# Vulnerabilities published in 2020 - [CVE-2020-2522](https://insights.sbomify.com/CVE-2020-2522/): Other in Knowledge (medium 4.3) - [CVE-2020-25219](https://insights.sbomify.com/CVE-2020-25219/): Denial of service in canonical:ubuntu linux (high 7.5) - [CVE-2020-25218](https://insights.sbomify.com/CVE-2020-25218/): Auth bypass in grandstream:grp2612 firmware (critical 9.8) - [CVE-2020-25217](https://insights.sbomify.com/CVE-2020-25217/): Command injection in grandstream:grp2612 firmware (high 7.2) - [CVE-2020-25216](https://insights.sbomify.com/CVE-2020-25216/): Code injection in yworks:yed (critical 9.8) - [CVE-2020-25215](https://insights.sbomify.com/CVE-2020-25215/): XML external entity in yworks:yed (critical 9.8) - [CVE-2020-25214](https://insights.sbomify.com/CVE-2020-25214/): Missing authorization in overwolf:overwolf (high 8.1) - [CVE-2020-25213](https://insights.sbomify.com/CVE-2020-25213/): WordPress File Manager Plugin Remote Code Execution (critical 10.0, exploited in the wild) - [CVE-2020-25212](https://insights.sbomify.com/CVE-2020-25212/): Race condition in canonical:ubuntu linux (high 7.0) - [CVE-2020-25211](https://insights.sbomify.com/CVE-2020-25211/): Memory corruption in debian:debian linux (medium 6.0) - [CVE-2020-25210](https://insights.sbomify.com/CVE-2020-25210/): Missing authorization in jetbrains:youtrack (medium 5.3) - [CVE-2020-25209](https://insights.sbomify.com/CVE-2020-25209/): Missing authorization in jetbrains:youtrack (high 7.5) - [CVE-2020-25208](https://insights.sbomify.com/CVE-2020-25208/): Missing authorization in jetbrains:youtrack (medium 5.3) - [CVE-2020-25207](https://insights.sbomify.com/CVE-2020-25207/): Code injection in jetbrains:toolbox (critical 9.8) - [CVE-2020-25206](https://insights.sbomify.com/CVE-2020-25206/): Command injection in mimosa:b5 firmware (high 7.2) - [CVE-2020-25205](https://insights.sbomify.com/CVE-2020-25205/): Cross-site scripting in mimosa:b5 firmware (medium 6.1) - [CVE-2020-25204](https://insights.sbomify.com/CVE-2020-25204/): Missing authorization in innogames:god kings (medium 5.5) - [CVE-2020-25203](https://insights.sbomify.com/CVE-2020-25203/): Missing authorization in framer:framer preview (medium 5.5) - [CVE-2020-25201](https://insights.sbomify.com/CVE-2020-25201/): Denial of service in HashiCorp Consul (high 7.5) - [CVE-2020-25200](https://insights.sbomify.com/CVE-2020-25200/): Information disclosure in pritunl:pritunl (medium 5.3) - [CVE-2020-25199](https://insights.sbomify.com/CVE-2020-25199/): Memory corruption in WECON Technology Co., Ltd LeviStudioU (high 7.8) - [CVE-2020-25198](https://insights.sbomify.com/CVE-2020-25198/): MOXA NPort IAW5000A-I/O Series (high 8.8) - [CVE-2020-25197](https://insights.sbomify.com/CVE-2020-25197/): GE Reason RT43X Clocks Code Injection (critical 9.8) - [CVE-2020-25196](https://insights.sbomify.com/CVE-2020-25196/): MOXA NPort IAW5000A-I/O Series (critical 9.8) - [CVE-2020-25195](https://insights.sbomify.com/CVE-2020-25195/): Denial of service in Host Engineering H0-ECOM100 Module (high 7.5) - [CVE-2020-25194](https://insights.sbomify.com/CVE-2020-25194/): MOXA NPort IAW5000A-I/O Series (high 8.8) - [CVE-2020-25193](https://insights.sbomify.com/CVE-2020-25193/): GE Reason RT43X Clocks Use of Hard-coded Cryptographic Key (medium 5.3) - [CVE-2020-25192](https://insights.sbomify.com/CVE-2020-25192/): MOXA NPort IAW5000A-I/O Series (medium 5.3) - [CVE-2020-25191](https://insights.sbomify.com/CVE-2020-25191/): Missing authorization in CompactRIO (high 7.5) - [CVE-2020-25190](https://insights.sbomify.com/CVE-2020-25190/): MOXA NPort IAW5000A-I/O Series (high 7.5) - [CVE-2020-2519](https://insights.sbomify.com/CVE-2020-2519/): Denial of service in WebLogic Server (medium 4.3) - [CVE-2020-25189](https://insights.sbomify.com/CVE-2020-25189/): Memory corruption in IP150 (critical 9.8) - [CVE-2020-25188](https://insights.sbomify.com/CVE-2020-25188/): Memory corruption in LAquis SCADA (high 7.8) - [CVE-2020-25187](https://insights.sbomify.com/CVE-2020-25187/): Medtronic MyCareLink Smart Heap-based