# Vulnerabilities published in 2020


- [CVE-2020-27730](https://insights.sbomify.com/CVE-2020-27730/): Path traversal in NGINX Controller (critical 9.8)
- [CVE-2020-2773](https://insights.sbomify.com/CVE-2020-2773/): Denial of service in Java (low 3.7)
- [CVE-2020-27729](https://insights.sbomify.com/CVE-2020-27729/): Open redirect in BIG-IP APM (medium 6.1)
- [CVE-2020-27728](https://insights.sbomify.com/CVE-2020-27728/): Denial of service in BIG-IP ASM & Advanced WAF (high 7.5)
- [CVE-2020-27727](https://insights.sbomify.com/CVE-2020-27727/): Path traversal in BIG-IP (medium 4.9)
- [CVE-2020-27726](https://insights.sbomify.com/CVE-2020-27726/): Cross-site scripting in BIG-IP APM (medium 6.1)
- [CVE-2020-27725](https://insights.sbomify.com/CVE-2020-27725/): Denial of service in BIG-IP DNS, GTM, and Link Controller (medium 4.3)
- [CVE-2020-27724](https://insights.sbomify.com/CVE-2020-27724/): Denial of service in BIG-IP APM (medium 6.5)
- [CVE-2020-27723](https://insights.sbomify.com/CVE-2020-27723/): Denial of service in BIG-IP APM (high 7.5)
- [CVE-2020-27722](https://insights.sbomify.com/CVE-2020-27722/): Denial of service in BIG-IP APM (medium 6.5)
- [CVE-2020-27721](https://insights.sbomify.com/CVE-2020-27721/): Other in BIG-IP GTM & DNS (high 7.5)
- [CVE-2020-27720](https://insights.sbomify.com/CVE-2020-27720/): Denial of service in BIG-IP LTM/CGNAT (high 7.5)
- [CVE-2020-2772](https://insights.sbomify.com/CVE-2020-2772/): Other in Human Resources (medium 4.1)
- [CVE-2020-27719](https://insights.sbomify.com/CVE-2020-27719/): Cross-site scripting in BIG-IP (medium 6.1)
- [CVE-2020-27718](https://insights.sbomify.com/CVE-2020-27718/): Denial of service in BIG-IP ASM & Advanced WAF (high 7.5)
- [CVE-2020-27717](https://insights.sbomify.com/CVE-2020-27717/): Denial of service in BIG-IP DNS (high 7.5)
- [CVE-2020-27716](https://insights.sbomify.com/CVE-2020-27716/): Denial of service in BIG-IP APM (high 7.5)
- [CVE-2020-27715](https://insights.sbomify.com/CVE-2020-27715/): Denial of service in BIG-IP (high 7.5)
- [CVE-2020-27714](https://insights.sbomify.com/CVE-2020-27714/): Denial of service in BIG-IP AFM (high 7.5)
- [CVE-2020-27713](https://insights.sbomify.com/CVE-2020-27713/): Denial of service in BIG-IP (high 7.5)
- [CVE-2020-2771](https://insights.sbomify.com/CVE-2020-2771/): Information disclosure in Solaris Operating System (low 2.5)
- [CVE-2020-27708](https://insights.sbomify.com/CVE-2020-27708/): Privilege escalation in Origin (high 7.8)
- [CVE-2020-2770](https://insights.sbomify.com/CVE-2020-2770/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2020-27697](https://insights.sbomify.com/CVE-2020-27697/): Privilege escalation in Trend Micro Security (Consumer) (high 7.8)
- [CVE-2020-27696](https://insights.sbomify.com/CVE-2020-27696/): Privilege escalation in Trend Micro Security (Consumer) (high 7.8)
- [CVE-2020-27695](https://insights.sbomify.com/CVE-2020-27695/): Privilege escalation in Trend Micro Security (Consumer) (high 7.8)
- [CVE-2020-27694](https://insights.sbomify.com/CVE-2020-27694/): Other in Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) (high 8.8)
- [CVE-2020-27693](https://insights.sbomify.com/CVE-2020-27693/): Weak cryptography in Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) (medium 4.4)
- [CVE-2020-27692](https://insights.sbomify.com/CVE-2020-27692/): Cross-site request forgery in imomobile:verve connect vh510 firmware (high 8.8)
- [CVE-2020-27691](https://insights.sbomify.com/CVE-2020-27691/): Cross-site scripting in imomobile:verve connect vh510 firmware (medium 6.1)
- [CVE-2020-27690](https://insights.sbomify.com/CVE-2020-27690/): Memory corruption in imomobile:verve connect vh510 firmware (medium 5.5)
- [CVE-2020-2769](https://insights.sbomify.com/CVE-2020-2769/): Other in Hyperion Financial Reporting (low 2.4)
- [CVE-2020-27689](https://insights.sbomify.com/CVE-2020-27689/): Hardcoded credentials in imomobile:verve connect vh510 firmware (critical 9.8)
