# Vulnerabilities published in 2020


- [CVE-2020-23851](https://insights.sbomify.com/CVE-2020-23851/): Memory corruption in rockcarry:ffjpeg (medium 5.5)
- [CVE-2020-23849](https://insights.sbomify.com/CVE-2020-23849/): Cross-site Scripting in jsoneditor (medium 6.1)
- [CVE-2020-23839](https://insights.sbomify.com/CVE-2020-23839/): Cross-site scripting in get-simple:getsimple cms (medium 6.1)
- [CVE-2020-23837](https://insights.sbomify.com/CVE-2020-23837/): Cross-site request forgery in multi user project:multi user (high 8.8)
- [CVE-2020-23836](https://insights.sbomify.com/CVE-2020-23836/): Cross-site request forgery in oswapp:warehouse inventory system (high 8.8)
- [CVE-2020-23835](https://insights.sbomify.com/CVE-2020-23835/): Cross-site scripting in tailor management system project:tailor management system (medium 6.4)
- [CVE-2020-23834](https://insights.sbomify.com/CVE-2020-23834/): Privilege escalation in realtimelogic:barracudadrive (high 8.8)
- [CVE-2020-23833](https://insights.sbomify.com/CVE-2020-23833/): SQL injection in projectworlds:house rental (critical 9.8)
- [CVE-2020-23832](https://insights.sbomify.com/CVE-2020-23832/): Cross-site scripting in car rental management system project:car rental management system (medium 6.1)
- [CVE-2020-23831](https://insights.sbomify.com/CVE-2020-23831/): Cross-site scripting in stock management system project:stock management system (medium 6.4)
- [CVE-2020-23830](https://insights.sbomify.com/CVE-2020-23830/): Cross-site request forgery in stock management system project:stock management system (high 7.1)
- [CVE-2020-23829](https://insights.sbomify.com/CVE-2020-23829/): File upload in librehealth:librehealth ehr (high 8.8)
- [CVE-2020-23828](https://insights.sbomify.com/CVE-2020-23828/): File upload in online course registration project:online course registration (critical 9.8)
- [CVE-2020-23826](https://insights.sbomify.com/CVE-2020-23826/): Command injection in assaabloy:yale wipc-303w firmware (high 8.8)
- [CVE-2020-23824](https://insights.sbomify.com/CVE-2020-23824/): Cross-site request forgery in argosoft:mail server (high 8.8)
- [CVE-2020-23814](https://insights.sbomify.com/CVE-2020-23814/): xxl-job Multiple cross-site scripting (XSS) vulnerabilities (medium 6.1)
- [CVE-2020-23811](https://insights.sbomify.com/CVE-2020-23811/): xxl-job sensitive data exposure (high 7.5)
- [CVE-2020-23804](https://insights.sbomify.com/CVE-2020-23804/): Denial of service in debian:debian linux (high 7.5)
- [CVE-2020-23793](https://insights.sbomify.com/CVE-2020-23793/): Missing authorization in spice-space:spice-server (high 8.6)
- [CVE-2020-23790](https://insights.sbomify.com/CVE-2020-23790/): File upload in uxper:golo (critical 9.8)
- [CVE-2020-23776](https://insights.sbomify.com/CVE-2020-23776/): Server-side request forgery in winmail project:winmail (high 7.5)
- [CVE-2020-23774](https://insights.sbomify.com/CVE-2020-23774/): Cross-site scripting in winmail project:winmail (medium 6.1)
- [CVE-2020-23768](https://insights.sbomify.com/CVE-2020-23768/): Information disclosure in phpyun:phpyun (high 7.5)
- [CVE-2020-23766](https://insights.sbomify.com/CVE-2020-23766/): Path traversal in htmly:htmly (medium 6.5)
