# Vulnerabilities published in 2020


- [CVE-2020-3713](https://insights.sbomify.com/CVE-2020-3713/): Memory corruption in Adobe Illustrator CC (high 7.8)
- [CVE-2020-37129](https://insights.sbomify.com/CVE-2020-37129/): Memu Play 7.1.3 - Insecure Folder Permissions (high 8.5)
- [CVE-2020-37128](https://insights.sbomify.com/CVE-2020-37128/): ZOC Terminal 7.25.5 - 'Script' Denial of Service (medium 6.7)
- [CVE-2020-37127](https://insights.sbomify.com/CVE-2020-37127/): dnsmasq-utils 2.79-1 - 'dhcp_release' Denial of Service (medium 6.9)
- [CVE-2020-37126](https://insights.sbomify.com/CVE-2020-37126/): Free Desktop Clock x86 Venetian Blinds Zipper 3.0 - Unicode Stack Overflow (SEH) (high 8.4)
- [CVE-2020-37125](https://insights.sbomify.com/CVE-2020-37125/): Edimax Technology EW-7438RPn-v3 Mini 1.27 - Remote Code Execution (critical 9.3)
- [CVE-2020-37124](https://insights.sbomify.com/CVE-2020-37124/): B64dec 1.1.2 - Buffer Overflow (SEH Overflow + Egg Hunter) (high 8.4)
- [CVE-2020-37123](https://insights.sbomify.com/CVE-2020-37123/): Pinger 1.0 - Remote Code Execution (critical 9.3)
- [CVE-2020-37122](https://insights.sbomify.com/CVE-2020-37122/): SpotFTP-FTP Password Recover 2.4.8 - Denial of Service (medium 6.7)
- [CVE-2020-37121](https://insights.sbomify.com/CVE-2020-37121/): CODE::BLOCKS 16.01 - Buffer Overflow (SEH) UNICODE (medium 6.7)
- [CVE-2020-37120](https://insights.sbomify.com/CVE-2020-37120/): Rubo DICOM Viewer 2.0 - Buffer Overflow (SEH) (high 8.4)
- [CVE-2020-3712](https://insights.sbomify.com/CVE-2020-3712/): Memory corruption in Adobe Illustrator CC (high 7.8)
- [CVE-2020-37119](https://insights.sbomify.com/CVE-2020-37119/): Nsauditor 3.2.1.0 - Buffer Overflow (SEH+ASLR bypass (3 bytes overwrite)) (high 8.4)
- [CVE-2020-37118](https://insights.sbomify.com/CVE-2020-37118/): P5 FNIP-8x16A FNIP-4xSH 1.0.20 - Cross-Site Request Forgery (Add Admin) (medium 5.1)
- [CVE-2020-37117](https://insights.sbomify.com/CVE-2020-37117/): jizhiCMS 1.6.7 - Arbitrary File Download (high 8.6)
- [CVE-2020-37116](https://insights.sbomify.com/CVE-2020-37116/): GUnet OpenEclass 1.7.3 E-learning platform - phpMyAdmin Remote Access (high 8.7)
- [CVE-2020-37115](https://insights.sbomify.com/CVE-2020-37115/): GUnet OpenEclass 1.7.3 E-learning platform - Plaintext Password Storage (high 7.1)
- [CVE-2020-37114](https://insights.sbomify.com/CVE-2020-37114/): GUnet OpenEclass 1.7.3 E-learning platform - Information Disclosure (medium 5.3)
- [CVE-2020-37113](https://insights.sbomify.com/CVE-2020-37113/): GUnet OpenEclass 1.7.3 E-learning platform - File Upload Extension Bypass (high 8.7)
- [CVE-2020-37112](https://insights.sbomify.com/CVE-2020-37112/): GUnet OpenEclass 1.7.3 E-learning platform - 'month' SQL Injection (high 7.1)
- [CVE-2020-37111](https://insights.sbomify.com/CVE-2020-37111/): 60CycleCMS 2.5.2 - 'news.php' Cross-site Scripting (XSS) Vulnerability (medium 5.1)
- [CVE-2020-37110](https://insights.sbomify.com/CVE-2020-37110/): 60CycleCMS 2.5.2 - 'news.php' SQL Injection Vulnerability (high 8.8)
- [CVE-2020-3711](https://insights.sbomify.com/CVE-2020-3711/): Memory corruption in Adobe Illustrator CC (high 7.8)
- [CVE-2020-37109](https://insights.sbomify.com/CVE-2020-37109/): aSc TimeTables 2020.11.4 - Denial of Service (medium 6.7)
- [CVE-2020-37108](https://insights.sbomify.com/CVE-2020-37108/): PhpIX 2012 Professional - 'id' SQL Injection (high 7.1)
