# Vulnerabilities published in 2020


- [CVE-2020-2541](https://insights.sbomify.com/CVE-2020-2541/): Other in Outside In Technology (medium 6.5)
- [CVE-2020-25409](https://insights.sbomify.com/CVE-2020-25409/): SQL injection in college management system project:college management system (critical 9.8)
- [CVE-2020-25408](https://insights.sbomify.com/CVE-2020-25408/): Cross-site request forgery in college management system project:college management system (medium 6.5)
- [CVE-2020-25406](https://insights.sbomify.com/CVE-2020-25406/): File upload in lemocms:lemocms (high 7.3)
- [CVE-2020-25400](https://insights.sbomify.com/CVE-2020-25400/): Misconfiguration in taskcafe project:taskcafe (high 7.5)
- [CVE-2020-2540](https://insights.sbomify.com/CVE-2020-2540/): Other in Outside In Technology (medium 6.5)
- [CVE-2020-25399](https://insights.sbomify.com/CVE-2020-25399/): Cross-site scripting in mind:imind server (high 7.8)
- [CVE-2020-25398](https://insights.sbomify.com/CVE-2020-25398/): Code injection in mind:imind server (high 8.8)
- [CVE-2020-25394](https://insights.sbomify.com/CVE-2020-25394/): Cross-site scripting in mozilo:mozilocms (medium 5.4)
- [CVE-2020-25392](https://insights.sbomify.com/CVE-2020-25392/): Cross-site scripting in cszcms:csz cms (medium 5.4)
- [CVE-2020-25391](https://insights.sbomify.com/CVE-2020-25391/): Cross-site scripting in cszcms:csz cms (medium 5.4)
- [CVE-2020-2539](https://insights.sbomify.com/CVE-2020-2539/): Cross-site scripting in WebCenter Sites (medium 6.1)
- [CVE-2020-25385](https://insights.sbomify.com/CVE-2020-25385/): Cross-site scripting in nagios:log server (medium 6.1)
- [CVE-2020-25380](https://insights.sbomify.com/CVE-2020-25380/): Cross-site scripting in recall-products project:recall-products (medium 5.4)
- [CVE-2020-2538](https://insights.sbomify.com/CVE-2020-2538/): Cross-site scripting in WebCenter Sites (high 7.1)
- [CVE-2020-25379](https://insights.sbomify.com/CVE-2020-25379/): SQL injection in recall-products project:recall-products (high 8.8)
- [CVE-2020-25378](https://insights.sbomify.com/CVE-2020-25378/): Cross-site scripting in accesspressthemes:wp floating menu (medium 6.1)
- [CVE-2020-25375](https://insights.sbomify.com/CVE-2020-25375/): Cross-site scripting in softrade:wp smart crm \& invoices (medium 5.4)
- [CVE-2020-25374](https://insights.sbomify.com/CVE-2020-25374/): Information disclosure in cyberark:privileged session manager (low 2.6)
- [CVE-2020-2537](https://insights.sbomify.com/CVE-2020-2537/): Cross-site scripting in Oracle Business Intelligence Enterprise Edition (high 7.1)
- [CVE-2020-25368](https://insights.sbomify.com/CVE-2020-25368/): Command injection in dlink:dir-823g firmware (critical 9.8)
- [CVE-2020-25367](https://insights.sbomify.com/CVE-2020-25367/): Command injection in dlink:dir-823g firmware (critical 9.8)
- [CVE-2020-25366](https://insights.sbomify.com/CVE-2020-25366/): Missing authorization in dlink:dir-823g firmware (critical 9.1)
- [CVE-2020-25362](https://insights.sbomify.com/CVE-2020-25362/): SQL injection in online shopping alphaware project:online shopping alphaware (high 7.5)
- [CVE-2020-2536](https://insights.sbomify.com/CVE-2020-2536/): Other in Outside In Technology (medium 5.4)
- [CVE-2020-25359](https://insights.sbomify.com/CVE-2020-25359/): Path traversal in rconfig:rconfig (critical 9.1)
- [CVE-2020-25353](https://insights.sbomify.com/CVE-2020-25353/): Server-side request forgery in rconfig:rconfig (medium 6.5)
- [CVE-2020-25352](https://insights.sbomify.com/CVE-2020-25352/): Cross-site scripting in rconfig:rconfig (medium 5.4)
- [CVE-2020-25351](https://insights.sbomify.com/CVE-2020-25351/): Information disclosure in rconfig:rconfig (medium 6.5)
- [CVE-2020-2535](https://insights.sbomify.com/CVE-2020-2535/): Other in Oracle Business Intelligence Enterprise Edition (medium 4.7)
- [CVE-2020-25343](https://insights.sbomify.com/CVE-2020-25343/): Cross-site scripting in getsymphony:symphony (medium 5.4)
- [CVE-2020-25340](https://insights.sbomify.com/CVE-2020-25340/): NFStream Local Denial of Service (DoS) (medium 5.5)
