# Vulnerabilities published in 2020


- [CVE-2020-26868](https://insights.sbomify.com/CVE-2020-26868/): ARC Informatique PcVue Access to Critical Private Variable via Public Method (high 7.5)
- [CVE-2020-26867](https://insights.sbomify.com/CVE-2020-26867/): ARC Informatique PcVue Deserialization of Untrusted Data (critical 9.8)
- [CVE-2020-2686](https://insights.sbomify.com/CVE-2020-2686/): Denial of service in MySQL Server (medium 6.5)
- [CVE-2020-2685](https://insights.sbomify.com/CVE-2020-2685/): Other in FLEXCUBE Universal Banking (medium 5.4)
- [CVE-2020-2684](https://insights.sbomify.com/CVE-2020-2684/): Other in FLEXCUBE Universal Banking (medium 6.5)
- [CVE-2020-26838](https://insights.sbomify.com/CVE-2020-26838/): Code injection in SAP BW4HANA (critical 9.1)
- [CVE-2020-26837](https://insights.sbomify.com/CVE-2020-26837/): Path traversal in SAP Solution Manager (User Experience Monitoring) (high 8.5)
- [CVE-2020-26836](https://insights.sbomify.com/CVE-2020-26836/): Open redirect in SAP Solution Manager (Trace Analysis) (low 3.4)
- [CVE-2020-26835](https://insights.sbomify.com/CVE-2020-26835/): Cross-site scripting in SAP NetWeaver AS ABAP (medium 5.3)
- [CVE-2020-26834](https://insights.sbomify.com/CVE-2020-26834/): Auth bypass in SAP HANA Database (medium 4.2)
- [CVE-2020-26832](https://insights.sbomify.com/CVE-2020-26832/): Missing authorization in SAP NetWeaver AS ABAP (SAP Landscape Transformation) (high 7.6)
- [CVE-2020-26831](https://insights.sbomify.com/CVE-2020-26831/): XML external entity in SAP BusinessObjects BI Platform (Crystal Report) (critical 9.6)
- [CVE-2020-26830](https://insights.sbomify.com/CVE-2020-26830/): Missing authorization in SAP Solution Manager (User Experience Monitoring) (high 7.6)
- [CVE-2020-2683](https://insights.sbomify.com/CVE-2020-2683/): Other in FLEXCUBE Universal Banking (medium 5.4)
- [CVE-2020-26829](https://insights.sbomify.com/CVE-2020-26829/): Missing authorization in SAP NetWeaver AS JAVA (P2P Cluster Communication) (critical 10.0)
- [CVE-2020-26828](https://insights.sbomify.com/CVE-2020-26828/): Code injection in SAP Disclosure Management. (medium 5.4)
- [CVE-2020-26826](https://insights.sbomify.com/CVE-2020-26826/): File upload in SAP NetWeaver AS JAVA (medium 6.5)
- [CVE-2020-26825](https://insights.sbomify.com/CVE-2020-26825/): Cross-site scripting in SAP Fiori Launchpad (News Tile Application) (medium 6.1)
- [CVE-2020-26824](https://insights.sbomify.com/CVE-2020-26824/): Missing authorization in SAP Solution Manager (JAVA stack) (critical 10.0)
- [CVE-2020-26823](https://insights.sbomify.com/CVE-2020-26823/): Missing authorization in SAP Solution Manager (JAVA stack) (critical 10.0)
- [CVE-2020-26822](https://insights.sbomify.com/CVE-2020-26822/): Missing authorization in SAP Solution Manager (JAVA stack) (critical 10.0)
- [CVE-2020-26821](https://insights.sbomify.com/CVE-2020-26821/): Missing authorization in SAP Solution Manager (JAVA stack) (critical 10.0)
- [CVE-2020-26820](https://insights.sbomify.com/CVE-2020-26820/): File upload in SAP NetWeaver AS JAVA (critical 9.1)
- [CVE-2020-2682](https://insights.sbomify.com/CVE-2020-2682/): Other in VM VirtualBox (high 8.2)
