# Vulnerabilities published in 2020


- [CVE-2020-2697](https://insights.sbomify.com/CVE-2020-2697/): Other in Hospitality Suites Management (medium 4.9)
- [CVE-2020-26969](https://insights.sbomify.com/CVE-2020-26969/): Memory corruption in Firefox (high 8.8)
- [CVE-2020-26968](https://insights.sbomify.com/CVE-2020-26968/): Memory corruption in Firefox (high 8.8)
- [CVE-2020-26967](https://insights.sbomify.com/CVE-2020-26967/): Other in Firefox (medium 6.5)
- [CVE-2020-26966](https://insights.sbomify.com/CVE-2020-26966/): Information disclosure in Firefox (medium 6.5)
- [CVE-2020-26965](https://insights.sbomify.com/CVE-2020-26965/): Information disclosure in Firefox (medium 6.5)
- [CVE-2020-26964](https://insights.sbomify.com/CVE-2020-26964/): Security feature bypass in Firefox (medium 6.8)
- [CVE-2020-26963](https://insights.sbomify.com/CVE-2020-26963/): Denial of service in Firefox (medium 4.3)
- [CVE-2020-26962](https://insights.sbomify.com/CVE-2020-26962/): Security feature bypass in Firefox (medium 6.1)
- [CVE-2020-26961](https://insights.sbomify.com/CVE-2020-26961/): Security feature bypass in Firefox (medium 6.5)
- [CVE-2020-26960](https://insights.sbomify.com/CVE-2020-26960/): Use after free in Firefox (high 8.8)
- [CVE-2020-2696](https://insights.sbomify.com/CVE-2020-2696/): Privilege escalation in Solaris Operating System (high 8.8)
- [CVE-2020-26959](https://insights.sbomify.com/CVE-2020-26959/): Use after free in Firefox (high 8.8)
- [CVE-2020-26958](https://insights.sbomify.com/CVE-2020-26958/): Cross-site scripting in Firefox (medium 6.1)
- [CVE-2020-26957](https://insights.sbomify.com/CVE-2020-26957/): Security feature bypass in Firefox (medium 6.5)
- [CVE-2020-26956](https://insights.sbomify.com/CVE-2020-26956/): Cross-site scripting in Firefox (medium 6.1)
- [CVE-2020-26955](https://insights.sbomify.com/CVE-2020-26955/): Information disclosure in Firefox (medium 6.5)
- [CVE-2020-26954](https://insights.sbomify.com/CVE-2020-26954/): Security feature bypass in Firefox (medium 4.3)
- [CVE-2020-26953](https://insights.sbomify.com/CVE-2020-26953/): Security feature bypass in Firefox (medium 4.3)
- [CVE-2020-26952](https://insights.sbomify.com/CVE-2020-26952/): Memory corruption in Firefox (high 8.8)
- [CVE-2020-26951](https://insights.sbomify.com/CVE-2020-26951/): Cross-site scripting in Firefox (medium 6.1)
- [CVE-2020-26950](https://insights.sbomify.com/CVE-2020-26950/): Use after free in Firefox (high 8.8)
- [CVE-2020-2695](https://insights.sbomify.com/CVE-2020-2695/): Information disclosure in PeopleSoft Enterprise CC Common Application Objects (medium 5.3)
- [CVE-2020-26948](https://insights.sbomify.com/CVE-2020-26948/): Server-side request forgery in emby:emby (critical 9.8)
- [CVE-2020-26947](https://insights.sbomify.com/CVE-2020-26947/): Privilege escalation in getmonero:monero (high 7.8)
- [CVE-2020-26945](https://insights.sbomify.com/CVE-2020-26945/): "Deserialization errors in MyBatis" (high 8.1)
- [CVE-2020-26944](https://insights.sbomify.com/CVE-2020-26944/): SQL injection in aptean:product configurator (critical 9.8)
- [CVE-2020-26943](https://insights.sbomify.com/CVE-2020-26943/): Arbitrary Code Execution in blazar-dashboard (critical 9.9)
- [CVE-2020-26942](https://insights.sbomify.com/CVE-2020-26942/): Auth bypass in axigen:axigen mail server (critical 9.1)
- [CVE-2020-26941](https://insights.sbomify.com/CVE-2020-26941/): Misconfiguration in eset:endpoint antivirus (medium 5.5)
- [CVE-2020-2694](https://insights.sbomify.com/CVE-2020-2694/): Information disclosure in MySQL Server (low 3.1)
- [CVE-2020-26939](https://insights.sbomify.com/CVE-2020-26939/): Observable Differences in Behavior to Error Inputs in Bouncy Castle (medium 5.3)
- [CVE-2020-26938](https://insights.sbomify.com/CVE-2020-26938/): oauth2-server through 3.1.1 vulnerable to Open Redirect (high 7.2)
- [CVE-2020-26936](https://insights.sbomify.com/CVE-2020-26936/): Cross-site request forgery in cloudera:data engineering (high 8.8)
- [CVE-2020-26935](https://insights.sbomify.com/CVE-2020-26935/): phpMyAdmin SQL injection vulnerability (critical 9.8)