- [CVE-2020-37107](https://insights.sbomify.com/CVE-2020-37107/): Core FTP LE 2.2 - Denial of Service (medium 6.7)
- [CVE-2020-37106](https://insights.sbomify.com/CVE-2020-37106/): Business Live Chat Software 1.0 - Cross-Site Request Forgery (Add Admin) (medium 5.1)
- [CVE-2020-37105](https://insights.sbomify.com/CVE-2020-37105/): PMB 5.6 - 'logid' SQL Injection (high 7.1)
- [CVE-2020-37104](https://insights.sbomify.com/CVE-2020-37104/): ASTPP 4.0.1 VoIP Billing - Database Backup Download (high 8.7)
- [CVE-2020-37103](https://insights.sbomify.com/CVE-2020-37103/): DotNetNuke 9.5 - Persistent Cross-Site Scripting (medium 5.1)
- [CVE-2020-37102](https://insights.sbomify.com/CVE-2020-37102/): Adaware Web Companion 4.9.2159 - 'WCAssistantService' Unquoted Service Path (high 8.5)
- [CVE-2020-37101](https://insights.sbomify.com/CVE-2020-37101/): VPN unlimited 6.1 - Unquoted Service Path (high 8.5)
- [CVE-2020-37100](https://insights.sbomify.com/CVE-2020-37100/): Sync Breeze Enterprise 12.4.18 - Unquoted Service Path (high 8.5)
- [CVE-2020-3710](https://insights.sbomify.com/CVE-2020-3710/): Memory corruption in Adobe Illustrator CC (high 7.8)
- [CVE-2020-37099](https://insights.sbomify.com/CVE-2020-37099/): Disk Savvy Enterprise 12.3.18 - 'disksvs.exe' Unquoted Service Path (high 8.5)
- [CVE-2020-37098](https://insights.sbomify.com/CVE-2020-37098/): Disk Sorter Enterprise 12.4.16 - Unquoted Service Path (high 8.5)
- [CVE-2020-37097](https://insights.sbomify.com/CVE-2020-37097/): Edimax EW-7438RPn 1.13 - Information Disclosure (WiFi Password) (high 8.7)
- [CVE-2020-37096](https://insights.sbomify.com/CVE-2020-37096/): Edimax EW-7438RPn - Cross-Site Request Forgery (MAC Filtering) (medium 5.1)
- [CVE-2020-37095](https://insights.sbomify.com/CVE-2020-37095/): Cyberoam Authentication Client 2.1.2.7 - Buffer Overflow (SEH) (high 8.4)
- [CVE-2020-37094](https://insights.sbomify.com/CVE-2020-37094/): EspoCRM 5.7.0 < 5.9.0 - Two-Factor Authentication Bypass via Auth Token Reuse Between Accounts with Identical Passwords (high 8.6)
- [CVE-2020-37093](https://insights.sbomify.com/CVE-2020-37093/): Netis E1+ 1.2.32533 - Unauthenticated WiFi Password Leak (high 8.7)
- [CVE-2020-37092](https://insights.sbomify.com/CVE-2020-37092/): Netis E1+ 1.2.32533 - Backdoor Account (root) (critical 9.3)
- [CVE-2020-37091](https://insights.sbomify.com/CVE-2020-37091/): Maian Support Helpdesk 4.3 - Cross-Site Request Forgery (Add Admin) (medium 5.1)
- [CVE-2020-37090](https://insights.sbomify.com/CVE-2020-37090/): School ERP Pro 1.0 - Remote Code Execution (high 8.7)
- [CVE-2020-37089](https://insights.sbomify.com/CVE-2020-37089/): School ERP Pro 1.0 - 'es_messagesid' SQL Injection (high 7.1)
- [CVE-2020-37088](https://insights.sbomify.com/CVE-2020-37088/): School ERP Pro 1.0 - Arbitrary File Read (high 8.7)
- [CVE-2020-37087](https://insights.sbomify.com/CVE-2020-37087/): Easy Transfer 1.7 for iOS - Persistent Cross-Site Scripting (medium 5.1)
- [CVE-2020-37086](https://insights.sbomify.com/CVE-2020-37086/): Easy Transfer 1.7 for iOS - Directory Traversal (medium 6.9)
- [CVE-2020-37085](https://insights.sbomify.com/CVE-2020-37085/): VirtualTablet Server 3.0.2 - Denial of Service (PoC) (high 8.7)
