# Vulnerabilities published in 2020


- [CVE-2020-25703](https://insights.sbomify.com/CVE-2020-25703/): Exposure of Sensitive Information to an Unauthorized Actor in Moodle (medium 5.3)
- [CVE-2020-25702](https://insights.sbomify.com/CVE-2020-25702/): Cross-site Scripting (XSS) in moodle (medium 6.1)
- [CVE-2020-25701](https://insights.sbomify.com/CVE-2020-25701/): Privilage Escalation in moodle (medium 5.3)
- [CVE-2020-25700](https://insights.sbomify.com/CVE-2020-25700/): SQL Injection in moodle (medium 6.5)
- [CVE-2020-2570](https://insights.sbomify.com/CVE-2020-2570/): Denial of service in MySQL Server (medium 5.9)
- [CVE-2020-25699](https://insights.sbomify.com/CVE-2020-25699/): Privilage Escalation in moodle (high 7.5)
- [CVE-2020-25698](https://insights.sbomify.com/CVE-2020-25698/): Improper Access Control in moodle (high 7.5)
- [CVE-2020-25697](https://insights.sbomify.com/CVE-2020-25697/): Auth bypass in xorg-x11-server (high 7.0)
- [CVE-2020-25696](https://insights.sbomify.com/CVE-2020-25696/): Incorrect Comparison, Permissive List of Allowed Inputs, and Privilege Context Switching Error in PostgreSQL (high 7.5)
- [CVE-2020-25695](https://insights.sbomify.com/CVE-2020-25695/): SQL Injection (high 8.8)
- [CVE-2020-25694](https://insights.sbomify.com/CVE-2020-25694/): Use of a Broken or Risky Cryptographic Algorithm in PostgreSQL (high 8.1)
- [CVE-2020-25693](https://insights.sbomify.com/CVE-2020-25693/): Integer overflow in CImg (high 8.1)
- [CVE-2020-25692](https://insights.sbomify.com/CVE-2020-25692/): Null dereference in openldap (high 7.5)
- [CVE-2020-25691](https://insights.sbomify.com/CVE-2020-25691/): Denial of service in darkhttpd (high 7.5)
- [CVE-2020-25690](https://insights.sbomify.com/CVE-2020-25690/): Memory corruption in fontforge (high 8.8)
- [CVE-2020-2569](https://insights.sbomify.com/CVE-2020-2569/): Other in PL/SQL (low 3.9)
- [CVE-2020-25689](https://insights.sbomify.com/CVE-2020-25689/): Uncontrolled Resource Consumption in WildFly (medium 5.3)
- [CVE-2020-25688](https://insights.sbomify.com/CVE-2020-25688/): Hardcoded credentials in rhacm (low 3.5)
- [CVE-2020-25687](https://insights.sbomify.com/CVE-2020-25687/): Memory corruption in dnsmasq (medium 5.9)
- [CVE-2020-25686](https://insights.sbomify.com/CVE-2020-25686/): Security feature bypass in dnsmasq (low 3.7)
- [CVE-2020-25685](https://insights.sbomify.com/CVE-2020-25685/): Weak cryptography in dnsmasq (low 3.7)
- [CVE-2020-25684](https://insights.sbomify.com/CVE-2020-25684/): Security feature bypass in dnsmasq (low 3.7)
- [CVE-2020-25683](https://insights.sbomify.com/CVE-2020-25683/): Memory corruption in dnsmasq (medium 5.9)
- [CVE-2020-25682](https://insights.sbomify.com/CVE-2020-25682/): Memory corruption in dnsmasq (high 8.1)
- [CVE-2020-25681](https://insights.sbomify.com/CVE-2020-25681/): Memory corruption in dnsmasq (high 8.1)
- [CVE-2020-25680](https://insights.sbomify.com/CVE-2020-25680/): Security feature bypass in JBCS httpd (medium 5.4)
- [CVE-2020-2568](https://insights.sbomify.com/CVE-2020-2568/): Other in Oracle Database (low 3.9)
- [CVE-2020-25678](https://insights.sbomify.com/CVE-2020-25678/): Information disclosure in ceph (medium 4.4)
- [CVE-2020-25677](https://insights.sbomify.com/CVE-2020-25677/): Misconfiguration in ceph-ansible (medium 5.5)
- [CVE-2020-25676](https://insights.sbomify.com/CVE-2020-25676/): Integer overflow in ImageMagick (medium 5.5)
- [CVE-2020-25675](https://insights.sbomify.com/CVE-2020-25675/): Integer overflow in ImageMagick (low 3.3)
- [CVE-2020-25674](https://insights.sbomify.com/CVE-2020-25674/): Memory corruption in ImageMagick (medium 5.5)
- [CVE-2020-25673](https://insights.sbomify.com/CVE-2020-25673/): Denial of service in Linux Kernel (medium 5.5)
- [CVE-2020-25672](https://insights.sbomify.com/CVE-2020-25672/): Denial of service in Linux Kernel (high 7.5)
