# Vulnerabilities published in 2020


- [CVE-2020-23560](https://insights.sbomify.com/CVE-2020-23560/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2020-23559](https://insights.sbomify.com/CVE-2020-23559/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2020-23558](https://insights.sbomify.com/CVE-2020-23558/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2020-23557](https://insights.sbomify.com/CVE-2020-23557/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2020-23556](https://insights.sbomify.com/CVE-2020-23556/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2020-23555](https://insights.sbomify.com/CVE-2020-23555/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2020-23554](https://insights.sbomify.com/CVE-2020-23554/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2020-23553](https://insights.sbomify.com/CVE-2020-23553/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2020-23552](https://insights.sbomify.com/CVE-2020-23552/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2020-23551](https://insights.sbomify.com/CVE-2020-23551/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2020-23550](https://insights.sbomify.com/CVE-2020-23550/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2020-23549](https://insights.sbomify.com/CVE-2020-23549/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2020-23546](https://insights.sbomify.com/CVE-2020-23546/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2020-23545](https://insights.sbomify.com/CVE-2020-23545/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2020-23539](https://insights.sbomify.com/CVE-2020-23539/): Null dereference in realtek:rtl8723de firmware (high 7.5)
- [CVE-2020-23534](https://insights.sbomify.com/CVE-2020-23534/): Server-side request forgery in masterlab:masterlab (critical 9.8)
- [CVE-2020-23533](https://insights.sbomify.com/CVE-2020-23533/): Weak cryptography in unionpayintl:union pay (high 7.5)
- [CVE-2020-23522](https://insights.sbomify.com/CVE-2020-23522/): Cross-site request forgery in pixelimity:pixelimity (medium 6.8)
- [CVE-2020-23520](https://insights.sbomify.com/CVE-2020-23520/): File upload in txjia:imcat (high 7.2)
- [CVE-2020-23518](https://insights.sbomify.com/CVE-2020-23518/): Cross-site scripting in ultimatekode:neo billing (medium 5.4)
- [CVE-2020-23517](https://insights.sbomify.com/CVE-2020-23517/): Cross-site scripting in aryanic:high cms (medium 6.1)
- [CVE-2020-23512](https://insights.sbomify.com/CVE-2020-23512/): Auth bypass in vr cam:p1 firmware (critical 9.8)
- [CVE-2020-23490](https://insights.sbomify.com/CVE-2020-23490/): Path traversal in wwbn:avideo (high 7.5)
- [CVE-2020-23489](https://insights.sbomify.com/CVE-2020-23489/): AVideo vulnerable to Improper Privilege Management (high 8.8)
- [CVE-2020-23481](https://insights.sbomify.com/CVE-2020-23481/): Cross-site scripting in cmsmadesimple:cms made simple (medium 5.4)
- [CVE-2020-23478](https://insights.sbomify.com/CVE-2020-23478/): Regular Expression Denial of Service in Leo Editor (high 7.5)
- [CVE-2020-23469](https://insights.sbomify.com/CVE-2020-23469/): Denial of service in gmate project:gmate (high 7.5)
- [CVE-2020-23466](https://insights.sbomify.com/CVE-2020-23466/): Cross-site scripting in phpgurukul:online marriage registration system (medium 5.4)
- [CVE-2020-23452](https://insights.sbomify.com/CVE-2020-23452/): Cross-site scripting in selenium:selenium grid (medium 6.1)
- [CVE-2020-23451](https://insights.sbomify.com/CVE-2020-23451/): Cross-site request forgery in spiceworks:spiceworks (high 8.8)
- [CVE-2020-23450](https://insights.sbomify.com/CVE-2020-23450/): Cross-site scripting in spiceworks:spiceworks (medium 5.4)
- [CVE-2020-23449](https://insights.sbomify.com/CVE-2020-23449/): Missing authorization in newbee-mall project:newbee-mall (high 7.5)
- [CVE-2020-23448](https://insights.sbomify.com/CVE-2020-23448/): Auth bypass in newbee-mall project:newbee-mall (critical 9.8)