- [CVE-2020-26819](https://insights.sbomify.com/CVE-2020-26819/): Missing authorization in SAP NetWeaver AS ABAP (Web Dynpro) (medium 5.4)
- [CVE-2020-26818](https://insights.sbomify.com/CVE-2020-26818/): Missing authorization in SAP NetWeaver AS ABAP (Web Dynpro) (medium 6.5)
- [CVE-2020-26817](https://insights.sbomify.com/CVE-2020-26817/): Memory corruption in SAP 3D Visual Enterprise Viewer (medium 4.3)
- [CVE-2020-26816](https://insights.sbomify.com/CVE-2020-26816/): Weak cryptography in SAP NetWeaver AS JAVA (Key Storage Service) (medium 5.4)
- [CVE-2020-26815](https://insights.sbomify.com/CVE-2020-26815/): Server-side request forgery in SAP Fiori Launchpad (News Tile Application) (high 8.6)
- [CVE-2020-26814](https://insights.sbomify.com/CVE-2020-26814/): Information disclosure in SAP Process Integration (PGP - Module Business-to-Business Add On) (medium 4.9)
- [CVE-2020-26811](https://insights.sbomify.com/CVE-2020-26811/): Server-side request forgery in SAP Commerce Cloud (Accelerator Payment Mock) (medium 5.3)
- [CVE-2020-26810](https://insights.sbomify.com/CVE-2020-26810/): Denial of service in SAP Commerce Cloud (Accelerator Payment Mock) (high 7.5)
- [CVE-2020-2681](https://insights.sbomify.com/CVE-2020-2681/): Information disclosure in VM VirtualBox (medium 6.5)
- [CVE-2020-26809](https://insights.sbomify.com/CVE-2020-26809/): Auth bypass in SAP Commerce Cloud (medium 5.3)
- [CVE-2020-26808](https://insights.sbomify.com/CVE-2020-26808/): Code injection in SAP AS ABAP(DMIS) (critical 9.1)
- [CVE-2020-26807](https://insights.sbomify.com/CVE-2020-26807/): Misconfiguration in SAP ERP Client for E-Bilanz 1.0 (medium 4.4)
- [CVE-2020-26806](https://insights.sbomify.com/CVE-2020-26806/): File upload in objectplanet:opinio (high 8.8)
- [CVE-2020-26805](https://insights.sbomify.com/CVE-2020-26805/): SQL injection in sapplica:sentrifugo (high 7.2)
- [CVE-2020-26804](https://insights.sbomify.com/CVE-2020-26804/): File upload in sapplica:sentrifugo (high 8.8)
- [CVE-2020-26803](https://insights.sbomify.com/CVE-2020-26803/): File upload in sapplica:sentrifugo (high 8.8)
- [CVE-2020-26802](https://insights.sbomify.com/CVE-2020-26802/): Cross-site request forgery in formalms:formalms (high 8.8)
- [CVE-2020-26801](https://insights.sbomify.com/CVE-2020-26801/): Cross-site scripting in tripplite:su2200rtxl2ua firmware (medium 5.4)
- [CVE-2020-26800](https://insights.sbomify.com/CVE-2020-26800/): Memory corruption in ethereum:aleth (medium 5.5)
- [CVE-2020-2680](https://insights.sbomify.com/CVE-2020-2680/): Denial of service in Solaris Operating System (medium 6.0)
- [CVE-2020-26799](https://insights.sbomify.com/CVE-2020-26799/): A reflected cross-site scripting (XSS) vulnerability was discovered in index.php on Luxcal 4.5.2 which allows an unauthenticated attacker to (critical 9.8)
- [CVE-2020-26797](https://insights.sbomify.com/CVE-2020-26797/): Memory corruption in fedoraproject:fedora (high 7.5)
- [CVE-2020-2679](https://insights.sbomify.com/CVE-2020-2679/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2020-2678](https://insights.sbomify.com/CVE-2020-2678/): Other in VM VirtualBox (medium 6.4)
