Production Key Brute Force
- CVE-2020-37167 ClamAV ClamBC < 0.103.0-rc - 'ClamBC' Executable Regular Expression Error
- CVE-2020-37166 AbsoluteTelnet 11.12 - 'SSH2/username' Denial of Service
- CVE-2020-37165 AbsoluteTelnet 11.12 - "license name" Denial of Service
- CVE-2020-37164 AbsoluteTelnet 11.12 - "license entry" Denial of Service
- CVE-2020-37163 QuickDate 1.3.2 - SQL Injection
- CVE-2020-37162 Wedding Slideshow Studio 1.36 - 'Key' Buffer Overflow
- CVE-2020-37161 Wedding Slideshow Studio 1.36 - 'Name' Buffer Overflow
- CVE-2020-37160 SprintWork 2.3.1 - Local Privilege Escalation
- CVE-2020-3716 Magento deserialization vulnerability
- CVE-2020-37159 Cuckoo Clock 5.0 - Buffer Overflow
- CVE-2020-37158 AVideo Platform 8.1 - Cross Site Request Forgery (Password Reset)
- CVE-2020-37157 DBPower C300 HD Camera - Remote Configuration Disclosure
- CVE-2020-37156 BloodX 1.0 - Authentication Bypass
- CVE-2020-37155 Core FTP Lite 1.3 - Denial of Service (PoC)
- CVE-2020-37154 eLection 2.0 - 'id' SQL Injection
- CVE-2020-37153 ASTPP VoIP 4.0.1 - Remote Code Execution
- CVE-2020-37152 PHP-Fusion 9.03.50 panels.php - Cross-Site Scripting (XSS)
- CVE-2020-37151 phpMyChat Plus 1.98 'deluser.php' SQL Injection
- CVE-2020-37150 Edimax Technology EW-7438RPn-v3 Mini 1.27 - Unauthorized Access: Wi-Fi Password Disclosure
- CVE-2020-3715 Magento stored cross-site scripting vulnerability
- CVE-2020-37149 Edimax Technology EW-7438RPn-v3 Mini 1.27 - Cross-Site Request Forgery (CSRF) to Command Execution
- CVE-2020-37148 P5 FNIP-8x16A/FNIP-4xSH 1.0.20, 1.0.11 - Stored Cross-Site Scripting (XSS)
- CVE-2020-37147 ATutor 2.2.4 - 'id' SQL Injection
- CVE-2020-37146 Aptina AR0130 960P 1.3MP Camera - Remote Configuration Disclosure
- CVE-2020-37145 HRSALE 1.1.8 - Cross-Site Request Forgery (Add Admin)
- CVE-2020-37144 Exagate Sysguard 6001 - Cross-Site Request Forgery (Add Admin)
- CVE-2020-37143 ProficySCADA for iOS 5.0.25920 - 'Password' Denial of Service
- CVE-2020-37142 10-Strike Network Inventory Explorer 8.54 - 'Add' Local Buffer Overflow (SEH)
- CVE-2020-37141 AMSS++ v 4.31 - 'id' SQL Injection
- CVE-2020-37140 Everest 5.50.2100 - 'Open File' Denial of Service
- CVE-2020-3714 Memory corruption in Adobe Illustrator CC
- CVE-2020-37139 Odin Secure FTP Expert 7.6.3 - 'Site Info' Denial of Service
- CVE-2020-37138 10-Strike Network Inventory Explorer 9.03 - 'Read from File' Buffer Overflow (SEH)(ROP)
- CVE-2020-37137 PHP-Fusion 9.03.50 - 'panels.php' Eval Injection
- CVE-2020-37136 ZOC Terminal v7.25.5 - 'Private key file' Denial of Service
- CVE-2020-37135 AMSS++ 4.7 - Backdoor Admin Account
- CVE-2020-37134 UltraVNC Viewer 1.2.4.0 - 'VNCServer' Denial of Service
- CVE-2020-37133 UltraVNC Launcher 1.2.4.0 - 'RepeaterHost' Denial of Service
- CVE-2020-37132 UltraVNC Launcher 1.2.4.0 - 'Password' Denial of Service
- CVE-2020-37131 Product Key Explorer 4.2.2.0 - 'Key' Denial of Service
- CVE-2020-37130 Nsauditor 3.2.0.0 - 'Name' Denial of Service