# Vulnerabilities published in 2020


- [CVE-2020-2581](https://insights.sbomify.com/CVE-2020-2581/): Denial of service in GraalVM Enterprise Edition (medium 4.0)
- [CVE-2020-25803](https://insights.sbomify.com/CVE-2020-25803/): Improper Control of Dynamically-Managed Code Resources in Crafter CMS Crafter Studio (medium 4.2)
- [CVE-2020-25802](https://insights.sbomify.com/CVE-2020-25802/): Authenticated attackers with developer privileges in Crafter Studio may execute OS commands via Groovy scripting. (medium 4.2)
- [CVE-2020-2580](https://insights.sbomify.com/CVE-2020-2580/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2020-25799](https://insights.sbomify.com/CVE-2020-25799/): Cross-site scripting in limesurvey:limesurvey (medium 5.4)
- [CVE-2020-25798](https://insights.sbomify.com/CVE-2020-25798/): Cross-site scripting in limesurvey:limesurvey (medium 5.4)
- [CVE-2020-25797](https://insights.sbomify.com/CVE-2020-25797/): Cross-site scripting in limesurvey:limesurvey (medium 5.4)
- [CVE-2020-25796](https://insights.sbomify.com/CVE-2020-25796/): Memory corruption in sized-chunks project:sized-chunks (high 7.5)
- [CVE-2020-25795](https://insights.sbomify.com/CVE-2020-25795/): Memory corruption in sized-chunks project:sized-chunks (high 7.5)
- [CVE-2020-25794](https://insights.sbomify.com/CVE-2020-25794/): Memory corruption in sized-chunks project:sized-chunks (high 7.5)
- [CVE-2020-25793](https://insights.sbomify.com/CVE-2020-25793/): Memory corruption in sized-chunks project:sized-chunks (high 7.5)
- [CVE-2020-25792](https://insights.sbomify.com/CVE-2020-25792/): Memory corruption in sized-chunks project:sized-chunks (high 7.5)
- [CVE-2020-25791](https://insights.sbomify.com/CVE-2020-25791/): Memory corruption in sized-chunks project:sized-chunks (high 7.5)
- [CVE-2020-25790](https://insights.sbomify.com/CVE-2020-25790/): File upload in typesettercms:typesetter (high 7.2)
- [CVE-2020-2579](https://insights.sbomify.com/CVE-2020-2579/): Denial of service in MySQL Server (medium 6.5)
- [CVE-2020-25789](https://insights.sbomify.com/CVE-2020-25789/): Cross-site scripting in tt-rss:tiny tiny rss (medium 6.1)
- [CVE-2020-25788](https://insights.sbomify.com/CVE-2020-25788/): Other in tt-rss:tiny tiny rss (high 8.1)
- [CVE-2020-25787](https://insights.sbomify.com/CVE-2020-25787/): Server-side request forgery in tt-rss:tiny tiny rss (critical 9.8)
- [CVE-2020-25786](https://insights.sbomify.com/CVE-2020-25786/): Cross-site scripting in dlink:dir-645 firmware (medium 6.1)
- [CVE-2020-25785](https://insights.sbomify.com/CVE-2020-25785/): Memory corruption in accfly:720p firmware (critical 9.8)
- [CVE-2020-25784](https://insights.sbomify.com/CVE-2020-25784/): Memory corruption in accfly:720p firmware (critical 9.8)
- [CVE-2020-25783](https://insights.sbomify.com/CVE-2020-25783/): Memory corruption in accfly:720p firmware (critical 9.8)
- [CVE-2020-25782](https://insights.sbomify.com/CVE-2020-25782/): Memory corruption in accfly:720p firmware (critical 9.8)
- [CVE-2020-25781](https://insights.sbomify.com/CVE-2020-25781/): MantisBT unauthorized users able to access private files (medium 4.3)
- [CVE-2020-25780](https://insights.sbomify.com/CVE-2020-25780/): Path traversal in commvault:commcell (high 7.5)
- [CVE-2020-2578](https://insights.sbomify.com/CVE-2020-2578/): Denial of service in Solaris Operating System (medium 5.8)
- [CVE-2020-25779](https://insights.sbomify.com/CVE-2020-25779/): Security feature bypass in Trend Micro Antivirus for Mac (Consumer) (low 3.3)
- [CVE-2020-25778](https://insights.sbomify.com/CVE-2020-25778/): Information disclosure in Trend Micro Antivirus for Mac (Consumer) (medium 6.0)
- [CVE-2020-25777](https://insights.sbomify.com/CVE-2020-25777/): Security feature bypass in Trend Micro Antivirus for Mac (Consumer) (medium 5.4)
- [CVE-2020-25776](https://insights.sbomify.com/CVE-2020-25776/): Privilege escalation in Trend Micro Antivirus for Mac (Consumer) (high 7.8)
- [CVE-2020-25775](https://insights.sbomify.com/CVE-2020-25775/): Race condition in Trend Micro Security (Consumer) (medium 6.3)
