# Vulnerabilities published in 2020


- [CVE-2020-24619](https://insights.sbomify.com/CVE-2020-24619/): Security feature bypass in meltytech:shotcut (medium 5.9)
- [CVE-2020-24618](https://insights.sbomify.com/CVE-2020-24618/): Missing authorization in jetbrains:youtrack (medium 6.5)
- [CVE-2020-24617](https://insights.sbomify.com/CVE-2020-24617/): SQL injection in mailtrain:mailtrain (high 8.8)
- [CVE-2020-24616](https://insights.sbomify.com/CVE-2020-24616/): Code Injection in jackson-databind (high 8.1)
- [CVE-2020-24615](https://insights.sbomify.com/CVE-2020-24615/): Denial of service in pexip:pexip infinity (medium 5.3)
- [CVE-2020-24614](https://insights.sbomify.com/CVE-2020-24614/): Missing authorization in fedoraproject:fedora (high 8.8)
- [CVE-2020-24613](https://insights.sbomify.com/CVE-2020-24613/): Security feature bypass in wolfssl:wolfssl (medium 6.8)
- [CVE-2020-24612](https://insights.sbomify.com/CVE-2020-24612/): Auth bypass in fedoraproject:selinux-policy (medium 6.7)
- [CVE-2020-24609](https://insights.sbomify.com/CVE-2020-24609/): Cross-site scripting in techkshetrainfo:savsoft quiz (medium 6.1)
- [CVE-2020-24606](https://insights.sbomify.com/CVE-2020-24606/): Denial of service in canonical:ubuntu linux (high 8.6)
- [CVE-2020-24604](https://insights.sbomify.com/CVE-2020-24604/): Cross-site scripting in igniterealtime:openfire (medium 6.1)
- [CVE-2020-24602](https://insights.sbomify.com/CVE-2020-24602/): Cross-site scripting in igniterealtime:openfire (medium 6.1)
- [CVE-2020-24601](https://insights.sbomify.com/CVE-2020-24601/): Cross-site scripting in igniterealtime:openfire (medium 6.1)
- [CVE-2020-24600](https://insights.sbomify.com/CVE-2020-24600/): SQL injection in capexweb project:capexweb (critical 9.8)
- [CVE-2020-24599](https://insights.sbomify.com/CVE-2020-24599/): Cross-site scripting in joomla:joomla\! (medium 6.1)
- [CVE-2020-24598](https://insights.sbomify.com/CVE-2020-24598/): Open redirect in joomla:joomla\! (medium 6.1)
- [CVE-2020-24595](https://insights.sbomify.com/CVE-2020-24595/): Missing authorization in mitel:micloud management portal (medium 5.3)
- [CVE-2020-24594](https://insights.sbomify.com/CVE-2020-24594/): Cross-site scripting in mitel:micloud management portal (critical 9.6)
- [CVE-2020-24593](https://insights.sbomify.com/CVE-2020-24593/): SQL injection in mitel:micloud management portal (high 7.2)
- [CVE-2020-24592](https://insights.sbomify.com/CVE-2020-24592/): Information disclosure in mitel:micloud management portal (medium 5.3)
- [CVE-2020-24591](https://insights.sbomify.com/CVE-2020-24591/): XML external entity in wso2:api manager (medium 6.5)
- [CVE-2020-24590](https://insights.sbomify.com/CVE-2020-24590/): XML external entity in wso2:api manager (critical 9.1)
- [CVE-2020-24589](https://insights.sbomify.com/CVE-2020-24589/): XML external entity in wso2:api manager (critical 9.1)
- [CVE-2020-24588](https://insights.sbomify.com/CVE-2020-24588/): Security feature bypass in arista:c-100 firmware (low 3.5)
- [CVE-2020-24587](https://insights.sbomify.com/CVE-2020-24587/): Weak cryptography in arista:c-100 firmware (low 2.6)
- [CVE-2020-24586](https://insights.sbomify.com/CVE-2020-24586/): Security feature bypass in arista:c-200 firmware (low 3.5)
