# Vulnerabilities published in 2020


- [CVE-2020-27387](https://insights.sbomify.com/CVE-2020-27387/): File upload in horizontcms project:horizontcms (high 8.8)
- [CVE-2020-27386](https://insights.sbomify.com/CVE-2020-27386/): File upload in flexdotnetcms project:flexdotnetcms (high 8.8)
- [CVE-2020-27385](https://insights.sbomify.com/CVE-2020-27385/): Path traversal in flexdotnetcms project:flexdotnetcms (high 8.1)
- [CVE-2020-27384](https://insights.sbomify.com/CVE-2020-27384/): Misconfiguration in arena:guild wars 2 (high 7.8)
- [CVE-2020-27383](https://insights.sbomify.com/CVE-2020-27383/): Privilege escalation in blizzard:battle.net (high 7.8)
- [CVE-2020-2738](https://insights.sbomify.com/CVE-2020-2738/): Information disclosure in Siebel UI Framework (medium 4.3)
- [CVE-2020-27379](https://insights.sbomify.com/CVE-2020-27379/): Cross-site request forgery in bookingcore:booking core (medium 6.5)
- [CVE-2020-27377](https://insights.sbomify.com/CVE-2020-27377/): Cross-site scripting in cmsmadesimple:cms made simple (medium 4.8)
- [CVE-2020-27376](https://insights.sbomify.com/CVE-2020-27376/): Auth bypass in drtrustusa:icheck connect bp monitor bp testing 118 firmware (high 8.8)
- [CVE-2020-27375](https://insights.sbomify.com/CVE-2020-27375/): Server-side request forgery in drtrustusa:icheck connect bp monitor bp testing 118 firmware (medium 6.5)
- [CVE-2020-27374](https://insights.sbomify.com/CVE-2020-27374/): Auth bypass in drtrustusa:icheck connect bp monitor bp testing 118 firmware (high 7.5)
- [CVE-2020-27373](https://insights.sbomify.com/CVE-2020-27373/): Command injection in drtrustusa:icheck connect bp monitor bp testing 118 firmware (high 8.8)
- [CVE-2020-27372](https://insights.sbomify.com/CVE-2020-27372/): Memory corruption in brandy project:brandy (critical 9.8)
- [CVE-2020-2737](https://insights.sbomify.com/CVE-2020-2737/): Other in Oracle Database (medium 6.4)
- [CVE-2020-27368](https://insights.sbomify.com/CVE-2020-27368/): Information disclosure in totolink:a702r firmware (medium 5.5)
- [CVE-2020-27366](https://insights.sbomify.com/CVE-2020-27366/): Cross-site scripting in humaxdigital:hgb10r-02 firmware (medium 6.1)
- [CVE-2020-27362](https://insights.sbomify.com/CVE-2020-27362/): Privilege escalation in akkadianlabs:akkadian provisioning manager (high 8.8)
- [CVE-2020-27361](https://insights.sbomify.com/CVE-2020-27361/): Information disclosure in akkadianlabs:akkadian provisioning manager (high 7.5)
- [CVE-2020-27359](https://insights.sbomify.com/CVE-2020-27359/): Cross-site scripting in evms:redcap (medium 5.4)
- [CVE-2020-27358](https://insights.sbomify.com/CVE-2020-27358/): Missing authorization in vanderbilt:redcap (medium 4.3)
- [CVE-2020-27356](https://insights.sbomify.com/CVE-2020-27356/): Cross-site scripting in debug meta data project:debug meta data (medium 5.4)
- [CVE-2020-27352](https://insights.sbomify.com/CVE-2020-27352/): Privilege escalation in snapd (critical 9.3)
- [CVE-2020-27351](https://insights.sbomify.com/CVE-2020-27351/): Various memory and file descriptor leaks in apt-python (low 2.0)
- [CVE-2020-27350](https://insights.sbomify.com/CVE-2020-27350/): apt integer wraparound (medium 5.7)
