CVE-2020-37000 to CVE-2020-37999

254 CVEs with public proof-of-concept exploits.

• CVE-2020-370001 PoCFree MP3 CD Ripper 2.8 - Stack Buffer Overflow (SEH + Egghunter)
• CVE-2020-370011 PoCFrigate Professional 3.36.0.9 - 'Pack File' Buffer Overflow (SEH Egghunter)
• CVE-2020-370021 PoCAjenti 2.1.36 Authenticated Remote Code Execution
• CVE-2020-370031 PoCSellacious eCommerce 4.6 - Persistent Cross-Site Scripting
• CVE-2020-370041 PoCUltimate Project Manager CRM PRO 2.0.5 - SQLi Credentials Leakage
• CVE-2020-370051 PoCTimeClock Software 1.01 Authenticated Time-Based SQL Injection
• CVE-2020-370061 PoCberliCRM 1.0.24 - 'src_record' SQL Injection
• CVE-2020-370071 PoCLiman 0.7 - Cross-Site Request Forgery (Change Password)
• CVE-2020-370081 PoCEasyPMS 1.0.0 - Authentication Bypass
• CVE-2020-370091 PoCMedDream PACS Server 6.8.3.751 - Remote Code Execution
• CVE-2020-370102 PoCsBearShare Lite 5.2.5 - 'Advanced Search'Buffer Overflow in (PoC)
• CVE-2020-370111 PoCGnome Fonts Viewer 3.34.0 Heap Corruption
• CVE-2020-370121 PoCTea LaTex 1.0 - Remote Code Execution
• CVE-2020-370132 PoCsAudio Playback Recorder 3.2.2 - Local Buffer Overflow (SEH)
• CVE-2020-370141 PoCTryton 5.4 - Persistent Cross-Site Scripting
• CVE-2020-370151 PoCRuijie Networks Switch eWeb S29_RGOS 11.4 - Directory Traversal
• CVE-2020-370161 PoCBarcodeOCR 19.3.6 - 'BarcodeOCR' Unquoted Service Path
• CVE-2020-370171 PoCCodeMeter 6.60 - 'CodeMeter.exe' Unquoted Service Path
• CVE-2020-370181 PoCGOautodial 4.0 - Persistent Cross-Site Scripting
• CVE-2020-370191 PoCOrchard Core RC1 - Persistent Cross-Site Scripting
• CVE-2020-370201 PoCSonarQube 8.3.1 - Unquoted Service Path
• CVE-2020-370211 PoCBandwidth Monitor 3.9 - 'Svc10StrikeBandMontitor' Unquoted Service Path
• CVE-2020-370221 PoCOpenZ ERP 3.6.60 - Persistent Cross-Site Scripting
• CVE-2020-370232 PoCsKoken CMS 0.22.24 - Arbitrary File Upload
• CVE-2020-370241 PoCNidesoft DVD Ripper 5.2.18 - Local Buffer Overflow
• CVE-2020-370251 PoCPort Forwarding Wizard 4.8.0 - Buffer Overflow
• CVE-2020-370261 PoCSickbeard 0.1 - Cross-Site Request Forgery
• CVE-2020-370271 PoCSickbeard 0.1 - Remote Command Injection
• CVE-2020-370281 PoCSocusoft Photo to Video Converter Professional 8.07 - 'Output Folder' Buffer Overflow
• CVE-2020-370291 PoCFTPDummy 4.80 - Local Buffer Overflow
• CVE-2020-370301 PoCOutline Service 1.3.3 - 'Outline Service ' Unquoted Service Path
• CVE-2020-370311 PoCSimple Startup Manager 1.17 - 'File' Local Buffer Overflow
• CVE-2020-370321 PoCWing FTP Server 6.3.8 - Remote Code Execution
• CVE-2020-370331 PoCInfor Storefront B2B 1.0 - 'usr_name' SQL Injection
• CVE-2020-370341 PoCHelloWeb 2.0 - Arbitrary File Download
• CVE-2020-370351 PoCe-learning Php Script 0.1.0 - 'search' SQL Injection
• CVE-2020-370361 PoCRM Downloader 2.50.60 2006.06.23 - 'Load' Local Buffer Overflow