- [CVE-2020-26934](https://insights.sbomify.com/CVE-2020-26934/): phpMyAdmin Cross-site Scripting (XSS) (medium 6.1)
- [CVE-2020-26933](https://insights.sbomify.com/CVE-2020-26933/): Weak cryptography in trustedcomputinggroup:trusted platform module (high 7.2)
- [CVE-2020-26932](https://insights.sbomify.com/CVE-2020-26932/): Misconfiguration in debian:debian linux (medium 4.3)
- [CVE-2020-26931](https://insights.sbomify.com/CVE-2020-26931/): Information disclosure in netgear:wc7500 firmware (medium 5.9)
- [CVE-2020-26930](https://insights.sbomify.com/CVE-2020-26930/): Misconfiguration in netgear:ex7700 firmware (low 3.3)
- [CVE-2020-2693](https://insights.sbomify.com/CVE-2020-2693/): Information disclosure in VM VirtualBox (medium 5.3)
- [CVE-2020-26929](https://insights.sbomify.com/CVE-2020-26929/): Command injection in netgear:r6220 firmware (high 7.3)
- [CVE-2020-26928](https://insights.sbomify.com/CVE-2020-26928/): Auth bypass in netgear:cbr40 firmware (critical 9.6)
- [CVE-2020-26927](https://insights.sbomify.com/CVE-2020-26927/): Auth bypass in netgear:ac2100 firmware (critical 9.4)
- [CVE-2020-26926](https://insights.sbomify.com/CVE-2020-26926/): Auth bypass in netgear:cbr40 firmware (critical 9.6)
- [CVE-2020-26925](https://insights.sbomify.com/CVE-2020-26925/): Denial of service in netgear:gs808e firmware (low 3.2)
- [CVE-2020-26924](https://insights.sbomify.com/CVE-2020-26924/): Information disclosure in netgear:wac720 firmware (low 3.1)
- [CVE-2020-26923](https://insights.sbomify.com/CVE-2020-26923/): Cross-site scripting in netgear:wc7500 firmware (medium 4.3)
- [CVE-2020-26922](https://insights.sbomify.com/CVE-2020-26922/): Command injection in netgear:wc7500 firmware (medium 6.4)
- [CVE-2020-26921](https://insights.sbomify.com/CVE-2020-26921/): Auth bypass in netgear:gs110emx firmware (high 8.3)
- [CVE-2020-26920](https://insights.sbomify.com/CVE-2020-26920/): Command injection in netgear:srk60 firmware (high 8.8)
- [CVE-2020-2692](https://insights.sbomify.com/CVE-2020-2692/): Information disclosure in VM VirtualBox (medium 6.5)
- [CVE-2020-26919](https://insights.sbomify.com/CVE-2020-26919/): Netgear JGS516PE Devices Missing Function Level Access Control (critical 9.8, exploited in the wild)
- [CVE-2020-26918](https://insights.sbomify.com/CVE-2020-26918/): Cross-site scripting in netgear:ex7000 firmware (medium 4.1)
- [CVE-2020-26917](https://insights.sbomify.com/CVE-2020-26917/): Cross-site scripting in netgear:ex7000 firmware (medium 4.1)
- [CVE-2020-26916](https://insights.sbomify.com/CVE-2020-26916/): Misconfiguration in netgear:d6200 firmware (medium 5.4)
- [CVE-2020-26915](https://insights.sbomify.com/CVE-2020-26915/): Cross-site scripting in netgear:d7800 firmware (medium 6.0)
- [CVE-2020-26914](https://insights.sbomify.com/CVE-2020-26914/): Command injection in netgear:d6200 firmware (medium 6.7)
- [CVE-2020-26913](https://insights.sbomify.com/CVE-2020-26913/): Memory corruption in netgear:d6100 firmware (medium 6.8)
- [CVE-2020-26912](https://insights.sbomify.com/CVE-2020-26912/): Cross-site request forgery in netgear:d6200 firmware (high 7.5)
- [CVE-2020-26911](https://insights.sbomify.com/CVE-2020-26911/): Missing authorization in netgear:d6200 firmware (high 8.3)
- [CVE-2020-26910](https://insights.sbomify.com/CVE-2020-26910/): Command injection in netgear:cbr40 firmware (high 8.4)
- [CVE-2020-2691](https://insights.sbomify.com/CVE-2020-2691/): Information disclosure in VM VirtualBox (medium 6.5)
- [CVE-2020-26909](https://insights.sbomify.com/CVE-2020-26909/): Command injection in netgear:d7800 firmware (high 8.8)
- [CVE-2020-26908](https://insights.sbomify.com/CVE-2020-26908/): Auth bypass in netgear:d6200 firmware (critical 9.4)
- [CVE-2020-26907](https://insights.sbomify.com/CVE-2020-26907/): Command injection in netgear:rbk852 firmware (critical 9.6)
- [CVE-2020-26906](https://insights.sbomify.com/CVE-2020-26906/): Information disclosure in netgear:cbr40 firmware (critical 9.6)
- [CVE-2020-26905](https://insights.sbomify.com/CVE-2020-26905/): Information disclosure in netgear:cbr40 firmware (critical 9.6)
