# Vulnerabilities published in 2020 - [CVE-2020-22201](https://insights.sbomify.com/CVE-2020-22201/): Code injection in phpcms:phpcms (high 8.8) - [CVE-2020-22200](https://insights.sbomify.com/CVE-2020-22200/): Path traversal in phpcms:phpcms (medium 5.3) - [CVE-2020-2220](https://insights.sbomify.com/CVE-2020-2220/): Stored XSS vulnerability in Jenkins job build time trend (medium 5.4) - [CVE-2020-22199](https://insights.sbomify.com/CVE-2020-22199/): SQL injection in phpcms:phpcms (critical 9.8) - [CVE-2020-22198](https://insights.sbomify.com/CVE-2020-22198/): SQL injection in dedecms:dedecms (critical 9.8) - [CVE-2020-2219](https://insights.sbomify.com/CVE-2020-2219/): Stored XSS vulnerability in Jenkins Link Column Plugin (medium 5.4) - [CVE-2020-22181](https://insights.sbomify.com/CVE-2020-22181/): Cross-site scripting in samsung:sww-3400rw firmware (medium 6.1) - [CVE-2020-2218](https://insights.sbomify.com/CVE-2020-2218/): Password stored in plain text by Jenkins HP ALM Quality Center Plugin (low 3.3) - [CVE-2020-22176](https://insights.sbomify.com/CVE-2020-22176/): Missing authorization in phpgurukul:hospital management system (high 7.5) - [CVE-2020-22175](https://insights.sbomify.com/CVE-2020-22175/): SQL injection in phpgurukul:hospital management system (high 7.5) - [CVE-2020-22174](https://insights.sbomify.com/CVE-2020-22174/): SQL injection in phpgurukul:hospital management system (high 7.5) - [CVE-2020-22173](https://insights.sbomify.com/CVE-2020-22173/): SQL injection in phpgurukul:hospital management system (high 7.5) - [CVE-2020-22172](https://insights.sbomify.com/CVE-2020-22172/): SQL injection in phpgurukul:hospital management system (high 7.5) - [CVE-2020-22171](https://insights.sbomify.com/CVE-2020-22171/): SQL injection in phpgurukul:hospital management system (high 7.5) - [CVE-2020-22170](https://insights.sbomify.com/CVE-2020-22170/): SQL injection in phpgurukul:hospital management system (high 7.5) - [CVE-2020-2217](https://insights.sbomify.com/CVE-2020-2217/): Reflected XSS in Jenkins Compatibility Action Storage Plugin (medium 6.1) - [CVE-2020-22169](https://insights.sbomify.com/CVE-2020-22169/): SQL injection in phpgurukul:hospital management system (high 7.5) - [CVE-2020-22168](https://insights.sbomify.com/CVE-2020-22168/): SQL injection in phpgurukul:hospital management system (high 7.5) - [CVE-2020-22167](https://insights.sbomify.com/CVE-2020-22167/): Cross-site scripting in phpgurukul:hospital management system (medium 5.4) - [CVE-2020-22166](https://insights.sbomify.com/CVE-2020-22166/): SQL injection in phpgurukul:hospital management system (high 7.5) - [CVE-2020-22165](https://insights.sbomify.com/CVE-2020-22165/): SQL injection in phpgurukul:hospital management system (high 7.5) - [CVE-2020-22164](https://insights.sbomify.com/CVE-2020-22164/): SQL injection in phpgurukul:hospital management system (high 7.5) - [CVE-2020-2216](https://insights.sbomify.com/CVE-2020-2216/): Missing permission checks in Zephyr for JIRA Test Management Plugin (medium 4.3) - [CVE-2020-22159](https://insights.sbomify.com/CVE-2020-22159/): File upload in evertz:3080ipx firmware (high 8.8) - [CVE-2020-22158](https://insights.sbomify.com/CVE-2020-22158/): Cross-site scripting in mediakind:rx8200 firmware (medium 