# Vulnerabilities published in 2020


- [CVE-2020-26244](https://insights.sbomify.com/CVE-2020-26244/): Cryptographic issues in Python oic (medium 6.8)
- [CVE-2020-26243](https://insights.sbomify.com/CVE-2020-26243/): Memory leak in nanopb (high 7.5)
- [CVE-2020-26242](https://insights.sbomify.com/CVE-2020-26242/): Denial of service in geth (medium 6.5)
- [CVE-2020-26241](https://insights.sbomify.com/CVE-2020-26241/): Shallow copy bug in geth (medium 6.5)
- [CVE-2020-26240](https://insights.sbomify.com/CVE-2020-26240/): Erroneous Proof of Work calculation in geth (medium 5.3)
- [CVE-2020-2624](https://insights.sbomify.com/CVE-2020-2624/): Other in Enterprise Manager Base Platform (medium 6.0)
- [CVE-2020-26239](https://insights.sbomify.com/CVE-2020-26239/): Cross-Site Scripting in Scratch browser addons (high 7.6)
- [CVE-2020-26238](https://insights.sbomify.com/CVE-2020-26238/): Critical vulnerability found in cron-utils (high 7.9)
- [CVE-2020-26237](https://insights.sbomify.com/CVE-2020-26237/): Prototype Pollution in highlight.js (medium 5.8)
- [CVE-2020-26236](https://insights.sbomify.com/CVE-2020-26236/): Verification Code Hijacking in ScratchVerifier (high 7.5)
- [CVE-2020-26235](https://insights.sbomify.com/CVE-2020-26235/): Segmentation fault in Rust time crate (medium 5.3)
- [CVE-2020-26234](https://insights.sbomify.com/CVE-2020-26234/): Disabled Hostname Verification in OpenCast (medium 4.8)
- [CVE-2020-26233](https://insights.sbomify.com/CVE-2020-26233/): Remote Code Execution in Git Credential Manager Core (high 7.3)
- [CVE-2020-26232](https://insights.sbomify.com/CVE-2020-26232/): Open redirect in Jupyter Server (medium 4.1)
- [CVE-2020-26231](https://insights.sbomify.com/CVE-2020-26231/): Bypass of fix for CVE-2020-15247, Twig sandbox escape (medium 5.2)
- [CVE-2020-26230](https://insights.sbomify.com/CVE-2020-26230/): Deanonymization of COVID-19 positive users of Radar COVID (high 7.4)
- [CVE-2020-2623](https://insights.sbomify.com/CVE-2020-2623/): Other in Enterprise Manager Base Platform (medium 6.0)
- [CVE-2020-26229](https://insights.sbomify.com/CVE-2020-26229/): XML External Entity in Dashboard Widget (low 3.7)
- [CVE-2020-26228](https://insights.sbomify.com/CVE-2020-26228/): Cleartext storage of session identifier (high 8.1)
- [CVE-2020-26227](https://insights.sbomify.com/CVE-2020-26227/): Cross-Site Scripting in Fluid view helpers (medium 6.1)
- [CVE-2020-26226](https://insights.sbomify.com/CVE-2020-26226/): Secret disclosure in semantic-release (high 8.1)
- [CVE-2020-26225](https://insights.sbomify.com/CVE-2020-26225/): Reflected XSS in PrestaShop Product Comments (high 8.7)
- [CVE-2020-26224](https://insights.sbomify.com/CVE-2020-26224/): Improper Access Control in PrestaShop (high 7.5)
- [CVE-2020-26223](https://insights.sbomify.com/CVE-2020-26223/): Authorization bypass in Spree (high 7.7)
- [CVE-2020-26222](https://insights.sbomify.com/CVE-2020-26222/): Remote code execution in dependabot-core (high 8.7)
- [CVE-2020-26221](https://insights.sbomify.com/CVE-2020-26221/): Stored Cross Site Scripting in touchbase.ai (high 8.0)
- [CVE-2020-26220](https://insights.sbomify.com/CVE-2020-26220/): Information exposure in touchbase.ai (low 3.5)
- [CVE-2020-2622](https://insights.sbomify.com/CVE-2020-2622/): Other in Enterprise Manager Base Platform (medium 6.0)
- [CVE-2020-26219](https://insights.sbomify.com/CVE-2020-26219/): Open Redirect in touchbase.ai (medium 4.7)
- [CVE-2020-26218](https://insights.sbomify.com/CVE-2020-26218/): HTML Injection in touchbase.ai (high 8.0)
- [CVE-2020-26217](https://insights.sbomify.com/CVE-2020-26217/): Remote Code Execution in XStream (high 8.0)
- [CVE-2020-26216](https://insights.sbomify.com/CVE-2020-26216/): Cross-Site Scripting in TYPO3 Fluid (high 8.0)
- [CVE-2020-26215](https://insights.sbomify.com/CVE-2020-26215/): Open redirect in Jupyter Notebook (medium 4.4)
- [CVE-2020-26214](https://insights.sbomify.com/CVE-2020-26214/): LDAP authentication bypass in Alerta (critical 9.1)
