# Vulnerabilities published in 2020


- [CVE-2020-25609](https://insights.sbomify.com/CVE-2020-25609/): Cross-site scripting in mitel:micollab (medium 5.4)
- [CVE-2020-25608](https://insights.sbomify.com/CVE-2020-25608/): SQL injection in mitel:micollab (high 7.2)
- [CVE-2020-25606](https://insights.sbomify.com/CVE-2020-25606/): Cross-site scripting in mitel:micollab (medium 6.1)
- [CVE-2020-25605](https://insights.sbomify.com/CVE-2020-25605/): Information disclosure in agora:video software development kit (medium 5.9)
- [CVE-2020-25604](https://insights.sbomify.com/CVE-2020-25604/): Race condition in debian:debian linux (medium 4.7)
- [CVE-2020-25603](https://insights.sbomify.com/CVE-2020-25603/): Race condition in debian:debian linux (high 7.8)
- [CVE-2020-25602](https://insights.sbomify.com/CVE-2020-25602/): Denial of service in debian:debian linux (medium 6.0)
- [CVE-2020-25601](https://insights.sbomify.com/CVE-2020-25601/): Denial of service in debian:debian linux (medium 5.5)
- [CVE-2020-25600](https://insights.sbomify.com/CVE-2020-25600/): Memory corruption in debian:debian linux (medium 5.5)
- [CVE-2020-2560](https://insights.sbomify.com/CVE-2020-2560/): Other in Siebel UI Framework (medium 4.7)
- [CVE-2020-25599](https://insights.sbomify.com/CVE-2020-25599/): Race condition in debian:debian linux (high 7.0)
- [CVE-2020-25598](https://insights.sbomify.com/CVE-2020-25598/): Denial of service in fedoraproject:fedora (medium 5.5)
- [CVE-2020-25597](https://insights.sbomify.com/CVE-2020-25597/): Denial of service in fedoraproject:fedora (medium 6.5)
- [CVE-2020-25596](https://insights.sbomify.com/CVE-2020-25596/): Denial of service in debian:debian linux (medium 5.5)
- [CVE-2020-25595](https://insights.sbomify.com/CVE-2020-25595/): Privilege escalation in debian:debian linux (high 7.8)
- [CVE-2020-25594](https://insights.sbomify.com/CVE-2020-25594/): Information disclosure in hashicorp:vault (medium 5.3)
- [CVE-2020-25593](https://insights.sbomify.com/CVE-2020-25593/): Privilege escalation in acronis:true image (medium 6.7)
- [CVE-2020-25592](https://insights.sbomify.com/CVE-2020-25592/): SaltStack Salt Improper Validation of eauth credentials and tokens in salt-netapi (critical 9.8)
- [CVE-2020-2559](https://insights.sbomify.com/CVE-2020-2559/): Information disclosure in Siebel UI Framework (medium 5.3)
- [CVE-2020-25584](https://insights.sbomify.com/CVE-2020-25584/): Race condition in FreeBSD (high 7.5)
- [CVE-2020-25583](https://insights.sbomify.com/CVE-2020-25583/): Memory corruption in FreeBSD (critical 9.8)
- [CVE-2020-25582](https://insights.sbomify.com/CVE-2020-25582/): Race condition in FreeBSD (high 8.7)
- [CVE-2020-25581](https://insights.sbomify.com/CVE-2020-25581/): Race condition in FreeBSD (high 7.5)
- [CVE-2020-25580](https://insights.sbomify.com/CVE-2020-25580/): Security feature bypass in FreeBSD (medium 5.3)
- [CVE-2020-2558](https://insights.sbomify.com/CVE-2020-2558/): Denial of service in Solaris Operating System (medium 5.8)
- [CVE-2020-25579](https://insights.sbomify.com/CVE-2020-25579/): Information disclosure in FreeBSD (medium 5.3)
- [CVE-2020-25578](https://insights.sbomify.com/CVE-2020-25578/): Information disclosure in FreeBSD (medium 5.3)
- [CVE-2020-25577](https://insights.sbomify.com/CVE-2020-25577/): Memory corruption in FreeBSD (critical 9.8)
- [CVE-2020-25576](https://insights.sbomify.com/CVE-2020-25576/): Unaligned memory access in rand_core (critical 9.8)
- [CVE-2020-25575](https://insights.sbomify.com/CVE-2020-25575/): Memory corruption in failure project:failure (critical 9.8)
- [CVE-2020-25574](https://insights.sbomify.com/CVE-2020-25574/): Integer Overflow/Infinite Loop in the http crate (high 7.5)
- [CVE-2020-25573](https://insights.sbomify.com/CVE-2020-25573/): Access of Uninitialized Pointer in linked-hash-map (critical 9.8)
- [CVE-2020-2557](https://insights.sbomify.com/CVE-2020-2557/): Other in Demantra Demand Management (medium 4.7)
- [CVE-2020-25566](https://insights.sbomify.com/CVE-2020-25566/): Auth bypass in sapphireims:sapphireims (critical 9.8)
