# Vulnerabilities published in 2020


- [CVE-2020-37220](https://insights.sbomify.com/CVE-2020-37220/): Huawei HG630 V2 Router Authentication Bypass via Serial Number (high 8.7)
- [CVE-2020-3722](https://insights.sbomify.com/CVE-2020-3722/): Memory corruption in Adobe Framemaker (high 8.8)
- [CVE-2020-37219](https://insights.sbomify.com/CVE-2020-37219/): Joomla com_fabrik 3.9.11 Directory Traversal via image.php (high 8.7)
- [CVE-2020-37218](https://insights.sbomify.com/CVE-2020-37218/): Joomla com_hdwplayer 4.2 SQL Injection via search.php (high 8.8)
- [CVE-2020-37217](https://insights.sbomify.com/CVE-2020-37217/): Easy2Pilot 7 Cross-Site Request Forgery via admin.php (medium 5.1)
- [CVE-2020-37216](https://insights.sbomify.com/CVE-2020-37216/): Hirschmann HiOS EtherNet/IP Stack Denial of Service (high 8.7)
- [CVE-2020-37215](https://insights.sbomify.com/CVE-2020-37215/): MSN Password Recovery 1.30 - Denial of Service (medium 4.6)
- [CVE-2020-37214](https://insights.sbomify.com/CVE-2020-37214/): Voyager 1.3.0 - Directory Traversal (high 8.7)
- [CVE-2020-37213](https://insights.sbomify.com/CVE-2020-37213/): TextCrawler Pro3.1.1 - Denial of Service (medium 6.7)
- [CVE-2020-37212](https://insights.sbomify.com/CVE-2020-37212/): SpotMSN 2.4.6 - 'Name' Denial of Service (medium 4.6)
- [CVE-2020-37211](https://insights.sbomify.com/CVE-2020-37211/): SpotIM 2.2 - 'Name' Denial Of Service (medium 4.6)
- [CVE-2020-37210](https://insights.sbomify.com/CVE-2020-37210/): SpotIE 2.9.5 - 'Key' Denial of Service (medium 4.6)
- [CVE-2020-3721](https://insights.sbomify.com/CVE-2020-3721/): Memory corruption in Adobe Framemaker (high 8.8)
- [CVE-2020-37209](https://insights.sbomify.com/CVE-2020-37209/): SpotFTP FTP Password Recovery 3.0.0.0 - 'Name' Denial of Service (medium 4.6)
- [CVE-2020-37208](https://insights.sbomify.com/CVE-2020-37208/): SpotFTP FTP Password Recovery 3.0.0.0 - 'Key' Denial of Service (medium 4.6)
- [CVE-2020-37207](https://insights.sbomify.com/CVE-2020-37207/): SpotDialup 1.6.7 - 'Key' Denial of Service (medium 4.6)
- [CVE-2020-37206](https://insights.sbomify.com/CVE-2020-37206/): ShareAlarmPro Advanced Network Access Control - 'Key' Denial of Service (medium 4.6)
- [CVE-2020-37205](https://insights.sbomify.com/CVE-2020-37205/): RemShutdown 2.9.0.0 - 'Name' Denial of Service (medium 4.6)
- [CVE-2020-37204](https://insights.sbomify.com/CVE-2020-37204/): RemShutdown 2.9.0.0 - 'Key' Denial of Service (medium 4.6)
- [CVE-2020-37203](https://insights.sbomify.com/CVE-2020-37203/): Office Product Key Finder 1.5.4 - Denial of Service (medium 4.6)
- [CVE-2020-37202](https://insights.sbomify.com/CVE-2020-37202/): NetworkSleuth 3.0.0.0 - 'Key' Denial of Service (medium 4.6)
- [CVE-2020-37201](https://insights.sbomify.com/CVE-2020-37201/): NetShareWatcher 1.5.8.0 - 'Name' Denial Of Service (medium 4.6)
- [CVE-2020-37200](https://insights.sbomify.com/CVE-2020-37200/): NetShareWatcher 1.5.8.0 - 'Key' Denial of Service (medium 4.6)
- [CVE-2020-3720](https://insights.sbomify.com/CVE-2020-3720/): Memory corruption in Adobe Framemaker (high 8.8)
- [CVE-2020-37199](https://insights.sbomify.com/CVE-2020-37199/): NBMonitor 1.6.6.0 - 'Key' Denial of Service (medium 4.6)
- [CVE-2020-37198](https://insights.sbomify.com/CVE-2020-37198/): Duplicate Cleaner Pro 4 - Denial of Service (medium 6.7)
