# Vulnerabilities published in 2020


- [CVE-2020-27240](https://insights.sbomify.com/CVE-2020-27240/): SQL injection in OpenClinic (medium 6.4)
- [CVE-2020-2724](https://insights.sbomify.com/CVE-2020-2724/): Information disclosure in FLEXCUBE Investor Servicing (medium 4.3)
- [CVE-2020-27239](https://insights.sbomify.com/CVE-2020-27239/): SQL injection in OpenClinic (medium 6.4)
- [CVE-2020-27238](https://insights.sbomify.com/CVE-2020-27238/): SQL injection in OpenClinic (medium 6.4)
- [CVE-2020-27237](https://insights.sbomify.com/CVE-2020-27237/): SQL injection in OpenClinic (medium 6.4)
- [CVE-2020-27236](https://insights.sbomify.com/CVE-2020-27236/): SQL injection in OpenClinic (medium 6.4)
- [CVE-2020-27235](https://insights.sbomify.com/CVE-2020-27235/): SQL injection in OpenClinic (medium 6.4)
- [CVE-2020-27234](https://insights.sbomify.com/CVE-2020-27234/): SQL injection in OpenClinic (medium 6.4)
- [CVE-2020-27233](https://insights.sbomify.com/CVE-2020-27233/): SQL injection in OpenClinic (medium 6.4)
- [CVE-2020-27232](https://insights.sbomify.com/CVE-2020-27232/): SQL injection in OpenClinic GA (medium 6.4)
- [CVE-2020-27231](https://insights.sbomify.com/CVE-2020-27231/): SQL injection in OpenClinic GA (medium 6.4)
- [CVE-2020-27230](https://insights.sbomify.com/CVE-2020-27230/): SQL injection in OpenClinic GA (medium 6.4)
- [CVE-2020-2723](https://insights.sbomify.com/CVE-2020-2723/): Other in FLEXCUBE Investor Servicing (high 7.1)
- [CVE-2020-27229](https://insights.sbomify.com/CVE-2020-27229/): SQL injection in OpenClinic GA (medium 6.4)
- [CVE-2020-27228](https://insights.sbomify.com/CVE-2020-27228/): Misconfiguration in OpenClinic (high 8.8)
- [CVE-2020-27227](https://insights.sbomify.com/CVE-2020-27227/): Command injection in OpenClinic (critical 10.0)
- [CVE-2020-27226](https://insights.sbomify.com/CVE-2020-27226/): SQL injection in OpenClinic (medium 6.4)
- [CVE-2020-27225](https://insights.sbomify.com/CVE-2020-27225/): Missing authorization in Eclipse Platform (high 7.8)
- [CVE-2020-27224](https://insights.sbomify.com/CVE-2020-27224/): Cross-site Scripting (XSS) in Eclipse Theia (critical 9.6)
- [CVE-2020-27223](https://insights.sbomify.com/CVE-2020-27223/): DOS vulnerability for Quoted Quality CSV headers (medium 5.2)
- [CVE-2020-27222](https://insights.sbomify.com/CVE-2020-27222/): Denial of service in Eclipse Californium (high 7.5)
- [CVE-2020-27221](https://insights.sbomify.com/CVE-2020-27221/): Memory corruption in Eclipse OpenJ9 (critical 9.8)
- [CVE-2020-27220](https://insights.sbomify.com/CVE-2020-27220/): Missing authorization in Eclipse Hono (high 8.8)
- [CVE-2020-2722](https://insights.sbomify.com/CVE-2020-2722/): Other in FLEXCUBE Investor Servicing (medium 5.4)
- [CVE-2020-27219](https://insights.sbomify.com/CVE-2020-27219/): Cross-site Scripting in Eclipse Hawkbit (medium 6.1)
- [CVE-2020-27218](https://insights.sbomify.com/CVE-2020-27218/): Buffer not correctly recycled in Gzip Request inflation (medium 4.8)
- [CVE-2020-27217](https://insights.sbomify.com/CVE-2020-27217/): Improper Validation of Specified Quantity in Input in Eclipse Hono (high 7.5)