- [CVE-2020-26904](https://insights.sbomify.com/CVE-2020-26904/): Information disclosure in netgear:cbr40 firmware (critical 9.6)
- [CVE-2020-26903](https://insights.sbomify.com/CVE-2020-26903/): Information disclosure in netgear:cbr40 firmware (critical 9.6)
- [CVE-2020-26902](https://insights.sbomify.com/CVE-2020-26902/): Command injection in netgear:rbk752 firmware (critical 9.6)
- [CVE-2020-26901](https://insights.sbomify.com/CVE-2020-26901/): Information disclosure in netgear:rbk752 firmware (critical 9.6)
- [CVE-2020-26900](https://insights.sbomify.com/CVE-2020-26900/): Information disclosure in netgear:cbr40 firmware (critical 9.6)
- [CVE-2020-2690](https://insights.sbomify.com/CVE-2020-2690/): Information disclosure in VM VirtualBox (medium 6.5)
- [CVE-2020-26899](https://insights.sbomify.com/CVE-2020-26899/): Information disclosure in netgear:cbr40 firmware (critical 9.6)
- [CVE-2020-26898](https://insights.sbomify.com/CVE-2020-26898/): Misconfiguration in netgear:rax40 firmware (critical 9.6)
- [CVE-2020-26897](https://insights.sbomify.com/CVE-2020-26897/): Information disclosure in netgear:cbr40 firmware (critical 9.6)
- [CVE-2020-26896](https://insights.sbomify.com/CVE-2020-26896/): Business logic in lightning network daemon project:lightning network daemon (high 8.2)
- [CVE-2020-26895](https://insights.sbomify.com/CVE-2020-26895/): Business logic in lightning network daemon project:lightning network daemon (medium 5.3)
- [CVE-2020-26894](https://insights.sbomify.com/CVE-2020-26894/): Privilege escalation in faulknermedia:wildlife issues in the new millennium (high 7.8)
- [CVE-2020-26893](https://insights.sbomify.com/CVE-2020-26893/): Security feature bypass in clamxav:clamxav (high 7.8)
- [CVE-2020-26892](https://insights.sbomify.com/CVE-2020-26892/): Incorrect handling of credential expiry by /nats-io/nats-server (critical 9.8)
- [CVE-2020-26891](https://insights.sbomify.com/CVE-2020-26891/): Cross-site scripting (XSS) vulnerability in the fallback authentication endpoint (medium 6.1)
- [CVE-2020-26890](https://insights.sbomify.com/CVE-2020-26890/): Denial of service attack due to invalid JSON (high 7.5)
- [CVE-2020-2689](https://insights.sbomify.com/CVE-2020-2689/): Information disclosure in VM VirtualBox (medium 6.5)
- [CVE-2020-26887](https://insights.sbomify.com/CVE-2020-26887/): Security feature bypass in avm:fritz\!box 7490 firmware (high 7.8)
- [CVE-2020-26886](https://insights.sbomify.com/CVE-2020-26886/): Privilege escalation in softaculous:softaculous (high 7.8)
- [CVE-2020-26885](https://insights.sbomify.com/CVE-2020-26885/): Cross-site scripting in 2sic:2sxc (medium 6.1)
- [CVE-2020-26884](https://insights.sbomify.com/CVE-2020-26884/): Cross-site scripting in rsa:archer (medium 6.1)
- [CVE-2020-26883](https://insights.sbomify.com/CVE-2020-26883/): Uncontrolled Recursion in Play Framework (high 7.5)
- [CVE-2020-26882](https://insights.sbomify.com/CVE-2020-26882/): Data Amplification in Play Framework (high 7.5)
- [CVE-2020-26880](https://insights.sbomify.com/CVE-2020-26880/): Privilege escalation in debian:debian linux (high 7.8)
- [CVE-2020-2688](https://insights.sbomify.com/CVE-2020-2688/): Other in Financial Services Analytical Applications Infrastructure (high 7.1)
- [CVE-2020-26879](https://insights.sbomify.com/CVE-2020-26879/): Hardcoded credentials in commscope:ruckus vriot (critical 9.8)
- [CVE-2020-26878](https://insights.sbomify.com/CVE-2020-26878/): Command injection in commscope:ruckus vriot (high 8.8)
- [CVE-2020-26877](https://insights.sbomify.com/CVE-2020-26877/): Open redirect in apifest:oauth 2.0 server (medium 6.1)
- [CVE-2020-26876](https://insights.sbomify.com/CVE-2020-26876/): Missing authorization in wpcoursesplugin:wp-courses (high 7.5)
- [CVE-2020-26870](https://insights.sbomify.com/CVE-2020-26870/): Cross-site Scripting in dompurify (medium 6.1)
- [CVE-2020-2687](https://insights.sbomify.com/CVE-2020-2687/): Other in PeopleSoft Enterprise PT PeopleTools (medium 4.3)
- [CVE-2020-26869](https://insights.sbomify.com/CVE-2020-26869/): ARC Informatique PcVue Exposure of Sensitive Information to an Unauthorized Actor (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/106/