- [CVE-2020-23447](https://insights.sbomify.com/CVE-2020-23447/): Cross-site scripting in newbee-mall project:newbee-mall (medium 6.1)
- [CVE-2020-23446](https://insights.sbomify.com/CVE-2020-23446/): Information disclosure in verint:workforce optimization (medium 5.3)
- [CVE-2020-23438](https://insights.sbomify.com/CVE-2020-23438/): Privilege escalation in wondershare:filmora (high 7.8)
- [CVE-2020-23426](https://insights.sbomify.com/CVE-2020-23426/): Privilege escalation in zzcms:zzcms (critical 9.8)
- [CVE-2020-23376](https://insights.sbomify.com/CVE-2020-23376/): Cross-site request forgery in 5none:nonecms (medium 6.1)
- [CVE-2020-23374](https://insights.sbomify.com/CVE-2020-23374/): Cross-site scripting in 5none:nonecms (medium 5.4)
- [CVE-2020-23373](https://insights.sbomify.com/CVE-2020-23373/): Cross-site scripting in 5none:nonecms (medium 5.4)
- [CVE-2020-23371](https://insights.sbomify.com/CVE-2020-23371/): Cross-site scripting in 5none:nonecms (medium 6.1)
- [CVE-2020-23370](https://insights.sbomify.com/CVE-2020-23370/): Cross-site scripting in yzmcms:yzmcms (medium 5.4)
- [CVE-2020-23369](https://insights.sbomify.com/CVE-2020-23369/): Cross-site scripting in yzmcms:yzmcms (medium 6.1)
- [CVE-2020-23363](https://insights.sbomify.com/CVE-2020-23363/): Cross-site request forgery in verydows:verydows (high 8.8)
- [CVE-2020-23362](https://insights.sbomify.com/CVE-2020-23362/): Privilege escalation in yershop project:yershop (high 7.1)
- [CVE-2020-23361](https://insights.sbomify.com/CVE-2020-23361/): Auth bypass in phplist:phplist (critical 9.8)
- [CVE-2020-23360](https://insights.sbomify.com/CVE-2020-23360/): Auth bypass in oscommerce:oscommerce (critical 9.8)
- [CVE-2020-23359](https://insights.sbomify.com/CVE-2020-23359/): Auth bypass in webidsupport:webid (critical 9.8)
- [CVE-2020-23356](https://insights.sbomify.com/CVE-2020-23356/): Auth bypass in nibbleblog:nibbleblog (high 7.5)
- [CVE-2020-23355](https://insights.sbomify.com/CVE-2020-23355/): Codiad Vulnerable to PHP Magic Hash Vulnerability (high 7.5)
- [CVE-2020-23352](https://insights.sbomify.com/CVE-2020-23352/): Auth bypass in zblogcn:z-blogphp (high 7.5)
- [CVE-2020-23349](https://insights.sbomify.com/CVE-2020-23349/): Other in weibo:android software development kit (high 7.5)
- [CVE-2020-23342](https://insights.sbomify.com/CVE-2020-23342/): Cross-site request forgery in anchorcms:anchor cms (high 8.8)
- [CVE-2020-23341](https://insights.sbomify.com/CVE-2020-23341/): Cross-site scripting in atutor:atutor (medium 6.1)
- [CVE-2020-23334](https://insights.sbomify.com/CVE-2020-23334/): Memory corruption in axiosys:bento4 (high 7.5)
- [CVE-2020-23333](https://insights.sbomify.com/CVE-2020-23333/): Memory corruption in axiosys:bento4 (high 7.5)
- [CVE-2020-23332](https://insights.sbomify.com/CVE-2020-23332/): Memory corruption in axiosys:bento4 (high 7.5)
- [CVE-2020-23331](https://insights.sbomify.com/CVE-2020-23331/): Null dereference in axiosys:bento4 (high 7.5)
- [CVE-2020-23330](https://insights.sbomify.com/CVE-2020-23330/): Null dereference in axiosys:bento4 (high 7.5)
- [CVE-2020-23327](https://insights.sbomify.com/CVE-2020-23327/): Cross-site scripting in zblogcn:zblogphp (medium 6.1)
- [CVE-2020-23323](https://insights.sbomify.com/CVE-2020-23323/): Memory corruption in jerryscript:jerryscript (critical 9.8)
- [CVE-2020-23322](https://insights.sbomify.com/CVE-2020-23322/): Denial of service in jerryscript:jerryscript (high 7.5)
- [CVE-2020-23321](https://insights.sbomify.com/CVE-2020-23321/): Memory corruption in jerryscript:jerryscript (critical 9.8)
- [CVE-2020-23320](https://insights.sbomify.com/CVE-2020-23320/): Denial of service in jerryscript:jerryscript (high 7.5)
- [CVE-2020-23319](https://insights.sbomify.com/CVE-2020-23319/): Denial of service in jerryscript:jerryscript (high 7.5)
- [CVE-2020-23315](https://insights.sbomify.com/CVE-2020-23315/): Denial of service in microsoft:chakracore (high 7.5)
- [CVE-2020-23314](https://insights.sbomify.com/CVE-2020-23314/): Denial of service in jerryscript:jerryscript (high 7.5)
