CVE-2020-37256 | Medium | 5.4 | 2026-06-25 | Grav before 1.6.30 contains a cross-site scripting vulnerability in the Admin plugin page editor default security configuration. Privileged users with page edi… |
CVE-2020-9713 | Medium | 5.5 | 2026-06-23 | Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier are affected by an out… |
CVE-2020-9711 | Medium | 5.5 | 2026-06-23 | Acrobat Reader versions 2020.009.20074, 2020.001.30002, 2017.011.30171, 2015.006.30523 and earlier are affected by an out-of-bounds read vulnerability that cou… |
CVE-2020-9695 | High | 7.8 | 2026-06-23 | Acrobat Reader versions 2020.009.20074, 2020.001.30002, 2017.011.30171, 2015.006.30523 and earlier are affected by an out-of-bounds write vulnerability that co… |
CVE-2020-37255 | High | 7.5 | 2026-06-20 | WordPress Time Capsule Plugin 1.21.16 contains an authentication bypass vulnerability that allows unauthenticated attackers to gain administrative access by se… |
CVE-2020-37254 | High | 7.8 | 2026-06-19 | Wondershare PDFelement 5.2.9 contains a privilege escalation vulnerability due to an unquoted service path in the WsAppService Windows service. Local attackers… |
CVE-2020-37253 | High | 7.8 | 2026-06-19 | Winstep 18.06.0096 contains an unquoted service path vulnerability in the Winstep Xtreme Service that allows local attackers to escalate privileges. Attackers… |
CVE-2020-37252 | High | 7.8 | 2026-06-19 | Realtek Audio Service 1.0.0.55 contains an unquoted service path vulnerability in RtkAudioService64.exe that allows local attackers to escalate privileges by i… |
CVE-2020-37251 | High | 7.8 | 2026-06-19 | RealTimes Desktop Service 18.1.4 contains an unquoted service path vulnerability in the rpdsvc.exe binary that allows local attackers to escalate privileges. A… |
CVE-2020-37250 | High | 7.8 | 2026-06-19 | TFTP Broadband 4.3.0.1465 contains an unquoted service path vulnerability in the tftpt.exe service binary that allows local attackers to execute arbitrary code… |
CVE-2020-37248 | Medium | 6.5 | 2026-06-08 | OfflineIMAP before 8.0.3 trusts the server with their STARTTLS capability prior to authentication, which allows STRIPTLS/man-in-the-middle attacks, taking over… |
CVE-2020-25900 | Medium | 5.3 | 2026-06-05 | HelloTalk through 3.4.1 stores full-precision GPS coordinates even when the user had intended to share only a country or city. Furthermore, these coordinates a… |
CVE-2020-37247 | High | 7.8 | 2026-05-16 | Kite 4.2.0.1 U1 contains an unquoted service path vulnerability in the KiteService Windows service that allows local attackers to escalate privileges by exploi… |
CVE-2020-37246 | Medium | 6.2 | 2026-05-16 | Supsystic Backup 2.3.9 contains a local file inclusion vulnerability that allows unauthenticated attackers to read and delete arbitrary files by manipulating t… |
CVE-2020-37245 | High | 7.5 | 2026-05-16 | Supsystic Digital Publications 1.6.9 contains a path traversal vulnerability in the Folder input field that allows attackers to access files outside the web ro… |
CVE-2020-37244 | High | 8.2 | 2026-05-16 | Supsystic Membership 1.4.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting maliciou… |
CVE-2020-37243 | High | 8.2 | 2026-05-16 | Supsystic Pricing Table 1.8.7 contains an SQL injection vulnerability in the 'sidx' GET parameter that allows unauthenticated attackers to execute arbitrary SQ… |
CVE-2020-37242 | High | 8.2 | 2026-05-16 | Supsystic Ultimate Maps 1.1.12 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting mali… |
CVE-2020-37241 | Medium | 5.3 | 2026-05-16 | bloofoxCMS 0.5.2.1 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions by tricking logged-in users into… |
CVE-2020-37240 | Medium | 6.4 | 2026-05-16 | Queue Management System 4.0.0 contains a stored cross-site scripting vulnerability that allows authenticated administrators to inject malicious scripts through… |
