# Vulnerabilities published in 2020


- [CVE-2020-27838](https://insights.sbomify.com/CVE-2020-27838/): Keycloak discloses information without authentication (medium 6.5)
- [CVE-2020-27837](https://insights.sbomify.com/CVE-2020-27837/): Race condition in gdm (medium 6.4)
- [CVE-2020-27836](https://insights.sbomify.com/CVE-2020-27836/): Misconfiguration in cluster-ingress-operator (critical 9.8)
- [CVE-2020-27835](https://insights.sbomify.com/CVE-2020-27835/): Use after free in kernel (medium 4.4)
- [CVE-2020-27833](https://insights.sbomify.com/CVE-2020-27833/): Path traversal in openshift/oc (high 7.1)
- [CVE-2020-27832](https://insights.sbomify.com/CVE-2020-27832/): Cross-site scripting in quay (critical 9.0)
- [CVE-2020-27831](https://insights.sbomify.com/CVE-2020-27831/): Missing authorization in quay (medium 4.3)
- [CVE-2020-27830](https://insights.sbomify.com/CVE-2020-27830/): Null dereference in kernel (medium 5.5)
- [CVE-2020-2783](https://insights.sbomify.com/CVE-2020-2783/): Other in Outside In Technology (medium 5.3)
- [CVE-2020-27829](https://insights.sbomify.com/CVE-2020-27829/): Memory corruption in ImageMagick (medium 5.5)
- [CVE-2020-27828](https://insights.sbomify.com/CVE-2020-27828/): Memory corruption in jasper (high 7.8)
- [CVE-2020-27827](https://insights.sbomify.com/CVE-2020-27827/): Denial of service in lldp/openvswitch (high 7.5)
- [CVE-2020-27826](https://insights.sbomify.com/CVE-2020-27826/): Authentication Bypass in keycloak (medium 4.2)
- [CVE-2020-27825](https://insights.sbomify.com/CVE-2020-27825/): Use after free in kernel (medium 5.7)
- [CVE-2020-27824](https://insights.sbomify.com/CVE-2020-27824/): Memory corruption in openjpeg (medium 5.5)
- [CVE-2020-27823](https://insights.sbomify.com/CVE-2020-27823/): Memory corruption in openjpeg (high 7.8)
- [CVE-2020-27822](https://insights.sbomify.com/CVE-2020-27822/): Wildfly has a memory leak vulnerability (medium 5.9)
- [CVE-2020-27821](https://insights.sbomify.com/CVE-2020-27821/): Memory corruption in QEMU (medium 6.0)
- [CVE-2020-27820](https://insights.sbomify.com/CVE-2020-27820/): Use after free in kernel (medium 4.7)
- [CVE-2020-2782](https://insights.sbomify.com/CVE-2020-2782/): Cross-site scripting in PeopleSoft Enterprise PT PeopleTools (high 7.1)
- [CVE-2020-27819](https://insights.sbomify.com/CVE-2020-27819/): Null dereference in libxls (medium 5.5)
- [CVE-2020-27818](https://insights.sbomify.com/CVE-2020-27818/): Memory corruption in pngcheck (low 3.3)
- [CVE-2020-27816](https://insights.sbomify.com/CVE-2020-27816/): Open redirect in openshift-logging/console (medium 6.1)
- [CVE-2020-27815](https://insights.sbomify.com/CVE-2020-27815/): Memory corruption in Linux Kernel (high 7.8)
- [CVE-2020-27814](https://insights.sbomify.com/CVE-2020-27814/): Memory corruption in openjpeg (high 7.8)
- [CVE-2020-27813](https://insights.sbomify.com/CVE-2020-27813/): Integer overflow in github.com/gorilla/websocket (high 7.5)
- [CVE-2020-2781](https://insights.sbomify.com/CVE-2020-2781/): Denial of service in Java (medium 5.3)
- [CVE-2020-27802](https://insights.sbomify.com/CVE-2020-27802/): Denial of service in upx (medium 5.5)
- [CVE-2020-27801](https://insights.sbomify.com/CVE-2020-27801/): Memory corruption in upx (high 7.8)
- [CVE-2020-27800](https://insights.sbomify.com/CVE-2020-27800/): Memory corruption in upx (high 7.8)
- [CVE-2020-2780](https://insights.sbomify.com/CVE-2020-2780/): Denial of service in MySQL Server (medium 6.5)
- [CVE-2020-27799](https://insights.sbomify.com/CVE-2020-27799/): Memory corruption in upx (high 7.8)
- [CVE-2020-27798](https://insights.sbomify.com/CVE-2020-27798/): Memory corruption in upx (medium 5.5)
- [CVE-2020-27797](https://insights.sbomify.com/CVE-2020-27797/): Memory corruption in upx (medium 5.5)