- [CVE-2020-37197](https://insights.sbomify.com/CVE-2020-37197/): Dnss Domain Name Search Software - 'Name' Denial of Service (medium 4.6)
- [CVE-2020-37196](https://insights.sbomify.com/CVE-2020-37196/): Dnss Domain Name Search Software - 'Key' Denial of Service (medium 4.6)
- [CVE-2020-37195](https://insights.sbomify.com/CVE-2020-37195/): BlueAuditor 1.7.2.0 - 'Name' Denial of Service (medium 4.6)
- [CVE-2020-37194](https://insights.sbomify.com/CVE-2020-37194/): Backup Key Recovery Recover Keys Crashed Hard Disk Drive 2.2.5 - 'Key' Denial of Service (medium 4.6)
- [CVE-2020-37193](https://insights.sbomify.com/CVE-2020-37193/): ZIP Password Recovery 2.30 - 'ZIP File' Denial of Service (medium 4.6)
- [CVE-2020-37192](https://insights.sbomify.com/CVE-2020-37192/): MSN Password Recovery 1.30 - XML External Entity Injection (medium 6.7)
- [CVE-2020-37191](https://insights.sbomify.com/CVE-2020-37191/): Top Password Software Dialup Password Recovery 1.30 - Denial of Service (medium 4.6)
- [CVE-2020-37190](https://insights.sbomify.com/CVE-2020-37190/): Top Password Firefox Password Recovery 2.8 - Denial of Service (medium 4.6)
- [CVE-2020-3719](https://insights.sbomify.com/CVE-2020-3719/): Magento sql injection vulnerability (high 7.5)
- [CVE-2020-37189](https://insights.sbomify.com/CVE-2020-37189/): TaskCanvas 1.4.0 - 'Registration' Denial Of Service (medium 4.6)
- [CVE-2020-37188](https://insights.sbomify.com/CVE-2020-37188/): SpotOutlook 1.2.6 - 'Name' Denial of Service (medium 4.6)
- [CVE-2020-37187](https://insights.sbomify.com/CVE-2020-37187/): SpotDialup 1.6.7 - 'Name' Denial of Service (medium 4.6)
- [CVE-2020-37186](https://insights.sbomify.com/CVE-2020-37186/): Chevereto 3.13.4 Core - Remote Code Execution (critical 9.3)
- [CVE-2020-37185](https://insights.sbomify.com/CVE-2020-37185/): Backup Key Recovery 2.2.5 - 'Name' Denial of Service (medium 4.6)
- [CVE-2020-37184](https://insights.sbomify.com/CVE-2020-37184/): Allok Video Converter 4.6.1217 - Stack Overflow (SEH) (high 8.4)
- [CVE-2020-37183](https://insights.sbomify.com/CVE-2020-37183/): Allok RM RMVB to AVI MPEG DVD Converter 3.6.1217 - Stack Overflow (SEH) (high 8.4)
- [CVE-2020-37182](https://insights.sbomify.com/CVE-2020-37182/): Redir 3.3 - Denial of Service (high 8.7)
- [CVE-2020-37181](https://insights.sbomify.com/CVE-2020-37181/): Torrent FLV Converter 1.51 Build 117 - Stack Oveflow (SEH partial overwrite) (medium 6.7)
- [CVE-2020-37180](https://insights.sbomify.com/CVE-2020-37180/): GTalk Password Finder 2.2.1 - 'Key' Denial of Service (medium 4.6)
- [CVE-2020-3718](https://insights.sbomify.com/CVE-2020-3718/): Magento security bypass vulnerability (critical 9.8)
- [CVE-2020-37179](https://insights.sbomify.com/CVE-2020-37179/): APKF Product Key Finder 2.5.8.0 - 'Name' Denial of Service (medium 4.6)
- [CVE-2020-37178](https://insights.sbomify.com/CVE-2020-37178/): KeePass 2.44 - Denial of Service (PoC) (medium 4.6)
- [CVE-2020-37177](https://insights.sbomify.com/CVE-2020-37177/): BOOTP Turbo 2.0 - Denial of Service (SEH) (medium 6.7)
- [CVE-2020-37176](https://insights.sbomify.com/CVE-2020-37176/): Torrent 3GP Converter 1.51 - Stack Overflow (SEH) (high 8.4)
- [CVE-2020-37175](https://insights.sbomify.com/CVE-2020-37175/): P2PWIFICAM2 for iOS 10.4.1 - 'Camera ID' Denial of Service (medium 4.6)