- [CVE-2020-2735](https://insights.sbomify.com/CVE-2020-2735/): Other in Oracle Database (high 8.0)
- [CVE-2020-27349](https://insights.sbomify.com/CVE-2020-27349/): aptdaemon performed policykit permissions checks too late (medium 5.5)
- [CVE-2020-27348](https://insights.sbomify.com/CVE-2020-27348/): snapcraft may build snaps with incorrect LD_LIBRARY_PATH (medium 6.8)
- [CVE-2020-27347](https://insights.sbomify.com/CVE-2020-27347/): tmux stack buffer overflow in function input_csi_dispatch_sgr_colon (high 8.8)
- [CVE-2020-27344](https://insights.sbomify.com/CVE-2020-27344/): Cross-site scripting in cminds:cm download manager (medium 6.1)
- [CVE-2020-27340](https://insights.sbomify.com/CVE-2020-27340/): Open redirect in mitel:micollab (medium 6.1)
- [CVE-2020-2734](https://insights.sbomify.com/CVE-2020-2734/): Other in Oracle Database (low 2.4)
- [CVE-2020-27339](https://insights.sbomify.com/CVE-2020-27339/): Memory corruption in insyde:insydeh2o (medium 6.7)
- [CVE-2020-27338](https://insights.sbomify.com/CVE-2020-27338/): Memory corruption in treck:ipv6 (medium 5.9)
- [CVE-2020-27337](https://insights.sbomify.com/CVE-2020-27337/): Memory corruption in treck:ipv6 (high 7.3)
- [CVE-2020-27336](https://insights.sbomify.com/CVE-2020-27336/): Memory corruption in treck:ipv6 (low 3.7)
- [CVE-2020-2733](https://insights.sbomify.com/CVE-2020-2733/): Other in JD Edwards EnterpriseOne Tools (critical 9.8)
- [CVE-2020-2732](https://insights.sbomify.com/CVE-2020-2732/): Information disclosure in Oracle Linux (medium 5.8)
- [CVE-2020-2731](https://insights.sbomify.com/CVE-2020-2731/): Other in Oracle Database (low 3.9)
- [CVE-2020-27304](https://insights.sbomify.com/CVE-2020-27304/): Path traversal in civetweb (critical 9.8)
- [CVE-2020-27302](https://insights.sbomify.com/CVE-2020-27302/): Memory corruption in realtek:rtl8195a firmware (high 8.0)
- [CVE-2020-27301](https://insights.sbomify.com/CVE-2020-27301/): Memory corruption in realtek:rtl8195a firmware (high 8.0)
- [CVE-2020-2730](https://insights.sbomify.com/CVE-2020-2730/): File upload in Financial Services Revenue Management and Billing (medium 5.4)
- [CVE-2020-27299](https://insights.sbomify.com/CVE-2020-27299/): Memory corruption in OPC UA Tunneller (critical 9.1)
- [CVE-2020-27298](https://insights.sbomify.com/CVE-2020-27298/): Philips Interventional Workstations OS Command Injection (medium 6.5)
- [CVE-2020-27297](https://insights.sbomify.com/CVE-2020-27297/): Memory corruption in OPC UA Tunneller (critical 9.8)
- [CVE-2020-27295](https://insights.sbomify.com/CVE-2020-27295/): Denial of service in OPC UA Tunneller (high 7.5)
- [CVE-2020-27293](https://insights.sbomify.com/CVE-2020-27293/): Memory corruption in Delta Electronics (high 7.8)
- [CVE-2020-27291](https://insights.sbomify.com/CVE-2020-27291/): Memory corruption in Delta Electronics (high 7.8)
- [CVE-2020-27290](https://insights.sbomify.com/CVE-2020-27290/): Information disclosure in Hamilton Medical AG, T1-Ventillator (medium 4.3)
- [CVE-2020-2729](https://insights.sbomify.com/CVE-2020-2729/): Other in Identity Manager (medium 5.4)