- [CVE-2020-27216](https://insights.sbomify.com/CVE-2020-27216/): Local Temp Directory Hijacking Vulnerability (high 7.0)
- [CVE-2020-27213](https://insights.sbomify.com/CVE-2020-27213/): Weak cryptography in ethernut:nut\/os (high 7.5)
- [CVE-2020-27212](https://insights.sbomify.com/CVE-2020-27212/): Security feature bypass in st:stm32cubel4 firmware (high 7.0)
- [CVE-2020-27211](https://insights.sbomify.com/CVE-2020-27211/): Security feature bypass in nordicsemi:nrf52840 firmware (medium 5.7)
- [CVE-2020-2721](https://insights.sbomify.com/CVE-2020-2721/): Other in FLEXCUBE Investor Servicing (medium 6.5)
- [CVE-2020-27209](https://insights.sbomify.com/CVE-2020-27209/): Weak cryptography in micro-ecc project:micro-ecc (high 7.5)
- [CVE-2020-27208](https://insights.sbomify.com/CVE-2020-27208/): Security feature bypass in nitrokey:fido2 firmware (medium 6.8)
- [CVE-2020-27207](https://insights.sbomify.com/CVE-2020-27207/): Use after free in zetetic:sqlcipher (high 7.5)
- [CVE-2020-2720](https://insights.sbomify.com/CVE-2020-2720/): Other in FLEXCUBE Investor Servicing (medium 5.4)
- [CVE-2020-27199](https://insights.sbomify.com/CVE-2020-27199/): Auth bypass in magic home pro project:magic home pro (high 7.5)
- [CVE-2020-27197](https://insights.sbomify.com/CVE-2020-27197/): libtaxii Server-Side Request Forgery vulnerability (critical 9.8)
- [CVE-2020-27196](https://insights.sbomify.com/CVE-2020-27196/): Out-of-bounds Write in Play Framework (high 7.5)
- [CVE-2020-27195](https://insights.sbomify.com/CVE-2020-27195/): Use After Free in HashiCorp Nomad (critical 9.1)
- [CVE-2020-27194](https://insights.sbomify.com/CVE-2020-27194/): Memory corruption in linux:linux kernel (medium 5.5)
- [CVE-2020-27193](https://insights.sbomify.com/CVE-2020-27193/): Improper Neutralization of Input During Web Page Generation in CKEditor4 (medium 6.1)
- [CVE-2020-27192](https://insights.sbomify.com/CVE-2020-27192/): Privilege escalation in binarynights:forklift (high 7.8)
- [CVE-2020-27191](https://insights.sbomify.com/CVE-2020-27191/): Path traversal in lionwiki:lionwiki (high 7.5)
- [CVE-2020-2719](https://insights.sbomify.com/CVE-2020-2719/): Information disclosure in Banking Corporate Lending (medium 4.3)
- [CVE-2020-27187](https://insights.sbomify.com/CVE-2020-27187/): Privilege escalation in kde:partition manager (high 7.8)
- [CVE-2020-27185](https://insights.sbomify.com/CVE-2020-27185/): Information disclosure in NPort IA5000A Series with Moxa Service enabled (high 7.5)
- [CVE-2020-27184](https://insights.sbomify.com/CVE-2020-27184/): Weak cryptography in NPort IA5000A Series with Telnet enabled (medium 5.9)
- [CVE-2020-27183](https://insights.sbomify.com/CVE-2020-27183/): Missing authorization in konzept-ix:publixone (critical 9.8)
- [CVE-2020-27182](https://insights.sbomify.com/CVE-2020-27182/): Cross-site scripting in konzept-ix:publixone (medium 6.1)
- [CVE-2020-27181](https://insights.sbomify.com/CVE-2020-27181/): Hardcoded credentials in konzept-ix:publixone (medium 6.5)