- [CVE-2020-37174](https://insights.sbomify.com/CVE-2020-37174/): WOOF / Products Filter Professional for WooCommerce 1.2.3 Persistent XSS (medium 4.8)
- [CVE-2020-37173](https://insights.sbomify.com/CVE-2020-37173/): AVideo Platform 8.1 - Information Disclosure (User Enumeration) (high 8.7)
- [CVE-2020-37172](https://insights.sbomify.com/CVE-2020-37172/): AVideo Platform 8.1 - Cross Site Request Forgery (Password Reset) (high 8.5)
- [CVE-2020-37171](https://insights.sbomify.com/CVE-2020-37171/): TapinRadio 2.12.3 - 'username' Denial of Service (medium 6.7)
- [CVE-2020-37170](https://insights.sbomify.com/CVE-2020-37170/): TapinRadio 2.12.3 - 'address' Denial of Service (medium 6.7)
- [CVE-2020-3717](https://insights.sbomify.com/CVE-2020-3717/): Magento Path Traversal (medium 5.3)
- [CVE-2020-37169](https://insights.sbomify.com/CVE-2020-37169/): WordPress Plugin ultimate-member 2.1.3 Local File Inclusion (medium 6.8)
- [CVE-2020-37168](https://insights.sbomify.com/CVE-2020-37168/): Ecommerce Systempay 1.0 Production Key Brute Force (critical 9.3)
- [CVE-2020-37167](https://insights.sbomify.com/CVE-2020-37167/): ClamAV ClamBC < 0.103.0-rc - 'ClamBC' Executable Regular Expression Error (high 8.6)
- [CVE-2020-37166](https://insights.sbomify.com/CVE-2020-37166/): AbsoluteTelnet 11.12 - 'SSH2/username' Denial of Service (medium 6.9)
- [CVE-2020-37165](https://insights.sbomify.com/CVE-2020-37165/): AbsoluteTelnet 11.12 - "license name" Denial of Service (medium 6.7)
- [CVE-2020-37164](https://insights.sbomify.com/CVE-2020-37164/): AbsoluteTelnet 11.12 - "license entry" Denial of Service (medium 6.7)
- [CVE-2020-37163](https://insights.sbomify.com/CVE-2020-37163/): QuickDate 1.3.2 - SQL Injection (high 8.8)
- [CVE-2020-37162](https://insights.sbomify.com/CVE-2020-37162/): Wedding Slideshow Studio 1.36 - 'Key' Buffer Overflow (high 8.4)
- [CVE-2020-37161](https://insights.sbomify.com/CVE-2020-37161/): Wedding Slideshow Studio 1.36 - 'Name' Buffer Overflow (high 8.4)
- [CVE-2020-37160](https://insights.sbomify.com/CVE-2020-37160/): SprintWork 2.3.1 - Local Privilege Escalation (high 8.5)
- [CVE-2020-3716](https://insights.sbomify.com/CVE-2020-3716/): Magento deserialization vulnerability (critical 9.8)
- [CVE-2020-37159](https://insights.sbomify.com/CVE-2020-37159/): Cuckoo Clock 5.0 - Buffer Overflow (high 8.4)
- [CVE-2020-37158](https://insights.sbomify.com/CVE-2020-37158/): AVideo Platform 8.1 - Cross Site Request Forgery (Password Reset) (high 8.5)
- [CVE-2020-37157](https://insights.sbomify.com/CVE-2020-37157/): DBPower C300 HD Camera - Remote Configuration Disclosure (high 8.7)
- [CVE-2020-37156](https://insights.sbomify.com/CVE-2020-37156/): BloodX 1.0 - Authentication Bypass (medium 6.9)
- [CVE-2020-37155](https://insights.sbomify.com/CVE-2020-37155/): Core FTP Lite 1.3 - Denial of Service (PoC) (medium 6.7)
- [CVE-2020-37154](https://insights.sbomify.com/CVE-2020-37154/): eLection 2.0 - 'id' SQL Injection (high 7.1)
- [CVE-2020-37153](https://insights.sbomify.com/CVE-2020-37153/): ASTPP VoIP 4.0.1 - Remote Code Execution (high 7.7)
- [CVE-2020-37152](https://insights.sbomify.com/CVE-2020-37152/): PHP-Fusion 9.03.50 panels.php - Cross-Site Scripting (XSS) (medium 5.1)