- [CVE-2020-26213](https://insights.sbomify.com/CVE-2020-26213/): Denial of Service in teler (medium 5.9)
- [CVE-2020-26212](https://insights.sbomify.com/CVE-2020-26212/): Any GLPI CalDAV calendars is read-only for every authenticated user (high 7.7)
- [CVE-2020-26211](https://insights.sbomify.com/CVE-2020-26211/): Cross-Site Scripting in BookStack (high 7.7)
- [CVE-2020-26210](https://insights.sbomify.com/CVE-2020-26210/): Cross-Site Scripting in BookStack (high 7.7)
- [CVE-2020-2621](https://insights.sbomify.com/CVE-2020-2621/): Other in Enterprise Manager Base Platform (medium 6.0)
- [CVE-2020-26208](https://insights.sbomify.com/CVE-2020-26208/): Heap-buffer-overflow in jhead (medium 5.3)
- [CVE-2020-26207](https://insights.sbomify.com/CVE-2020-26207/): Unsafe deserialization in DatabaseSchemaViewer (high 8.0)
- [CVE-2020-26205](https://insights.sbomify.com/CVE-2020-26205/): XSS in Sal (high 7.6)
- [CVE-2020-26201](https://insights.sbomify.com/CVE-2020-26201/): Hardcoded credentials in askey:ap5100w firmware (critical 9.8)
- [CVE-2020-26200](https://insights.sbomify.com/CVE-2020-26200/): Security feature bypass in Kaspersky Endpoint Security with the Full Disk Encryption component installed (medium 6.8)
- [CVE-2020-2620](https://insights.sbomify.com/CVE-2020-2620/): Other in Enterprise Manager Base Platform (medium 6.0)
- [CVE-2020-26199](https://insights.sbomify.com/CVE-2020-26199/): Information disclosure in Unity (medium 6.4)
- [CVE-2020-26198](https://insights.sbomify.com/CVE-2020-26198/): Cross-site scripting in Integrated Dell Remote Access Controller (iDRAC) (medium 6.1)
- [CVE-2020-26197](https://insights.sbomify.com/CVE-2020-26197/): Weak cryptography in PowerScale OneFS (high 7.5)
- [CVE-2020-26196](https://insights.sbomify.com/CVE-2020-26196/): Privilege escalation in PowerScale OneFS (medium 5.5)
- [CVE-2020-26195](https://insights.sbomify.com/CVE-2020-26195/): Denial of service in PowerScale OneFS (medium 5.3)
- [CVE-2020-26194](https://insights.sbomify.com/CVE-2020-26194/): Misconfiguration in PowerScale OneFS (high 7.0)
- [CVE-2020-26193](https://insights.sbomify.com/CVE-2020-26193/): Command injection in PowerScale OneFS (high 7.8)
- [CVE-2020-26192](https://insights.sbomify.com/CVE-2020-26192/): Privilege escalation in PowerScale OneFS (high 7.8)
- [CVE-2020-26191](https://insights.sbomify.com/CVE-2020-26191/): Privilege escalation in PowerScale OneFS (high 7.8)
- [CVE-2020-2619](https://insights.sbomify.com/CVE-2020-2619/): Other in Enterprise Manager Base Platform (medium 6.0)
- [CVE-2020-26186](https://insights.sbomify.com/CVE-2020-26186/): Privilege escalation in CPG BIOS (medium 6.8)
- [CVE-2020-26185](https://insights.sbomify.com/CVE-2020-26185/): Memory corruption in Dell BSAFE Micro Edition Suite (high 7.5)
- [CVE-2020-26184](https://insights.sbomify.com/CVE-2020-26184/): Security feature bypass in Dell BSAFE Micro Edition Suite (high 7.5)
- [CVE-2020-26183](https://insights.sbomify.com/CVE-2020-26183/): Missing authorization in NetWorker (medium 6.8)
- [CVE-2020-26182](https://insights.sbomify.com/CVE-2020-26182/): Privilege escalation in NetWorker (medium 6.8)
- [CVE-2020-26181](https://insights.sbomify.com/CVE-2020-26181/): Privilege escalation in PowerScale OneFS (high 7.0)
- [CVE-2020-26180](https://insights.sbomify.com/CVE-2020-26180/): Misconfiguration in PowerScale OneFS (medium 6.3)
- [CVE-2020-2618](https://insights.sbomify.com/CVE-2020-2618/): Other in Enterprise Manager Base Platform (medium 6.0)
- [CVE-2020-26178](https://insights.sbomify.com/CVE-2020-26178/): Missing authorization in tangro:business workflow (medium 5.3)
- [CVE-2020-26177](https://insights.sbomify.com/CVE-2020-26177/): Business logic in tangro:business workflow (medium 4.3)
- [CVE-2020-26176](https://insights.sbomify.com/CVE-2020-26176/): Missing authorization in tangro:business workflow (medium 4.3)
- [CVE-2020-26175](https://insights.sbomify.com/CVE-2020-26175/): Missing authorization in tangro:business workflow (medium 6.5)
- [CVE-2020-26174](https://insights.sbomify.com/CVE-2020-26174/): File upload in tangro:business workflow (high 8.8)
