# Vulnerabilities published in 2020 - [CVE-2020-26139](https://insights.sbomify.com/CVE-2020-26139/): Auth bypass in arista:c-100 firmware (medium 5.3) - [CVE-2020-26138](https://insights.sbomify.com/CVE-2020-26138/): FormField with square brackets in field name skips validation (medium 5.3) - [CVE-2020-26137](https://insights.sbomify.com/CVE-2020-26137/): CRLF injection in urllib3 (medium 6.5) - [CVE-2020-26136](https://insights.sbomify.com/CVE-2020-26136/): Authentication bypass in SilverStripe GraphQL (medium 6.5) - [CVE-2020-26135](https://insights.sbomify.com/CVE-2020-26135/): Cross-site scripting in livehelperchat:live helper chat (medium 6.1) - [CVE-2020-26134](https://insights.sbomify.com/CVE-2020-26134/): Cross-site scripting in livehelperchat:live helper chat (medium 6.1) - [CVE-2020-26133](https://insights.sbomify.com/CVE-2020-26133/): Privilege escalation in dual dhcp dns server project:dual dhcp dns server (high 7.8) - [CVE-2020-26132](https://insights.sbomify.com/CVE-2020-26132/): Misconfiguration in home dns server project:home dns server (high 7.8) - [CVE-2020-26131](https://insights.sbomify.com/CVE-2020-26131/): Misconfiguration in open dhcp server project:open dhcp server (high 7.8) - [CVE-2020-26130](https://insights.sbomify.com/CVE-2020-26130/): Misconfiguration in open tftp server project:open tftp server (high 7.8) - [CVE-2020-2613](https://insights.sbomify.com/CVE-2020-2613/): Other in Enterprise Manager Base Platform (medium 6.0) - [CVE-2020-26129](https://insights.sbomify.com/CVE-2020-26129/): Other in jetbrains:ktor (medium 6.5) - [CVE-2020-26124](https://insights.sbomify.com/CVE-2020-26124/): Code injection in openmediavault:openmediavault (high 8.8) - [CVE-2020-26122](https://insights.sbomify.com/CVE-2020-26122/): Security feature bypass in inspur:nf5180m5 firmware (high 7.2) - [CVE-2020-26121](https://insights.sbomify.com/CVE-2020-26121/): Missing authorization in fedoraproject:fedora (high 7.5) - [CVE-2020-26120](https://insights.sbomify.com/CVE-2020-26120/): Cross-site scripting in fedoraproject:fedora (medium 6.1) - [CVE-2020-2612](https://insights.sbomify.com/CVE-2020-2612/): Other in Enterprise Manager Base Platform (medium 6.0) - [CVE-2020-26118](https://insights.sbomify.com/CVE-2020-26118/): Deserialization in smartbear:collaborator (high 8.8) - [CVE-2020-26117](https://insights.sbomify.com/CVE-2020-26117/): Security feature bypass in debian:debian linux (high 8.1) - [CVE-2020-26116](https://insights.sbomify.com/CVE-2020-26116/): Other in canonical:ubuntu linux (high 7.2) - [CVE-2020-26115](https://insights.sbomify.com/CVE-2020-26115/): Cross-site scripting in cpanel:cpanel (medium 6.1) - [CVE-2020-26114](https://insights.sbomify.com/CVE-2020-26114/): Cross-site scripting in cpanel:cpanel (medium 6.1) - [CVE-2020-26113](https://insights.sbomify.com/CVE-2020-26113/): Cross-site scripting in cpanel:cpanel (medium 6.1) - [CVE-2020-26112](https://insights.sbomify.com/CVE-2020-26112/): Other in cpanel:cpanel (high 7.5) - [CVE-2020-26111](https://insights.sbomify.com/CVE-2020-26111/): Cross-site scripting in cpanel:cpanel (medium 6.1) - [CVE-2020-26110](https://insights.sbomify.com/CVE-2020-26110/): Cross-site