- [CVE-2020-27688](https://insights.sbomify.com/CVE-2020-27688/): Weak cryptography in robware:rvtools (high 7.5)
- [CVE-2020-27687](https://insights.sbomify.com/CVE-2020-27687/): Other in thingsboard:thingsboard (high 8.8)
- [CVE-2020-2768](https://insights.sbomify.com/CVE-2020-2768/): Other in MySQL Cluster (medium 6.3)
- [CVE-2020-27678](https://insights.sbomify.com/CVE-2020-27678/): Memory corruption in illumos:illumos (critical 9.8)
- [CVE-2020-27675](https://insights.sbomify.com/CVE-2020-27675/): Use after free in debian:debian linux (medium 4.7)
- [CVE-2020-27674](https://insights.sbomify.com/CVE-2020-27674/): Privilege escalation in debian:debian linux (medium 5.3)
- [CVE-2020-27673](https://insights.sbomify.com/CVE-2020-27673/): Denial of service in debian:debian linux (medium 5.5)
- [CVE-2020-27672](https://insights.sbomify.com/CVE-2020-27672/): Use after free in debian:debian linux (high 7.0)
- [CVE-2020-27671](https://insights.sbomify.com/CVE-2020-27671/): Memory corruption in debian:debian linux (high 7.8)
- [CVE-2020-27670](https://insights.sbomify.com/CVE-2020-27670/): Privilege escalation in debian:debian linux (high 7.8)
- [CVE-2020-2767](https://insights.sbomify.com/CVE-2020-2767/): Other in Java (medium 4.8)
- [CVE-2020-27666](https://insights.sbomify.com/CVE-2020-27666/): Cross-site Scripting in Strapi (medium 5.4)
- [CVE-2020-27665](https://insights.sbomify.com/CVE-2020-27665/): Improper Authorization in Strapi (high 7.5)
- [CVE-2020-27664](https://insights.sbomify.com/CVE-2020-27664/): Authorization bypass in Strapi (critical 9.8)
- [CVE-2020-27663](https://insights.sbomify.com/CVE-2020-27663/): Missing authorization in glpi-project:glpi (medium 4.3)
- [CVE-2020-27662](https://insights.sbomify.com/CVE-2020-27662/): Missing authorization in glpi-project:glpi (medium 4.3)
- [CVE-2020-27661](https://insights.sbomify.com/CVE-2020-27661/): Denial of service in qemu:qemu (medium 6.5)
- [CVE-2020-27660](https://insights.sbomify.com/CVE-2020-27660/): SQL injection in Safe Access (critical 9.6)
- [CVE-2020-2766](https://insights.sbomify.com/CVE-2020-2766/): Information disclosure in WebLogic Server (medium 5.3)
- [CVE-2020-27659](https://insights.sbomify.com/CVE-2020-27659/): Cross-site scripting in Safe Access (high 8.4)
- [CVE-2020-27658](https://insights.sbomify.com/CVE-2020-27658/): Misconfiguration in Synology Router Manager (SRM) (high 7.1)
- [CVE-2020-27657](https://insights.sbomify.com/CVE-2020-27657/): Information disclosure in Synology Router Manager (SRM) (medium 6.5)
- [CVE-2020-27656](https://insights.sbomify.com/CVE-2020-27656/): Information disclosure in DiskStation Manager (DSM) (medium 6.5)
- [CVE-2020-27655](https://insights.sbomify.com/CVE-2020-27655/): Missing authorization in Synology Router Manager (SRM) (medium 6.5)
- [CVE-2020-27654](https://insights.sbomify.com/CVE-2020-27654/): Missing authorization in Synology Router Manager (SRM) (critical 9.8)
- [CVE-2020-27653](https://insights.sbomify.com/CVE-2020-27653/): Weak cryptography in Synology Router Manager (SRM) (high 8.3)
- [CVE-2020-27652](https://insights.sbomify.com/CVE-2020-27652/): Weak cryptography in DiskStation Manager (DSM) (high 8.3)
- [CVE-2020-27651](https://insights.sbomify.com/CVE-2020-27651/): Information disclosure in Synology Router Manager (SRM) (medium 5.8)
- [CVE-2020-27650](https://insights.sbomify.com/CVE-2020-27650/): Information disclosure in DiskStation Manager (DSM) (medium 5.8)
- [CVE-2020-2765](https://insights.sbomify.com/CVE-2020-2765/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2020-27649](https://insights.sbomify.com/CVE-2020-27649/): Security feature bypass in Synology Router Manager (SRM) (high 8.3)
- [CVE-2020-27648](https://insights.sbomify.com/CVE-2020-27648/): Security feature bypass in DiskStation Manager (DSM) (high 8.3)
- [CVE-2020-27646](https://insights.sbomify.com/CVE-2020-27646/): Information disclosure in biscom:secure file transfer (medium 6.5)
- [CVE-2020-27645](https://insights.sbomify.com/CVE-2020-27645/): Privilege escalation in 1e:client (high 8.8)