- [CVE-2020-27289](https://insights.sbomify.com/CVE-2020-27289/): Null dereference in Delta Electronics (high 7.8)
- [CVE-2020-27288](https://insights.sbomify.com/CVE-2020-27288/): Memory corruption in TPEditor (high 7.8)
- [CVE-2020-27287](https://insights.sbomify.com/CVE-2020-27287/): Memory corruption in Delta Electronics (high 7.8)
- [CVE-2020-27285](https://insights.sbomify.com/CVE-2020-27285/): Missing authorization in Crimson 3.1 (medium 6.5)
- [CVE-2020-27284](https://insights.sbomify.com/CVE-2020-27284/): Memory corruption in TPEditor (high 7.8)
- [CVE-2020-27283](https://insights.sbomify.com/CVE-2020-27283/): Information disclosure in Crimson 3.1 (medium 5.3)
- [CVE-2020-27282](https://insights.sbomify.com/CVE-2020-27282/): Denial of service in Hamilton Medical AG, T1-Ventillator (medium 4.3)
- [CVE-2020-27281](https://insights.sbomify.com/CVE-2020-27281/): Memory corruption in Delta Electronics CNCSoft ScreenEditor (high 7.8)
- [CVE-2020-27280](https://insights.sbomify.com/CVE-2020-27280/): Use after free in ISPSoft (high 7.8)
- [CVE-2020-2728](https://insights.sbomify.com/CVE-2020-2728/): Other in Identity Manager (high 7.5)
- [CVE-2020-27279](https://insights.sbomify.com/CVE-2020-27279/): Null dereference in Crimson 3.1 (high 7.5)
- [CVE-2020-27278](https://insights.sbomify.com/CVE-2020-27278/): Hardcoded credentials in Hamilton Medical AG, T1-Ventillator (medium 5.2)
- [CVE-2020-27277](https://insights.sbomify.com/CVE-2020-27277/): Null dereference in Delta Electronics (high 7.8)
- [CVE-2020-27276](https://insights.sbomify.com/CVE-2020-27276/): Auth bypass in SOOIL Developments CoLtd DiabecareRS,AnyDana-i,AnyDana-A (medium 5.7)
- [CVE-2020-27275](https://insights.sbomify.com/CVE-2020-27275/): Memory corruption in Delta Electronics (high 7.8)
- [CVE-2020-27274](https://insights.sbomify.com/CVE-2020-27274/): Denial of service in OPC UA Tunneller (high 7.5)
- [CVE-2020-27272](https://insights.sbomify.com/CVE-2020-27272/): Auth bypass in SOOIL Developments CoLtd DiabecareRS,AnyDana-i,AnyDana-A (medium 5.7)
- [CVE-2020-27270](https://insights.sbomify.com/CVE-2020-27270/): Weak cryptography in SOOIL Developments CoLtd DiabecareRS,AnyDana-i,AnyDana-A (medium 5.7)
- [CVE-2020-2727](https://insights.sbomify.com/CVE-2020-2727/): Information disclosure in VM VirtualBox (medium 6.0)
- [CVE-2020-27269](https://insights.sbomify.com/CVE-2020-27269/): Security feature bypass in SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A (medium 5.7)
- [CVE-2020-27268](https://insights.sbomify.com/CVE-2020-27268/): Auth bypass in SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A (medium 6.5)
- [CVE-2020-27267](https://insights.sbomify.com/CVE-2020-27267/): Memory corruption in GE Digital Industrial Gateway Server (critical 9.1)
- [CVE-2020-27266](https://insights.sbomify.com/CVE-2020-27266/): Auth bypass in SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A (medium 6.5)
- [CVE-2020-27265](https://insights.sbomify.com/CVE-2020-27265/): Memory corruption in PTC Kepware KEPServerEX; ThingWorx Industrial Connectivity; OPC-Aggregator; Rockwell Automation KEPServer Enterprise; GE Digital Industrial Gateway Server; Software Toolbox TOP Server (critical 9.8)