- [CVE-2020-24585](https://insights.sbomify.com/CVE-2020-24585/): Security feature bypass in wolfssl:wolfssl (medium 5.3)
- [CVE-2020-24584](https://insights.sbomify.com/CVE-2020-24584/): Django Incorrect Default Permissions (high 7.5)
- [CVE-2020-24583](https://insights.sbomify.com/CVE-2020-24583/): Django Incorrect Default Permissions (high 7.5)
- [CVE-2020-24582](https://insights.sbomify.com/CVE-2020-24582/): Cross-site scripting in zulipchat:zulip desktop (medium 6.1)
- [CVE-2020-24581](https://insights.sbomify.com/CVE-2020-24581/): Command injection in dlink:dsl2888a firmware (high 8.0)
- [CVE-2020-24580](https://insights.sbomify.com/CVE-2020-24580/): Auth bypass in dlink:dsl2888a firmware (high 7.5)
- [CVE-2020-24579](https://insights.sbomify.com/CVE-2020-24579/): Auth bypass in dlink:dsl2888a firmware (high 8.8)
- [CVE-2020-24578](https://insights.sbomify.com/CVE-2020-24578/): Misconfiguration in dlink:dsl2888a firmware (medium 6.5)
- [CVE-2020-24577](https://insights.sbomify.com/CVE-2020-24577/): Information disclosure in dlink:dsl-2888a firmware (high 7.5)
- [CVE-2020-24576](https://insights.sbomify.com/CVE-2020-24576/): Privilege escalation in netskope:netskope (high 8.8)
- [CVE-2020-24574](https://insights.sbomify.com/CVE-2020-24574/): Privilege escalation in gog:galaxy (high 7.8)
- [CVE-2020-24573](https://insights.sbomify.com/CVE-2020-24573/): Denial of service in bab-technologie:eibport firmware (high 7.5)
- [CVE-2020-24572](https://insights.sbomify.com/CVE-2020-24572/): Command injection in raspap:raspap (high 8.8)
- [CVE-2020-24571](https://insights.sbomify.com/CVE-2020-24571/): Path traversal in nexusdb:nexusdb (high 7.5)
- [CVE-2020-24570](https://insights.sbomify.com/CVE-2020-24570/): Cross-site request forgery in mbconnectline:mbconnect24 (medium 6.5)
- [CVE-2020-24569](https://insights.sbomify.com/CVE-2020-24569/): SQL injection in mbconnectline:mbconnect24 (medium 4.3)
- [CVE-2020-24568](https://insights.sbomify.com/CVE-2020-24568/): SQL injection in mbconnectline:mbconnect24 (medium 6.5)
- [CVE-2020-24567](https://insights.sbomify.com/CVE-2020-24567/): Privilege escalation in voidtools:everything (high 7.8)
- [CVE-2020-24566](https://insights.sbomify.com/CVE-2020-24566/): Information disclosure in octopus:octopus deploy (high 7.5)
- [CVE-2020-24565](https://insights.sbomify.com/CVE-2020-24565/): Information disclosure in Trend Micro Apex One (medium 5.5)
- [CVE-2020-24564](https://insights.sbomify.com/CVE-2020-24564/): Information disclosure in Trend Micro Apex One (medium 5.5)
- [CVE-2020-24563](https://insights.sbomify.com/CVE-2020-24563/): Privilege escalation in Trend Micro Apex One (high 7.8)
- [CVE-2020-24562](https://insights.sbomify.com/CVE-2020-24562/): Privilege escalation in Trend Micro OfficeScan (high 7.8)
- [CVE-2020-24561](https://insights.sbomify.com/CVE-2020-24561/): Command injection in Trend Micro ServerProtect for Linux (critical 9.1)
- [CVE-2020-24560](https://insights.sbomify.com/CVE-2020-24560/): Security feature bypass in Trend Micro Security (Consumer) (high 7.5)
- [CVE-2020-24559](https://insights.sbomify.com/CVE-2020-24559/): Privilege escalation in Trend Micro Apex One (high 7.8)