- [CVE-2020-37084](https://insights.sbomify.com/CVE-2020-37084/): School ERP Pro 1.0 Admin Profile Photo Upload Remote Code Execution Vulnerability (high 8.6)
- [CVE-2020-37083](https://insights.sbomify.com/CVE-2020-37083/): addressbook 9.0.0.1 - 'id' SQL Injection (high 8.8)
- [CVE-2020-37082](https://insights.sbomify.com/CVE-2020-37082/): webERP 4.15.1 - Unauthenticated Backup File Access (high 8.6)
- [CVE-2020-37081](https://insights.sbomify.com/CVE-2020-37081/): Fishing Reservation System 7.5 - 'uid' SQL Injection (high 7.1)
- [CVE-2020-37080](https://insights.sbomify.com/CVE-2020-37080/): webTareas 2.0.p8 - Arbitrary File Deletion (high 7.2)
- [CVE-2020-37079](https://insights.sbomify.com/CVE-2020-37079/): Wing FTP Server < 6.2.7 - Cross-site Request Forgery (medium 5.1)
- [CVE-2020-37078](https://insights.sbomify.com/CVE-2020-37078/): i-doit Open Source CMDB 1.14.1 - Arbitrary File Deletion (high 7.2)
- [CVE-2020-37077](https://insights.sbomify.com/CVE-2020-37077/): Booked Scheduler 2.7.7 - Authenticated Directory Traversal (medium 6.9)
- [CVE-2020-37076](https://insights.sbomify.com/CVE-2020-37076/): Victor CMS 1.0 - 'post' SQL Injection (high 8.8)
- [CVE-2020-37075](https://insights.sbomify.com/CVE-2020-37075/): LanSend 3.2 - Buffer Overflow (SEH) (high 8.4)
- [CVE-2020-37074](https://insights.sbomify.com/CVE-2020-37074/): Remote Desktop Audit 2.3.0.157 - Buffer Overflow (SEH) (high 8.4)
- [CVE-2020-37073](https://insights.sbomify.com/CVE-2020-37073/): Victor CMS 1.0 - Authenticated Arbitrary File Upload (high 8.6)
- [CVE-2020-37072](https://insights.sbomify.com/CVE-2020-37072/): Victor CMS 1.0 - 'comment_author' Persistent Cross-Site Scripting (medium 5.1)
- [CVE-2020-37071](https://insights.sbomify.com/CVE-2020-37071/): CraftCMS 3 vCard Plugin 1.0.0 - Remote Code Execution (critical 9.3)
- [CVE-2020-37070](https://insights.sbomify.com/CVE-2020-37070/): CloudMe 1.11.2 - Buffer Overflow (SEH,DEP,ASLR) (high 8.6)
- [CVE-2020-37069](https://insights.sbomify.com/CVE-2020-37069/): Konica Minolta FTP Utility 1.0 - 'NLST' Denial of Service (high 8.7)
- [CVE-2020-37068](https://insights.sbomify.com/CVE-2020-37068/): Konica Minolta FTP Utility 1.0 - 'LIST' Denial of Service (high 8.7)
- [CVE-2020-37067](https://insights.sbomify.com/CVE-2020-37067/): Filetto 1.0 - 'FEAT' Denial of Service (high 7.1)
- [CVE-2020-37066](https://insights.sbomify.com/CVE-2020-37066/): GoldWave 5.70 – Buffer Overflow (SEH Unicode) (high 8.4)
- [CVE-2020-37065](https://insights.sbomify.com/CVE-2020-37065/): StreamRipper32 2.6 - Buffer Overflow (high 8.4)
- [CVE-2020-37064](https://insights.sbomify.com/CVE-2020-37064/): EPSON EasyMP Network Projection 2.81 - 'EMP_NSWLSV' Unquoted Service Path (high 8.5)
- [CVE-2020-37063](https://insights.sbomify.com/CVE-2020-37063/): TFTP Turbo 4.6.1273 - 'TFTP Turbo 4' Unquoted Service Path (high 8.5)
- [CVE-2020-37062](https://insights.sbomify.com/CVE-2020-37062/): DHCP Turbo 4.6.1298- 'DHCP Turbo 4' Unquoted Service Path (high 8.5)
- [CVE-2020-37061](https://insights.sbomify.com/CVE-2020-37061/): BOOTP Turbo 2.0.1214 - 'BOOTP Turbo' Unquoted Service Path (high 8.5)
- [CVE-2020-37060](https://insights.sbomify.com/CVE-2020-37060/): Atomic Alarm Clock x86 6.3 - 'AtomicAlarmClock' Unquoted Service Path (high 8.5)
- [CVE-2020-37059](https://insights.sbomify.com/CVE-2020-37059/): Popcorn Time 6.2 - 'Update service' Unquoted Service Path (high 8.5)
