# Vulnerabilities published in 2020


- [CVE-2020-27613](https://insights.sbomify.com/CVE-2020-27613/): Hardcoded credentials in bigbluebutton:bigbluebutton (high 8.4)
- [CVE-2020-27612](https://insights.sbomify.com/CVE-2020-27612/): Information disclosure in bigbluebutton:bigbluebutton (medium 4.3)
- [CVE-2020-27611](https://insights.sbomify.com/CVE-2020-27611/): Weak cryptography in bigbluebutton:bigbluebutton (high 7.3)
- [CVE-2020-27610](https://insights.sbomify.com/CVE-2020-27610/): Misconfiguration in bigbluebutton:bigbluebutton (high 7.5)
- [CVE-2020-2761](https://insights.sbomify.com/CVE-2020-2761/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2020-27609](https://insights.sbomify.com/CVE-2020-27609/): Business logic in bigbluebutton:bigbluebutton (medium 5.3)
- [CVE-2020-27608](https://insights.sbomify.com/CVE-2020-27608/): Cross-site scripting in bigbluebutton:bigbluebutton (medium 6.1)
- [CVE-2020-27607](https://insights.sbomify.com/CVE-2020-27607/): Information disclosure in bigbluebutton:bigbluebutton (medium 6.5)
- [CVE-2020-27606](https://insights.sbomify.com/CVE-2020-27606/): Information disclosure in bigbluebutton:bigbluebutton (medium 5.3)
- [CVE-2020-27605](https://insights.sbomify.com/CVE-2020-27605/): Other in bigbluebutton:bigbluebutton (critical 9.8)
- [CVE-2020-27604](https://insights.sbomify.com/CVE-2020-27604/): Security feature bypass in bigbluebutton:bigbluebutton (medium 6.5)
- [CVE-2020-27603](https://insights.sbomify.com/CVE-2020-27603/): Path traversal in bigbluebutton:bigbluebutton (high 7.5)
- [CVE-2020-27602](https://insights.sbomify.com/CVE-2020-27602/): Other in bigbluebutton:bigbluebutton (critical 9.8)
- [CVE-2020-27601](https://insights.sbomify.com/CVE-2020-27601/): Security feature bypass in bigbluebutton:bigbluebutton (low 3.5)
- [CVE-2020-27600](https://insights.sbomify.com/CVE-2020-27600/): Command injection in dlink:dir-846 firmware (critical 9.8)
- [CVE-2020-2760](https://insights.sbomify.com/CVE-2020-2760/): Other in MySQL Server (medium 5.5)
- [CVE-2020-2759](https://insights.sbomify.com/CVE-2020-2759/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2020-27589](https://insights.sbomify.com/CVE-2020-27589/): Improper Certificate Validation in blackduck (high 7.5)
- [CVE-2020-27587](https://insights.sbomify.com/CVE-2020-27587/): Auth bypass in quickheal:total security (medium 6.7)
- [CVE-2020-27586](https://insights.sbomify.com/CVE-2020-27586/): Information disclosure in quickheal:total security (medium 5.9)
- [CVE-2020-27585](https://insights.sbomify.com/CVE-2020-27585/): Weak cryptography in quickheal:total security (medium 4.4)
- [CVE-2020-27583](https://insights.sbomify.com/CVE-2020-27583/): Deserialization in ibm:infosphere information server (critical 9.8)
- [CVE-2020-2758](https://insights.sbomify.com/CVE-2020-2758/): Use after free in VM VirtualBox (high 8.2)
- [CVE-2020-27576](https://insights.sbomify.com/CVE-2020-27576/): Cross-site scripting in maxum:rumpus (medium 5.4)
- [CVE-2020-27575](https://insights.sbomify.com/CVE-2020-27575/): Command injection in maxum:rumpus (high 8.8)
- [CVE-2020-27574](https://insights.sbomify.com/CVE-2020-27574/): Cross-site request forgery in maxum:rumpus (high 8.8)
- [CVE-2020-2757](https://insights.sbomify.com/CVE-2020-2757/): Deserialization in Java (low 3.7)
- [CVE-2020-27569](https://insights.sbomify.com/CVE-2020-27569/): Misconfiguration in aviatrix:openvpn (high 7.5)
- [CVE-2020-27568](https://insights.sbomify.com/CVE-2020-27568/): Misconfiguration in aviatrix:controller (high 7.5)
- [CVE-2020-27560](https://insights.sbomify.com/CVE-2020-27560/): Denial of service in debian:debian linux (low 3.3)
- [CVE-2020-2756](https://insights.sbomify.com/CVE-2020-2756/): Deserialization in Java (low 3.7)
- [CVE-2020-27558](https://insights.sbomify.com/CVE-2020-27558/): Hardcoded credentials in basetech:ge-131 bt-1837836 firmware (medium 6.5)
- [CVE-2020-27557](https://insights.sbomify.com/CVE-2020-27557/): Information disclosure in basetech:ge-131 bt-1837836 firmware (medium 5.5)