- [CVE-2020-25565](https://insights.sbomify.com/CVE-2020-25565/): Hardcoded credentials in sapphireims:sapphireims (critical 9.8)
- [CVE-2020-25564](https://insights.sbomify.com/CVE-2020-25564/): Privilege escalation in sapphireims:sapphireims (high 8.8)
- [CVE-2020-25563](https://insights.sbomify.com/CVE-2020-25563/): Auth bypass in sapphireims:sapphireims (critical 9.8)
- [CVE-2020-25562](https://insights.sbomify.com/CVE-2020-25562/): Cross-site request forgery in sapphireims:sapphireims (medium 6.5)
- [CVE-2020-25561](https://insights.sbomify.com/CVE-2020-25561/): Hardcoded credentials in sapphireims:sapphireims (high 7.8)
- [CVE-2020-25560](https://insights.sbomify.com/CVE-2020-25560/): Hardcoded credentials in sapphireims:sapphireims (critical 9.8)
- [CVE-2020-2556](https://insights.sbomify.com/CVE-2020-2556/): Other in Primavera P6 Professional Project Management (high 7.3)
- [CVE-2020-25559](https://insights.sbomify.com/CVE-2020-25559/): Memory corruption in gnuplot:gnuplot (high 7.8)
- [CVE-2020-25557](https://insights.sbomify.com/CVE-2020-25557/): Code injection in cmsuno project:cmsuno (high 8.8)
- [CVE-2020-2555](https://insights.sbomify.com/CVE-2020-2555/): Oracle Multiple Products Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2020-25540](https://insights.sbomify.com/CVE-2020-25540/): ThinkAdmin directory traversal vulnerability (high 7.5)
- [CVE-2020-25538](https://insights.sbomify.com/CVE-2020-25538/): Code injection in cmsuno project:cmsuno (high 8.8)
- [CVE-2020-25537](https://insights.sbomify.com/CVE-2020-25537/): File upload in ucms project:ucms (critical 9.8)
- [CVE-2020-25533](https://insights.sbomify.com/CVE-2020-25533/): Race condition in malwarebytes:malwarebytes (high 7.0)
- [CVE-2020-2553](https://insights.sbomify.com/CVE-2020-2553/): Other in Knowledge (medium 4.8)
- [CVE-2020-2552](https://insights.sbomify.com/CVE-2020-2552/): Other in WebLogic Server (medium 4.8)
- [CVE-2020-25516](https://insights.sbomify.com/CVE-2020-25516/): Cross-site scripting in wso2:enterprise integrator (medium 5.4)
- [CVE-2020-25515](https://insights.sbomify.com/CVE-2020-25515/): File upload in simple library management system project:simple library management system (high 7.8)
- [CVE-2020-25514](https://insights.sbomify.com/CVE-2020-25514/): SQL injection in simple library management system project:simple library management system (high 8.4)
- [CVE-2020-2551](https://insights.sbomify.com/CVE-2020-2551/): Oracle Fusion Middleware Unspecified (critical 9.8, exploited in the wild)
- [CVE-2020-25507](https://insights.sbomify.com/CVE-2020-25507/): Misconfiguration in 3ds:teamwork cloud (high 7.8)
- [CVE-2020-25506](https://insights.sbomify.com/CVE-2020-25506/): D-Link DNS-320 Device Command Injection (critical 9.8, exploited in the wild)
- [CVE-2020-25502](https://insights.sbomify.com/CVE-2020-25502/): Privilege escalation in cybereason:endpoint detection and response (high 7.8)
- [CVE-2020-2550](https://insights.sbomify.com/CVE-2020-2550/): Other in WebLogic Server (medium 5.1)
- [CVE-2020-25499](https://insights.sbomify.com/CVE-2020-25499/): Command injection in totolink:a3002r firmware (high 8.8)
- [CVE-2020-25498](https://insights.sbomify.com/CVE-2020-25498/): Cross-site scripting in beetel:777vr1 firmware (medium 4.8)
- [CVE-2020-25495](https://insights.sbomify.com/CVE-2020-25495/): Cross-site scripting in xinuos:openserver (medium 6.1)
- [CVE-2020-25494](https://insights.sbomify.com/CVE-2020-25494/): Command injection in xinuos:openserver (critical 9.8)
- [CVE-2020-25493](https://insights.sbomify.com/CVE-2020-25493/): Weak cryptography in oclean:oclean (high 7.5)
- [CVE-2020-25491](https://insights.sbomify.com/CVE-2020-25491/): Cross-site scripting in 6kare:emakin (medium 6.1)
- [CVE-2020-25490](https://insights.sbomify.com/CVE-2020-25490/): Security feature bypass in sqreen:php microagent (high 7.3)
- [CVE-2020-2549](https://insights.sbomify.com/CVE-2020-2549/): Other in WebLogic Server (high 7.2)
- [CVE-2020-25489](https://insights.sbomify.com/CVE-2020-25489/): Heap Overflow in PyMiniRacer (critical 9.8)