- [CVE-2020-37058](https://insights.sbomify.com/CVE-2020-37058/): Andrea ST Filters Service 1.0.64.7 - Unquoted service path (high 8.5)
- [CVE-2020-37057](https://insights.sbomify.com/CVE-2020-37057/): Online-Exam-System 2015 - 'fid' SQL Injection (high 8.8)
- [CVE-2020-37056](https://insights.sbomify.com/CVE-2020-37056/): Crystal Shard http-protection 0.2.0 - IP Spoofing Bypass (medium 6.9)
- [CVE-2020-37055](https://insights.sbomify.com/CVE-2020-37055/): SpyHunter 4 - 'SpyHunter 4 Service' Unquoted Service Path (high 8.5)
- [CVE-2020-37054](https://insights.sbomify.com/CVE-2020-37054/): Navigate CMS 2.8.7 - Cross-Site Request Forgery (medium 5.1)
- [CVE-2020-37053](https://insights.sbomify.com/CVE-2020-37053/): Navigate CMS 2.8.7 - ''sidx' SQL Injection (high 7.1)
- [CVE-2020-37052](https://insights.sbomify.com/CVE-2020-37052/): AirControl 1.4.2 - PreAuth Remote Code Execution (critical 9.3)
- [CVE-2020-37051](https://insights.sbomify.com/CVE-2020-37051/): Online-Exam-System 2015 - 'feedback' SQL Injection (high 8.8)
- [CVE-2020-37050](https://insights.sbomify.com/CVE-2020-37050/): Quick Player 1.3 - '.m3l' Buffer Overflow (high 8.4)
- [CVE-2020-37049](https://insights.sbomify.com/CVE-2020-37049/): Frigate 3.36.0.9 - 'Command Line' Local Buffer Overflow (high 8.4)
- [CVE-2020-37048](https://insights.sbomify.com/CVE-2020-37048/): Iskysoft Application Framework Service 2.4.3.241 - 'IsAppService' Unquoted Service Path (high 8.5)
- [CVE-2020-37047](https://insights.sbomify.com/CVE-2020-37047/): Deep Instinct Windows Agent 1.2.29.0 - 'DeepMgmtService' Unquoted Service Path (high 8.5)
- [CVE-2020-37046](https://insights.sbomify.com/CVE-2020-37046/): Sistem Informasi Pengumuman Kelulusan Online 1.0 - Cross-Site Request Forgery (medium 5.1)
- [CVE-2020-37045](https://insights.sbomify.com/CVE-2020-37045/): NetBackup 7.0 - 'NetBackup INET Daemon' Unquoted Service Path (high 8.5)
- [CVE-2020-37044](https://insights.sbomify.com/CVE-2020-37044/): OpenCTI 3.3.1 - Cross Site Scripting (medium 5.1)
- [CVE-2020-37043](https://insights.sbomify.com/CVE-2020-37043/): 10-Strike Bandwidth Monitor 3.9 - Buffer Overflow (high 7.1)
- [CVE-2020-37042](https://insights.sbomify.com/CVE-2020-37042/): Frigate Professional 3.36.0.9 - 'Find Computer' Local Buffer Overflow (high 8.4)
- [CVE-2020-37041](https://insights.sbomify.com/CVE-2020-37041/): OpenCTI 3.3.1 - Directory Traversal (high 7.1)
- [CVE-2020-37040](https://insights.sbomify.com/CVE-2020-37040/): Code Blocks 17.12 - 'File Name' Local Buffer Overflow (high 8.4)
- [CVE-2020-3704](https://insights.sbomify.com/CVE-2020-3704/): Denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking (high 7.5)
- [CVE-2020-37039](https://insights.sbomify.com/CVE-2020-37039/): Frigate 2.02 - Denial Of Service (medium 4.6)
- [CVE-2020-37038](https://insights.sbomify.com/CVE-2020-37038/): Code Blocks 20.03 - Denial Of Service (medium 4.6)
- [CVE-2020-37037](https://insights.sbomify.com/CVE-2020-37037/): AVAST SecureLine 5.5.522.0 - 'SecureLine' Unquoted Service Path (high 8.5)
- [CVE-2020-37036](https://insights.sbomify.com/CVE-2020-37036/): RM Downloader 2.50.60 2006.06.23 - 'Load' Local Buffer Overflow (high 7.1)
- [CVE-2020-37035](https://insights.sbomify.com/CVE-2020-37035/): e-learning Php Script 0.1.0 - 'search' SQL Injection (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/69/