• CVE-2020-370371 PoCAVAST SecureLine 5.5.522.0 - 'SecureLine' Unquoted Service Path
• CVE-2020-370381 PoCCode Blocks 20.03 - Denial Of Service
• CVE-2020-370391 PoCFrigate 2.02 - Denial Of Service
• CVE-2020-370401 PoCCode Blocks 17.12 - 'File Name' Local Buffer Overflow
• CVE-2020-370411 PoCOpenCTI 3.3.1 - Directory Traversal
• CVE-2020-370421 PoCFrigate Professional 3.36.0.9 - 'Find Computer' Local Buffer Overflow
• CVE-2020-370431 PoC10-Strike Bandwidth Monitor 3.9 - Buffer Overflow
• CVE-2020-370441 PoCOpenCTI 3.3.1 - Cross Site Scripting
• CVE-2020-370451 PoCNetBackup 7.0 - 'NetBackup INET Daemon' Unquoted Service Path
• CVE-2020-370461 PoCSistem Informasi Pengumuman Kelulusan Online 1.0 - Cross-Site Request Forgery
• CVE-2020-370471 PoCDeep Instinct Windows Agent 1.2.29.0 - 'DeepMgmtService' Unquoted Service Path
• CVE-2020-370481 PoCIskysoft Application Framework Service 2.4.3.241 - 'IsAppService' Unquoted Service Path
• CVE-2020-370491 PoCFrigate 3.36.0.9 - 'Command Line' Local Buffer Overflow
• CVE-2020-370503 PoCsQuick Player 1.3 - '.m3l' Buffer Overflow
• CVE-2020-370511 PoCOnline-Exam-System 2015 - 'feedback' SQL Injection
• CVE-2020-370521 PoCAirControl 1.4.2 - PreAuth Remote Code Execution
• CVE-2020-370531 PoCNavigate CMS 2.8.7 - ''sidx' SQL Injection
• CVE-2020-370541 PoCNavigate CMS 2.8.7 - Cross-Site Request Forgery
• CVE-2020-370551 PoCSpyHunter 4 - 'SpyHunter 4 Service' Unquoted Service Path
• CVE-2020-370561 PoCCrystal Shard http-protection 0.2.0 - IP Spoofing Bypass
• CVE-2020-370571 PoCOnline-Exam-System 2015 - 'fid' SQL Injection
• CVE-2020-370581 PoCAndrea ST Filters Service 1.0.64.7 - Unquoted service path
• CVE-2020-370591 PoCPopcorn Time 6.2 - 'Update service' Unquoted Service Path
• CVE-2020-370601 PoCAtomic Alarm Clock x86 6.3 - 'AtomicAlarmClock' Unquoted Service Path
• CVE-2020-370611 PoCBOOTP Turbo 2.0.1214 - 'BOOTP Turbo' Unquoted Service Path
• CVE-2020-370621 PoCDHCP Turbo 4.6.1298- 'DHCP Turbo 4' Unquoted Service Path
• CVE-2020-370631 PoCTFTP Turbo 4.6.1273 - 'TFTP Turbo 4' Unquoted Service Path
• CVE-2020-370641 PoCEPSON EasyMP Network Projection 2.81 - 'EMP_NSWLSV' Unquoted Service Path
• CVE-2020-370651 PoCStreamRipper32 2.6 - Buffer Overflow
• CVE-2020-370661 PoCGoldWave 5.70 – Buffer Overflow (SEH Unicode)
• CVE-2020-370671 PoCFiletto 1.0 - 'FEAT' Denial of Service
• CVE-2020-370681 PoCKonica Minolta FTP Utility 1.0 - 'LIST' Denial of Service
• CVE-2020-370691 PoCKonica Minolta FTP Utility 1.0 - 'NLST' Denial of Service
• CVE-2020-370701 PoCCloudMe 1.11.2 - Buffer Overflow (SEH,DEP,ASLR)
• CVE-2020-370712 PoCsCraftCMS 3 vCard Plugin 1.0.0 - Remote Code Execution
• CVE-2020-370721 PoCVictor CMS 1.0 - 'comment_author' Persistent Cross-Site Scripting
• CVE-2020-370731 PoCVictor CMS 1.0 - Authenticated Arbitrary File Upload