- [CVE-2020-26173](https://insights.sbomify.com/CVE-2020-26173/): Missing authorization in tangro:business workflow (low 3.1)
- [CVE-2020-26172](https://insights.sbomify.com/CVE-2020-26172/): Auth bypass in tangro:business workflow (medium 4.2)
- [CVE-2020-26171](https://insights.sbomify.com/CVE-2020-26171/): Missing authorization in tangro:business workflow (medium 4.3)
- [CVE-2020-2617](https://insights.sbomify.com/CVE-2020-2617/): Other in Enterprise Manager Base Platform (medium 6.0)
- [CVE-2020-26168](https://insights.sbomify.com/CVE-2020-26168/): Auth bypass in hazelcast:hazelcast (critical 9.8)
- [CVE-2020-26167](https://insights.sbomify.com/CVE-2020-26167/): Auth bypass in thedaylightstudio:fuel cms (critical 9.8)
- [CVE-2020-26166](https://insights.sbomify.com/CVE-2020-26166/): Cross-site scripting in qdpm:qdpm (medium 5.4)
- [CVE-2020-26165](https://insights.sbomify.com/CVE-2020-26165/): Deserialization in qdpm:qdpm (high 8.8)
- [CVE-2020-26164](https://insights.sbomify.com/CVE-2020-26164/): Denial of service in kde:kdeconnect (medium 5.5)
- [CVE-2020-26163](https://insights.sbomify.com/CVE-2020-26163/): Other in bigbluebutton:greenlight (high 8.8)
- [CVE-2020-26162](https://insights.sbomify.com/CVE-2020-26162/): Cross-site scripting in xerox:workcentre ec7836 firmware (medium 6.1)
- [CVE-2020-26161](https://insights.sbomify.com/CVE-2020-26161/): Open redirect in octopus:octopus deploy (medium 6.1)
- [CVE-2020-26160](https://insights.sbomify.com/CVE-2020-26160/): Authorization bypass in github.com/dgrijalva/jwt-go (high 7.5)
- [CVE-2020-2616](https://insights.sbomify.com/CVE-2020-2616/): Other in Enterprise Manager Base Platform (medium 6.0)
- [CVE-2020-26158](https://insights.sbomify.com/CVE-2020-26158/): Cross-site scripting in leanote:leanote (critical 9.6)
- [CVE-2020-26157](https://insights.sbomify.com/CVE-2020-26157/): Cross-site scripting in leanote:leanote (critical 9.6)
- [CVE-2020-26155](https://insights.sbomify.com/CVE-2020-26155/): Misconfiguration in utimaco:block-safe firmware (high 7.8)
- [CVE-2020-26154](https://insights.sbomify.com/CVE-2020-26154/): Memory corruption in debian:debian linux (critical 9.8)
- [CVE-2020-26153](https://insights.sbomify.com/CVE-2020-26153/): Cross-site scripting in eventespresso:event espresso (medium 6.1)
- [CVE-2020-26150](https://insights.sbomify.com/CVE-2020-26150/): Information disclosure in logaritmo:aware callmanager (high 7.5)
- [CVE-2020-2615](https://insights.sbomify.com/CVE-2020-2615/): Other in Enterprise Manager Base Platform (medium 6.0)
- [CVE-2020-26149](https://insights.sbomify.com/CVE-2020-26149/): Sensitive data exposure in NATS (high 7.5)
- [CVE-2020-26148](https://insights.sbomify.com/CVE-2020-26148/): Memory corruption in md4c project:md4c (high 7.5)
- [CVE-2020-26147](https://insights.sbomify.com/CVE-2020-26147/): Security feature bypass in arista:c-65 firmware (medium 5.4)
- [CVE-2020-26146](https://insights.sbomify.com/CVE-2020-26146/): Information disclosure in arista:c-100 firmware (medium 5.3)
- [CVE-2020-26145](https://insights.sbomify.com/CVE-2020-26145/): Security feature bypass in samsung:galaxy i9305 firmware (medium 6.5)
- [CVE-2020-26144](https://insights.sbomify.com/CVE-2020-26144/): Security feature bypass in arista:c-100 firmware (medium 6.5)
- [CVE-2020-26143](https://insights.sbomify.com/CVE-2020-26143/): Security feature bypass in alfa:awus036h firmware (medium 6.5)
- [CVE-2020-26142](https://insights.sbomify.com/CVE-2020-26142/): Security feature bypass in openbsd:openbsd (medium 5.3)
- [CVE-2020-26141](https://insights.sbomify.com/CVE-2020-26141/): Security feature bypass in alfa:awus036h firmware (medium 6.5)
- [CVE-2020-26140](https://insights.sbomify.com/CVE-2020-26140/): Security feature bypass in alfa:awus036h firmware (medium 6.5)
- [CVE-2020-2614](https://insights.sbomify.com/CVE-2020-2614/): Other in APM - Application Performance Management (medium 6.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/110/