- [CVE-2020-25774](https://insights.sbomify.com/CVE-2020-25774/): Memory corruption in Trend Micro Apex One (medium 4.3)
- [CVE-2020-25773](https://insights.sbomify.com/CVE-2020-25773/): Memory corruption in Trend Micro Apex One (high 7.8)
- [CVE-2020-25772](https://insights.sbomify.com/CVE-2020-25772/): Information disclosure in Trend Micro Apex One (medium 5.5)
- [CVE-2020-25771](https://insights.sbomify.com/CVE-2020-25771/): Information disclosure in Trend Micro Apex One (medium 5.5)
- [CVE-2020-25770](https://insights.sbomify.com/CVE-2020-25770/): Information disclosure in Trend Micro Apex One (medium 5.5)
- [CVE-2020-2577](https://insights.sbomify.com/CVE-2020-2577/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2020-25768](https://insights.sbomify.com/CVE-2020-25768/): Contao Insert tag injection in forms (medium 5.3)
- [CVE-2020-25767](https://insights.sbomify.com/CVE-2020-25767/): Memory corruption in hcc-embedded:nichestack ipv4 (high 7.5)
- [CVE-2020-25766](https://insights.sbomify.com/CVE-2020-25766/): Cross-site request forgery in misp-project:misp (high 7.5)
- [CVE-2020-25765](https://insights.sbomify.com/CVE-2020-25765/): Command injection in westerndigital:my cloud firmware (critical 9.8)
- [CVE-2020-25763](https://insights.sbomify.com/CVE-2020-25763/): File upload in seat reservation system project:seat reservation system (critical 9.8)
- [CVE-2020-25762](https://insights.sbomify.com/CVE-2020-25762/): SQL injection in seat reservation system project:seat reservation system (critical 9.1)
- [CVE-2020-25761](https://insights.sbomify.com/CVE-2020-25761/): Cross-site scripting in projectworlds:visitor management system (medium 6.1)
- [CVE-2020-25760](https://insights.sbomify.com/CVE-2020-25760/): SQL injection in projectworlds:visitor management system (high 8.8)
- [CVE-2020-2576](https://insights.sbomify.com/CVE-2020-2576/): Other in Outside In Technology (medium 6.5)
- [CVE-2020-25759](https://insights.sbomify.com/CVE-2020-25759/): Command injection in dlink:dsr-1000 firmware (high 8.8)
- [CVE-2020-25758](https://insights.sbomify.com/CVE-2020-25758/): Code injection in dlink:dsr-1000 firmware (high 8.8)
- [CVE-2020-25757](https://insights.sbomify.com/CVE-2020-25757/): Command injection in dlink:dsr-1000 firmware (high 8.8)
- [CVE-2020-25756](https://insights.sbomify.com/CVE-2020-25756/): Memory corruption in cesanta:mongoose (critical 9.8)
- [CVE-2020-25755](https://insights.sbomify.com/CVE-2020-25755/): Command injection in enphase:envoy firmware (high 8.8)
- [CVE-2020-25754](https://insights.sbomify.com/CVE-2020-25754/): Auth bypass in enphase:envoy firmware (high 7.5)
- [CVE-2020-25753](https://insights.sbomify.com/CVE-2020-25753/): Hardcoded credentials in enphase:envoy firmware (critical 9.8)
- [CVE-2020-25752](https://insights.sbomify.com/CVE-2020-25752/): Hardcoded credentials in enphase:envoy firmware (medium 5.3)
- [CVE-2020-25751](https://insights.sbomify.com/CVE-2020-25751/): SQL injection in corephp:pago commerce (high 8.8)
- [CVE-2020-25750](https://insights.sbomify.com/CVE-2020-25750/): DotPlant2 Improper Restriction of XML External Entity Reference (high 7.5)
- [CVE-2020-2575](https://insights.sbomify.com/CVE-2020-2575/): Other in VM VirtualBox (high 7.5)
- [CVE-2020-25749](https://insights.sbomify.com/CVE-2020-25749/): Hardcoded credentials in rubetek:rv-3406 firmware (critical 9.8)
- [CVE-2020-25748](https://insights.sbomify.com/CVE-2020-25748/): Weak cryptography in rubetek:rv-3406 firmware (high 8.1)
- [CVE-2020-25747](https://insights.sbomify.com/CVE-2020-25747/): Auth bypass in rubetek:rv-3406 firmware (critical 9.4)
- [CVE-2020-25746](https://insights.sbomify.com/CVE-2020-25746/): Information disclosure in resourcexpress:qubi3 firmware (medium 4.6)
- [CVE-2020-25744](https://insights.sbomify.com/CVE-2020-25744/): Other in safervpn:safervpn (high 8.1)
- [CVE-2020-25743](https://insights.sbomify.com/CVE-2020-25743/): Null dereference in qemu:qemu (low 3.2)
- [CVE-2020-25742](https://insights.sbomify.com/CVE-2020-25742/): Null dereference in qemu:qemu (low 3.2)
- [CVE-2020-25741](https://insights.sbomify.com/CVE-2020-25741/): Null dereference in qemu:qemu (low 3.2)