- [CVE-2020-27556](https://insights.sbomify.com/CVE-2020-27556/): Weak cryptography in basetech:ge-131 bt-1837836 firmware (medium 5.3)
- [CVE-2020-27555](https://insights.sbomify.com/CVE-2020-27555/): Hardcoded credentials in basetech:ge-131 bt-1837836 firmware (critical 9.8)
- [CVE-2020-27554](https://insights.sbomify.com/CVE-2020-27554/): Information disclosure in basetech:ge-131 bt-1837836 firmware (high 7.5)
- [CVE-2020-27553](https://insights.sbomify.com/CVE-2020-27553/): Misconfiguration in basetech:ge-131 bt-1837836 firmware (high 7.5)
- [CVE-2020-2755](https://insights.sbomify.com/CVE-2020-2755/): Denial of service in Java (low 3.7)
- [CVE-2020-27545](https://insights.sbomify.com/CVE-2020-27545/): Memory corruption in libdwarf project:libdwarf (medium 6.5)
- [CVE-2020-27544](https://insights.sbomify.com/CVE-2020-27544/): Code injection in foldingathome:client advanced control (critical 9.8)
- [CVE-2020-27543](https://insights.sbomify.com/CVE-2020-27543/): Denial of Service (DoS) in restify-paginate (high 7.5)
- [CVE-2020-27542](https://insights.sbomify.com/CVE-2020-27542/): Command injection in company:cs-c2shw firmware (medium 6.8)
- [CVE-2020-27541](https://insights.sbomify.com/CVE-2020-27541/): Denial of service in company:cs-c2shw firmware (high 7.5)
- [CVE-2020-27540](https://insights.sbomify.com/CVE-2020-27540/): Command injection in company:cs-c2shw firmware (critical 9.8)
- [CVE-2020-2754](https://insights.sbomify.com/CVE-2020-2754/): Denial of service in Java (low 3.7)
- [CVE-2020-27539](https://insights.sbomify.com/CVE-2020-27539/): Memory corruption in company:cs-c2shw firmware (critical 9.8)
- [CVE-2020-27534](https://insights.sbomify.com/CVE-2020-27534/): Path Traversal in Moby builder (medium 5.3)
- [CVE-2020-27533](https://insights.sbomify.com/CVE-2020-27533/): Cross-site scripting in dedecms:dedecms (medium 5.4)
- [CVE-2020-2753](https://insights.sbomify.com/CVE-2020-2753/): Other in Workflow (medium 5.3)
- [CVE-2020-27524](https://insights.sbomify.com/CVE-2020-27524/): Memory corruption in audi:mmi multiplayer (high 7.1)
- [CVE-2020-27523](https://insights.sbomify.com/CVE-2020-27523/): Denial of service in mersive:solstice pod firmware (high 7.5)
- [CVE-2020-2752](https://insights.sbomify.com/CVE-2020-2752/): Denial of service in MySQL Server (medium 5.3)
- [CVE-2020-27519](https://insights.sbomify.com/CVE-2020-27519/): Privilege escalation in pritunl:pritunl-client-electron (high 7.8)
- [CVE-2020-27518](https://insights.sbomify.com/CVE-2020-27518/): Privilege escalation in windscribe:windscribe (high 7.8)
- [CVE-2020-27515](https://insights.sbomify.com/CVE-2020-27515/): Cross-site scripting in techkshetrainfo:savsoft quiz (medium 6.1)
- [CVE-2020-27514](https://insights.sbomify.com/CVE-2020-27514/): Path traversal in zrlog:zrlog (critical 9.1)
- [CVE-2020-27511](https://insights.sbomify.com/CVE-2020-27511/): Denial of service in prototypejs:prototype (high 7.5)
- [CVE-2020-2751](https://insights.sbomify.com/CVE-2020-2751/): Cross-site scripting in PeopleSoft Enterprise PT PeopleTools (medium 6.1)
- [CVE-2020-27509](https://insights.sbomify.com/CVE-2020-27509/): Cross-site scripting in galaxkey:galaxkey (medium 5.4)
- [CVE-2020-27508](https://insights.sbomify.com/CVE-2020-27508/): Information disclosure in frappe:frappe (high 7.5)
- [CVE-2020-27507](https://insights.sbomify.com/CVE-2020-27507/): Memory corruption in kamailio:kamailio (critical 9.8)
- [CVE-2020-2750](https://insights.sbomify.com/CVE-2020-2750/): Other in General Ledger (high 7.5)
- [CVE-2020-2749](https://insights.sbomify.com/CVE-2020-2749/): Other in Solaris Operating System (low 2.5)
- [CVE-2020-27488](https://insights.sbomify.com/CVE-2020-27488/): Auth bypass in loxone:miniserver gen 1 firmware (critical 9.8)
- [CVE-2020-27486](https://insights.sbomify.com/CVE-2020-27486/): Memory corruption in garmin:forerunner 235 firmware (critical 9.9)
- [CVE-2020-27485](https://insights.sbomify.com/CVE-2020-27485/): Memory corruption in garmin:forerunner 235 firmware (critical 9.9)
- [CVE-2020-27484](https://insights.sbomify.com/CVE-2020-27484/): Integer overflow in garmin:forerunner 235 firmware (critical 9.9)