- [CVE-2020-27796](https://insights.sbomify.com/CVE-2020-27796/): Memory corruption in upx (high 7.8)
- [CVE-2020-27795](https://insights.sbomify.com/CVE-2020-27795/): Null dereference in radare2 (high 7.5)
- [CVE-2020-27794](https://insights.sbomify.com/CVE-2020-27794/): Memory corruption in radare2 (critical 9.1)
- [CVE-2020-27793](https://insights.sbomify.com/CVE-2020-27793/): Memory corruption in radare2 (high 7.5)
- [CVE-2020-27792](https://insights.sbomify.com/CVE-2020-27792/): Ghostscript: heap buffer over write vulnerability in ghostscript's lp8000_print_page() in gdevlp8k.c (high 7.1)
- [CVE-2020-27790](https://insights.sbomify.com/CVE-2020-27790/): Denial of service in upx (medium 5.5)
- [CVE-2020-2779](https://insights.sbomify.com/CVE-2020-2779/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2020-27788](https://insights.sbomify.com/CVE-2020-27788/): Memory corruption in upx (medium 5.5)
- [CVE-2020-27787](https://insights.sbomify.com/CVE-2020-27787/): Memory corruption in upx (medium 5.5)
- [CVE-2020-27786](https://insights.sbomify.com/CVE-2020-27786/): Use after free in kernel (high 7.8)
- [CVE-2020-27784](https://insights.sbomify.com/CVE-2020-27784/): Use after free in kernel (medium 5.5)
- [CVE-2020-27783](https://insights.sbomify.com/CVE-2020-27783/): lxml vulnerable to Cross-site Scripting (medium 6.1)
- [CVE-2020-27782](https://insights.sbomify.com/CVE-2020-27782/): Denial of service in Undertow (high 7.5)
- [CVE-2020-27781](https://insights.sbomify.com/CVE-2020-27781/): Information disclosure in Ceph (high 7.1)
- [CVE-2020-27780](https://insights.sbomify.com/CVE-2020-27780/): Auth bypass in pam (critical 9.8)
- [CVE-2020-2778](https://insights.sbomify.com/CVE-2020-2778/): Information disclosure in Java (low 3.7)
- [CVE-2020-27779](https://insights.sbomify.com/CVE-2020-27779/): Security feature bypass in grub2 (high 7.5)
- [CVE-2020-27778](https://insights.sbomify.com/CVE-2020-27778/): Denial of service in poppler (high 7.5)
- [CVE-2020-27777](https://insights.sbomify.com/CVE-2020-27777/): Privilege escalation in kernel (medium 6.7)
- [CVE-2020-27776](https://insights.sbomify.com/CVE-2020-27776/): Integer overflow in ImageMagick (low 3.3)
- [CVE-2020-27775](https://insights.sbomify.com/CVE-2020-27775/): Integer overflow in ImageMagick (low 3.3)
- [CVE-2020-27774](https://insights.sbomify.com/CVE-2020-27774/): Integer overflow in ImageMagick (low 3.3)
- [CVE-2020-27773](https://insights.sbomify.com/CVE-2020-27773/): Denial of service in ImageMagick (low 3.3)
- [CVE-2020-27772](https://insights.sbomify.com/CVE-2020-27772/): Integer overflow in ImageMagick (low 3.3)
- [CVE-2020-27771](https://insights.sbomify.com/CVE-2020-27771/): Integer overflow in ImageMagick (low 3.3)
- [CVE-2020-27770](https://insights.sbomify.com/CVE-2020-27770/): Integer overflow in ImageMagick (medium 5.5)
- [CVE-2020-2777](https://insights.sbomify.com/CVE-2020-2777/): Other in Hyperion Financial Management (medium 4.2)
- [CVE-2020-27769](https://insights.sbomify.com/CVE-2020-27769/): Integer overflow in ImageMagick (low 3.3)
- [CVE-2020-27768](https://insights.sbomify.com/CVE-2020-27768/): Integer overflow in ImageMagick (low 3.3)
- [CVE-2020-27767](https://insights.sbomify.com/CVE-2020-27767/): Integer overflow in ImageMagick (low 3.3)
- [CVE-2020-27766](https://insights.sbomify.com/CVE-2020-27766/): Integer overflow in ImageMagick (high 7.8)
- [CVE-2020-27765](https://insights.sbomify.com/CVE-2020-27765/): Denial of service in ImageMagick (low 3.3)
- [CVE-2020-27764](https://insights.sbomify.com/CVE-2020-27764/): Integer overflow in ImageMagick (low 3.3)
- [CVE-2020-27763](https://insights.sbomify.com/CVE-2020-27763/): Denial of service in ImageMagick (low 3.3)