- [CVE-2020-27180](https://insights.sbomify.com/CVE-2020-27180/): Path traversal in konzept-ix:publixone (high 7.5)
- [CVE-2020-2718](https://insights.sbomify.com/CVE-2020-2718/): Other in Banking Corporate Lending (high 7.1)
- [CVE-2020-27179](https://insights.sbomify.com/CVE-2020-27179/): Auth bypass in konzept-ix:publixone (critical 9.8)
- [CVE-2020-27178](https://insights.sbomify.com/CVE-2020-27178/): Improper Authentication in Apereo CAS (high 7.5)
- [CVE-2020-27176](https://insights.sbomify.com/CVE-2020-27176/): Cross-site scripting in marktext:marktext (high 8.3)
- [CVE-2020-27174](https://insights.sbomify.com/CVE-2020-27174/): Denial of service in amazon:firecracker (high 7.5)
- [CVE-2020-27173](https://insights.sbomify.com/CVE-2020-27173/): Denial of service in vm-superio project:vm-superio (high 7.5)
- [CVE-2020-27172](https://insights.sbomify.com/CVE-2020-27172/): Privilege escalation in gdatasoftware:g data (critical 9.8)
- [CVE-2020-27171](https://insights.sbomify.com/CVE-2020-27171/): Integer overflow in canonical:ubuntu linux (medium 6.0)
- [CVE-2020-27170](https://insights.sbomify.com/CVE-2020-27170/): Information disclosure in canonical:ubuntu linux (medium 4.7)
- [CVE-2020-2717](https://insights.sbomify.com/CVE-2020-2717/): Other in Banking Corporate Lending (medium 5.4)
- [CVE-2020-27163](https://insights.sbomify.com/CVE-2020-27163/): Cross-site scripting in phpredisadmin project:phpredisadmin (medium 6.1)
- [CVE-2020-27160](https://insights.sbomify.com/CVE-2020-27160/): Path traversal in westerndigital:my cloud firmware (critical 9.8)
- [CVE-2020-2716](https://insights.sbomify.com/CVE-2020-2716/): Other in Banking Corporate Lending (medium 6.5)
- [CVE-2020-27159](https://insights.sbomify.com/CVE-2020-27159/): Command injection in westerndigital:my cloud firmware (critical 9.8)
- [CVE-2020-27158](https://insights.sbomify.com/CVE-2020-27158/): Command injection in westerndigital:my cloud firmware (critical 9.8)
- [CVE-2020-27157](https://insights.sbomify.com/CVE-2020-27157/): Auth bypass in veritas:aptare (high 8.1)
- [CVE-2020-27156](https://insights.sbomify.com/CVE-2020-27156/): Missing authorization in veritas:aptare (critical 9.8)
- [CVE-2020-27155](https://insights.sbomify.com/CVE-2020-27155/): Auth bypass in octopus:octopus deploy (high 7.5)
- [CVE-2020-27154](https://insights.sbomify.com/CVE-2020-27154/): Other in mitel:businesscti enterprise (high 8.8)
- [CVE-2020-27153](https://insights.sbomify.com/CVE-2020-27153/): Memory corruption in bluez:bluez (high 8.6)
- [CVE-2020-27152](https://insights.sbomify.com/CVE-2020-27152/): Denial of service in linux:linux kernel (medium 5.5)
- [CVE-2020-27151](https://insights.sbomify.com/CVE-2020-27151/): Command injection in katacontainers:kata containers (high 8.8)
- [CVE-2020-27150](https://insights.sbomify.com/CVE-2020-27150/): Information disclosure in NPort IA5000A Series (high 7.5)
- [CVE-2020-2715](https://insights.sbomify.com/CVE-2020-2715/): Other in Banking Corporate Lending (medium 5.4)
- [CVE-2020-27149](https://insights.sbomify.com/CVE-2020-27149/): Privilege escalation in NPort IA5000A Series with web console enabled (medium 6.5)