CVE-2020-37239 | Critical | 9.8 | 2026-05-16 | libbabl 0.1.62 contains a broken double free detection vulnerability that allows attackers to bypass memory safety checks by exploiting signature overwriting i… |
CVE-2020-37238 | Medium | 6.4 | 2026-05-16 | CMS Made Simple 2.2.15 contains a stored cross-site scripting vulnerability that allows authenticated users with Content Manager access to inject malicious scr… |
CVE-2020-37237 | Medium | 6.4 | 2026-05-16 | Composr CMS 10.0.34 contains a persistent cross-site scripting vulnerability that allows authenticated administrators to inject malicious scripts through the b… |
CVE-2020-37236 | Medium | 6.4 | 2026-05-16 | NewsLister contains an authenticated persistent cross-site scripting vulnerability that allows authenticated administrators to inject malicious scripts through… |
CVE-2020-37235 | Medium | 6.4 | 2026-05-16 | WordPress Theme Wibar 1.1.8 contains a stored cross-site scripting vulnerability in the Brand component that allows authenticated users to inject malicious scr… |
CVE-2020-37234 | Medium | 6.2 | 2026-05-16 | Internet Download Manager 6.38.12 contains a buffer overflow vulnerability in the Scheduler component that allows local attackers to crash the application by s… |
CVE-2020-37233 | Medium | 6.4 | 2026-05-16 | WordPress Plugin Buddypress 6.2.0 contains a persistent cross-site scripting vulnerability that allows authenticated attackers with moderator privileges to inj… |
CVE-2020-37232 | High | 7.8 | 2026-05-16 | Advanced System Care Service 13.0.0.157 contains an unquoted service path vulnerability in the AdvancedSystemCareService13 service binary path that allows loca… |
CVE-2020-37231 | High | 7.8 | 2026-05-16 | Privacy Drive 3.17.0 contains an unquoted service path vulnerability in the pdsvc.exe service binary that allows local attackers to escalate privileges by expl… |
CVE-2020-37230 | High | 7.8 | 2026-05-16 | Syncplify.me Server! 5.0.37 contains an unquoted service path vulnerability in the SMWebRestServicev5 service that allows local attackers to escalate privilege… |
CVE-2020-37229 | High | 7.8 | 2026-05-16 | OKI sPSV Port Manager 1.0.41 contains an unquoted service path vulnerability in the sPSVOpLclSrv service that allows local attackers to escalate privileges by… |
CVE-2020-37228 | Critical | 9.8 | 2026-05-16 | iDS6 DSSPro Digital Signage System 6.2 contains a CAPTCHA security bypass vulnerability that allows attackers to bypass authentication by requesting the autoLo… |
CVE-2020-37227 | High | 8.8 | 2026-05-16 | HS Brand Logo Slider 2.1 contains an unrestricted file upload vulnerability that allows authenticated users to bypass client-side file extension validation by… |
CVE-2020-37226 | High | 7.1 | 2026-05-13 | Joomla J2 JOBS 1.3.0 contains an authenticated SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL… |
CVE-2020-37225 | Medium | 6.4 | 2026-05-13 | Powie's WHOIS Domain Check 0.9.31 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject arbitrary JavaScript b… |
CVE-2020-37224 | High | 7.1 | 2026-05-13 | Joomla J2 JOBS 1.3.0 contains an authenticated SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL… |
CVE-2020-37223 | High | 7.8 | 2026-05-13 | IObit Uninstaller 9.5.0.15 contains an unquoted service path vulnerability in the IObitUnSvr service that allows local attackers to escalate privileges to SYST… |
CVE-2020-37222 | High | 7.2 | 2026-05-13 | Kuicms Php EE 2.0 contains a persistent cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting craf… |
CVE-2020-37221 | High | 8.4 | 2026-05-13 | Atomic Alarm Clock 6.3 contains a stack overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious string to the dis… |
CVE-2020-37220 | High | 7.5 | 2026-05-13 | Huawei HG630 V2 router contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain administrative access by retrieving the… |