- [CVE-2020-26773](https://insights.sbomify.com/CVE-2020-26773/): SQL injection in restaurant reservation system project:restaurant reservation system (high 8.8)
- [CVE-2020-26772](https://insights.sbomify.com/CVE-2020-26772/): Command injection in ppgo jobs project:ppgo jobs (critical 9.8)
- [CVE-2020-2677](https://insights.sbomify.com/CVE-2020-2677/): Other in Hospitality OPERA 5 Property Services (medium 5.7)
- [CVE-2020-26768](https://insights.sbomify.com/CVE-2020-26768/): Formstone Vulnerable to Reflected XSS (medium 6.1)
- [CVE-2020-26766](https://insights.sbomify.com/CVE-2020-26766/): Cross-site request forgery in user registration \& login and user management system with admin panel project:user registration \& login and user management system with admin panel (high 8.8)
- [CVE-2020-26763](https://insights.sbomify.com/CVE-2020-26763/): Other in rocket.chat:rocket.chat (high 7.5)
- [CVE-2020-26762](https://insights.sbomify.com/CVE-2020-26762/): Memory corruption in edimax:ic-3116w firmware (critical 9.8)
- [CVE-2020-2676](https://insights.sbomify.com/CVE-2020-2676/): Cross-site scripting in Hospitality OPERA 5 Property Services (medium 6.1)
- [CVE-2020-26759](https://insights.sbomify.com/CVE-2020-26759/): Arbitrary code execution in clickhouse-driver (critical 9.8)
- [CVE-2020-2675](https://insights.sbomify.com/CVE-2020-2675/): Other in Hospitality OPERA 5 Property Services (high 7.1)
- [CVE-2020-2674](https://insights.sbomify.com/CVE-2020-2674/): Other in VM VirtualBox (high 8.2)
- [CVE-2020-26733](https://insights.sbomify.com/CVE-2020-26733/): Cross-site scripting in skyworth:gn542vf firmware (medium 5.4)
- [CVE-2020-26732](https://insights.sbomify.com/CVE-2020-26732/): Information disclosure in skyworth:gn542vf boa firmware (high 7.5)
- [CVE-2020-2673](https://insights.sbomify.com/CVE-2020-2673/): Other in Application Testing Suite (high 7.5)
- [CVE-2020-26728](https://insights.sbomify.com/CVE-2020-26728/): Command injection in tenda:ac9 firmware (critical 9.8)
- [CVE-2020-2672](https://insights.sbomify.com/CVE-2020-2672/): Other in Email Center (high 8.2)
- [CVE-2020-26713](https://insights.sbomify.com/CVE-2020-26713/): Cross-site scripting in vanderbilt:redcap (medium 6.1)
- [CVE-2020-26712](https://insights.sbomify.com/CVE-2020-26712/): SQL injection in vanderbilt:redcap (critical 9.8)
- [CVE-2020-26710](https://insights.sbomify.com/CVE-2020-26710/): easy-parse XML External Entity Injection vulnerability (high 7.5)
- [CVE-2020-2671](https://insights.sbomify.com/CVE-2020-2671/): Other in Email Center (high 8.2)
- [CVE-2020-26709](https://insights.sbomify.com/CVE-2020-26709/): py-xml XML External Entity Injection vulnerability (high 7.5)
- [CVE-2020-26708](https://insights.sbomify.com/CVE-2020-26708/): requests-xml XML External Entity Injection vulnerability (high 7.5)
- [CVE-2020-26707](https://insights.sbomify.com/CVE-2020-26707/): Command injection in aaptjs project:aaptjs (critical 9.8)
- [CVE-2020-26705](https://insights.sbomify.com/CVE-2020-26705/): XML External Entity vulnerability in Easy-XML (critical 9.1)
- [CVE-2020-26701](https://insights.sbomify.com/CVE-2020-26701/): Cross-site scripting in kaaproject:kaa (medium 5.4)