• CVE-2020-370741 PoCRemote Desktop Audit 2.3.0.157 - Buffer Overflow (SEH)
• CVE-2020-370751 PoCLanSend 3.2 - Buffer Overflow (SEH)
• CVE-2020-370761 PoCVictor CMS 1.0 - 'post' SQL Injection
• CVE-2020-370771 PoCBooked Scheduler 2.7.7 - Authenticated Directory Traversal
• CVE-2020-370781 PoCi-doit Open Source CMDB 1.14.1 - Arbitrary File Deletion
• CVE-2020-370791 PoCWing FTP Server < 6.2.7 - Cross-site Request Forgery
• CVE-2020-370801 PoCwebTareas 2.0.p8 - Arbitrary File Deletion
• CVE-2020-370812 PoCsFishing Reservation System 7.5 - 'uid' SQL Injection
• CVE-2020-370821 PoCwebERP 4.15.1 - Unauthenticated Backup File Access
• CVE-2020-370831 PoCaddressbook 9.0.0.1 - 'id' SQL Injection
• CVE-2020-370841 PoCSchool ERP Pro 1.0 Admin Profile Photo Upload Remote Code Execution Vulnerability
• CVE-2020-370852 PoCsVirtualTablet Server 3.0.2 - Denial of Service (PoC)
• CVE-2020-370862 PoCsEasy Transfer 1.7 for iOS - Directory Traversal
• CVE-2020-370872 PoCsEasy Transfer 1.7 for iOS - Persistent Cross-Site Scripting
• CVE-2020-370881 PoCSchool ERP Pro 1.0 - Arbitrary File Read
• CVE-2020-370891 PoCSchool ERP Pro 1.0 - 'es_messagesid' SQL Injection
• CVE-2020-370901 PoCSchool ERP Pro 1.0 - Remote Code Execution
• CVE-2020-370911 PoCMaian Support Helpdesk 4.3 - Cross-Site Request Forgery (Add Admin)
• CVE-2020-370921 PoCNetis E1+ 1.2.32533 - Backdoor Account (root)
• CVE-2020-370931 PoCNetis E1+ 1.2.32533 - Unauthenticated WiFi Password Leak
• CVE-2020-370941 PoCEspoCRM 5.7.0 < 5.9.0 - Two-Factor Authentication Bypass via Auth Token Reuse Between Accounts with Identical Passwords
• CVE-2020-370951 PoCCyberoam Authentication Client 2.1.2.7 - Buffer Overflow (SEH)
• CVE-2020-370961 PoCEdimax EW-7438RPn - Cross-Site Request Forgery (MAC Filtering)
• CVE-2020-370971 PoCEdimax EW-7438RPn 1.13 - Information Disclosure (WiFi Password)
• CVE-2020-370981 PoCDisk Sorter Enterprise 12.4.16 - Unquoted Service Path
• CVE-2020-370991 PoCDisk Savvy Enterprise 12.3.18 - 'disksvs.exe' Unquoted Service Path
• CVE-2020-371001 PoCSync Breeze Enterprise 12.4.18 - Unquoted Service Path
• CVE-2020-371011 PoCVPN unlimited 6.1 - Unquoted Service Path
• CVE-2020-371021 PoCAdaware Web Companion 4.9.2159 - 'WCAssistantService' Unquoted Service Path
• CVE-2020-371031 PoCDotNetNuke 9.5 - Persistent Cross-Site Scripting
• CVE-2020-371041 PoCASTPP 4.0.1 VoIP Billing - Database Backup Download
• CVE-2020-371051 PoCPMB 5.6 - 'logid' SQL Injection
• CVE-2020-371061 PoCBusiness Live Chat Software 1.0 - Cross-Site Request Forgery (Add Admin)
• CVE-2020-371071 PoCCore FTP LE 2.2 - Denial of Service
• CVE-2020-371081 PoCPhpIX 2012 Professional - 'id' SQL Injection
• CVE-2020-371091 PoCaSc TimeTables 2020.11.4 - Denial of Service
• CVE-2020-371101 PoC60CycleCMS 2.5.2 - 'news.php' SQL Injection Vulnerability