CVE-2020-37219 | High | 7.5 | 2026-05-13 | Joomla com_fabrik 3.9.11 contains a directory traversal vulnerability that allows unauthenticated attackers to list arbitrary files by manipulating the folder… |
CVE-2020-37218 | High | 8.2 | 2026-05-13 | Joomla com_hdwplayer 4.2 contains an SQL injection vulnerability in the search.php file that allows unauthenticated attackers to execute arbitrary SQL queries… |
CVE-2020-37217 | Medium | 4.3 | 2026-05-13 | Easy2Pilot 7 contains a cross-site request forgery vulnerability that allows attackers to add unauthorized user accounts by tricking authenticated administrato… |
CVE-2020-37174 | Medium | 5.5 | 2026-05-13 | WOOF Products Filter for WooCommerce 1.2.3 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject malicious scr… |
CVE-2020-37169 | Medium | 5.5 | 2026-05-13 | WordPress Plugin ultimate-member 2.1.3 contains a local file inclusion vulnerability that allows authenticated attackers to include arbitrary files by manipula… |
CVE-2020-37168 | Critical | 9.8 | 2026-05-13 | Ecommerce Systempay 1.0 contains a weak cryptographic implementation vulnerability that allows attackers to brute force the 16-character production secret key… |
CVE-2020-37216 | High | 7.5 | 2026-04-03 | Hirschmann HiOS devices versions prior to 08.1.00 and 07.1.01 contain a denial of service vulnerability in the EtherNet/IP stack where improper handling of pa… |
CVE-2020-37167 | High | 8.4 | 2026-02-12 | ClamAV versions prior to 0.103.0-rc contain a vulnerability in function name processing through the ClamBC bytecode interpreter that allows attackers to manipu… |
CVE-2020-37215 | High | 7.5 | 2026-02-11 | MSN Password Recovery version 1.30 contains a denial of service vulnerability that allows attackers to crash the application by supplying an oversized input in… |
CVE-2020-37214 | High | 7.5 | 2026-02-11 | Voyager 1.3.0 contains a directory traversal vulnerability that allows attackers to access sensitive system files by manipulating the asset path parameter. Att… |
CVE-2020-37213 | High | 7.5 | 2026-02-11 | TextCrawler Pro 3.1.1 contains a denial of service vulnerability that allows attackers to crash the application by sending an oversized buffer in the license k… |
CVE-2020-37212 | High | 7.5 | 2026-02-11 | SpotMSN 2.4.6 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can gen… |
CVE-2020-37211 | High | 7.5 | 2026-02-11 | SpotIM 2.2 contains a denial of service vulnerability that allows attackers to crash the application by inputting a large buffer in the registration name field… |
CVE-2020-37210 | High | 7.5 | 2026-02-11 | SpotIE 2.9.5 contains a denial of service vulnerability in the registration key input that allows attackers to crash the application. Attackers can generate a… |
CVE-2020-37209 | High | 7.5 | 2026-02-11 | SpotFTP 3.0.0.0 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can g… |
CVE-2020-37208 | High | 7.5 | 2026-02-11 | SpotFTP 3.0.0.0 contains a buffer overflow vulnerability in the registration key input field that allows attackers to crash the application. Attackers can gene… |
CVE-2020-37207 | High | 7.5 | 2026-02-11 | SpotDialup 1.6.7 contains a denial of service vulnerability in the registration key input field that allows attackers to crash the application. Attackers can g… |
CVE-2020-37206 | High | 7.5 | 2026-02-11 | ShareAlarmPro contains a denial of service vulnerability that allows attackers to crash the application by supplying an oversized registration key. Attackers c… |
CVE-2020-37205 | High | 7.5 | 2026-02-11 | RemShutdown 2.9.0.0 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the 'Name' registration field. Att… |
CVE-2020-37204 | High | 7.5 | 2026-02-11 | RemShutdown 2.9.0.0 contains a denial of service vulnerability in its registration key input that allows attackers to crash the application. Attackers can gene… |
