# Vulnerabilities published in 2020 - [CVE-2020-26628](https://insights.sbomify.com/CVE-2020-26628/): Cross-site scripting in phpgurukul:hospital management system (medium 6.1) - [CVE-2020-26627](https://insights.sbomify.com/CVE-2020-26627/): SQL injection in phpgurukul:hospital management system (medium 4.9) - [CVE-2020-26625](https://insights.sbomify.com/CVE-2020-26625/): Gila CMS SQL Injection vulnerability (low 3.8) - [CVE-2020-26624](https://insights.sbomify.com/CVE-2020-26624/): Gila CMS SQL Injection vulnerability (low 3.8) - [CVE-2020-26623](https://insights.sbomify.com/CVE-2020-26623/): Gila CMS SQL Injection (low 3.8) - [CVE-2020-2662](https://insights.sbomify.com/CVE-2020-2662/): Other in iSupport (high 8.2) - [CVE-2020-2661](https://insights.sbomify.com/CVE-2020-2661/): Other in iSupport (high 8.2) - [CVE-2020-26609](https://insights.sbomify.com/CVE-2020-26609/): Cross-site scripting in fastadmin:fastadmin (medium 5.4) - [CVE-2020-26607](https://insights.sbomify.com/CVE-2020-26607/): Privilege escalation in google:android (critical 9.8) - [CVE-2020-26606](https://insights.sbomify.com/CVE-2020-26606/): Security feature bypass in google:android (high 7.5) - [CVE-2020-26605](https://insights.sbomify.com/CVE-2020-26605/): Information disclosure in google:android (high 7.5) - [CVE-2020-26604](https://insights.sbomify.com/CVE-2020-26604/): Information disclosure in google:android (high 7.5) - [CVE-2020-26603](https://insights.sbomify.com/CVE-2020-26603/): Path traversal in google:android (medium 5.3) - [CVE-2020-26602](https://insights.sbomify.com/CVE-2020-26602/): Missing authorization in google:android (high 7.5) - [CVE-2020-26601](https://insights.sbomify.com/CVE-2020-26601/): Privilege escalation in google:android (high 7.5) - [CVE-2020-26600](https://insights.sbomify.com/CVE-2020-26600/): Information disclosure in google:android (high 7.5) - [CVE-2020-2660](https://insights.sbomify.com/CVE-2020-2660/): Denial of service in MySQL Server (medium 4.9) - [CVE-2020-26599](https://insights.sbomify.com/CVE-2020-26599/): Auth bypass in google:android (medium 5.3) - [CVE-2020-26598](https://insights.sbomify.com/CVE-2020-26598/): Missing authorization in google:android (high 7.5) - [CVE-2020-26597](https://insights.sbomify.com/CVE-2020-26597/): Denial of service in google:android (high 7.5) - [CVE-2020-26596](https://insights.sbomify.com/CVE-2020-26596/): Code injection in elementor:elementor pro (high 8.8) - [CVE-2020-2659](https://insights.sbomify.com/CVE-2020-2659/): Denial of service in Java (low 3.7) - [CVE-2020-26584](https://insights.sbomify.com/CVE-2020-26584/): Cross-site scripting in sagedpw:sage dpw (medium 6.1) - [CVE-2020-26583](https://insights.sbomify.com/CVE-2020-26583/): Cross-site scripting in sagedpw:sage dpw (medium 6.1) - [CVE-2020-26582](https://insights.sbomify.com/CVE-2020-26582/): Command injection in dlink:dap-1360u firmware (high 8.8) - [CVE-2020-2658](https://insights.sbomify.com/CVE-2020-2658/): Other in iSupport (high 8.2) - [CVE-2020-26575](https://insights.sbomify.com/CVE-2020-26575/): Denial of service in debian:debian linux (high 7.5) - [CVE-2020-26574](https://insights.sbomify.com/CVE-2020-26574/): Cross-site scripting in leostream:connection broker (critical 9.6) - [CVE-2020-26572](https://insights.sbomify.com/CVE-2020-26572/): Memory corruption in debian:debian linux (medium 5.5) - [CVE-2020-26571](https://insights.sbomify.com/CVE-2020-26571/): Memory corruption in debian:debian linux (medium 5.5) - [CVE-2020-26570](https://insights.sbomify.com/CVE-2020-26570/): Memory corruption in debian:debian linux (medium 5.5) - [CVE-2020-2657](https://insights.sbomify.com/CVE-2020-2657/): Other in CRM Technical Foundation (medium 4.7) - [CVE-2020-26569](https://insights.sbomify.com/CVE-2020-26569/): Other in arista:eos (medium 5.9) - [CVE-2020-26567](https://insights.sbomify.com/CVE-2020-26567/): Missing authorization in dlink:dsr-250n firmware (medium 5.5) - [CVE-2020-26566](https://insights.sbomify.com/CVE-2020-26566/): Memory corruption in motion