• CVE-2020-371111 PoC60CycleCMS 2.5.2 - 'news.php' Cross-site Scripting (XSS) Vulnerability
• CVE-2020-371121 PoCGUnet OpenEclass 1.7.3 E-learning platform - 'month' SQL Injection
• CVE-2020-371131 PoCGUnet OpenEclass 1.7.3 E-learning platform - File Upload Extension Bypass
• CVE-2020-371141 PoCGUnet OpenEclass 1.7.3 E-learning platform - Information Disclosure
• CVE-2020-371151 PoCGUnet OpenEclass 1.7.3 E-learning platform - Plaintext Password Storage
• CVE-2020-371161 PoCGUnet OpenEclass 1.7.3 E-learning platform - phpMyAdmin Remote Access
• CVE-2020-371171 PoCjizhiCMS 1.6.7 - Arbitrary File Download
• CVE-2020-371183 PoCsP5 FNIP-8x16A FNIP-4xSH 1.0.20 - Cross-Site Request Forgery (Add Admin)
• CVE-2020-371191 PoCNsauditor 3.2.1.0 - Buffer Overflow (SEH+ASLR bypass (3 bytes overwrite))
• CVE-2020-371201 PoCRubo DICOM Viewer 2.0 - Buffer Overflow (SEH)
• CVE-2020-371211 PoCCODE::BLOCKS 16.01 - Buffer Overflow (SEH) UNICODE
• CVE-2020-371221 PoCSpotFTP-FTP Password Recover 2.4.8 - Denial of Service
• CVE-2020-371232 PoCsPinger 1.0 - Remote Code Execution
• CVE-2020-371241 PoCB64dec 1.1.2 - Buffer Overflow (SEH Overflow + Egg Hunter)
• CVE-2020-371251 PoCEdimax Technology EW-7438RPn-v3 Mini 1.27 - Remote Code Execution
• CVE-2020-371261 PoCFree Desktop Clock x86 Venetian Blinds Zipper 3.0 - Unicode Stack Overflow (SEH)
• CVE-2020-371271 PoCdnsmasq-utils 2.79-1 - 'dhcp_release' Denial of Service
• CVE-2020-371281 PoCZOC Terminal 7.25.5 - 'Script' Denial of Service
• CVE-2020-371291 PoCMemu Play 7.1.3 - Insecure Folder Permissions
• CVE-2020-371301 PoCNsauditor 3.2.0.0 - 'Name' Denial of Service
• CVE-2020-371311 PoCProduct Key Explorer 4.2.2.0 - 'Key' Denial of Service
• CVE-2020-371321 PoCUltraVNC Launcher 1.2.4.0 - 'Password' Denial of Service
• CVE-2020-371331 PoCUltraVNC Launcher 1.2.4.0 - 'RepeaterHost' Denial of Service
• CVE-2020-371341 PoCUltraVNC Viewer 1.2.4.0 - 'VNCServer' Denial of Service
• CVE-2020-371351 PoCAMSS++ 4.7 - Backdoor Admin Account
• CVE-2020-371361 PoCZOC Terminal v7.25.5 - 'Private key file' Denial of Service
• CVE-2020-371371 PoCPHP-Fusion 9.03.50 - 'panels.php' Eval Injection
• CVE-2020-371381 PoC10-Strike Network Inventory Explorer 9.03 - 'Read from File' Buffer Overflow (SEH)(ROP)
• CVE-2020-371391 PoCOdin Secure FTP Expert 7.6.3 - 'Site Info' Denial of Service
• CVE-2020-371401 PoCEverest 5.50.2100 - 'Open File' Denial of Service
• CVE-2020-371411 PoCAMSS++ v 4.31 - 'id' SQL Injection
• CVE-2020-371422 PoCs10-Strike Network Inventory Explorer 8.54 - 'Add' Local Buffer Overflow (SEH)
• CVE-2020-371431 PoCProficySCADA for iOS 5.0.25920 - 'Password' Denial of Service
• CVE-2020-371441 PoCExagate Sysguard 6001 - Cross-Site Request Forgery (Add Admin)
• CVE-2020-371451 PoCHRSALE 1.1.8 - Cross-Site Request Forgery (Add Admin)
• CVE-2020-371461 PoCAptina AR0130 960P 1.3MP Camera - Remote Configuration Disclosure