- [CVE-2020-2534](https://insights.sbomify.com/CVE-2020-2534/): Other in Reports Developer (medium 6.1)
- [CVE-2020-2533](https://insights.sbomify.com/CVE-2020-2533/): Other in Reports Developer (medium 6.1)
- [CVE-2020-2531](https://insights.sbomify.com/CVE-2020-2531/): Other in Oracle Business Intelligence Enterprise Edition (low 3.1)
- [CVE-2020-2530](https://insights.sbomify.com/CVE-2020-2530/): Cross-site scripting in HTTP Server (medium 6.1)
- [CVE-2020-25291](https://insights.sbomify.com/CVE-2020-25291/): Memory corruption in kingsoft:wps office (high 7.8)
- [CVE-2020-25289](https://insights.sbomify.com/CVE-2020-25289/): Privilege escalation in avast:secureline vpn (medium 5.5)
- [CVE-2020-25288](https://insights.sbomify.com/CVE-2020-25288/): MantisBT XXS where a Custom Field with a crafted Regular Expression property is used (medium 4.8)
- [CVE-2020-25287](https://insights.sbomify.com/CVE-2020-25287/): File upload in pligg project:pligg (high 7.2)
- [CVE-2020-25286](https://insights.sbomify.com/CVE-2020-25286/): Information disclosure in wordpress:wordpress (medium 5.3)
- [CVE-2020-25285](https://insights.sbomify.com/CVE-2020-25285/): Race condition in canonical:ubuntu linux (medium 6.4)
- [CVE-2020-25284](https://insights.sbomify.com/CVE-2020-25284/): Missing authorization in debian:debian linux (medium 4.1)
- [CVE-2020-25283](https://insights.sbomify.com/CVE-2020-25283/): Missing authorization in google:android (critical 9.8)
- [CVE-2020-25282](https://insights.sbomify.com/CVE-2020-25282/): Missing authorization in google:android (critical 9.8)
- [CVE-2020-25281](https://insights.sbomify.com/CVE-2020-25281/): Security feature bypass in google:android (high 7.5)
- [CVE-2020-25280](https://insights.sbomify.com/CVE-2020-25280/): Auth bypass in google:android (medium 6.8)
- [CVE-2020-25279](https://insights.sbomify.com/CVE-2020-25279/): Memory corruption in google:android (critical 9.8)
- [CVE-2020-25278](https://insights.sbomify.com/CVE-2020-25278/): Memory corruption in google:android (critical 9.8)
- [CVE-2020-25276](https://insights.sbomify.com/CVE-2020-25276/): Security feature bypass in primekey:ejbca (high 7.3)
- [CVE-2020-25275](https://insights.sbomify.com/CVE-2020-25275/): Denial of service in debian:debian linux (high 7.5)
- [CVE-2020-25273](https://insights.sbomify.com/CVE-2020-25273/): SQL injection in online bus booking system project:online bus booking system (critical 9.8)
- [CVE-2020-25272](https://insights.sbomify.com/CVE-2020-25272/): Cross-site scripting in online bus booking system project:online bus booking system (medium 6.1)
- [CVE-2020-25271](https://insights.sbomify.com/CVE-2020-25271/): Cross-site scripting in phpgurukul:hospital management system (medium 5.4)
- [CVE-2020-25270](https://insights.sbomify.com/CVE-2020-25270/): Cross-site scripting in phpgurukul:hostel management system (medium 5.4)
- [CVE-2020-2527](https://insights.sbomify.com/CVE-2020-2527/): Other in Oracle Database (medium 4.1)
- [CVE-2020-25269](https://insights.sbomify.com/CVE-2020-25269/): Use after free in debian:debian linux (medium 6.5)
- [CVE-2020-25268](https://insights.sbomify.com/CVE-2020-25268/): Command injection in ilias:ilias (high 8.8)
- [CVE-2020-25267](https://insights.sbomify.com/CVE-2020-25267/): Cross-site scripting in ilias:ilias (medium 5.4)
- [CVE-2020-25266](https://insights.sbomify.com/CVE-2020-25266/): Security feature bypass in appimage:appimaged (medium 5.5)
- [CVE-2020-25265](https://insights.sbomify.com/CVE-2020-25265/): Path traversal in appimage:libappimage (medium 6.5)
- [CVE-2020-25263](https://insights.sbomify.com/CVE-2020-25263/): PyroCMS Vulnerable to CSRF (high 7.1)
- [CVE-2020-25262](https://insights.sbomify.com/CVE-2020-25262/): PyroCMS Vulnerable to CSRF (medium 4.3)
- [CVE-2020-25260](https://insights.sbomify.com/CVE-2020-25260/): Deserialization in hyland:onbase (critical 9.8)
- [CVE-2020-25259](https://insights.sbomify.com/CVE-2020-25259/): Deserialization in hyland:onbase (critical 9.8)
- [CVE-2020-25258](https://insights.sbomify.com/CVE-2020-25258/): Deserialization in hyland:onbase (critical 9.8)