- [CVE-2020-2574](https://insights.sbomify.com/CVE-2020-2574/): Denial of service in MySQL Server (medium 5.9)
- [CVE-2020-25739](https://insights.sbomify.com/CVE-2020-25739/): Gon gem lack of escaping certain input when outputting as JSON (medium 6.1)
- [CVE-2020-25738](https://insights.sbomify.com/CVE-2020-25738/): Security feature bypass in cyberark:endpoint privilege manager (medium 5.5)
- [CVE-2020-25737](https://insights.sbomify.com/CVE-2020-25737/): Privilege escalation in hackolade:hackolade (high 7.8)
- [CVE-2020-25736](https://insights.sbomify.com/CVE-2020-25736/): Privilege escalation in acronis:true image (high 7.8)
- [CVE-2020-25735](https://insights.sbomify.com/CVE-2020-25735/): Cross-site scripting in webtareas project:webtareas (medium 6.1)
- [CVE-2020-25734](https://insights.sbomify.com/CVE-2020-25734/): Information disclosure in webtareas project:webtareas (medium 5.3)
- [CVE-2020-25733](https://insights.sbomify.com/CVE-2020-25733/): File upload in webtareas project:webtareas (high 7.5)
- [CVE-2020-25730](https://insights.sbomify.com/CVE-2020-25730/): Cross-site scripting in zoneminder:zoneminder (high 8.2)
- [CVE-2020-2573](https://insights.sbomify.com/CVE-2020-2573/): Denial of service in MySQL Server (medium 5.9)
- [CVE-2020-25729](https://insights.sbomify.com/CVE-2020-25729/): Cross-site scripting in zoneminder:zoneminder (medium 6.1)
- [CVE-2020-25728](https://insights.sbomify.com/CVE-2020-25728/): Weak cryptography in alfresco:reset password (high 8.8)
- [CVE-2020-25727](https://insights.sbomify.com/CVE-2020-25727/): SQL injection in flexsolution:reset password (high 7.5)
- [CVE-2020-25725](https://insights.sbomify.com/CVE-2020-25725/): Use after free in xpdf (medium 5.0)
- [CVE-2020-25724](https://insights.sbomify.com/CVE-2020-25724/): Unsynchronized Access to Shared Data in a Multithreaded Context in RESTEasy (medium 4.3)
- [CVE-2020-25723](https://insights.sbomify.com/CVE-2020-25723/): Denial of service in QEMU (low 3.2)
- [CVE-2020-25722](https://insights.sbomify.com/CVE-2020-25722/): Missing authorization in samba (high 8.8)
- [CVE-2020-25721](https://insights.sbomify.com/CVE-2020-25721/): Information disclosure in samba (high 8.8)
- [CVE-2020-25720](https://insights.sbomify.com/CVE-2020-25720/): Samba: check attribute access rights for ldap adds of computers (high 7.5)
- [CVE-2020-2572](https://insights.sbomify.com/CVE-2020-2572/): Other in MySQL Server (low 2.7)
- [CVE-2020-25719](https://insights.sbomify.com/CVE-2020-25719/): Auth bypass in samba (high 7.2)
- [CVE-2020-25718](https://insights.sbomify.com/CVE-2020-25718/): Missing authorization in samba (high 8.8)
- [CVE-2020-25717](https://insights.sbomify.com/CVE-2020-25717/): Privilege escalation in samba (high 8.1)
- [CVE-2020-25716](https://insights.sbomify.com/CVE-2020-25716/): Privilege escalation in Cloudforms (high 8.1)
- [CVE-2020-25715](https://insights.sbomify.com/CVE-2020-25715/): Cross-site scripting in pki-core (medium 6.1)
- [CVE-2020-25713](https://insights.sbomify.com/CVE-2020-25713/): Memory corruption in raptor2 (medium 6.5)
- [CVE-2020-25712](https://insights.sbomify.com/CVE-2020-25712/): Memory corruption in xorg-x11-server (high 7.8)
- [CVE-2020-25711](https://insights.sbomify.com/CVE-2020-25711/): Improper Access Control in infinispan-server-runtime (medium 6.5)
- [CVE-2020-25710](https://insights.sbomify.com/CVE-2020-25710/): Denial of service in openldap (high 7.5)
- [CVE-2020-2571](https://insights.sbomify.com/CVE-2020-2571/): Other in LDOMS (low 3.3)
- [CVE-2020-25709](https://insights.sbomify.com/CVE-2020-25709/): Denial of service in OpenLDAP (high 7.5)
- [CVE-2020-25708](https://insights.sbomify.com/CVE-2020-25708/): Denial of service in libvncserver (high 7.5)
- [CVE-2020-25706](https://insights.sbomify.com/CVE-2020-25706/): Cross-site scripting in cacti (medium 5.4)
- [CVE-2020-25705](https://insights.sbomify.com/CVE-2020-25705/): Weak cryptography in Siemens Lunux Based Products (high 7.4)
- [CVE-2020-25704](https://insights.sbomify.com/CVE-2020-25704/): Denial of service in kernel (medium 5.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/113/