project:motion (high 7.5) - [CVE-2020-26565](https://insights.sbomify.com/CVE-2020-26565/): Code injection in objectplanet:opinio (high 7.5) - [CVE-2020-26564](https://insights.sbomify.com/CVE-2020-26564/): XML external entity in objectplanet:opinio (medium 6.5) - [CVE-2020-26563](https://insights.sbomify.com/CVE-2020-26563/): Cross-site scripting in objectplanet:opinio (medium 6.1) - [CVE-2020-26561](https://insights.sbomify.com/CVE-2020-26561/): Memory corruption in belkin:linksys wrt 160nl firmware (high 8.8) - [CVE-2020-26560](https://insights.sbomify.com/CVE-2020-26560/): Auth bypass in bluetooth:mesh profile (high 8.1) - [CVE-2020-2656](https://insights.sbomify.com/CVE-2020-2656/): Other in Solaris Operating System (medium 4.4) - [CVE-2020-26559](https://insights.sbomify.com/CVE-2020-26559/): Weak cryptography in bluetooth:mesh profile (high 8.8) - [CVE-2020-26558](https://insights.sbomify.com/CVE-2020-26558/): Auth bypass in bluetooth:bluetooth core specification (medium 4.2) - [CVE-2020-26557](https://insights.sbomify.com/CVE-2020-26557/): Weak cryptography in bluetooth:mesh profile (high 7.5) - [CVE-2020-26556](https://insights.sbomify.com/CVE-2020-26556/): Auth bypass in bluetooth:bluetooth core specification (high 7.5) - [CVE-2020-26555](https://insights.sbomify.com/CVE-2020-26555/): Auth bypass in bluetooth:bluetooth core specification (medium 5.4) - [CVE-2020-26554](https://insights.sbomify.com/CVE-2020-26554/): Cross-site scripting in reddoxx:maildepot (medium 6.1) - [CVE-2020-26553](https://insights.sbomify.com/CVE-2020-26553/): File upload in aviatrix:controller (critical 9.8) - [CVE-2020-26552](https://insights.sbomify.com/CVE-2020-26552/): Missing authorization in aviatrix:controller (high 7.5) - [CVE-2020-26551](https://insights.sbomify.com/CVE-2020-26551/): Information disclosure in aviatrix:controller (high 7.5) - [CVE-2020-26550](https://insights.sbomify.com/CVE-2020-26550/): Weak cryptography in aviatrix:controller (high 7.5) - [CVE-2020-2655](https://insights.sbomify.com/CVE-2020-2655/): Other in Java (medium 4.8) - [CVE-2020-26549](https://insights.sbomify.com/CVE-2020-26549/): Security feature bypass in aviatrix:controller (high 7.5) - [CVE-2020-26548](https://insights.sbomify.com/CVE-2020-26548/): Privilege escalation in aviatrix:controller (high 8.8) - [CVE-2020-26547](https://insights.sbomify.com/CVE-2020-26547/): Security feature bypass in monal:monal (critical 9.8) - [CVE-2020-26546](https://insights.sbomify.com/CVE-2020-26546/): SQL injection in evolutionscript:helpdeskz (high 7.5) - [CVE-2020-26542](https://insights.sbomify.com/CVE-2020-26542/): Auth bypass in percona:percona server (critical 9.8) - [CVE-2020-26541](https://insights.sbomify.com/CVE-2020-26541/): Security feature bypass in linux:linux kernel (medium 6.5) - [CVE-2020-26540](https://insights.sbomify.com/CVE-2020-26540/): Security feature bypass in foxitsoftware:foxit reader (high 7.5) - [CVE-2020-2654](https://insights.sbomify.com/CVE-2020-2654/): Denial of service in Java (low 3.7) - [CVE-2020-26539](https://insights.sbomify.com/CVE-2020-26539/): Use after free in foxitsoftware:foxit reader (critical 9.8) - [CVE-2020-26538](https://insights.sbomify.com/CVE-2020-26538/): Code injection in foxitsoftware:foxit reader (high 7.8) - [CVE-2020-26537](https://insights.sbomify.com/CVE-2020-26537/): Memory corruption in foxitsoftware:foxit reader (critical 9.8) - [CVE-2020-26536](https://insights.sbomify.com/CVE-2020-26536/): Null dereference in foxitsoftware:foxit reader (medium 5.5) - [CVE-2020-26535](https://insights.sbomify.com/CVE-2020-26535/): Memory corruption in foxitsoftware:foxit reader (critical 9.8) - [CVE-2020-26534](https://insights.sbomify.com/CVE-2020-26534/): Use after free in foxitsoftware:foxit reader (critical 9.8) - [CVE-2020-2653](https://insights.sbomify.com/CVE-2020-2653/): Other in CRM Technical Foundation (high 8.2) - [CVE-2020-26527](https://insights.sbomify.com/CVE-2020-26527/): Misconfiguration in damstratechnology:smart asset (critical 