- [CVE-2020-27148](https://insights.sbomify.com/CVE-2020-27148/): TIBCO EBX EXML External Entity (high 7.1)
- [CVE-2020-27147](https://insights.sbomify.com/CVE-2020-27147/): TIBCO PartnerExpress REST API (medium 6.5)
- [CVE-2020-27146](https://insights.sbomify.com/CVE-2020-27146/): TIBCO iProcess Workspace Browser CSRF (medium 5.0)
- [CVE-2020-2714](https://insights.sbomify.com/CVE-2020-2714/): Information disclosure in Banking Payments (medium 4.3)
- [CVE-2020-27134](https://insights.sbomify.com/CVE-2020-27134/): Cisco Jabber Desktop and Mobile Client Software Vulnerabilities (critical 9.9)
- [CVE-2020-27133](https://insights.sbomify.com/CVE-2020-27133/): Cisco Jabber Desktop and Mobile Client Software Vulnerabilities (critical 9.9)
- [CVE-2020-27132](https://insights.sbomify.com/CVE-2020-27132/): Cisco Jabber Desktop and Mobile Client Software Vulnerabilities (critical 9.9)
- [CVE-2020-27131](https://insights.sbomify.com/CVE-2020-27131/): Cisco Security Manager Java Deserialization Vulnerabilities (high 8.1)
- [CVE-2020-27130](https://insights.sbomify.com/CVE-2020-27130/): Cisco Security Manager Path Traversal Vulnerability (critical 9.1)
- [CVE-2020-2713](https://insights.sbomify.com/CVE-2020-2713/): Other in Banking Payments (high 7.1)
- [CVE-2020-27129](https://insights.sbomify.com/CVE-2020-27129/): Cisco SD-WAN vManage Software Command Injection Vulnerability (medium 6.7)
- [CVE-2020-27128](https://insights.sbomify.com/CVE-2020-27128/): Cisco SD-WAN vManage Software Arbitrary File Creation Vulnerability (medium 6.5)
- [CVE-2020-27127](https://insights.sbomify.com/CVE-2020-27127/): Cisco Jabber Desktop and Mobile Client Software Vulnerabilities (critical 9.9)
- [CVE-2020-27126](https://insights.sbomify.com/CVE-2020-27126/): Cisco Webex Meetings API Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2020-27125](https://insights.sbomify.com/CVE-2020-27125/): Cisco Security Manager Static Credential Vulnerability (high 7.4)
- [CVE-2020-27124](https://insights.sbomify.com/CVE-2020-27124/): Cisco Adaptive Security Appliance Software SSL/TLS Denial of Service Vulnerability (high 8.6)
- [CVE-2020-27123](https://insights.sbomify.com/CVE-2020-27123/): Cisco AnyConnect Secure Mobility Client for Windows Arbitrary File Read Vulnerability (medium 5.5)
- [CVE-2020-27122](https://insights.sbomify.com/CVE-2020-27122/): Cisco Identity Services Engine Privilege Escalation Vulnerability (medium 4.4)
- [CVE-2020-27121](https://insights.sbomify.com/CVE-2020-27121/): Cisco Unified Communications Manager IM and Presence Service Denial of Service Vulnerability (medium 4.3)
- [CVE-2020-2712](https://insights.sbomify.com/CVE-2020-2712/): Other in Banking Payments (medium 5.4)
- [CVE-2020-2711](https://insights.sbomify.com/CVE-2020-2711/): Other in Banking Payments (medium 6.5)
- [CVE-2020-2710](https://insights.sbomify.com/CVE-2020-2710/): Other in Banking Payments (medium 5.4)
- [CVE-2020-27098](https://insights.sbomify.com/CVE-2020-27098/): Security feature bypass in Android (medium 5.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/104/