- [CVE-2020-25487](https://insights.sbomify.com/CVE-2020-25487/): SQL injection in phpgurukul:zoo management system (high 7.8)
- [CVE-2020-25483](https://insights.sbomify.com/CVE-2020-25483/): File upload in ucms project:ucms (critical 9.8)
- [CVE-2020-2548](https://insights.sbomify.com/CVE-2020-2548/): Other in WebLogic Server (medium 4.8)
- [CVE-2020-25476](https://insights.sbomify.com/CVE-2020-25476/): Liferay Portal Vulnerable to Cross-Site Scripting (XSS) via User Name Parameter (medium 6.1)
- [CVE-2020-25475](https://insights.sbomify.com/CVE-2020-25475/): SQL injection in newsscriptphp:news script php pro (critical 9.8)
- [CVE-2020-25474](https://insights.sbomify.com/CVE-2020-25474/): Cross-site scripting in newsscriptphp:news script php pro (medium 6.1)
- [CVE-2020-25473](https://insights.sbomify.com/CVE-2020-25473/): Misconfiguration in newsscriptphp:news script php pro (medium 6.5)
- [CVE-2020-25472](https://insights.sbomify.com/CVE-2020-25472/): Cross-site request forgery in newsscriptphp:news script php pro (medium 6.5)
- [CVE-2020-25470](https://insights.sbomify.com/CVE-2020-25470/): Cross-site scripting in antsword project:antsword (medium 6.1)
- [CVE-2020-2547](https://insights.sbomify.com/CVE-2020-2547/): Other in WebLogic Server (medium 4.8)
- [CVE-2020-25467](https://insights.sbomify.com/CVE-2020-25467/): Null dereference in debian:debian linux (medium 5.5)
- [CVE-2020-25466](https://insights.sbomify.com/CVE-2020-25466/): Server-side request forgery in crmeb:crmeb (critical 9.8)
- [CVE-2020-25465](https://insights.sbomify.com/CVE-2020-25465/): Null dereference in moddable:moddable (high 7.5)
- [CVE-2020-25464](https://insights.sbomify.com/CVE-2020-25464/): Memory corruption in moddable:moddable (high 7.5)
- [CVE-2020-25463](https://insights.sbomify.com/CVE-2020-25463/): Memory corruption in moddable:moddable (high 7.5)
- [CVE-2020-25462](https://insights.sbomify.com/CVE-2020-25462/): Memory corruption in moddable:moddable (critical 9.8)
- [CVE-2020-25461](https://insights.sbomify.com/CVE-2020-25461/): Memory corruption in moddable:moddable (high 7.5)
- [CVE-2020-2546](https://insights.sbomify.com/CVE-2020-2546/): Other in WebLogic Server (critical 9.8)
- [CVE-2020-25459](https://insights.sbomify.com/CVE-2020-25459/): Information disclosure in webank:federated ai technology enabler (high 7.5)
- [CVE-2020-25454](https://insights.sbomify.com/CVE-2020-25454/): Cross-site scripting in grocy project:grocy (medium 5.4)
- [CVE-2020-25453](https://insights.sbomify.com/CVE-2020-25453/): Cross-site request forgery in blackcat-cms:blackcat cms (high 8.8)
- [CVE-2020-2545](https://insights.sbomify.com/CVE-2020-2545/): Denial of service in Security Service (medium 5.3)
- [CVE-2020-25449](https://insights.sbomify.com/CVE-2020-25449/): Cabot Cross Site Scripting (XSS) vulnerability via Address column (medium 4.8)
- [CVE-2020-25445](https://insights.sbomify.com/CVE-2020-25445/): Code injection in bookingcore:booking core (high 7.8)
- [CVE-2020-25444](https://insights.sbomify.com/CVE-2020-25444/): Cross-site scripting in bookingcore:booking core (medium 5.4)
- [CVE-2020-2544](https://insights.sbomify.com/CVE-2020-2544/): Other in WebLogic Server (medium 4.3)
- [CVE-2020-2543](https://insights.sbomify.com/CVE-2020-2543/): Other in Outside In Technology (high 7.3)
- [CVE-2020-25427](https://insights.sbomify.com/CVE-2020-25427/): Null dereference in gpac:gpac (medium 5.5)
- [CVE-2020-25422](https://insights.sbomify.com/CVE-2020-25422/): Cross-site scripting in mara cms project:mara cms (medium 5.4)
- [CVE-2020-2542](https://insights.sbomify.com/CVE-2020-2542/): Other in Outside In Technology (medium 6.5)
- [CVE-2020-25414](https://insights.sbomify.com/CVE-2020-25414/): Path traversal in monstra:monstra (critical 9.8)
- [CVE-2020-25412](https://insights.sbomify.com/CVE-2020-25412/): Memory corruption in gnuplot:gnuplot (critical 9.8)
- [CVE-2020-25411](https://insights.sbomify.com/CVE-2020-25411/): Cross-site request forgery in online examination system project:online examination system (medium 6.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/115/