# Vulnerabilities published in 2020


- [CVE-2020-24061](https://insights.sbomify.com/CVE-2020-24061/): Cross-site scripting in kasdanet:kw5515 firmware (medium 5.4)
- [CVE-2020-24057](https://insights.sbomify.com/CVE-2020-24057/): Command injection in verint:s5120fd firmware (high 8.8)
- [CVE-2020-24056](https://insights.sbomify.com/CVE-2020-24056/): Hardcoded credentials in verint:4320 firmware (high 7.5)
- [CVE-2020-24055](https://insights.sbomify.com/CVE-2020-24055/): Memory corruption in verint:4320 firmware (critical 9.8)
- [CVE-2020-24054](https://insights.sbomify.com/CVE-2020-24054/): Command injection in moog:exvf5c-2 firmware (critical 9.8)
- [CVE-2020-24053](https://insights.sbomify.com/CVE-2020-24053/): Hardcoded credentials in moog:exvf5c-2 firmware (high 7.5)
- [CVE-2020-24052](https://insights.sbomify.com/CVE-2020-24052/): XML external entity in moog:exvf5c-2 firmware (critical 9.1)
- [CVE-2020-24051](https://insights.sbomify.com/CVE-2020-24051/): Auth bypass in moog:exvf5c-2 firmware (critical 9.8)
- [CVE-2020-24046](https://insights.sbomify.com/CVE-2020-24046/): Privilege escalation in titanhq:spamtitan (high 7.2)
- [CVE-2020-24045](https://insights.sbomify.com/CVE-2020-24045/): Security feature bypass in titanhq:spamtitan (high 7.2)
- [CVE-2020-24038](https://insights.sbomify.com/CVE-2020-24038/): Information disclosure in eram:myfax150 firmware (medium 6.5)
- [CVE-2020-24036](https://insights.sbomify.com/CVE-2020-24036/): Deserialization in fork-cms:fork cms (high 8.8)
- [CVE-2020-24034](https://insights.sbomify.com/CVE-2020-24034/): Deserialization in sagemcom:f\@st 5280 router firmware (high 8.8)
- [CVE-2020-24033](https://insights.sbomify.com/CVE-2020-24033/): Cross-site request forgery in fs:s3900 24t4s firmware (high 8.8)
- [CVE-2020-24032](https://insights.sbomify.com/CVE-2020-24032/): Command injection in xorux:lpar2rrd (critical 9.8)
- [CVE-2020-24030](https://insights.sbomify.com/CVE-2020-24030/): Auth bypass in forlogic:qualiex (critical 9.8)
- [CVE-2020-24029](https://insights.sbomify.com/CVE-2020-24029/): Auth bypass in forlogic:qualiex (critical 9.8)
- [CVE-2020-24028](https://insights.sbomify.com/CVE-2020-24028/): Privilege escalation in forlogic:qualiex (high 8.8)
- [CVE-2020-24027](https://insights.sbomify.com/CVE-2020-24027/): Memory corruption in live555:liblivemedia (critical 9.8)
- [CVE-2020-24026](https://insights.sbomify.com/CVE-2020-24026/): Cross-site scripting in tinyshop project:tinyshop (medium 6.1)
- [CVE-2020-24025](https://insights.sbomify.com/CVE-2020-24025/): Improper Certificate Validation in node-sass (medium 5.3)
- [CVE-2020-24020](https://insights.sbomify.com/CVE-2020-24020/): Memory corruption in ffmpeg:ffmpeg (high 8.8)
- [CVE-2020-24008](https://insights.sbomify.com/CVE-2020-24008/): Information disclosure in umanni:human resources (medium 5.3)
- [CVE-2020-24007](https://insights.sbomify.com/CVE-2020-24007/): Auth bypass in umanni:human resources (critical 9.8)
- [CVE-2020-24003](https://insights.sbomify.com/CVE-2020-24003/): Misconfiguration in microsoft:skype (low 3.3)