scripting in cpanel:cpanel (medium 6.1) - [CVE-2020-2611](https://insights.sbomify.com/CVE-2020-2611/): Other in Enterprise Manager Base Platform (medium 6.0) - [CVE-2020-26109](https://insights.sbomify.com/CVE-2020-26109/): Security feature bypass in cpanel:cpanel (high 7.5) - [CVE-2020-26108](https://insights.sbomify.com/CVE-2020-26108/): Code injection in cpanel:cpanel (critical 9.8) - [CVE-2020-26107](https://insights.sbomify.com/CVE-2020-26107/): Weak cryptography in cpanel:cpanel (high 7.5) - [CVE-2020-26106](https://insights.sbomify.com/CVE-2020-26106/): Misconfiguration in cpanel:cpanel (high 7.5) - [CVE-2020-26105](https://insights.sbomify.com/CVE-2020-26105/): Hardcoded credentials in cpanel:cpanel (critical 9.8) - [CVE-2020-26104](https://insights.sbomify.com/CVE-2020-26104/): Weak cryptography in cpanel:cpanel (high 7.5) - [CVE-2020-26103](https://insights.sbomify.com/CVE-2020-26103/): Hardcoded credentials in cpanel:cpanel (high 7.5) - [CVE-2020-26102](https://insights.sbomify.com/CVE-2020-26102/): Hardcoded credentials in cpanel:cpanel (high 7.5) - [CVE-2020-26101](https://insights.sbomify.com/CVE-2020-26101/): Hardcoded credentials in cpanel:cpanel (critical 9.8) - [CVE-2020-26100](https://insights.sbomify.com/CVE-2020-26100/): Security feature bypass in cpanel:cpanel (critical 9.8) - [CVE-2020-2610](https://insights.sbomify.com/CVE-2020-2610/): Other in Enterprise Manager Base Platform (medium 6.0) - [CVE-2020-26099](https://insights.sbomify.com/CVE-2020-26099/): Security feature bypass in cpanel:cpanel (high 7.5) - [CVE-2020-26098](https://insights.sbomify.com/CVE-2020-26098/): Code injection in cpanel:cpanel (critical 9.8) - [CVE-2020-26097](https://insights.sbomify.com/CVE-2020-26097/): Hardcoded credentials in planet:nvr-1615 firmware (critical 9.8) - [CVE-2020-2609](https://insights.sbomify.com/CVE-2020-2609/): Other in Enterprise Manager Base Platform (medium 6.3) - [CVE-2020-26088](https://insights.sbomify.com/CVE-2020-26088/): Security feature bypass in canonical:ubuntu linux (medium 5.5) - [CVE-2020-26086](https://insights.sbomify.com/CVE-2020-26086/): Cisco TelePresence Collaboration Endpoint Software Information Disclosure Vulnerability (medium 4.3) - [CVE-2020-26085](https://insights.sbomify.com/CVE-2020-26085/): Cisco Jabber Desktop and Mobile Client Software Vulnerabilities (critical 9.9) - [CVE-2020-26084](https://insights.sbomify.com/CVE-2020-26084/): Cisco Edge Fog Fabric Resource Exposure Vulnerability (medium 6.5) - [CVE-2020-26083](https://insights.sbomify.com/CVE-2020-26083/): Cisco Identity Services Engine Cross-Site Scripting Vulnerability (medium 4.8) - [CVE-2020-26082](https://insights.sbomify.com/CVE-2020-26082/): Security feature bypass in Cisco Secure Email (medium 5.8) - [CVE-2020-26081](https://insights.sbomify.com/CVE-2020-26081/): Cisco IoT Field Network Director Cross-Site Scripting Vulnerabilities (medium 6.1) - [CVE-2020-26080](https://insights.sbomify.com/CVE-2020-26080/): Cisco IoT Field Network Director Improper Domain Access Control Vulnerability (medium 4.1) - [CVE-2020-2608](https://insights.sbomify.com/CVE-2020-2608/): Other in Enterprise Manager Base Platform (medium 