- [CVE-2020-25257](https://insights.sbomify.com/CVE-2020-25257/): XML external entity in hyland:onbase (critical 9.8)
- [CVE-2020-25256](https://insights.sbomify.com/CVE-2020-25256/): Hardcoded credentials in hyland:onbase (critical 9.1)
- [CVE-2020-25255](https://insights.sbomify.com/CVE-2020-25255/): Denial of service in hyland:onbase (high 7.5)
- [CVE-2020-25254](https://insights.sbomify.com/CVE-2020-25254/): SQL injection in hyland:onbase (critical 9.8)
- [CVE-2020-25253](https://insights.sbomify.com/CVE-2020-25253/): SQL injection in hyland:onbase (critical 9.8)
- [CVE-2020-25252](https://insights.sbomify.com/CVE-2020-25252/): Cross-site request forgery in hyland:onbase (high 8.8)
- [CVE-2020-25251](https://insights.sbomify.com/CVE-2020-25251/): Auth bypass in hyland:onbase (critical 9.1)
- [CVE-2020-25250](https://insights.sbomify.com/CVE-2020-25250/): Other in hyland:onbase (high 7.5)
- [CVE-2020-25249](https://insights.sbomify.com/CVE-2020-25249/): Other in hyland:onbase (medium 5.3)
- [CVE-2020-25248](https://insights.sbomify.com/CVE-2020-25248/): Path traversal in hyland:onbase (high 7.5)
- [CVE-2020-25247](https://insights.sbomify.com/CVE-2020-25247/): Path traversal in hyland:onbase (high 7.5)
- [CVE-2020-25245](https://insights.sbomify.com/CVE-2020-25245/): Misconfiguration in DIGSI 4 (high 7.8)
- [CVE-2020-25244](https://insights.sbomify.com/CVE-2020-25244/): Other in LOGO! Soft Comfort (high 8.4)
- [CVE-2020-25243](https://insights.sbomify.com/CVE-2020-25243/): Path traversal in LOGO! Soft Comfort (medium 5.1)
- [CVE-2020-25242](https://insights.sbomify.com/CVE-2020-25242/): Denial of service in SIMATIC NET CP 343-1 Advanced (incl. SIPLUS variants) (high 7.5)
- [CVE-2020-25241](https://insights.sbomify.com/CVE-2020-25241/): Other in SIMATIC MV400 family (high 7.5)
- [CVE-2020-25240](https://insights.sbomify.com/CVE-2020-25240/): Missing authorization in SINEMA Remote Connect Server (high 8.8)
- [CVE-2020-2524](https://insights.sbomify.com/CVE-2020-2524/): Denial of service in Knowledge (medium 5.9)
- [CVE-2020-25239](https://insights.sbomify.com/CVE-2020-25239/): Missing authorization in SINEMA Remote Connect Server (high 8.8)
- [CVE-2020-25238](https://insights.sbomify.com/CVE-2020-25238/): Privilege escalation in PCS neo (Administration Console) (high 7.8)
- [CVE-2020-25237](https://insights.sbomify.com/CVE-2020-25237/): Path traversal in SINEC NMS (high 8.1)
- [CVE-2020-25236](https://insights.sbomify.com/CVE-2020-25236/): Denial of service in LOGO! 12/24RCE (medium 5.5)
- [CVE-2020-25235](https://insights.sbomify.com/CVE-2020-25235/): Weak cryptography in LOGO! 8 BM (incl. SIPLUS variants) (high 7.5)
- [CVE-2020-25234](https://insights.sbomify.com/CVE-2020-25234/): Weak cryptography in LOGO! 8 BM (incl. SIPLUS variants) (high 7.7)
- [CVE-2020-25233](https://insights.sbomify.com/CVE-2020-25233/): Hardcoded credentials in LOGO! 8 BM (incl. SIPLUS variants) (medium 5.5)
- [CVE-2020-25232](https://insights.sbomify.com/CVE-2020-25232/): Weak cryptography in LOGO! 8 BM (incl. SIPLUS variants) (high 7.5)
- [CVE-2020-25231](https://insights.sbomify.com/CVE-2020-25231/): Hardcoded credentials in LOGO! 8 BM (incl. SIPLUS variants) (medium 5.5)
- [CVE-2020-25230](https://insights.sbomify.com/CVE-2020-25230/): Weak cryptography in LOGO! 8 BM (incl. SIPLUS variants) (high 7.5)
- [CVE-2020-25229](https://insights.sbomify.com/CVE-2020-25229/): Weak cryptography in LOGO! 8 BM (incl. SIPLUS variants) (high 7.5)
- [CVE-2020-25228](https://insights.sbomify.com/CVE-2020-25228/): Missing authorization in LOGO! 8 BM (incl. SIPLUS variants) (critical 9.8)
- [CVE-2020-25226](https://insights.sbomify.com/CVE-2020-25226/): Memory corruption in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (critical 9.8)
- [CVE-2020-25223](https://insights.sbomify.com/CVE-2020-25223/): Sophos SG UTM Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2020-25221](https://insights.sbomify.com/CVE-2020-25221/): Privilege escalation in linux:linux kernel (high 7.8)
- [CVE-2020-25220](https://insights.sbomify.com/CVE-2020-25220/): Use after free in linux:linux kernel (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/116/