• CVE-2020-371471 PoCATutor 2.2.4 - 'id' SQL Injection
• CVE-2020-371483 PoCsP5 FNIP-8x16A/FNIP-4xSH 1.0.20, 1.0.11 - Stored Cross-Site Scripting (XSS)
• CVE-2020-371491 PoCEdimax Technology EW-7438RPn-v3 Mini 1.27 - Cross-Site Request Forgery (CSRF) to Command Execution
• CVE-2020-371501 PoCEdimax Technology EW-7438RPn-v3 Mini 1.27 - Unauthorized Access: Wi-Fi Password Disclosure
• CVE-2020-371511 PoCphpMyChat Plus 1.98 'deluser.php' SQL Injection
• CVE-2020-371521 PoCPHP-Fusion 9.03.50 panels.php - Cross-Site Scripting (XSS)
• CVE-2020-371531 PoCASTPP VoIP 4.0.1 - Remote Code Execution
• CVE-2020-371542 PoCseLection 2.0 - 'id' SQL Injection
• CVE-2020-371552 PoCsCore FTP Lite 1.3 - Denial of Service (PoC)
• CVE-2020-371561 PoCBloodX 1.0 - Authentication Bypass
• CVE-2020-371572 PoCsDBPower C300 HD Camera - Remote Configuration Disclosure
• CVE-2020-371581 PoCAVideo Platform 8.1 - Cross Site Request Forgery (Password Reset)
• CVE-2020-371591 PoCCuckoo Clock 5.0 - Buffer Overflow
• CVE-2020-371601 PoCSprintWork 2.3.1 - Local Privilege Escalation
• CVE-2020-371611 PoCWedding Slideshow Studio 1.36 - 'Name' Buffer Overflow
• CVE-2020-371621 PoCWedding Slideshow Studio 1.36 - 'Key' Buffer Overflow
• CVE-2020-371631 PoCQuickDate 1.3.2 - SQL Injection
• CVE-2020-371641 PoCAbsoluteTelnet 11.12 - "license entry" Denial of Service
• CVE-2020-371651 PoCAbsoluteTelnet 11.12 - "license name" Denial of Service
• CVE-2020-371661 PoCAbsoluteTelnet 11.12 - 'SSH2/username' Denial of Service
• CVE-2020-371671 PoCClamAV ClamBC < 0.103.0-rc - 'ClamBC' Executable Regular Expression Error
• CVE-2020-371681 PoCEcommerce Systempay 1.0 Production Key Brute Force
• CVE-2020-371691 PoCWordPress Plugin ultimate-member 2.1.3 Local File Inclusion
• CVE-2020-371701 PoCTapinRadio 2.12.3 - 'address' Denial of Service
• CVE-2020-371711 PoCTapinRadio 2.12.3 - 'username' Denial of Service
• CVE-2020-371721 PoCAVideo Platform 8.1 - Cross Site Request Forgery (Password Reset)
• CVE-2020-371731 PoCAVideo Platform 8.1 - Information Disclosure (User Enumeration)
• CVE-2020-371741 PoCWOOF / Products Filter Professional for WooCommerce 1.2.3 Persistent XSS
• CVE-2020-371751 PoCP2PWIFICAM2 for iOS 10.4.1 - 'Camera ID' Denial of Service
• CVE-2020-371761 PoCTorrent 3GP Converter 1.51 - Stack Overflow (SEH)
• CVE-2020-371771 PoCBOOTP Turbo 2.0 - Denial of Service (SEH)
• CVE-2020-371782 PoCsKeePass 2.44 - Denial of Service (PoC)
• CVE-2020-371791 PoCAPKF Product Key Finder 2.5.8.0 - 'Name' Denial of Service
• CVE-2020-371801 PoCGTalk Password Finder 2.2.1 - 'Key' Denial of Service
• CVE-2020-371811 PoCTorrent FLV Converter 1.51 Build 117 - Stack Oveflow (SEH partial overwrite)
• CVE-2020-371821 PoCRedir 3.3 - Denial of Service
• CVE-2020-371831 PoCAllok RM RMVB to AVI MPEG DVD Converter 3.6.1217 - Stack Overflow (SEH)