- [CVE-2020-27644](https://insights.sbomify.com/CVE-2020-27644/): Privilege escalation in 1e:client (high 8.8)
- [CVE-2020-27643](https://insights.sbomify.com/CVE-2020-27643/): Privilege escalation in 1e:client (medium 6.5)
- [CVE-2020-27642](https://insights.sbomify.com/CVE-2020-27642/): Cross-site scripting in bigbluebutton:greenlight (medium 6.1)
- [CVE-2020-27640](https://insights.sbomify.com/CVE-2020-27640/): Auth bypass in mitel:mivoice 6930 firmware (high 8.1)
- [CVE-2020-2764](https://insights.sbomify.com/CVE-2020-2764/): Information disclosure in Java (low 3.7)
- [CVE-2020-27639](https://insights.sbomify.com/CVE-2020-27639/): Auth bypass in mitel:6873i sip firmware (high 8.1)
- [CVE-2020-27638](https://insights.sbomify.com/CVE-2020-27638/): Denial of service in debian:debian linux (high 7.5)
- [CVE-2020-27637](https://insights.sbomify.com/CVE-2020-27637/): Path traversal in r-project:cran (critical 9.8)
- [CVE-2020-27636](https://insights.sbomify.com/CVE-2020-27636/): Weak cryptography in microchip:mplab network creator (critical 9.1)
- [CVE-2020-27635](https://insights.sbomify.com/CVE-2020-27635/): Weak cryptography in capgemini:picotcp (critical 9.1)
- [CVE-2020-27634](https://insights.sbomify.com/CVE-2020-27634/): Weak cryptography in contiki-ng:contiki-ng (critical 9.1)
- [CVE-2020-27633](https://insights.sbomify.com/CVE-2020-27633/): Weak cryptography in butok:fnet (critical 9.1)
- [CVE-2020-27632](https://insights.sbomify.com/CVE-2020-27632/): Weak cryptography in siemens:simatic mv420 firmware (high 7.5)
- [CVE-2020-27631](https://insights.sbomify.com/CVE-2020-27631/): Weak cryptography in oryx-embedded:cyclonetcp (critical 9.8)
- [CVE-2020-27630](https://insights.sbomify.com/CVE-2020-27630/): Weak cryptography in silabs:uc\/tcp-ip (critical 9.8)
- [CVE-2020-2763](https://insights.sbomify.com/CVE-2020-2763/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2020-27629](https://insights.sbomify.com/CVE-2020-27629/): Information disclosure in jetbrains:teamcity (medium 5.3)
- [CVE-2020-27628](https://insights.sbomify.com/CVE-2020-27628/): Missing authorization in jetbrains:teamcity (medium 4.3)
- [CVE-2020-27627](https://insights.sbomify.com/CVE-2020-27627/): Other in jetbrains:teamcity (medium 6.1)
- [CVE-2020-27626](https://insights.sbomify.com/CVE-2020-27626/): Server-side request forgery in jetbrains:youtrack (medium 5.3)
- [CVE-2020-27625](https://insights.sbomify.com/CVE-2020-27625/): Information disclosure in jetbrains:youtrack (medium 5.3)
- [CVE-2020-27624](https://insights.sbomify.com/CVE-2020-27624/): Server-side request forgery in jetbrains:youtrack (medium 5.3)
- [CVE-2020-27623](https://insights.sbomify.com/CVE-2020-27623/): Information disclosure in jetbrains:ideavim (high 7.5)
- [CVE-2020-27622](https://insights.sbomify.com/CVE-2020-27622/): Information disclosure in jetbrains:intellij idea (medium 5.3)
- [CVE-2020-27621](https://insights.sbomify.com/CVE-2020-27621/): Other in mediawiki:mediawiki (medium 4.3)
- [CVE-2020-27620](https://insights.sbomify.com/CVE-2020-27620/): Cross-site scripting in mediawiki:skin\ (medium 6.1)
- [CVE-2020-2762](https://insights.sbomify.com/CVE-2020-2762/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2020-27619](https://insights.sbomify.com/CVE-2020-27619/): Code injection in fedoraproject:fedora (critical 9.8)
- [CVE-2020-27618](https://insights.sbomify.com/CVE-2020-27618/): Denial of service in debian:debian linux (medium 5.5)
- [CVE-2020-27617](https://insights.sbomify.com/CVE-2020-27617/): Denial of service in debian:debian linux (medium 6.5)
- [CVE-2020-27616](https://insights.sbomify.com/CVE-2020-27616/): Integer overflow in qemu:qemu (medium 6.5)
- [CVE-2020-27615](https://insights.sbomify.com/CVE-2020-27615/): SQL injection in loginizer:loginizer (critical 9.8)
- [CVE-2020-27614](https://insights.sbomify.com/CVE-2020-27614/): Privilege escalation in anydesk:anydesk (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/101/