- [CVE-2020-25671](https://insights.sbomify.com/CVE-2020-25671/): Use after free in Linux Kernel (high 7.8)
- [CVE-2020-25670](https://insights.sbomify.com/CVE-2020-25670/): Use after free in Linux Kernel (high 7.8)
- [CVE-2020-2567](https://insights.sbomify.com/CVE-2020-2567/): Other in Retail Customer Management and Segmentation Foundation (medium 4.8)
- [CVE-2020-25669](https://insights.sbomify.com/CVE-2020-25669/): Use after free in Linux Kernel (high 7.8)
- [CVE-2020-25668](https://insights.sbomify.com/CVE-2020-25668/): Use after free in Linux Kernel (high 7.0)
- [CVE-2020-25667](https://insights.sbomify.com/CVE-2020-25667/): Memory corruption in ImageMagick (medium 5.5)
- [CVE-2020-25666](https://insights.sbomify.com/CVE-2020-25666/): Integer overflow in ImageMagick (low 3.3)
- [CVE-2020-25665](https://insights.sbomify.com/CVE-2020-25665/): Memory corruption in ImageMagick (medium 5.5)
- [CVE-2020-25664](https://insights.sbomify.com/CVE-2020-25664/): Memory corruption in ImageMagick (medium 6.1)
- [CVE-2020-25663](https://insights.sbomify.com/CVE-2020-25663/): Use after free in ImageMagick (medium 5.5)
- [CVE-2020-25662](https://insights.sbomify.com/CVE-2020-25662/): Information disclosure in kernel (medium 5.3)
- [CVE-2020-25661](https://insights.sbomify.com/CVE-2020-25661/): Memory corruption in kernel (high 7.5)
- [CVE-2020-25660](https://insights.sbomify.com/CVE-2020-25660/): Auth bypass in ceph (high 8.8)
- [CVE-2020-2566](https://insights.sbomify.com/CVE-2020-2566/): Other in Applications Framework (medium 4.7)
- [CVE-2020-25659](https://insights.sbomify.com/CVE-2020-25659/): RSA decryption vulnerable to Bleichenbacher timing vulnerability (medium 5.9)
- [CVE-2020-25658](https://insights.sbomify.com/CVE-2020-25658/): Timing attacks in python-rsa (high 7.5)
- [CVE-2020-25657](https://insights.sbomify.com/CVE-2020-25657/): Weak cryptography in m2crypto (medium 5.9)
- [CVE-2020-25656](https://insights.sbomify.com/CVE-2020-25656/): Use after free in kernel (medium 4.1)
- [CVE-2020-25655](https://insights.sbomify.com/CVE-2020-25655/): Information disclosure in open-cluster-management (medium 5.7)
- [CVE-2020-25654](https://insights.sbomify.com/CVE-2020-25654/): Security feature bypass in pacemaker (high 7.2)
- [CVE-2020-25653](https://insights.sbomify.com/CVE-2020-25653/): Race condition in spice-vdagent (medium 6.3)
- [CVE-2020-25652](https://insights.sbomify.com/CVE-2020-25652/): Denial of service in spice-vdagent (medium 5.5)
- [CVE-2020-25651](https://insights.sbomify.com/CVE-2020-25651/): Race condition in spice-vdagent (medium 6.4)
- [CVE-2020-25650](https://insights.sbomify.com/CVE-2020-25650/): Denial of service in spice-vdagent (medium 5.5)
- [CVE-2020-2565](https://insights.sbomify.com/CVE-2020-2565/): Other in Solaris Operating System (high 7.5)
- [CVE-2020-25649](https://insights.sbomify.com/CVE-2020-25649/): XML External Entity (XXE) Injection in Jackson Databind (high 7.5)
- [CVE-2020-25648](https://insights.sbomify.com/CVE-2020-25648/): Denial of service in nss (high 7.5)
- [CVE-2020-25647](https://insights.sbomify.com/CVE-2020-25647/): Memory corruption in grub2 (high 7.6)
- [CVE-2020-25646](https://insights.sbomify.com/CVE-2020-25646/): Information disclosure in Community Collections (high 7.5)
- [CVE-2020-25645](https://insights.sbomify.com/CVE-2020-25645/): Information disclosure in kernel (high 7.5)
- [CVE-2020-25644](https://insights.sbomify.com/CVE-2020-25644/): Wildfly-OpenSSL memory leak flaw (high 7.5)
- [CVE-2020-25643](https://insights.sbomify.com/CVE-2020-25643/): Memory corruption in kernel (high 7.2)
- [CVE-2020-25641](https://insights.sbomify.com/CVE-2020-25641/): Denial of service in kernel (medium 5.5)
- [CVE-2020-25640](https://insights.sbomify.com/CVE-2020-25640/): Wildfly logs plaintext passwords (medium 5.3)
- [CVE-2020-2564](https://insights.sbomify.com/CVE-2020-2564/): Information disclosure in Siebel UI Framework (medium 5.3)