- [CVE-2020-23765](https://insights.sbomify.com/CVE-2020-23765/): File upload in bludit:bludit (high 7.2)
- [CVE-2020-23763](https://insights.sbomify.com/CVE-2020-23763/): SQL injection in online book store project:online book store (critical 9.8)
- [CVE-2020-23762](https://insights.sbomify.com/CVE-2020-23762/): Cross-site scripting in larsens calendar project:larsens calendar (medium 5.4)
- [CVE-2020-23761](https://insights.sbomify.com/CVE-2020-23761/): subrion CMS Cross Site Scripting (XSS) vulnerability (medium 6.1)
- [CVE-2020-23754](https://insights.sbomify.com/CVE-2020-23754/): Cross-site scripting in php-fusion:phpfusion (critical 9.6)
- [CVE-2020-23741](https://insights.sbomify.com/CVE-2020-23741/): Denial of service in amoisoft:anyview (medium 5.5)
- [CVE-2020-23740](https://insights.sbomify.com/CVE-2020-23740/): Privilege escalation in drivergenius:drivergenius (high 7.8)
- [CVE-2020-23738](https://insights.sbomify.com/CVE-2020-23738/): Denial of service in advancedsystemcare:advanced systemcare (medium 5.5)
- [CVE-2020-23736](https://insights.sbomify.com/CVE-2020-23736/): Denial of service in dadajiasu:dada accelerator (medium 5.5)
- [CVE-2020-23735](https://insights.sbomify.com/CVE-2020-23735/): Privilege escalation in saibo:cyber game accelerator (high 7.8)
- [CVE-2020-23727](https://insights.sbomify.com/CVE-2020-23727/): Denial of service in antiy:antiy zhijia terminal defense system (medium 5.5)
- [CVE-2020-23726](https://insights.sbomify.com/CVE-2020-23726/): Denial of service in wisecleaner:wise care 365 (medium 5.5)
- [CVE-2020-23722](https://insights.sbomify.com/CVE-2020-23722/): Privilege escalation in thedaylightstudio:fuel cms (high 8.8)
- [CVE-2020-23721](https://insights.sbomify.com/CVE-2020-23721/): Cross-site scripting in thedaylightstudio:fuel cms (medium 5.4)
- [CVE-2020-23719](https://insights.sbomify.com/CVE-2020-23719/): Cross-site scripting in zibbs project:zibbs (critical 9.6)
- [CVE-2020-23718](https://insights.sbomify.com/CVE-2020-23718/): Cross-site scripting in zibbs project:zibbs (critical 9.6)
- [CVE-2020-23715](https://insights.sbomify.com/CVE-2020-23715/): Path traversal in webport cms project:webport cms (high 8.6)
- [CVE-2020-23711](https://insights.sbomify.com/CVE-2020-23711/): SQL injection in naviwebs:navigate cms (critical 9.8)
- [CVE-2020-23710](https://insights.sbomify.com/CVE-2020-23710/): Cross-site scripting in limesurvey:limesurvey (medium 5.4)
- [CVE-2020-23707](https://insights.sbomify.com/CVE-2020-23707/): Memory corruption in ok-file-formats project:ok-file-formats (medium 6.5)
- [CVE-2020-23706](https://insights.sbomify.com/CVE-2020-23706/): Memory corruption in ok-file-formats project:ok-file-formats (medium 6.5)
- [CVE-2020-23705](https://insights.sbomify.com/CVE-2020-23705/): Memory corruption in rockcarry:ffjpeg (medium 6.5)
- [CVE-2020-23702](https://insights.sbomify.com/CVE-2020-23702/): Cross-site scripting in php-fusion:php-fusion (medium 4.8)
- [CVE-2020-23700](https://insights.sbomify.com/CVE-2020-23700/): Cross-site scripting in LavaLite-CMS (medium 4.8)
- [CVE-2020-23697](https://insights.sbomify.com/CVE-2020-23697/): Cross-site scripting in monstra:monstra cms (medium 5.4)
- [CVE-2020-23691](https://insights.sbomify.com/CVE-2020-23691/): Command injection in yfcmf:yfcmf (critical 9.8)
