Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 69 of 215.
- CVE-2020-3713 Memory corruption in Adobe Illustrator CC
- CVE-2020-37129 Memu Play 7.1.3 - Insecure Folder Permissions
- CVE-2020-37128 ZOC Terminal 7.25.5 - 'Script' Denial of Service
- CVE-2020-37127 dnsmasq-utils 2.79-1 - 'dhcp_release' Denial of Service
- CVE-2020-37126 Free Desktop Clock x86 Venetian Blinds Zipper 3.0 - Unicode Stack Overflow (SEH)
- CVE-2020-37125 Edimax Technology EW-7438RPn-v3 Mini 1.27 - Remote Code Execution
- CVE-2020-37124 B64dec 1.1.2 - Buffer Overflow (SEH Overflow + Egg Hunter)
- CVE-2020-37123 Pinger 1.0 - Remote Code Execution
- CVE-2020-37122 SpotFTP-FTP Password Recover 2.4.8 - Denial of Service
- CVE-2020-37121 CODE::BLOCKS 16.01 - Buffer Overflow (SEH) UNICODE
- CVE-2020-37120 Rubo DICOM Viewer 2.0 - Buffer Overflow (SEH)
- CVE-2020-3712 Memory corruption in Adobe Illustrator CC
- CVE-2020-37119 Nsauditor 3.2.1.0 - Buffer Overflow (SEH+ASLR bypass (3 bytes overwrite))
- CVE-2020-37118 P5 FNIP-8x16A FNIP-4xSH 1.0.20 - Cross-Site Request Forgery (Add Admin)
- CVE-2020-37117 jizhiCMS 1.6.7 - Arbitrary File Download
- CVE-2020-37116 GUnet OpenEclass 1.7.3 E-learning platform - phpMyAdmin Remote Access
- CVE-2020-37115 GUnet OpenEclass 1.7.3 E-learning platform - Plaintext Password Storage
- CVE-2020-37114 GUnet OpenEclass 1.7.3 E-learning platform - Information Disclosure
- CVE-2020-37113 GUnet OpenEclass 1.7.3 E-learning platform - File Upload Extension Bypass
- CVE-2020-37112 GUnet OpenEclass 1.7.3 E-learning platform - 'month' SQL Injection
- CVE-2020-37111 60CycleCMS 2.5.2 - 'news.php' Cross-site Scripting (XSS) Vulnerability
- CVE-2020-37110 60CycleCMS 2.5.2 - 'news.php' SQL Injection Vulnerability
- CVE-2020-3711 Memory corruption in Adobe Illustrator CC
- CVE-2020-37109 aSc TimeTables 2020.11.4 - Denial of Service
- CVE-2020-37108 PhpIX 2012 Professional - 'id' SQL Injection
- CVE-2020-37107 Core FTP LE 2.2 - Denial of Service
- CVE-2020-37106 Business Live Chat Software 1.0 - Cross-Site Request Forgery (Add Admin)
- CVE-2020-37105 PMB 5.6 - 'logid' SQL Injection
- CVE-2020-37104 ASTPP 4.0.1 VoIP Billing - Database Backup Download
- CVE-2020-37103 DotNetNuke 9.5 - Persistent Cross-Site Scripting
- CVE-2020-37102 Adaware Web Companion 4.9.2159 - 'WCAssistantService' Unquoted Service Path
- CVE-2020-37101 VPN unlimited 6.1 - Unquoted Service Path
- CVE-2020-37100 Sync Breeze Enterprise 12.4.18 - Unquoted Service Path
- CVE-2020-3710 Memory corruption in Adobe Illustrator CC
- CVE-2020-37099 Disk Savvy Enterprise 12.3.18 - 'disksvs.exe' Unquoted Service Path
- CVE-2020-37098 Disk Sorter Enterprise 12.4.16 - Unquoted Service Path
- CVE-2020-37097 Edimax EW-7438RPn 1.13 - Information Disclosure (WiFi Password)
- CVE-2020-37096 Edimax EW-7438RPn - Cross-Site Request Forgery (MAC Filtering)
- CVE-2020-37095 Cyberoam Authentication Client 2.1.2.7 - Buffer Overflow (SEH)
- CVE-2020-37094 EspoCRM 5.7.0 < 5.9.0 - Two-Factor Authentication Bypass via Auth Token Reuse Between Accounts with Identical Passwords
- CVE-2020-37093 Netis E1+ 1.2.32533 - Unauthenticated WiFi Password Leak
- CVE-2020-37092 Netis E1+ 1.2.32533 - Backdoor Account (root)
- CVE-2020-37091 Maian Support Helpdesk 4.3 - Cross-Site Request Forgery (Add Admin)
- CVE-2020-37090 School ERP Pro 1.0 - Remote Code Execution
- CVE-2020-37089 School ERP Pro 1.0 - 'es_messagesid' SQL Injection
- CVE-2020-37088 School ERP Pro 1.0 - Arbitrary File Read
- CVE-2020-37087 Easy Transfer 1.7 for iOS - Persistent Cross-Site Scripting
- CVE-2020-37086 Easy Transfer 1.7 for iOS - Directory Traversal
- CVE-2020-37085 VirtualTablet Server 3.0.2 - Denial of Service (PoC)