Buffer Overflow (high 8.8) - [CVE-2020-25186](https://insights.sbomify.com/CVE-2020-25186/): XML external entity in WECON Technology Co., Ltd (WECON) LeviStudioU (high 7.5) - [CVE-2020-25185](https://insights.sbomify.com/CVE-2020-25185/): Memory corruption in IP150 (high 8.8) - [CVE-2020-25184](https://insights.sbomify.com/CVE-2020-25184/): Rockwell Automation ISaGRAF5 Runtime Unprotected Storage of Credentials (high 7.8) - [CVE-2020-25183](https://insights.sbomify.com/CVE-2020-25183/): Medtronic MyCareLink Smart Improper Authentication (high 8.0) - [CVE-2020-25182](https://insights.sbomify.com/CVE-2020-25182/): Rockwell Automation ISaGRAF5 Runtime Uncontrolled Search Path Element (medium 6.7) - [CVE-2020-25181](https://insights.sbomify.com/CVE-2020-25181/): Memory corruption in WECON PLC Editor (high 8.8) - [CVE-2020-25180](https://insights.sbomify.com/CVE-2020-25180/): Rockwell Automation ISaGRAF5 Runtime Use of Hard-coded Cryptographic Key (medium 5.3) - [CVE-2020-2518](https://insights.sbomify.com/CVE-2020-2518/): Other in Oracle Database (high 7.5) - [CVE-2020-25179](https://insights.sbomify.com/CVE-2020-25179/): Information disclosure in GE Healthcare Imaging and Ultrasound Products (critical 9.8) - [CVE-2020-25178](https://insights.sbomify.com/CVE-2020-25178/): Rockwell Automation ISaGRAF5 Runtime Cleartext Transmission of Sensitive Information (high 7.5) - [CVE-2020-25177](https://insights.sbomify.com/CVE-2020-25177/): Memory corruption in WECON PLC Editor (high 8.8) - [CVE-2020-25176](https://insights.sbomify.com/CVE-2020-25176/): Rockwell Automation ISaGRAF5 Runtime Relative Path Traversal (critical 9.1) - [CVE-2020-25175](https://insights.sbomify.com/CVE-2020-25175/): Information disclosure in GE Healthcare Imaging and Ultrasound Products (critical 9.8) - [CVE-2020-25174](https://insights.sbomify.com/CVE-2020-25174/): B. Braun OnlineSuite (high 7.8) - [CVE-2020-25173](https://insights.sbomify.com/CVE-2020-25173/): Reolink P2P Cameras (high 7.8) - [CVE-2020-25172](https://insights.sbomify.com/CVE-2020-25172/): B. Braun OnlineSuite (critical 9.8) - [CVE-2020-25171](https://insights.sbomify.com/CVE-2020-25171/): Fuji Electric V-Server Lite (high 7.8) - [CVE-2020-25170](https://insights.sbomify.com/CVE-2020-25170/): B. Braun OnlineSuite (high 7.8) - [CVE-2020-2517](https://insights.sbomify.com/CVE-2020-2517/): Other in Oracle Database (low 3.3) - [CVE-2020-25169](https://insights.sbomify.com/CVE-2020-25169/): Reolink P2P Cameras (high 7.5) - [CVE-2020-25168](https://insights.sbomify.com/CVE-2020-25168/): B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus (low 3.3) - [CVE-2020-25167](https://insights.sbomify.com/CVE-2020-25167/): OSIsoft PI Vision Incorrect Authorization (medium 4.9) - [CVE-2020-25166](https://insights.sbomify.com/CVE-2020-25166/): B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus (high 7.6) - [CVE-2020-25165](https://insights.sbomify.com/CVE-2020-25165/): Auth bypass in BD Alaris PC Unit and BD Alaris Systems Manager (high 7.5) - [CVE-2020-25164](https://insights.sbomify.com/CVE-2020-25164/): B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus (medium 6.5) - [CVE-2020-25163](https://insights.sbomify.com/CVE-2020-25163/): OSIsoft PI Vision Cross-site Scripting (high 7.7) - [CVE-2020-25162](https://insights.sbomify.com/CVE-2020-25162/): B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus (high 7.5) - [CVE-2020-25161](https://insights.sbomify.com/CVE-2020-25161/): Path traversal in Advantech WebAccess/SCADA (high 8.8) - [CVE-2020-25160](https://insights.sbomify.com/CVE-2020-25160/): B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus (medium 6.8) - [CVE-2020-2516](https://insights.sbomify.com/CVE-2020-2516/): Other in Oracle Database (low 2.4) - [CVE-2020-25159](https://insights.sbomify.com/CVE-2020-25159/): Real Time Automation EtherNet/IP (critical 9.8) - [CVE-2020-25158](https://insights.sbomify.com/CVE-2020-25158/): B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus (high 7.6) - [CVE-2020-25157](https://insights.sbomify.com/CVE-2020-25157/): SQL