9.8) - [CVE-2020-26526](https://insights.sbomify.com/CVE-2020-26526/): Information disclosure in damstratechnology:smart asset (medium 5.3) - [CVE-2020-26525](https://insights.sbomify.com/CVE-2020-26525/): SQL injection in damstratechnology:smart asset (critical 9.1) - [CVE-2020-26524](https://insights.sbomify.com/CVE-2020-26524/): Information disclosure in filecloud:filecloud (medium 5.3) - [CVE-2020-26523](https://insights.sbomify.com/CVE-2020-26523/): Froala WYSIWYG Editor XSS Vulnerability (medium 6.1) - [CVE-2020-26522](https://insights.sbomify.com/CVE-2020-26522/): Cross-site request forgery in garfield petshop project:garfield petshop (high 8.8) - [CVE-2020-26521](https://insights.sbomify.com/CVE-2020-26521/): Nil dereference in NATS JWT, DoS of nats-server (high 7.5) - [CVE-2020-2652](https://insights.sbomify.com/CVE-2020-2652/): Other in CRM Technical Foundation (high 8.2) - [CVE-2020-26519](https://insights.sbomify.com/CVE-2020-26519/): Memory corruption in artifex:mupdf (medium 5.5) - [CVE-2020-26518](https://insights.sbomify.com/CVE-2020-26518/): SQL injection in artica:pandora fms (critical 9.8) - [CVE-2020-26517](https://insights.sbomify.com/CVE-2020-26517/): Cross-site scripting in intland:codebeamer (medium 4.8) - [CVE-2020-26516](https://insights.sbomify.com/CVE-2020-26516/): Cross-site request forgery in intland:codebeamer (high 8.8) - [CVE-2020-26515](https://insights.sbomify.com/CVE-2020-26515/): Weak cryptography in intland:codebeamer (high 7.5) - [CVE-2020-26513](https://insights.sbomify.com/CVE-2020-26513/): XML external entity in intland:codebeamer (medium 5.5) - [CVE-2020-26511](https://insights.sbomify.com/CVE-2020-26511/): Auth bypass in wpo365:wordpress \+ azure ad \/ microsoft office 365 (high 7.5) - [CVE-2020-26510](https://insights.sbomify.com/CVE-2020-26510/): Hardcoded credentials in airleader:airleader master control (critical 9.8) - [CVE-2020-2651](https://insights.sbomify.com/CVE-2020-2651/): Other in CRM Technical Foundation (high 8.2) - [CVE-2020-26509](https://insights.sbomify.com/CVE-2020-26509/): Hardcoded credentials in airleader:airleader master control (high 7.5) - [CVE-2020-26508](https://insights.sbomify.com/CVE-2020-26508/): Information disclosure in canon:oce colorwave 3500 firmware (critical 9.8) - [CVE-2020-26507](https://insights.sbomify.com/CVE-2020-26507/): Code injection in marmind:marmind (high 7.8) - [CVE-2020-26506](https://insights.sbomify.com/CVE-2020-26506/): Missing authorization in marmind:marmind (medium 4.3) - [CVE-2020-26505](https://insights.sbomify.com/CVE-2020-26505/): Cross-site scripting in marmind:marmind (medium 6.1) - [CVE-2020-2650](https://insights.sbomify.com/CVE-2020-2650/): Other in Retail Customer Management and Segmentation Foundation (medium 6.5) - [CVE-2020-2649](https://insights.sbomify.com/CVE-2020-2649/): Information disclosure in Retail Customer Management and Segmentation Foundation (low 3.3) - [CVE-2020-2648](https://insights.sbomify.com/CVE-2020-2648/): Other in Retail Customer Management and Segmentation Foundation (medium 6.2) - [CVE-2020-2647](https://insights.sbomify.com/CVE-2020-2647/): Denial of service in Solaris Operating System (medium 5.0) - [CVE-2020-2646](https://insights.sbomify.com/CVE-2020-2646/): Other in Enterprise Manager Base Platform (medium 5.4) - [CVE-2020-2645](https://insights.sbomify.com/CVE-2020-2645/): Other in Enterprise Manager Base Platform (medium 6.0) - [CVE-2020-2644](https://insights.sbomify.com/CVE-2020-2644/): Other in Enterprise Manager Base Platform (medium 6.0) - [CVE-2020-2643](https://insights.sbomify.com/CVE-2020-2643/): Other in Enterprise Manager Base Platform (medium 6.0) - [CVE-2020-26422](https://insights.sbomify.com/CVE-2020-26422/): Memory corruption in Wireshark (low 3.7) - [CVE-2020-26421](https://insights.sbomify.com/CVE-2020-26421/): Memory corruption in Wireshark (medium 4.2) - [CVE-2020-26420](https://insights.sbomify.com/CVE-2020-26420/): Denial of service in Wireshark (low 3.1) --- From sbomify Insights: https://insights.sbomify.com/years/2020/page/108/