- [CVE-2020-24000](https://insights.sbomify.com/CVE-2020-24000/): SQL injection in eyoucms:eyoucms (critical 9.8)
- [CVE-2020-23996](https://insights.sbomify.com/CVE-2020-23996/): Path traversal in ilias:ilias (high 8.8)
- [CVE-2020-23995](https://insights.sbomify.com/CVE-2020-23995/): Information disclosure in ilias:ilias (medium 6.5)
- [CVE-2020-23992](https://insights.sbomify.com/CVE-2020-23992/): Cross-site scripting in nagios:nagios xi (medium 6.1)
- [CVE-2020-23989](https://insights.sbomify.com/CVE-2020-23989/): NeDi 1.9C allows pwsec.php oid XSS. (medium 5.4)
- [CVE-2020-23986](https://insights.sbomify.com/CVE-2020-23986/): Cross-site scripting in github readme stats project:github readme stats (medium 6.1)
- [CVE-2020-23984](https://insights.sbomify.com/CVE-2020-23984/): Cross-site scripting in online hotel booking system pro project:online hotel booking system pro (medium 5.4)
- [CVE-2020-23983](https://insights.sbomify.com/CVE-2020-23983/): Cross-site scripting in ichat project:ichat (medium 5.4)
- [CVE-2020-23982](https://insights.sbomify.com/CVE-2020-23982/): Cross-site scripting in designmasterevents:conference management cms (medium 6.1)
- [CVE-2020-23981](https://insights.sbomify.com/CVE-2020-23981/): Cross-site scripting in 13enforme:13enforme cms (medium 6.1)
- [CVE-2020-23980](https://insights.sbomify.com/CVE-2020-23980/): SQL injection in designmasterevents:conference management (critical 9.8)
- [CVE-2020-23979](https://insights.sbomify.com/CVE-2020-23979/): SQL injection in 13enforme:13enforme cms (critical 9.8)
- [CVE-2020-23978](https://insights.sbomify.com/CVE-2020-23978/): SQL injection in soluzioneglobale:ecommerce cms (critical 9.8)
- [CVE-2020-23977](https://insights.sbomify.com/CVE-2020-23977/): Cross-site scripting in kandnconcepts club cms project:kandnconcepts club cms (medium 6.1)
- [CVE-2020-23976](https://insights.sbomify.com/CVE-2020-23976/): SQL injection in webexcels:ecommerce cms (critical 9.8)
- [CVE-2020-23975](https://insights.sbomify.com/CVE-2020-23975/): Cross-site scripting in webexcels:ecommerce cms (medium 6.1)
- [CVE-2020-23974](https://insights.sbomify.com/CVE-2020-23974/): Cross-site scripting in create-project manager project:create-project manager (medium 5.4)
- [CVE-2020-23973](https://insights.sbomify.com/CVE-2020-23973/): SQL injection in kandnconcepts club cms project:kandnconcepts club cms (critical 9.8)
- [CVE-2020-23972](https://insights.sbomify.com/CVE-2020-23972/): File upload in gmapfp:gmapfp (high 7.5)
- [CVE-2020-23971](https://insights.sbomify.com/CVE-2020-23971/): File upload in gmapfp:gmapfp (high 7.5)
- [CVE-2020-23968](https://insights.sbomify.com/CVE-2020-23968/): Privilege escalation in ilex:international sign\&go (high 7.8)
- [CVE-2020-23967](https://insights.sbomify.com/CVE-2020-23967/): Privilege escalation in drweb:security space (high 7.8)
- [CVE-2020-23966](https://insights.sbomify.com/CVE-2020-23966/): SQL injection in victor cms project:victor cms (critical 9.8)
- [CVE-2020-23962](https://insights.sbomify.com/CVE-2020-23962/): Cross-site scripting in catfish-cms:catfish cms (medium 6.1)