- [CVE-2020-2670](https://insights.sbomify.com/CVE-2020-2670/): Other in Email Center (high 8.2)
- [CVE-2020-26693](https://insights.sbomify.com/CVE-2020-26693/): Cross-site scripting in pfsense:pfsense (medium 5.4)
- [CVE-2020-2669](https://insights.sbomify.com/CVE-2020-2669/): Other in Email Center (high 8.2)
- [CVE-2020-26683](https://insights.sbomify.com/CVE-2020-26683/): Information disclosure in artifex:mupdf (medium 5.5)
- [CVE-2020-26682](https://insights.sbomify.com/CVE-2020-26682/): Integer overflow in libass project:libass (high 8.8)
- [CVE-2020-26680](https://insights.sbomify.com/CVE-2020-26680/): Cross-site scripting in vfairs:vfairs (medium 5.4)
- [CVE-2020-2668](https://insights.sbomify.com/CVE-2020-2668/): Other in iSupport (medium 4.7)
- [CVE-2020-26679](https://insights.sbomify.com/CVE-2020-26679/): Missing authorization in vfairs:vfairs (medium 4.3)
- [CVE-2020-26678](https://insights.sbomify.com/CVE-2020-26678/): File upload in vfairs:vfairs (high 8.8)
- [CVE-2020-26677](https://insights.sbomify.com/CVE-2020-26677/): SQL injection in vfairs:vfairs (high 8.8)
- [CVE-2020-26672](https://insights.sbomify.com/CVE-2020-26672/): Cross-site scripting in testimonial rotator project:testimonial rotator (medium 5.4)
- [CVE-2020-26670](https://insights.sbomify.com/CVE-2020-26670/): Command injection in bigtreecms:bigtree cms (high 8.8)
- [CVE-2020-2667](https://insights.sbomify.com/CVE-2020-2667/): Other in iSupport (medium 4.7)
- [CVE-2020-26669](https://insights.sbomify.com/CVE-2020-26669/): Cross-site scripting in bigtreecms:bigtree cms (medium 5.4)
- [CVE-2020-26668](https://insights.sbomify.com/CVE-2020-26668/): SQL injection in bigtreecms:bigtree cms (high 8.8)
- [CVE-2020-26664](https://insights.sbomify.com/CVE-2020-26664/): Memory corruption in debian:debian linux (high 7.8)
- [CVE-2020-2666](https://insights.sbomify.com/CVE-2020-2666/): Other in Applications Framework (medium 5.3)
- [CVE-2020-26652](https://insights.sbomify.com/CVE-2020-26652/): Denial of service in realtek:rtl8812au firmware (high 7.5)
- [CVE-2020-26650](https://insights.sbomify.com/CVE-2020-26650/): Path traversal in atomx:atomxcms (medium 5.3)
- [CVE-2020-2665](https://insights.sbomify.com/CVE-2020-2665/): Other in iSupport (high 8.2)
- [CVE-2020-26649](https://insights.sbomify.com/CVE-2020-26649/): Missing authorization in atomx:atomxcms 2 (high 8.1)
- [CVE-2020-26642](https://insights.sbomify.com/CVE-2020-26642/): Cross-site scripting in seacms:seacms (medium 6.1)
- [CVE-2020-26641](https://insights.sbomify.com/CVE-2020-26641/): Cross-site request forgery in idreamsoft:icms (high 8.8)
- [CVE-2020-2664](https://insights.sbomify.com/CVE-2020-2664/): Other in Solaris Operating System (medium 4.6)
- [CVE-2020-26630](https://insights.sbomify.com/CVE-2020-26630/): SQL injection in phpgurukul:hospital management system (medium 4.9)
- [CVE-2020-2663](https://insights.sbomify.com/CVE-2020-2663/): Cross-site scripting in PeopleSoft Enterprise PT PeopleTools (medium 6.1)
- [CVE-2020-26629](https://insights.sbomify.com/CVE-2020-26629/): File upload in phpgurukul:hospital management system (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/107/