6.0) - [CVE-2020-26079](https://insights.sbomify.com/CVE-2020-26079/): Cisco IoT Field Network Director Unprotected Storage of Credentials Vulnerability (medium 4.1) - [CVE-2020-26078](https://insights.sbomify.com/CVE-2020-26078/): Cisco IoT Field Network Director File Overwrite Vulnerability (medium 4.9) - [CVE-2020-26077](https://insights.sbomify.com/CVE-2020-26077/): Cisco IoT Field Network Director Improper Access Control Vulnerability (medium 5.0) - [CVE-2020-26076](https://insights.sbomify.com/CVE-2020-26076/): Cisco IoT Field Network Director Information Disclosure Vulnerability (medium 5.3) - [CVE-2020-26075](https://insights.sbomify.com/CVE-2020-26075/): Cisco IoT Field Network REST API Insufficient Input Validation Vulnerability (medium 6.3) - [CVE-2020-26074](https://insights.sbomify.com/CVE-2020-26074/): Cisco SD-WAN vManage Privilege Escalation Vulnerability (high 7.8) - [CVE-2020-26073](https://insights.sbomify.com/CVE-2020-26073/): Cisco SD-WAN vManage Directory Traversal Vulnerability (high 7.5) - [CVE-2020-26072](https://insights.sbomify.com/CVE-2020-26072/): Cisco IoT Field Network Director SOAP API Authorization Bypass Vulnerability (high 8.7) - [CVE-2020-26071](https://insights.sbomify.com/CVE-2020-26071/): Cisco SD-WAN vEdge Arbitrary File Creation Vulnerability (high 8.4) - [CVE-2020-26070](https://insights.sbomify.com/CVE-2020-26070/): Denial of service in Cisco IOS XR Software (high 8.6) - [CVE-2020-2607](https://insights.sbomify.com/CVE-2020-2607/): Cross-site scripting in PeopleSoft Enterprise PT PeopleTools (medium 6.1) - [CVE-2020-26068](https://insights.sbomify.com/CVE-2020-26068/): Cisco Telepresence CE Software and RoomOS Software Unauthorized Token Generation Vulnerability (medium 5.5) - [CVE-2020-26067](https://insights.sbomify.com/CVE-2020-26067/): Cisco Webex Teams Web Interface Cross-Site Scripting Vulnerability (medium 5.4) - [CVE-2020-26066](https://insights.sbomify.com/CVE-2020-26066/): Cisco SD-WAN vManage Software XML External Entity Vulnerability (medium 6.5) - [CVE-2020-26065](https://insights.sbomify.com/CVE-2020-26065/): Path traversal in Cisco SD-WAN vManage (medium 6.5) - [CVE-2020-26064](https://insights.sbomify.com/CVE-2020-26064/): XML external entity in Cisco SD-WAN vManage (medium 6.5) - [CVE-2020-26063](https://insights.sbomify.com/CVE-2020-26063/): Cisco Integrated Management Controller Software Authorization Bypass Vulnerability (medium 5.4) - [CVE-2020-26062](https://insights.sbomify.com/CVE-2020-26062/): Cisco Integrated Management Controller Username Enumeration Vulnerability (medium 5.3) - [CVE-2020-26061](https://insights.sbomify.com/CVE-2020-26061/): Auth bypass in clickstudios:passwordstate (high 7.5) - [CVE-2020-2606](https://insights.sbomify.com/CVE-2020-2606/): Cross-site scripting in PeopleSoft Enterprise PT PeopleTools (medium 6.1) - [CVE-2020-26052](https://insights.sbomify.com/CVE-2020-26052/): Cross-site scripting in phpgurukul:online marriage registration system (medium 5.4) - [CVE-2020-26051](https://insights.sbomify.com/CVE-2020-26051/): SQL injection in college management system project:college management system (critical 9.8) - [CVE-2020-26050](https://insights.sbomify.com/CVE-2020-26050/): Privilege