- [CVE-2020-23960](https://insights.sbomify.com/CVE-2020-23960/): Cross-Site Request Forgery in ForkCMS (high 8.8)
- [CVE-2020-23957](https://insights.sbomify.com/CVE-2020-23957/): Cross-site scripting in pega:pega platform (medium 6.1)
- [CVE-2020-23945](https://insights.sbomify.com/CVE-2020-23945/): SQL injection in victor cms project:victor cms (high 7.5)
- [CVE-2020-23936](https://insights.sbomify.com/CVE-2020-23936/): SQL injection in phpgurukul:vehicle parking management system (critical 9.8)
- [CVE-2020-23935](https://insights.sbomify.com/CVE-2020-23935/): SQL injection in kabir-m-alhasan:student management system (critical 9.8)
- [CVE-2020-23934](https://insights.sbomify.com/CVE-2020-23934/): File upload in ritecms:ritecms (high 8.8)
- [CVE-2020-23932](https://insights.sbomify.com/CVE-2020-23932/): Null dereference in gpac:gpac (medium 5.5)
- [CVE-2020-23931](https://insights.sbomify.com/CVE-2020-23931/): Memory corruption in gpac:gpac (high 7.1)
- [CVE-2020-23930](https://insights.sbomify.com/CVE-2020-23930/): Null dereference in gpac:gpac (medium 5.5)
- [CVE-2020-23928](https://insights.sbomify.com/CVE-2020-23928/): Memory corruption in gpac:gpac (high 7.1)
- [CVE-2020-23922](https://insights.sbomify.com/CVE-2020-23922/): Memory corruption in apache:bookkeeper (high 7.1)
- [CVE-2020-23921](https://insights.sbomify.com/CVE-2020-23921/): Memory corruption in fast ber project:fast ber (high 7.1)
- [CVE-2020-23915](https://insights.sbomify.com/CVE-2020-23915/): Memory corruption in cpp-peglib project:cpp-peglib (medium 5.5)
- [CVE-2020-23914](https://insights.sbomify.com/CVE-2020-23914/): Null dereference in cpp-peglib project:cpp-peglib (medium 5.5)
- [CVE-2020-23912](https://insights.sbomify.com/CVE-2020-23912/): Null dereference in axiosys:bento4 (medium 5.5)
- [CVE-2020-23911](https://insights.sbomify.com/CVE-2020-23911/): Null dereference in asn1c project:asn1c (medium 5.5)
- [CVE-2020-23910](https://insights.sbomify.com/CVE-2020-23910/): Memory corruption in asn1c project:asn1c (medium 5.5)
- [CVE-2020-23909](https://insights.sbomify.com/CVE-2020-23909/): Memory corruption in advancemame:advancemame (high 7.1)
- [CVE-2020-23907](https://insights.sbomify.com/CVE-2020-23907/): Memory corruption in avast:retdec (critical 9.8)
- [CVE-2020-23906](https://insights.sbomify.com/CVE-2020-23906/): Denial of service in ffmpeg:ffmpeg (medium 5.5)
- [CVE-2020-23904](https://insights.sbomify.com/CVE-2020-23904/): Memory corruption in xiph:speex (medium 5.5)
- [CVE-2020-23903](https://insights.sbomify.com/CVE-2020-23903/): Denial of service in fedoraproject:fedora (medium 5.5)
- [CVE-2020-23902](https://insights.sbomify.com/CVE-2020-23902/): Memory corruption in wildbit-soft:wildbit viewer (medium 5.5)
- [CVE-2020-23901](https://insights.sbomify.com/CVE-2020-23901/): Memory corruption in wildbit-soft:wildbit viewer (medium 5.5)
- [CVE-2020-23900](https://insights.sbomify.com/CVE-2020-23900/): Memory corruption in wildbit-soft:wildbit viewer (medium 5.5)
- [CVE-2020-23899](https://insights.sbomify.com/CVE-2020-23899/): Memory corruption in wildbit-soft:wildbit viewer (medium 5.5)