- [CVE-2020-24558](https://insights.sbomify.com/CVE-2020-24558/): Memory corruption in Trend Micro Apex One (high 7.1)
- [CVE-2020-24557](https://insights.sbomify.com/CVE-2020-24557/): Trend Micro Multiple Products Improper Access Control (high 7.8, exploited in the wild)
- [CVE-2020-24556](https://insights.sbomify.com/CVE-2020-24556/): Privilege escalation in Trend Micro Apex One (high 7.8)
- [CVE-2020-24554](https://insights.sbomify.com/CVE-2020-24554/): Open Redirect in Liferay Portal (high 7.5)
- [CVE-2020-24553](https://insights.sbomify.com/CVE-2020-24553/): Cross-site scripting in fedoraproject:fedora (medium 6.1)
- [CVE-2020-24552](https://insights.sbomify.com/CVE-2020-24552/): Atop Technology 3G/4G LTE Cellular to Ethernet and Serial Secure Industrial Gateway - Command Injection (medium 5.5)
- [CVE-2020-24551](https://insights.sbomify.com/CVE-2020-24551/): IProom MMC+ Server - URL Redirection to Untrusted Site (Open Redirect') (medium 6.1)
- [CVE-2020-24550](https://insights.sbomify.com/CVE-2020-24550/): Open redirect in episerver:find (medium 6.1)
- [CVE-2020-24549](https://insights.sbomify.com/CVE-2020-24549/): File upload in openmaint:openmaint (high 8.8)
- [CVE-2020-24548](https://insights.sbomify.com/CVE-2020-24548/): Server-side request forgery in ericom:access server (medium 5.3)
- [CVE-2020-24525](https://insights.sbomify.com/CVE-2020-24525/): Privilege escalation in Intel(R) NUCs (high 7.8)
- [CVE-2020-24516](https://insights.sbomify.com/CVE-2020-24516/): Privilege escalation in Intel(R) CSME versions (medium 6.8)
- [CVE-2020-24515](https://insights.sbomify.com/CVE-2020-24515/): Security feature bypass in Intel(R) RealSense(TM) IDs (medium 6.8)
- [CVE-2020-24514](https://insights.sbomify.com/CVE-2020-24514/): Auth bypass in Intel(R) RealSense(TM) IDs (medium 6.8)
- [CVE-2020-24513](https://insights.sbomify.com/CVE-2020-24513/): Information disclosure in Intel Atom(R) Processors (medium 6.5)
- [CVE-2020-24512](https://insights.sbomify.com/CVE-2020-24512/): Information disclosure in Intel(R) Processors (low 3.3)
- [CVE-2020-24511](https://insights.sbomify.com/CVE-2020-24511/): Information disclosure in Intel(R) Processors (medium 6.5)
- [CVE-2020-24509](https://insights.sbomify.com/CVE-2020-24509/): Privilege escalation in Intel(R) SPS versions (medium 6.7)
- [CVE-2020-24507](https://insights.sbomify.com/CVE-2020-24507/): Information disclosure in Intel(R) CSME versions (medium 4.4)
- [CVE-2020-24506](https://insights.sbomify.com/CVE-2020-24506/): Memory corruption in Intel(R) CSME versions (medium 4.4)
- [CVE-2020-24505](https://insights.sbomify.com/CVE-2020-24505/): Denial of service in Intel(R) 700-series of Ethernet Controllers (medium 4.4)
- [CVE-2020-24504](https://insights.sbomify.com/CVE-2020-24504/): Denial of service in Intel(R) Ethernet E810 Adapter drivers for Linux (medium 5.5)
- [CVE-2020-24503](https://insights.sbomify.com/CVE-2020-24503/): Missing authorization in Intel(R) Ethernet E810 Adapter drivers for Linux (medium 5.5)
- [CVE-2020-24502](https://insights.sbomify.com/CVE-2020-24502/): Denial of service in Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 and (medium 5.5)
- [CVE-2020-24501](https://insights.sbomify.com/CVE-2020-24501/): Memory corruption in Intel(R) E810 Ethernet Controllers (medium 6.5)