- [CVE-2020-37151](https://insights.sbomify.com/CVE-2020-37151/): phpMyChat Plus 1.98 'deluser.php' SQL Injection (high 8.8)
- [CVE-2020-37150](https://insights.sbomify.com/CVE-2020-37150/): Edimax Technology EW-7438RPn-v3 Mini 1.27 - Unauthorized Access: Wi-Fi Password Disclosure (high 8.7)
- [CVE-2020-3715](https://insights.sbomify.com/CVE-2020-3715/): Magento stored cross-site scripting vulnerability (medium 6.1)
- [CVE-2020-37149](https://insights.sbomify.com/CVE-2020-37149/): Edimax Technology EW-7438RPn-v3 Mini 1.27 - Cross-Site Request Forgery (CSRF) to Command Execution (medium 5.1)
- [CVE-2020-37148](https://insights.sbomify.com/CVE-2020-37148/): P5 FNIP-8x16A/FNIP-4xSH 1.0.20, 1.0.11 - Stored Cross-Site Scripting (XSS) (medium 5.1)
- [CVE-2020-37147](https://insights.sbomify.com/CVE-2020-37147/): ATutor 2.2.4 - 'id' SQL Injection (high 7.0)
- [CVE-2020-37146](https://insights.sbomify.com/CVE-2020-37146/): Aptina AR0130 960P 1.3MP Camera - Remote Configuration Disclosure (high 8.7)
- [CVE-2020-37145](https://insights.sbomify.com/CVE-2020-37145/): HRSALE 1.1.8 - Cross-Site Request Forgery (Add Admin) (medium 5.1)
- [CVE-2020-37144](https://insights.sbomify.com/CVE-2020-37144/): Exagate Sysguard 6001 - Cross-Site Request Forgery (Add Admin) (medium 5.1)
- [CVE-2020-37143](https://insights.sbomify.com/CVE-2020-37143/): ProficySCADA for iOS 5.0.25920 - 'Password' Denial of Service (medium 4.6)
- [CVE-2020-37142](https://insights.sbomify.com/CVE-2020-37142/): 10-Strike Network Inventory Explorer 8.54 - 'Add' Local Buffer Overflow (SEH) (high 8.4)
- [CVE-2020-37141](https://insights.sbomify.com/CVE-2020-37141/): AMSS++ v 4.31 - 'id' SQL Injection (high 8.8)
- [CVE-2020-37140](https://insights.sbomify.com/CVE-2020-37140/): Everest 5.50.2100 - 'Open File' Denial of Service (medium 4.6)
- [CVE-2020-3714](https://insights.sbomify.com/CVE-2020-3714/): Memory corruption in Adobe Illustrator CC (high 7.8)
- [CVE-2020-37139](https://insights.sbomify.com/CVE-2020-37139/): Odin Secure FTP Expert 7.6.3 - 'Site Info' Denial of Service (medium 4.6)
- [CVE-2020-37138](https://insights.sbomify.com/CVE-2020-37138/): 10-Strike Network Inventory Explorer 9.03 - 'Read from File' Buffer Overflow (SEH)(ROP) (high 8.4)
- [CVE-2020-37137](https://insights.sbomify.com/CVE-2020-37137/): PHP-Fusion 9.03.50 - 'panels.php' Eval Injection (high 8.6)
- [CVE-2020-37136](https://insights.sbomify.com/CVE-2020-37136/): ZOC Terminal v7.25.5 - 'Private key file' Denial of Service (medium 6.7)
- [CVE-2020-37135](https://insights.sbomify.com/CVE-2020-37135/): AMSS++ 4.7 - Backdoor Admin Account (critical 9.3)
- [CVE-2020-37134](https://insights.sbomify.com/CVE-2020-37134/): UltraVNC Viewer 1.2.4.0 - 'VNCServer' Denial of Service (medium 4.6)
- [CVE-2020-37133](https://insights.sbomify.com/CVE-2020-37133/): UltraVNC Launcher 1.2.4.0 - 'RepeaterHost' Denial of Service (medium 6.7)
- [CVE-2020-37132](https://insights.sbomify.com/CVE-2020-37132/): UltraVNC Launcher 1.2.4.0 - 'Password' Denial of Service (medium 6.7)
- [CVE-2020-37131](https://insights.sbomify.com/CVE-2020-37131/): Product Key Explorer 4.2.2.0 - 'Key' Denial of Service (medium 6.7)
- [CVE-2020-37130](https://insights.sbomify.com/CVE-2020-37130/): Nsauditor 3.2.0.0 - 'Name' Denial of Service (medium 6.7)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/68/