- [CVE-2020-23898](https://insights.sbomify.com/CVE-2020-23898/): Memory corruption in wildbit-soft:wildbit viewer (medium 5.5)
- [CVE-2020-23897](https://insights.sbomify.com/CVE-2020-23897/): Memory corruption in wildbit-soft:wildbit viewer (medium 5.5)
- [CVE-2020-23896](https://insights.sbomify.com/CVE-2020-23896/): Memory corruption in wildbit-soft:wildbit viewer (medium 5.5)
- [CVE-2020-23895](https://insights.sbomify.com/CVE-2020-23895/): Memory corruption in wildbit-soft:wildbit viewer (medium 5.5)
- [CVE-2020-23894](https://insights.sbomify.com/CVE-2020-23894/): Memory corruption in wildbit-soft:wildbit viewer (medium 5.5)
- [CVE-2020-23893](https://insights.sbomify.com/CVE-2020-23893/): Memory corruption in wildbit-soft:wildbit viewer (medium 5.5)
- [CVE-2020-23891](https://insights.sbomify.com/CVE-2020-23891/): Memory corruption in wildbit-soft:wildbit viewer (medium 5.5)
- [CVE-2020-23890](https://insights.sbomify.com/CVE-2020-23890/): Memory corruption in wildbit-soft:wildbit viewer (medium 5.5)
- [CVE-2020-23889](https://insights.sbomify.com/CVE-2020-23889/): Memory corruption in wildbit-soft:wildbit viewer (medium 5.5)
- [CVE-2020-23888](https://insights.sbomify.com/CVE-2020-23888/): Memory corruption in wildbit-soft:wildbit viewer (medium 5.5)
- [CVE-2020-23887](https://insights.sbomify.com/CVE-2020-23887/): Memory corruption in xnview:xnview mp (medium 5.5)
- [CVE-2020-23886](https://insights.sbomify.com/CVE-2020-23886/): Memory corruption in xnview:xnview mp (medium 5.5)
- [CVE-2020-23884](https://insights.sbomify.com/CVE-2020-23884/): Memory corruption in nomacs:nomacs (medium 5.5)
- [CVE-2020-23879](https://insights.sbomify.com/CVE-2020-23879/): Null dereference in flowpaper:pdf2json (high 7.5)
- [CVE-2020-23878](https://insights.sbomify.com/CVE-2020-23878/): Memory corruption in flowpaper:pdf2json (critical 9.8)
- [CVE-2020-23877](https://insights.sbomify.com/CVE-2020-23877/): Memory corruption in science-miner:pdf2xml (critical 9.8)
- [CVE-2020-23876](https://insights.sbomify.com/CVE-2020-23876/): Denial of service in science-miner:pdf2xml (high 7.5)
- [CVE-2020-23874](https://insights.sbomify.com/CVE-2020-23874/): Memory corruption in science-miner:pdf2xml (critical 9.8)
- [CVE-2020-23873](https://insights.sbomify.com/CVE-2020-23873/): Memory corruption in science-miner:pdf2xml (critical 9.8)
- [CVE-2020-23872](https://insights.sbomify.com/CVE-2020-23872/): Null dereference in science-miner:pdf2xml (high 7.5)
- [CVE-2020-23868](https://insights.sbomify.com/CVE-2020-23868/): NeDi 1.9C allows inc/rt-popup.php d XSS. (medium 5.4)
- [CVE-2020-23864](https://insights.sbomify.com/CVE-2020-23864/): Privilege escalation in iobit:malware fighter (high 7.8)
- [CVE-2020-23861](https://insights.sbomify.com/CVE-2020-23861/): Memory corruption in gnu:libredwg (medium 5.5)
- [CVE-2020-23856](https://insights.sbomify.com/CVE-2020-23856/): Use after free in fedoraproject:fedora (medium 5.5)
- [CVE-2020-23852](https://insights.sbomify.com/CVE-2020-23852/): Memory corruption in rockcarry:ffjpeg (medium 5.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/124/