CVE-2020-37203 | High | 7.5 | 2026-02-11 | Office Product Key Finder 1.5.4 contains a denial of service vulnerability that allows attackers to crash the application by manipulating the registration code… |
CVE-2020-37202 | High | 7.5 | 2026-02-11 | NetworkSleuth 3.0.0.0 contains a denial of service vulnerability that allows attackers to crash the application by supplying an oversized registration key. Att… |
CVE-2020-37201 | High | 7.5 | 2026-02-11 | NetShareWatcher 1.5.8.0 contains a buffer overflow vulnerability in the registration name input that allows attackers to crash the application. Attackers can g… |
CVE-2020-37200 | High | 7.5 | 2026-02-11 | NetShareWatcher 1.5.8.0 contains a buffer overflow vulnerability in the registration key input that allows attackers to crash the application by supplying over… |
CVE-2020-37199 | High | 7.5 | 2026-02-11 | NBMonitor 1.6.6.0 contains a denial of service vulnerability in its registration key input that allows attackers to crash the application. Attackers can genera… |
CVE-2020-37198 | High | 7.5 | 2026-02-11 | Duplicate Cleaner Pro 4.1.3 contains a denial of service vulnerability that allows attackers to crash the application by injecting an oversized buffer into the… |
CVE-2020-37197 | High | 7.5 | 2026-02-11 | Dnss Domain Name Search Software contains a denial of service vulnerability that allows attackers to crash the application by overflowing the 'Name' input fiel… |
CVE-2020-37196 | High | 7.5 | 2026-02-11 | Dnss Domain Name Search Software contains a denial of service vulnerability that allows attackers to crash the application by providing an oversized registrati… |
CVE-2020-37195 | High | 7.5 | 2026-02-11 | BlueAuditor 1.7.2.0 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers c… |
CVE-2020-37194 | High | 7.5 | 2026-02-11 | Backup Key Recovery 2.2.5 contains a denial of service vulnerability that allows attackers to crash the application by supplying an overly long registration ke… |
CVE-2020-37193 | High | 7.5 | 2026-02-11 | ZIP Password Recovery 2.30 contains a denial of service vulnerability that allows attackers to crash the application by providing maliciously crafted input. At… |
CVE-2020-37192 | Medium | 6.2 | 2026-02-11 | MSN Password Recovery 1.30 contains an XML external entity injection vulnerability that allows attackers to read local system files through crafted XML input… |
CVE-2020-37191 | High | 7.5 | 2026-02-11 | Top Password Software Dialup Password Recovery 1.30 contains a denial of service vulnerability that allows attackers to crash the application by overflowing in… |
CVE-2020-37190 | High | 7.5 | 2026-02-11 | Top Password Firefox Password Recovery 2.8 contains a denial of service vulnerability that allows attackers to crash the application by overflowing input field… |
CVE-2020-37189 | High | 7.5 | 2026-02-11 | TaskCanvas 1.4.0 contains a denial of service vulnerability in the registration code input field that allows attackers to crash the application. Attackers can… |
CVE-2020-37188 | High | 7.5 | 2026-02-11 | SpotOutlook 1.2.6 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can… |
CVE-2020-37187 | High | 7.5 | 2026-02-11 | SpotDialup 1.6.7 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can… |
CVE-2020-37186 | Critical | 9.8 | 2026-02-11 | Chevereto 3.13.4 Core contains a remote code execution vulnerability that allows attackers to inject malicious code during database configuration installation… |
CVE-2020-37185 | High | 7.5 | 2026-02-11 | Backup Key Recovery 2.2.5 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the 'Name' input field. Atta… |
CVE-2020-37184 | Critical | 9.8 | 2026-02-11 | Allok Video Converter 4.6.1217 contains a stack overflow vulnerability in the License Name input field that allows attackers to execute arbitrary code. Attacke… |
CVE-2020-37183 | Critical | 9.8 | 2026-02-11 | Allok RM RMVB to AVI MPEG DVD Converter 3.6.1217 contains a stack overflow vulnerability that allows attackers to execute arbitrary code by overwriting Structu… |