- [CVE-2020-27264](https://insights.sbomify.com/CVE-2020-27264/): Weak cryptography in SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A (high 8.8)
- [CVE-2020-27263](https://insights.sbomify.com/CVE-2020-27263/): Memory corruption in GE Digital Industrial Gateway Server (critical 9.1)
- [CVE-2020-27262](https://insights.sbomify.com/CVE-2020-27262/): Cross-site scripting in Innokas Yhtymä Oy Vital Signs Monitor VC150 (medium 5.4)
- [CVE-2020-27261](https://insights.sbomify.com/CVE-2020-27261/): Omron CX-One (high 8.8)
- [CVE-2020-27260](https://insights.sbomify.com/CVE-2020-27260/): Other in BIGCOMPANYSOFT SOFTWARE PRODUCT (medium 5.3)
- [CVE-2020-2726](https://insights.sbomify.com/CVE-2020-2726/): Other in VM VirtualBox (high 7.5)
- [CVE-2020-27259](https://insights.sbomify.com/CVE-2020-27259/): Omron CX-One (high 8.8)
- [CVE-2020-27258](https://insights.sbomify.com/CVE-2020-27258/): Information disclosure in SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A (medium 6.5)
- [CVE-2020-27257](https://insights.sbomify.com/CVE-2020-27257/): Omron CX-One (high 7.8)
- [CVE-2020-27256](https://insights.sbomify.com/CVE-2020-27256/): Hardcoded credentials in SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A (medium 6.8)
- [CVE-2020-27255](https://insights.sbomify.com/CVE-2020-27255/): Memory corruption in FactoryTalk Linx (high 7.5)
- [CVE-2020-27254](https://insights.sbomify.com/CVE-2020-27254/): Auth bypass in Emerson Rosemount X-STREAM Gas Analyzer (high 7.5)
- [CVE-2020-27253](https://insights.sbomify.com/CVE-2020-27253/): Denial of service in FactoryTalk Linx (high 7.5)
- [CVE-2020-27252](https://insights.sbomify.com/CVE-2020-27252/): Medtronic MyCareLink Smart Time-of-check Time-of-use Race Condition (high 8.8)
- [CVE-2020-27251](https://insights.sbomify.com/CVE-2020-27251/): Memory corruption in FactoryTalk Linx (critical 9.8)
- [CVE-2020-27250](https://insights.sbomify.com/CVE-2020-27250/): Memory corruption in SoftMaker (high 8.8)
- [CVE-2020-2725](https://insights.sbomify.com/CVE-2020-2725/): Denial of service in VM VirtualBox (medium 6.5)
- [CVE-2020-27249](https://insights.sbomify.com/CVE-2020-27249/): Memory corruption in Softmaker (high 8.8)
- [CVE-2020-27248](https://insights.sbomify.com/CVE-2020-27248/): Memory corruption in Softmaker (high 8.8)
- [CVE-2020-27247](https://insights.sbomify.com/CVE-2020-27247/): Memory corruption in Softmaker (high 8.8)
- [CVE-2020-27246](https://insights.sbomify.com/CVE-2020-27246/): SQL injection in OpenClinic GA (medium 6.4)
- [CVE-2020-27245](https://insights.sbomify.com/CVE-2020-27245/): SQL injection in OpenClinic GA (medium 6.4)
- [CVE-2020-27244](https://insights.sbomify.com/CVE-2020-27244/): SQL injection in OpenClinic GA (medium 6.4)
- [CVE-2020-27243](https://insights.sbomify.com/CVE-2020-27243/): SQL injection in OpenClinic GA (medium 6.4)
- [CVE-2020-27242](https://insights.sbomify.com/CVE-2020-27242/): SQL injection in OpenClinic GA (medium 6.4)
- [CVE-2020-27241](https://insights.sbomify.com/CVE-2020-27241/): SQL injection in OpenClinic (medium 6.4)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/103/