- [CVE-2020-25639](https://insights.sbomify.com/CVE-2020-25639/): Null dereference in kernel (medium 4.4)
- [CVE-2020-25638](https://insights.sbomify.com/CVE-2020-25638/): SQL injection in hibernate-core (high 7.4)
- [CVE-2020-25637](https://insights.sbomify.com/CVE-2020-25637/): Memory corruption in libvirt (medium 6.7)
- [CVE-2020-25636](https://insights.sbomify.com/CVE-2020-25636/): Race condition in Community Collections (medium 6.6)
- [CVE-2020-25635](https://insights.sbomify.com/CVE-2020-25635/): Ansible does not collect garbage after playbook run (medium 5.0)
- [CVE-2020-25634](https://insights.sbomify.com/CVE-2020-25634/): Missing authorization in 3scale-system (medium 5.4)
- [CVE-2020-25633](https://insights.sbomify.com/CVE-2020-25633/): Generation of Error Message Containing Sensitive Information in RESTEasy client (medium 5.3)
- [CVE-2020-25632](https://insights.sbomify.com/CVE-2020-25632/): Use after free in grub2 (high 8.2)
- [CVE-2020-25631](https://insights.sbomify.com/CVE-2020-25631/): Moodle Cross-site Scripting (XSS) (medium 6.1)
- [CVE-2020-25630](https://insights.sbomify.com/CVE-2020-25630/): Moodle Denial of Service (high 7.5)
- [CVE-2020-2563](https://insights.sbomify.com/CVE-2020-2563/): Other in Hyperion Financial Close Management (medium 4.2)
- [CVE-2020-25629](https://insights.sbomify.com/CVE-2020-25629/): Moodle incorrect access control (high 8.8)
- [CVE-2020-25628](https://insights.sbomify.com/CVE-2020-25628/): Cross site-scripting (XSS) moodle (medium 6.1)
- [CVE-2020-25627](https://insights.sbomify.com/CVE-2020-25627/): Moodle stored Cross-site Scripting (XSS) (medium 6.1)
- [CVE-2020-25626](https://insights.sbomify.com/CVE-2020-25626/): Cross-site Scripting (XSS) in Django REST Framework (medium 6.1)
- [CVE-2020-25625](https://insights.sbomify.com/CVE-2020-25625/): Denial of service in debian:debian linux (medium 5.3)
- [CVE-2020-25624](https://insights.sbomify.com/CVE-2020-25624/): Memory corruption in debian:debian linux (medium 5.0)
- [CVE-2020-25623](https://insights.sbomify.com/CVE-2020-25623/): Path traversal in erlang:erlang\/otp (high 7.5)
- [CVE-2020-25622](https://insights.sbomify.com/CVE-2020-25622/): Cross-site request forgery in solarwinds:n-central (high 8.8)
- [CVE-2020-25621](https://insights.sbomify.com/CVE-2020-25621/): Missing authorization in solarwinds:n-central (high 8.4)
- [CVE-2020-25620](https://insights.sbomify.com/CVE-2020-25620/): Hardcoded credentials in solarwinds:n-central (high 7.8)
- [CVE-2020-2562](https://insights.sbomify.com/CVE-2020-2562/): Cross-site scripting in Primavera Portfolio Management (medium 6.1)
- [CVE-2020-25619](https://insights.sbomify.com/CVE-2020-25619/): Security feature bypass in solarwinds:n-central (medium 4.4)
- [CVE-2020-25618](https://insights.sbomify.com/CVE-2020-25618/): Misconfiguration in solarwinds:n-central (high 8.8)
- [CVE-2020-25617](https://insights.sbomify.com/CVE-2020-25617/): Path traversal in solarwinds:n-central (high 8.8)
- [CVE-2020-25614](https://insights.sbomify.com/CVE-2020-25614/): xmlquery lacks check for whether LoadURL response is in XML format, causing denial of service (critical 9.8)
- [CVE-2020-25613](https://insights.sbomify.com/CVE-2020-25613/): WEBRick vulnerable to HTTP Request/Response Smuggling (high 7.5)
- [CVE-2020-25612](https://insights.sbomify.com/CVE-2020-25612/): Missing authorization in mitel:micollab (medium 4.9)
- [CVE-2020-25611](https://insights.sbomify.com/CVE-2020-25611/): Cross-site scripting in mitel:micollab (medium 6.1)
- [CVE-2020-25610](https://insights.sbomify.com/CVE-2020-25610/): Missing authorization in mitel:micollab (medium 5.3)
- [CVE-2020-2561](https://insights.sbomify.com/CVE-2020-2561/): Information disclosure in PeopleSoft Enterprise HCM Human Resources (medium 4.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/114/