CVE-2020-37182 | High | 7.5 | 2026-02-11 | Redir 3.3 contains a stack overflow vulnerability in the doproxyconnect() function that allows attackers to crash the application by sending oversized input. A… |
CVE-2020-37181 | Critical | 9.8 | 2026-02-11 | Torrent FLV Converter 1.51 Build 117 contains a stack overflow vulnerability that allows attackers to overwrite Structured Exception Handler (SEH) through a ma… |
CVE-2020-37180 | High | 7.5 | 2026-02-11 | GTalk Password Finder 2.2.1 contains a denial of service vulnerability that allows attackers to crash the application by supplying an oversized registration ke… |
CVE-2020-37179 | High | 7.5 | 2026-02-11 | APKF Product Key Finder 2.5.8.0 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the 'Name' input field… |
CVE-2020-37178 | High | 7.5 | 2026-02-11 | KeePass Password Safe versions before 2.44 contain a denial of service vulnerability in the help system's HTML handling. Attackers can trigger the vulnerabilit… |
CVE-2020-37177 | High | 7.5 | 2026-02-11 | BOOTP Turbo 2.0 contains a denial of service vulnerability that allows attackers to crash the application by overwriting the Structured Exception Handler (SEH)… |
CVE-2020-37176 | Critical | 9.8 | 2026-02-11 | Torrent 3GP Converter 1.51 contains a stack overflow vulnerability that allows attackers to execute arbitrary code by overwriting Structured Exception Handler… |
CVE-2020-37175 | High | 7.5 | 2026-02-11 | P2PWIFICAM2 for iOS 10.4.1 contains a denial of service vulnerability that allows attackers to crash the application by manipulating the Camera ID input field… |
CVE-2020-37173 | High | 7.5 | 2026-02-11 | AVideo Platform 8.1 contains an information disclosure vulnerability that allows attackers to enumerate user details through the playlistsFromUser.json.php end… |
CVE-2020-37172 | Medium | 5.3 | 2026-02-11 | AVideo Platform 8.1 contains a cross-site request forgery vulnerability that allows attackers to reset user passwords by exploiting the password recovery mecha… |
CVE-2020-37158 | Medium | 5.3 | 2026-02-11 | AVideo Platform 8.1 contains a cross-site request forgery vulnerability that allows attackers to reset user passwords by exploiting the password recovery mecha… |
CVE-2020-37156 | Medium | 6.5 | 2026-02-11 | BloodX 1.0 contains an authentication bypass vulnerability in login.php that allows attackers to access the dashboard without valid credentials. Attackers can… |
CVE-2020-37153 | Critical | 9.8 | 2026-02-11 | ASTPP 4.0.1 contains multiple vulnerabilities including cross-site scripting and command injection in SIP device configuration and plugin management interfaces… |
CVE-2020-37104 | High | 7.5 | 2026-02-11 | ASTPP 4.0.1 contains an information disclosure vulnerability that allows unauthenticated attackers to download database backup files by predicting backup filen… |
CVE-2020-37171 | Medium | 6.2 | 2026-02-07 | TapinRadio 2.12.3 contains a denial of service vulnerability in the application proxy username configuration that allows local attackers to crash the applicati… |
CVE-2020-37170 | Medium | 6.2 | 2026-02-07 | TapinRadio 2.12.3 contains a denial of service vulnerability in the application proxy address configuration that allows local attackers to crash the applicatio… |
CVE-2020-37166 | Medium | 6.2 | 2026-02-07 | AbsoluteTelnet 11.12 contains a denial of service vulnerability in the SSH2 username input field that allows local attackers to crash the application. Attacker… |
CVE-2020-37165 | Medium | 6.2 | 2026-02-07 | AbsoluteTelnet 11.12 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an oversized license name. At… |
CVE-2020-37164 | Medium | 6.2 | 2026-02-07 | AbsoluteTelnet 11.12 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an oversized license name. At… |