escalation in safervpn:safervpn (high 7.8) - [CVE-2020-2605](https://insights.sbomify.com/CVE-2020-2605/): Other in Solaris Operating System (high 7.1) - [CVE-2020-26049](https://insights.sbomify.com/CVE-2020-26049/): Cross-site scripting in niftypm:nifty-pm (medium 6.1) - [CVE-2020-26048](https://insights.sbomify.com/CVE-2020-26048/): File upload in cuppacms:cuppacms (high 8.8) - [CVE-2020-26046](https://insights.sbomify.com/CVE-2020-26046/): Cross-site scripting in thedaylightstudio:fuel cms (medium 5.4) - [CVE-2020-26045](https://insights.sbomify.com/CVE-2020-26045/): SQL injection in thedaylightstudio:fuel cms (critical 9.8) - [CVE-2020-26043](https://insights.sbomify.com/CVE-2020-26043/): Cross-site scripting in hoosk:hoosk (medium 6.1) - [CVE-2020-26042](https://insights.sbomify.com/CVE-2020-26042/): SQL injection in hoosk:hoosk (critical 9.8) - [CVE-2020-26041](https://insights.sbomify.com/CVE-2020-26041/): Code injection in hoosk:hoosk (critical 9.8) - [CVE-2020-2604](https://insights.sbomify.com/CVE-2020-2604/): Deserialization in Java (high 8.1) - [CVE-2020-26037](https://insights.sbomify.com/CVE-2020-26037/): Path traversal in evenbalance:punkbuster (critical 9.8) - [CVE-2020-26035](https://insights.sbomify.com/CVE-2020-26035/): Cross-site scripting in zammad:zammad (medium 5.4) - [CVE-2020-26034](https://insights.sbomify.com/CVE-2020-26034/): Information disclosure in zammad:zammad (medium 4.3) - [CVE-2020-26033](https://insights.sbomify.com/CVE-2020-26033/): Cross-site request forgery in zammad:zammad (medium 5.4) - [CVE-2020-26032](https://insights.sbomify.com/CVE-2020-26032/): Server-side request forgery in zammad:zammad (high 7.5) - [CVE-2020-26031](https://insights.sbomify.com/CVE-2020-26031/): Missing authorization in zammad:zammad (medium 4.3) - [CVE-2020-26030](https://insights.sbomify.com/CVE-2020-26030/): Auth bypass in zammad:zammad (critical 9.8) - [CVE-2020-2603](https://insights.sbomify.com/CVE-2020-2603/): Other in Field Service (medium 6.1) - [CVE-2020-26029](https://insights.sbomify.com/CVE-2020-26029/): Missing authorization in zammad:zammad (medium 6.5) - [CVE-2020-26028](https://insights.sbomify.com/CVE-2020-26028/): Missing authorization in zammad:zammad (medium 4.9) - [CVE-2020-2602](https://insights.sbomify.com/CVE-2020-2602/): Cross-site scripting in PeopleSoft Enterprise PT PeopleTools (medium 6.1) - [CVE-2020-2601](https://insights.sbomify.com/CVE-2020-2601/): Information disclosure in Java (medium 6.8) - [CVE-2020-26008](https://insights.sbomify.com/CVE-2020-26008/): File upload in shopxo:shopxo (high 7.8) - [CVE-2020-26007](https://insights.sbomify.com/CVE-2020-26007/): File upload in shopxo:shopxo (high 7.8) - [CVE-2020-26006](https://insights.sbomify.com/CVE-2020-26006/): Cross-site scripting in online examination system project:online examination system (medium 6.1) - [CVE-2020-2600](https://insights.sbomify.com/CVE-2020-2600/): Cross-site scripting in PeopleSoft Enterprise PT PeopleTools (medium 6.1) - [CVE-2020-25990](https://insights.sbomify.com/CVE-2020-25990/): SQL injection in websitebaker:websitebaker (critical 9.8) --- From sbomify Insights: https://insights.sbomify.com/years/2020/page/111/