- [CVE-2020-23689](https://insights.sbomify.com/CVE-2020-23689/): Cross-site scripting in yfcmf:yfcmf (medium 4.8)
- [CVE-2020-23686](https://insights.sbomify.com/CVE-2020-23686/): Cross-site request forgery in ayacms project:ayacms (high 8.8)
- [CVE-2020-23685](https://insights.sbomify.com/CVE-2020-23685/): SQL injection in vtimecn:188jianzhan (critical 9.8)
- [CVE-2020-23680](https://insights.sbomify.com/CVE-2020-23680/): Other in text2pdf project:text2pdf (high 7.8)
- [CVE-2020-23679](https://insights.sbomify.com/CVE-2020-23679/): Memory corruption in linux network project:linux network project (critical 9.8)
- [CVE-2020-23660](https://insights.sbomify.com/CVE-2020-23660/): Cross-site scripting in webtareas project:webtareas (medium 5.4)
- [CVE-2020-23659](https://insights.sbomify.com/CVE-2020-23659/): Cross-site scripting in webport:web port (medium 5.4)
- [CVE-2020-23658](https://insights.sbomify.com/CVE-2020-23658/): Cross-site scripting in php-fusion:php-fusion (medium 5.4)
- [CVE-2020-23657](https://insights.sbomify.com/CVE-2020-23657/): Cross-site scripting in naviwebs:navigatecms (medium 5.4)
- [CVE-2020-23656](https://insights.sbomify.com/CVE-2020-23656/): Cross-site scripting in naviwebs:navigatecms (medium 5.4)
- [CVE-2020-23655](https://insights.sbomify.com/CVE-2020-23655/): Cross-site scripting in naviwebs:navigatecms (medium 5.4)
- [CVE-2020-23654](https://insights.sbomify.com/CVE-2020-23654/): Cross-site scripting in naviwebs:navigatecms (medium 5.4)
- [CVE-2020-23653](https://insights.sbomify.com/CVE-2020-23653/): ThinkAdmin insecure unserialize vulnerability (critical 9.8)
- [CVE-2020-23648](https://insights.sbomify.com/CVE-2020-23648/): Auth bypass in asus:rt-n12e firmware (high 7.5)
- [CVE-2020-23647](https://insights.sbomify.com/CVE-2020-23647/): Cross-site scripting in boxbilling:boxbilling (medium 6.1)
- [CVE-2020-23644](https://insights.sbomify.com/CVE-2020-23644/): Cross-site scripting in jizhicms:jizhicms (medium 6.1)
- [CVE-2020-23643](https://insights.sbomify.com/CVE-2020-23643/): Cross-site scripting in jizhicms:jizhicms (medium 6.1)
- [CVE-2020-23639](https://insights.sbomify.com/CVE-2020-23639/): Command injection in moxa:vport 461 firmware (critical 9.8)
- [CVE-2020-23631](https://insights.sbomify.com/CVE-2020-23631/): Cross-site request forgery in wdja:wdja cms (medium 6.1)
- [CVE-2020-23630](https://insights.sbomify.com/CVE-2020-23630/): SQL injection in zzcms:zzcms (high 8.8)
- [CVE-2020-23622](https://insights.sbomify.com/CVE-2020-23622/): 4thline cling uPnP protocol issue can lead to denial of service (high 7.5)
- [CVE-2020-23621](https://insights.sbomify.com/CVE-2020-23621/): Deserialization in squire-technologies:svi ms management system (critical 9.8)
- [CVE-2020-23620](https://insights.sbomify.com/CVE-2020-23620/): Deserialization in orlansoft:orlansoft erp (critical 9.8)
- [CVE-2020-23618](https://insights.sbomify.com/CVE-2020-23618/): Cross-site scripting in xtendtech:voice logger (medium 6.1)
- [CVE-2020-23617](https://insights.sbomify.com/CVE-2020-23617/): Cross-site scripting in totolink:n100re firmware (medium 6.1)
- [CVE-2020-23595](https://insights.sbomify.com/CVE-2020-23595/): Cross-site request forgery in yzmcms:yzmcms (high 8.8)