- [CVE-2020-27762](https://insights.sbomify.com/CVE-2020-27762/): Integer overflow in ImageMagick (medium 5.5)
- [CVE-2020-27761](https://insights.sbomify.com/CVE-2020-27761/): Integer overflow in ImageMagick (low 3.3)
- [CVE-2020-27760](https://insights.sbomify.com/CVE-2020-27760/): Denial of service in ImageMagick (medium 5.5)
- [CVE-2020-2776](https://insights.sbomify.com/CVE-2020-2776/): Denial of service in PeopleSoft Enterprise PT PeopleTools (high 8.6)
- [CVE-2020-27759](https://insights.sbomify.com/CVE-2020-27759/): Integer overflow in ImageMagick (low 3.3)
- [CVE-2020-27758](https://insights.sbomify.com/CVE-2020-27758/): Integer overflow in ImageMagick (low 3.3)
- [CVE-2020-27757](https://insights.sbomify.com/CVE-2020-27757/): Integer overflow in ImageMagick (low 3.3)
- [CVE-2020-27756](https://insights.sbomify.com/CVE-2020-27756/): Denial of service in ImageMagick (medium 5.5)
- [CVE-2020-27755](https://insights.sbomify.com/CVE-2020-27755/): Denial of service in ImageMagick (low 3.3)
- [CVE-2020-27754](https://insights.sbomify.com/CVE-2020-27754/): Integer overflow in ImageMagick (low 3.3)
- [CVE-2020-27753](https://insights.sbomify.com/CVE-2020-27753/): Denial of service in ImageMagick (medium 5.5)
- [CVE-2020-27752](https://insights.sbomify.com/CVE-2020-27752/): Memory corruption in ImageMagick (high 7.1)
- [CVE-2020-27751](https://insights.sbomify.com/CVE-2020-27751/): Integer overflow in ImageMagick (low 3.3)
- [CVE-2020-27750](https://insights.sbomify.com/CVE-2020-27750/): Denial of service in ImageMagick (medium 5.5)
- [CVE-2020-2775](https://insights.sbomify.com/CVE-2020-2775/): Information disclosure in PeopleSoft Enterprise PT PeopleTools (medium 5.3)
- [CVE-2020-27749](https://insights.sbomify.com/CVE-2020-27749/): Memory corruption in grub2 (medium 6.7)
- [CVE-2020-27748](https://insights.sbomify.com/CVE-2020-27748/): Information disclosure in xdg-utils (medium 6.5)
- [CVE-2020-27747](https://insights.sbomify.com/CVE-2020-27747/): Auth bypass in clickstudios:passwordstate (medium 6.8)
- [CVE-2020-27746](https://insights.sbomify.com/CVE-2020-27746/): Race condition in debian:debian linux (low 3.7)
- [CVE-2020-27745](https://insights.sbomify.com/CVE-2020-27745/): Memory corruption in debian:debian linux (critical 9.8)
- [CVE-2020-27744](https://insights.sbomify.com/CVE-2020-27744/): Command injection in westerndigital:my cloud firmware (critical 9.8)
- [CVE-2020-27743](https://insights.sbomify.com/CVE-2020-27743/): Weak cryptography in pam tacplus project:pam tacplus (critical 9.8)
- [CVE-2020-27742](https://insights.sbomify.com/CVE-2020-27742/): Missing authorization in citadel:webcit (medium 6.5)
- [CVE-2020-27741](https://insights.sbomify.com/CVE-2020-27741/): Cross-site scripting in citadel:webcit (medium 6.1)
- [CVE-2020-27740](https://insights.sbomify.com/CVE-2020-27740/): Information disclosure in citadel:webcit (medium 5.3)
- [CVE-2020-2774](https://insights.sbomify.com/CVE-2020-2774/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2020-27739](https://insights.sbomify.com/CVE-2020-27739/): Auth bypass in citadel:webcit (critical 9.8)
- [CVE-2020-27738](https://insights.sbomify.com/CVE-2020-27738/): Memory corruption in APOGEE PXC Compact (BACnet) (medium 6.5)
- [CVE-2020-27737](https://insights.sbomify.com/CVE-2020-27737/): Memory corruption in APOGEE PXC Compact (BACnet) (medium 6.5)
- [CVE-2020-27736](https://insights.sbomify.com/CVE-2020-27736/): Memory corruption in APOGEE PXC Compact (BACnet) (medium 6.5)
- [CVE-2020-27735](https://insights.sbomify.com/CVE-2020-27735/): Cross-site scripting in wftpserver:wing ftp server (medium 6.1)
- [CVE-2020-27733](https://insights.sbomify.com/CVE-2020-27733/): SQL injection in zohocorp:manageengine applications manager (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/100/