- CVE-2020-37084 School ERP Pro 1.0 Admin Profile Photo Upload Remote Code Execution Vulnerability
- CVE-2020-37083 addressbook 9.0.0.1 - 'id' SQL Injection
- CVE-2020-37082 webERP 4.15.1 - Unauthenticated Backup File Access
- CVE-2020-37081 Fishing Reservation System 7.5 - 'uid' SQL Injection
- CVE-2020-37080 webTareas 2.0.p8 - Arbitrary File Deletion
- CVE-2020-37079 Wing FTP Server < 6.2.7 - Cross-site Request Forgery
- CVE-2020-37078 i-doit Open Source CMDB 1.14.1 - Arbitrary File Deletion
- CVE-2020-37077 Booked Scheduler 2.7.7 - Authenticated Directory Traversal
- CVE-2020-37076 Victor CMS 1.0 - 'post' SQL Injection
- CVE-2020-37075 LanSend 3.2 - Buffer Overflow (SEH)
- CVE-2020-37074 Remote Desktop Audit 2.3.0.157 - Buffer Overflow (SEH)
- CVE-2020-37073 Victor CMS 1.0 - Authenticated Arbitrary File Upload
- CVE-2020-37072 Victor CMS 1.0 - 'comment_author' Persistent Cross-Site Scripting
- CVE-2020-37071 CraftCMS 3 vCard Plugin 1.0.0 - Remote Code Execution
- CVE-2020-37070 CloudMe 1.11.2 - Buffer Overflow (SEH,DEP,ASLR)
- CVE-2020-37069 Konica Minolta FTP Utility 1.0 - 'NLST' Denial of Service
- CVE-2020-37068 Konica Minolta FTP Utility 1.0 - 'LIST' Denial of Service
- CVE-2020-37067 Filetto 1.0 - 'FEAT' Denial of Service
- CVE-2020-37066 GoldWave 5.70 – Buffer Overflow (SEH Unicode)
- CVE-2020-37065 StreamRipper32 2.6 - Buffer Overflow
- CVE-2020-37064 EPSON EasyMP Network Projection 2.81 - 'EMP_NSWLSV' Unquoted Service Path
- CVE-2020-37063 TFTP Turbo 4.6.1273 - 'TFTP Turbo 4' Unquoted Service Path
- CVE-2020-37062 DHCP Turbo 4.6.1298- 'DHCP Turbo 4' Unquoted Service Path
- CVE-2020-37061 BOOTP Turbo 2.0.1214 - 'BOOTP Turbo' Unquoted Service Path
- CVE-2020-37060 Atomic Alarm Clock x86 6.3 - 'AtomicAlarmClock' Unquoted Service Path
- CVE-2020-37059 Popcorn Time 6.2 - 'Update service' Unquoted Service Path
- CVE-2020-37058 Andrea ST Filters Service 1.0.64.7 - Unquoted service path
- CVE-2020-37057 Online-Exam-System 2015 - 'fid' SQL Injection
- CVE-2020-37056 Crystal Shard http-protection 0.2.0 - IP Spoofing Bypass
- CVE-2020-37055 SpyHunter 4 - 'SpyHunter 4 Service' Unquoted Service Path
- CVE-2020-37054 Navigate CMS 2.8.7 - Cross-Site Request Forgery
- CVE-2020-37053 Navigate CMS 2.8.7 - ''sidx' SQL Injection
- CVE-2020-37052 AirControl 1.4.2 - PreAuth Remote Code Execution
- CVE-2020-37051 Online-Exam-System 2015 - 'feedback' SQL Injection
- CVE-2020-37050 Quick Player 1.3 - '.m3l' Buffer Overflow
- CVE-2020-37049 Frigate 3.36.0.9 - 'Command Line' Local Buffer Overflow
- CVE-2020-37048 Iskysoft Application Framework Service 2.4.3.241 - 'IsAppService' Unquoted Service Path
- CVE-2020-37047 Deep Instinct Windows Agent 1.2.29.0 - 'DeepMgmtService' Unquoted Service Path
- CVE-2020-37046 Sistem Informasi Pengumuman Kelulusan Online 1.0 - Cross-Site Request Forgery
- CVE-2020-37045 NetBackup 7.0 - 'NetBackup INET Daemon' Unquoted Service Path
- CVE-2020-37044 OpenCTI 3.3.1 - Cross Site Scripting
- CVE-2020-37043 10-Strike Bandwidth Monitor 3.9 - Buffer Overflow
- CVE-2020-37042 Frigate Professional 3.36.0.9 - 'Find Computer' Local Buffer Overflow
- CVE-2020-37041 OpenCTI 3.3.1 - Directory Traversal
- CVE-2020-37040 Code Blocks 17.12 - 'File Name' Local Buffer Overflow
- CVE-2020-3704 Denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
- CVE-2020-37039 Frigate 2.02 - Denial Of Service
- CVE-2020-37038 Code Blocks 20.03 - Denial Of Service
- CVE-2020-37037 AVAST SecureLine 5.5.522.0 - 'SecureLine' Unquoted Service Path
- CVE-2020-37036 RM Downloader 2.50.60 2006.06.23 - 'Load' Local Buffer Overflow
- CVE-2020-37035 e-learning Php Script 0.1.0 - 'search' SQL Injection