- [CVE-2020-23593](https://insights.sbomify.com/CVE-2020-23593/): Cross-site request forgery in optilinknetwork:op-xt71000n firmware (medium 6.5)
- [CVE-2020-23592](https://insights.sbomify.com/CVE-2020-23592/): Cross-site request forgery in optilinknetwork:op-xt71000n firmware (high 8.8)
- [CVE-2020-23591](https://insights.sbomify.com/CVE-2020-23591/): File upload in optilinknetwork:op-xt71000n firmware (critical 9.8)
- [CVE-2020-23590](https://insights.sbomify.com/CVE-2020-23590/): Cross-site request forgery in optilinknetwork:op-xt71000n firmware (medium 6.5)
- [CVE-2020-23589](https://insights.sbomify.com/CVE-2020-23589/): Cross-site request forgery in optilinknetwork:op-xt71000n firmware (medium 6.5)
- [CVE-2020-23588](https://insights.sbomify.com/CVE-2020-23588/): Cross-site request forgery in optilinknetwork:op-xt71000n firmware (medium 4.3)
- [CVE-2020-23587](https://insights.sbomify.com/CVE-2020-23587/): Cross-site request forgery in optilinknetwork:op-xt71000n firmware (low 3.1)
- [CVE-2020-23586](https://insights.sbomify.com/CVE-2020-23586/): Cross-site request forgery in optilinknetwork:op-xt71000n firmware (medium 4.3)
- [CVE-2020-23585](https://insights.sbomify.com/CVE-2020-23585/): Cross-site request forgery in optilinknetwork:op-xt71000n firmware (high 8.8)
- [CVE-2020-23584](https://insights.sbomify.com/CVE-2020-23584/): Command injection in optilinknetwork:op-xt71000n firmware (critical 9.8)
- [CVE-2020-23583](https://insights.sbomify.com/CVE-2020-23583/): Command injection in optilinknetwork:op-xt71000n firmware (critical 9.8)
- [CVE-2020-23582](https://insights.sbomify.com/CVE-2020-23582/): Cross-site request forgery in optilinknetwork:op-xt71000n firmware (medium 6.5)
- [CVE-2020-23580](https://insights.sbomify.com/CVE-2020-23580/): Code injection in pbootcms:pbootcms (critical 9.8)
- [CVE-2020-23576](https://insights.sbomify.com/CVE-2020-23576/): Cross-site scripting in laborator:neon (medium 5.4)
- [CVE-2020-23575](https://insights.sbomify.com/CVE-2020-23575/): Path traversal in kyocera:d-copia253mf plus firmware (high 7.5)
- [CVE-2020-23574](https://insights.sbomify.com/CVE-2020-23574/): Memory corruption in sysax:multi server (medium 6.5)
- [CVE-2020-23572](https://insights.sbomify.com/CVE-2020-23572/): File upload in beescms:beescms (high 8.8)
- [CVE-2020-23567](https://insights.sbomify.com/CVE-2020-23567/): Denial of service in irfanview:irfanview (medium 5.5)
- [CVE-2020-23566](https://insights.sbomify.com/CVE-2020-23566/): Denial of service in irfanview:irfanview (medium 5.5)
- [CVE-2020-23565](https://insights.sbomify.com/CVE-2020-23565/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2020-23564](https://insights.sbomify.com/CVE-2020-23564/): File upload in sem-cms:semcms (high 7.2)
- [CVE-2020-23563](https://insights.sbomify.com/CVE-2020-23563/): Memory corruption in irfanview:irfanview (medium 5.5)
- [CVE-2020-23562](https://insights.sbomify.com/CVE-2020-23562/): Memory corruption in irfanview:irfanview (medium 5.5)
- [CVE-2020-23561](https://insights.sbomify.com/CVE-2020-23561/): Memory corruption in irfanview:irfanview (medium 5.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/125/