- [CVE-2020-24500](https://insights.sbomify.com/CVE-2020-24500/): Memory corruption in Intel(R) E810 Ethernet Controllers (medium 4.4)
- [CVE-2020-24498](https://insights.sbomify.com/CVE-2020-24498/): Memory corruption in Intel(R) E810 Ethernet Controllers (medium 4.4)
- [CVE-2020-24497](https://insights.sbomify.com/CVE-2020-24497/): Missing authorization in Intel(R) E810 Ethernet Controllers (medium 4.4)
- [CVE-2020-24496](https://insights.sbomify.com/CVE-2020-24496/): Denial of service in Intel(R) 722 Ethernet Controllers (medium 4.4)
- [CVE-2020-24495](https://insights.sbomify.com/CVE-2020-24495/): Missing authorization in Intel(R) 700-series of Ethernet Controllers (medium 4.4)
- [CVE-2020-24494](https://insights.sbomify.com/CVE-2020-24494/): Missing authorization in Intel(R) 722 Ethernet Controllers (medium 4.4)
- [CVE-2020-24493](https://insights.sbomify.com/CVE-2020-24493/): Missing authorization in Intel(R) 700-series of Ethernet Controllers (medium 4.4)
- [CVE-2020-24492](https://insights.sbomify.com/CVE-2020-24492/): Missing authorization in Intel(R) 722 Ethernet Controllers (medium 4.4)
- [CVE-2020-24491](https://insights.sbomify.com/CVE-2020-24491/): Information disclosure in Intel(R) 10th Generation Core Processors supporting SGX (medium 4.4)
- [CVE-2020-24490](https://insights.sbomify.com/CVE-2020-24490/): Memory corruption in BlueZ Advisory (medium 6.5)
- [CVE-2020-24489](https://insights.sbomify.com/CVE-2020-24489/): Privilege escalation in Intel(R) VT-d products (high 8.8)
- [CVE-2020-24486](https://insights.sbomify.com/CVE-2020-24486/): Denial of service in Intel(R) Processors (medium 5.5)
- [CVE-2020-24485](https://insights.sbomify.com/CVE-2020-24485/): Privilege escalation in Intel(R) FPGA OPAE Driver for Linux (high 7.8)
- [CVE-2020-24482](https://insights.sbomify.com/CVE-2020-24482/): Memory corruption in Intel(R) 7360 Cell Modem (high 7.5)
- [CVE-2020-24481](https://insights.sbomify.com/CVE-2020-24481/): Privilege escalation in Intel(R) Quartus Prime Pro and Standard edition software (high 7.8)
- [CVE-2020-24480](https://insights.sbomify.com/CVE-2020-24480/): Memory corruption in Intel(R) XTU (medium 4.4)
- [CVE-2020-24475](https://insights.sbomify.com/CVE-2020-24475/): Denial of service in Intel(R) Server Boards, Server Systems and Compute Modules (medium 5.5)
- [CVE-2020-24474](https://insights.sbomify.com/CVE-2020-24474/): Memory corruption in Intel(R) Server Boards, Server Systems and Compute Modules (high 8.0)
- [CVE-2020-24473](https://insights.sbomify.com/CVE-2020-24473/): Memory corruption in Intel(R) Server Boards, Server Systems and Compute Modules (high 7.8)
- [CVE-2020-24462](https://insights.sbomify.com/CVE-2020-24462/): Memory corruption in Intel(R) Graphics Driver (high 7.8)
- [CVE-2020-24460](https://insights.sbomify.com/CVE-2020-24460/): Misconfiguration in Intel(R) DSA (medium 5.5)
- [CVE-2020-24458](https://insights.sbomify.com/CVE-2020-24458/): Other in Intel(R) PROSet/Wireless WiFi and Killer (TM) drivers (medium 5.2)
- [CVE-2020-24457](https://insights.sbomify.com/CVE-2020-24457/): Other in Intel BIOS (high 7.6)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/121/