- [CVE-2020-27483](https://insights.sbomify.com/CVE-2020-27483/): Memory corruption in garmin:forerunner 235 firmware (critical 9.9)
- [CVE-2020-27481](https://insights.sbomify.com/CVE-2020-27481/): SQL injection in goodlayers:good learning management system (critical 9.8)
- [CVE-2020-2748](https://insights.sbomify.com/CVE-2020-2748/): Memory corruption in VM VirtualBox (low 3.2)
- [CVE-2020-27478](https://insights.sbomify.com/CVE-2020-27478/): Cross Site Scripting vulnerability found in Simplcommerce v.40734964b0811f3cbaf64b6dac261683d256f961 thru 3103357200c70b4767986544e01b19dbf1 (high 7.1)
- [CVE-2020-2747](https://insights.sbomify.com/CVE-2020-2747/): Other in Access Manager (medium 5.4)
- [CVE-2020-27467](https://insights.sbomify.com/CVE-2020-27467/): Path traversal in processwire:processwire (high 7.5)
- [CVE-2020-27466](https://insights.sbomify.com/CVE-2020-27466/): Missing authorization in rconfig:rconfig (high 7.8)
- [CVE-2020-27464](https://insights.sbomify.com/CVE-2020-27464/): Missing authorization in rconfig:rconfig (high 7.8)
- [CVE-2020-27461](https://insights.sbomify.com/CVE-2020-27461/): File upload in seopanel:seopanel (high 8.8)
- [CVE-2020-2746](https://insights.sbomify.com/CVE-2020-2746/): Other in Hospitality Reporting and Analytics (high 8.1)
- [CVE-2020-27459](https://insights.sbomify.com/CVE-2020-27459/): Cross-site scripting in chronoengine:chronoforums (medium 6.1)
- [CVE-2020-2745](https://insights.sbomify.com/CVE-2020-2745/): Denial of service in Access Manager (medium 4.3)
- [CVE-2020-27449](https://insights.sbomify.com/CVE-2020-27449/): Cross-site scripting in zohocorp:manageengine password manager pro (medium 6.1)
- [CVE-2020-2744](https://insights.sbomify.com/CVE-2020-2744/): Other in Transportation Management (medium 5.4)
- [CVE-2020-2743](https://insights.sbomify.com/CVE-2020-2743/): Memory corruption in VM VirtualBox (medium 6.0)
- [CVE-2020-27428](https://insights.sbomify.com/CVE-2020-27428/): Cross-site Scripting in Scratch-Svg-Renderer (medium 6.1)
- [CVE-2020-27423](https://insights.sbomify.com/CVE-2020-27423/): Denial of service in anuko:time tracker (high 7.5)
- [CVE-2020-27422](https://insights.sbomify.com/CVE-2020-27422/): Auth bypass in anuko:time tracker (critical 9.8)
- [CVE-2020-2742](https://insights.sbomify.com/CVE-2020-2742/): Integer overflow in VM VirtualBox (high 8.2)
- [CVE-2020-27418](https://insights.sbomify.com/CVE-2020-27418/): Use after free in fedoraproject:fedora linux kernel (medium 4.4)
- [CVE-2020-27416](https://insights.sbomify.com/CVE-2020-27416/): Auth bypass in mahadiscom:mahavitaran (critical 9.8)
- [CVE-2020-27414](https://insights.sbomify.com/CVE-2020-27414/): Information disclosure in mahadiscom:mahavitaran (medium 5.9)
- [CVE-2020-27413](https://insights.sbomify.com/CVE-2020-27413/): Information disclosure in mahadiscom:mahavitaran (medium 4.2)
- [CVE-2020-2741](https://insights.sbomify.com/CVE-2020-2741/): Memory corruption in VM VirtualBox (medium 6.0)
- [CVE-2020-27409](https://insights.sbomify.com/CVE-2020-27409/): Cross-site scripting in os4ed:opensis (medium 6.1)
- [CVE-2020-27408](https://insights.sbomify.com/CVE-2020-27408/): Missing authorization in os4ed:opensis (high 7.5)
- [CVE-2020-27406](https://insights.sbomify.com/CVE-2020-27406/): Cross-site scripting in dynpg:dynpg (medium 5.4)
- [CVE-2020-27403](https://insights.sbomify.com/CVE-2020-27403/): Information disclosure in tcl:32s330 firmware (medium 6.5)
- [CVE-2020-27402](https://insights.sbomify.com/CVE-2020-27402/): Privilege escalation in hindotech:hk1 box s905x3 firmware (high 7.8)
- [CVE-2020-2740](https://insights.sbomify.com/CVE-2020-2740/): Other in Access Manager (medium 4.6)
- [CVE-2020-27397](https://insights.sbomify.com/CVE-2020-27397/): File upload in projectworlds:online matrimonial project (high 8.8)
- [CVE-2020-2739](https://insights.sbomify.com/CVE-2020-2739/): Other in WebCenter Sites (high 7.4)
- [CVE-2020-27388](https://insights.sbomify.com/CVE-2020-27388/): YOURLS Stored Cross Site Scripting (XSS) (medium 5.4)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/102/