- [CVE-2020-23313](https://insights.sbomify.com/CVE-2020-23313/): Denial of service in jerryscript:jerryscript (high 7.5)
- [CVE-2020-23312](https://insights.sbomify.com/CVE-2020-23312/): Denial of service in jerryscript:jerryscript (high 7.5)
- [CVE-2020-23311](https://insights.sbomify.com/CVE-2020-23311/): Denial of service in jerryscript:jerryscript (high 7.5)
- [CVE-2020-23310](https://insights.sbomify.com/CVE-2020-23310/): Denial of service in jerryscript:jerryscript (high 7.5)
- [CVE-2020-23309](https://insights.sbomify.com/CVE-2020-23309/): Denial of service in jerryscript:jerryscript (high 7.5)
- [CVE-2020-23308](https://insights.sbomify.com/CVE-2020-23308/): Denial of service in jerryscript:jerryscript (high 7.5)
- [CVE-2020-23306](https://insights.sbomify.com/CVE-2020-23306/): Memory corruption in jerryscript:jerryscript (critical 9.8)
- [CVE-2020-23303](https://insights.sbomify.com/CVE-2020-23303/): Memory corruption in jerryscript:jerryscript (critical 9.8)
- [CVE-2020-23302](https://insights.sbomify.com/CVE-2020-23302/): Use after free in jerryscript:jerryscript (critical 9.8)
- [CVE-2020-23284](https://insights.sbomify.com/CVE-2020-23284/): Information disclosure in mv:idce (high 7.5)
- [CVE-2020-23283](https://insights.sbomify.com/CVE-2020-23283/): Information disclosure in mv:mconnect (high 7.5)
- [CVE-2020-23282](https://insights.sbomify.com/CVE-2020-23282/): SQL injection in mv:mconnect (high 7.5)
- [CVE-2020-23273](https://insights.sbomify.com/CVE-2020-23273/): Memory corruption in broadcom:tcpreplay (medium 5.5)
- [CVE-2020-23269](https://insights.sbomify.com/CVE-2020-23269/): Memory corruption in gpac:gpac (medium 5.5)
- [CVE-2020-23267](https://insights.sbomify.com/CVE-2020-23267/): Memory corruption in gpac:gpac (high 7.1)
- [CVE-2020-23266](https://insights.sbomify.com/CVE-2020-23266/): Memory corruption in gpac:gpac (medium 5.5)
- [CVE-2020-23264](https://insights.sbomify.com/CVE-2020-23264/): Cross-Site Request Forgery in forkcms (high 8.8)
- [CVE-2020-23263](https://insights.sbomify.com/CVE-2020-23263/): Cross-site scripting in forkcms (medium 6.1)
- [CVE-2020-23262](https://insights.sbomify.com/CVE-2020-23262/): SQL injection without credentials in ming-soft MCMS (critical 9.8)
- [CVE-2020-23260](https://insights.sbomify.com/CVE-2020-23260/): Memory corruption in jsish:jsish (high 7.5)
- [CVE-2020-23259](https://insights.sbomify.com/CVE-2020-23259/): Null dereference in jsish:jsish (high 7.5)
- [CVE-2020-23258](https://insights.sbomify.com/CVE-2020-23258/): Memory corruption in jsish:jsish (high 7.5)
- [CVE-2020-23257](https://insights.sbomify.com/CVE-2020-23257/): Memory corruption in espruino:espruino (high 7.5)
- [CVE-2020-23256](https://insights.sbomify.com/CVE-2020-23256/): electerm allows unauthorized users to execute arbitrary commands (critical 9.8)
- [CVE-2020-23250](https://insights.sbomify.com/CVE-2020-23250/): Weak cryptography in gigamon:gigavue-os (low 2.3)
- [CVE-2020-23249](https://insights.sbomify.com/CVE-2020-23249/): Information disclosure in gigamon:gigavue-os (medium 4.7)
- [CVE-2020-23243](https://insights.sbomify.com/CVE-2020-23243/): Cross-site scripting in naviwebs:navigatecms (medium 4.8)
- [CVE-2020-23242](https://insights.sbomify.com/CVE-2020-23242/): Cross-site scripting in naviwebs:navigatecms (medium 4.8)
- [CVE-2020-23241](https://insights.sbomify.com/CVE-2020-23241/): Cross-site scripting in cmsmadesimple:cms made simple (medium 4.8)
- [CVE-2020-23240](https://insights.sbomify.com/CVE-2020-23240/): Cross-site scripting in cmsmadesimple:cms made simple (medium 4.8)
- [CVE-2020-2324](https://insights.sbomify.com/CVE-2020-2324/): XXE vulnerability in Jenkins CVS Plugin (high 7.5)
- [CVE-2020-23239](https://insights.sbomify.com/CVE-2020-23239/): Cross-site scripting in textpattern:textpattern (medium 4.8)
- [CVE-2020-23238](https://insights.sbomify.com/CVE-2020-23238/): Cross-site scripting in evo:evolution cms (medium 5.4)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/126/