injection in Advantech R-SeeNet (high 7.5) - [CVE-2020-25156](https://insights.sbomify.com/CVE-2020-25156/): B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus (high 7.2) - [CVE-2020-25155](https://insights.sbomify.com/CVE-2020-25155/): Information disclosure in NIO 50 (high 7.5) - [CVE-2020-25154](https://insights.sbomify.com/CVE-2020-25154/): B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus (medium 5.4) - [CVE-2020-25153](https://insights.sbomify.com/CVE-2020-25153/): MOXA NPort IAW5000A-I/O Series (critical 9.8) - [CVE-2020-25152](https://insights.sbomify.com/CVE-2020-25152/): B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus (medium 6.5) - [CVE-2020-25151](https://insights.sbomify.com/CVE-2020-25151/): Denial of service in NIO 50 (high 7.5) - [CVE-2020-25150](https://insights.sbomify.com/CVE-2020-25150/): B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus (high 7.6) - [CVE-2020-2515](https://insights.sbomify.com/CVE-2020-2515/): Other in Oracle Database (medium 5.0) - [CVE-2020-25149](https://insights.sbomify.com/CVE-2020-25149/): Path traversal in observium:observium (high 8.8) - [CVE-2020-25148](https://insights.sbomify.com/CVE-2020-25148/): Cross-site scripting in observium:observium (medium 6.1) - [CVE-2020-25147](https://insights.sbomify.com/CVE-2020-25147/): SQL injection in observium:observium (critical 9.8) - [CVE-2020-25146](https://insights.sbomify.com/CVE-2020-25146/): Cross-site scripting in observium:observium (medium 6.1) - [CVE-2020-25145](https://insights.sbomify.com/CVE-2020-25145/): Path traversal in observium:observium (high 8.8) - [CVE-2020-25144](https://insights.sbomify.com/CVE-2020-25144/): Path traversal in observium:observium (high 8.8) - [CVE-2020-25143](https://insights.sbomify.com/CVE-2020-25143/): SQL injection in observium:observium (high 8.8) - [CVE-2020-25142](https://insights.sbomify.com/CVE-2020-25142/): Cross-site request forgery in observium:observium (medium 6.5) - [CVE-2020-25141](https://insights.sbomify.com/CVE-2020-25141/): Cross-site scripting in observium:observium (medium 6.1) - [CVE-2020-25140](https://insights.sbomify.com/CVE-2020-25140/): Cross-site scripting in observium:observium (medium 6.1) - [CVE-2020-2514](https://insights.sbomify.com/CVE-2020-2514/): Other in Application Express (medium 4.6) - [CVE-2020-25139](https://insights.sbomify.com/CVE-2020-25139/): Cross-site scripting in observium:observium (medium 6.1) - [CVE-2020-25138](https://insights.sbomify.com/CVE-2020-25138/): Cross-site scripting in observium:observium (medium 6.1) - [CVE-2020-25137](https://insights.sbomify.com/CVE-2020-25137/): Cross-site scripting in observium:observium (medium 6.1) - [CVE-2020-25136](https://insights.sbomify.com/CVE-2020-25136/): Path traversal in observium:observium (high 8.8) - [CVE-2020-25135](https://insights.sbomify.com/CVE-2020-25135/): Cross-site scripting in observium:observium (medium 6.1) - [CVE-2020-25134](https://insights.sbomify.com/CVE-2020-25134/): Path traversal in observium:observium (high 8.8) - [CVE-2020-25133](https://insights.sbomify.com/CVE-2020-25133/): Path traversal in observium:observium (high 8.8) - [CVE-2020-25132](https://insights.sbomify.com/CVE-2020-25132/): SQL injection in observium:observium (critical 9.8) - [CVE-2020-25131](https://insights.sbomify.com/CVE-2020-25131/): Cross-site scripting in observium:observium (medium 6.1) - [CVE-2020-25130](https://insights.sbomify.com/CVE-2020-25130/): SQL injection in observium:observium (medium 6.5) - [CVE-2020-2513](https://insights.sbomify.com/CVE-2020-2513/): Cross-site scripting in Application Express (medium 5.4) - [CVE-2020-25125](https://insights.sbomify.com/CVE-2020-25125/): Memory corruption in gnupg:gnupg (high 7.8) - [CVE-2020-25124](https://insights.sbomify.com/CVE-2020-25124/): Cross-site scripting in vbulletin:vbulletin (medium 4.8) - [CVE-2020-25123](https://insights.sbomify.com/CVE-2020-25123/): Cross-site scripting in vbulletin:vbulletin (medium 4.8) --- From sbomify Insights: https://insights.sbomify.com/years/2020/page/117/