• CVE-2020-371841 PoCAllok Video Converter 4.6.1217 - Stack Overflow (SEH)
• CVE-2020-371851 PoCBackup Key Recovery 2.2.5 - 'Name' Denial of Service
• CVE-2020-371861 PoCChevereto 3.13.4 Core - Remote Code Execution
• CVE-2020-371871 PoCSpotDialup 1.6.7 - 'Name' Denial of Service
• CVE-2020-371881 PoCSpotOutlook 1.2.6 - 'Name' Denial of Service
• CVE-2020-371891 PoCTaskCanvas 1.4.0 - 'Registration' Denial Of Service
• CVE-2020-371901 PoCTop Password Firefox Password Recovery 2.8 - Denial of Service
• CVE-2020-371911 PoCTop Password Software Dialup Password Recovery 1.30 - Denial of Service
• CVE-2020-371921 PoCMSN Password Recovery 1.30 - XML External Entity Injection
• CVE-2020-371931 PoCZIP Password Recovery 2.30 - 'ZIP File' Denial of Service
• CVE-2020-371941 PoCBackup Key Recovery Recover Keys Crashed Hard Disk Drive 2.2.5 - 'Key' Denial of Service
• CVE-2020-371951 PoCBlueAuditor 1.7.2.0 - 'Name' Denial of Service
• CVE-2020-371961 PoCDnss Domain Name Search Software - 'Key' Denial of Service
• CVE-2020-371971 PoCDnss Domain Name Search Software - 'Name' Denial of Service
• CVE-2020-371981 PoCDuplicate Cleaner Pro 4 - Denial of Service
• CVE-2020-371991 PoCNBMonitor 1.6.6.0 - 'Key' Denial of Service
• CVE-2020-372001 PoCNetShareWatcher 1.5.8.0 - 'Key' Denial of Service
• CVE-2020-372011 PoCNetShareWatcher 1.5.8.0 - 'Name' Denial Of Service
• CVE-2020-372021 PoCNetworkSleuth 3.0.0.0 - 'Key' Denial of Service
• CVE-2020-372031 PoCOffice Product Key Finder 1.5.4 - Denial of Service
• CVE-2020-372041 PoCRemShutdown 2.9.0.0 - 'Key' Denial of Service
• CVE-2020-372051 PoCRemShutdown 2.9.0.0 - 'Name' Denial of Service
• CVE-2020-372061 PoCShareAlarmPro Advanced Network Access Control - 'Key' Denial of Service
• CVE-2020-372071 PoCSpotDialup 1.6.7 - 'Key' Denial of Service
• CVE-2020-372081 PoCSpotFTP FTP Password Recovery 3.0.0.0 - 'Key' Denial of Service
• CVE-2020-372091 PoCSpotFTP FTP Password Recovery 3.0.0.0 - 'Name' Denial of Service
• CVE-2020-372101 PoCSpotIE 2.9.5 - 'Key' Denial of Service
• CVE-2020-372111 PoCSpotIM 2.2 - 'Name' Denial Of Service
• CVE-2020-372121 PoCSpotMSN 2.4.6 - 'Name' Denial of Service
• CVE-2020-372131 PoCTextCrawler Pro3.1.1 - Denial of Service
• CVE-2020-372141 PoCVoyager 1.3.0 - Directory Traversal
• CVE-2020-372151 PoCMSN Password Recovery 1.30 - Denial of Service
• CVE-2020-372171 PoCEasy2Pilot 7 Cross-Site Request Forgery via admin.php
• CVE-2020-372181 PoCJoomla com_hdwplayer 4.2 SQL Injection via search.php
• CVE-2020-372191 PoCJoomla com_fabrik 3.9.11 Directory Traversal via image.php
• CVE-2020-372201 PoCHuawei HG630 V2 Router Authentication Bypass via Serial Number
• CVE-2020-372211 PoCAtomic Alarm Clock 6.3 Stack Overflow via SEH Unicode
• CVE-2020-372221 PoCKuicms Php EE 2.0 Persistent Cross-Site Scripting via bbs reply
• CVE-2020-372231 PoCIObit Uninstaller 9.5.0.15 Unquoted Service Path Privilege Escalation
• CVE-2020-372241 PoCJoomla J2 JOBS 1.3.0 Authenticated SQL Injection via sortby
• CVE-2020-372251 PoCPowie's WHOIS Domain Check 0.9.31 Persistent Cross-Site Scripting
• CVE-2020-372261 PoCJoomla J2 JOBS 1.3.0 Authenticated SQL Injection via sortby
• CVE-2020-372271 PoCWordPress Plugin HS Brand Logo Slider 2.1 Unrestricted File Upload
• CVE-2020-372281 PoCiDS6 DSSPro Digital Signage System 6.2 CAPTCHA Security Bypass
• CVE-2020-372291 PoCOKI sPSV Port Manager 1.0.41 Unquoted Service Path Privilege Escalation
• CVE-2020-372301 PoCSyncplify.me Server! 5.0.37 Unquoted Service Path Privilege Escalation
• CVE-2020-372311 PoCPrivacy Drive 3.17.0 Unquoted Service Path Privilege Escalation
• CVE-2020-372321 PoCAdvanced System Care Service 13.0.0.157 Unquoted Service Path Privilege Escalation
• CVE-2020-372331 PoCWordPress Plugin Buddypress 6.2.0 Persistent Cross-Site Scripting
• CVE-2020-372341 PoCInternet Download Manager 6.38.12 Scheduler Buffer Overflow
• CVE-2020-372351 PoCWordPress Theme Wibar 1.1.8 Stored Cross-Site Scripting via Brand Component
• CVE-2020-372361 PoCNewsLister Authenticated Persistent Cross-Site Scripting via Admin Panel
• CVE-2020-372371 PoCComposr CMS 10.0.34 Persistent Cross-Site Scripting via banners
• CVE-2020-372381 PoCCMS Made Simple 2.2.15 Stored XSS via SVG File Upload
• CVE-2020-372391 PoClibbabl 0.1.62 Broken Double Free Detection Memory Safety
• CVE-2020-372401 PoCQueue Management System 4.0.0 Stored XSS via Add User
• CVE-2020-372411 PoCbloofoxCMS 0.5.2.1 Cross-Site Request Forgery via user add
• CVE-2020-372421 PoCWordPress Plugin Supsystic Ultimate Maps 1.1.12 SQL Injection via sidx
• CVE-2020-372431 PoCWordPress Plugin Supsystic Pricing Table 1.8.7 SQL Injection XSS
• CVE-2020-372441 PoCWordPress Plugin Supsystic Membership 1.4.7 SQL Injection via sidx
• CVE-2020-372451 PoCWordPress Plugin Supsystic Digital Publications 1.6.9 Path Traversal XSS
• CVE-2020-372461 PoCWordPress Plugin Supsystic Backup 2.3.9 Local File Inclusion
• CVE-2020-372471 PoCKite 4.2.0.1 U1 Unquoted Service Path Privilege Escalation
• CVE-2020-372501 PoCTFTP Broadband 4.3.0.1465 Unquoted Service Path Privilege Escalation
• CVE-2020-372511 PoCRealTimes Desktop Service 18.1.4 Unquoted Service Path Privilege Escalation
• CVE-2020-372521 PoCRealtek Audio Service 1.0.0.55 Unquoted Service Path Privilege Escalation
• CVE-2020-372531 PoCWinstep 18.06.0096 Unquoted Service Path Privilege Escalation
• CVE-2020-372541 PoCWondershare PDFelement 5.2.9 Privilege Escalation via Unquoted Service Path
• CVE-2020-372551 PoCWordPress Time Capsule Plugin 1.21.16 Authentication Bypass
• CVE-2020-372681 PoCCoq and Rocq Prover Print Assumptions Omits Unsafe Universe Checking Inlined Through Parameter Inline