6.1) - [CVE-2020-22153](https://insights.sbomify.com/CVE-2020-22153/): File upload in thedaylightstudio:fuel cms (critical 9.8) - [CVE-2020-22152](https://insights.sbomify.com/CVE-2020-22152/): Cross-site scripting in thedaylightstudio:fuel cms (medium 5.4) - [CVE-2020-22151](https://insights.sbomify.com/CVE-2020-22151/): File upload in thedaylightstudio:fuel cms (critical 9.8) - [CVE-2020-22150](https://insights.sbomify.com/CVE-2020-22150/): Cross-site scripting in piwigo:piwigo (medium 6.1) - [CVE-2020-2215](https://insights.sbomify.com/CVE-2020-2215/): CSRF vulnerability in Jenkins Zephyr for JIRA Test Management Plugin (medium 4.3) - [CVE-2020-22148](https://insights.sbomify.com/CVE-2020-22148/): Cross-site scripting in piwigo:piwigo (medium 6.1) - [CVE-2020-2214](https://insights.sbomify.com/CVE-2020-2214/): Content-Security-Policy protection for user content disabled by Jenkins ZAP Pipeline Plugin (medium 5.4) - [CVE-2020-2213](https://insights.sbomify.com/CVE-2020-2213/): Credentials stored in plain text by Jenkins White Source Plugin (medium 4.3) - [CVE-2020-22124](https://insights.sbomify.com/CVE-2020-22124/): Information disclosure in joyplus-cms project:joyplus-cms (high 7.5) - [CVE-2020-22122](https://insights.sbomify.com/CVE-2020-22122/): SQL injection in find a place ljcms project:find a place ljcms (high 7.5) - [CVE-2020-22120](https://insights.sbomify.com/CVE-2020-22120/): Code injection in txjia:imcat (high 8.8) - [CVE-2020-2212](https://insights.sbomify.com/CVE-2020-2212/): Secret stored in plain text by Jenkins GitHub Coverage Reporter Plugin (medium 4.3) - [CVE-2020-2211](https://insights.sbomify.com/CVE-2020-2211/): RCE vulnerability in ElasticBox Jenkins Kubernetes CI/CD Plugin (high 8.8) - [CVE-2020-2210](https://insights.sbomify.com/CVE-2020-2210/): Passwords transmitted in plain text by Jenkins Stash Branch Parameter Plugin (medium 4.3) - [CVE-2020-2209](https://insights.sbomify.com/CVE-2020-2209/): Password stored in plain text by Jenkins TestComplete support Plugin (medium 4.3) - [CVE-2020-22083](https://insights.sbomify.com/CVE-2020-22083/): jsonpickle unsafe deserialization (critical 9.8) - [CVE-2020-2208](https://insights.sbomify.com/CVE-2020-2208/): Secret stored in plain text by Jenkins Slack Upload Plugin (medium 4.3) - [CVE-2020-22079](https://insights.sbomify.com/CVE-2020-22079/): Memory corruption in tendacn:ac10u firmware (critical 9.8) - [CVE-2020-2207](https://insights.sbomify.com/CVE-2020-2207/): Reflected XSS vulnerability in Jenkins VncViewer Plugin (medium 6.1) - [CVE-2020-22061](https://insights.sbomify.com/CVE-2020-22061/): Other in superantispyware:superantispyware (high 7.8) - [CVE-2020-2206](https://insights.sbomify.com/CVE-2020-2206/): Reflected XSS vulnerability in Jenkins VncRecorder Plugin (medium 6.1) - [CVE-2020-22057](https://insights.sbomify.com/CVE-2020-22057/): Misconfiguration in evga:precision xoc (critical 9.1) - [CVE-2020-22056](https://insights.sbomify.com/CVE-2020-22056/): Denial of service in ffmpeg:ffmpeg (medium 6.5) - [CVE-2020-22054](https://insights.sbomify.com/CVE-2020-22054/): Denial of service in debian:debian linux (medium 6.5) - [CVE-2020-22051](https://insights.sbomify.com/CVE-2020-22051/): Denial of service in ffmpeg:ffmpeg (medium 6.5) - [CVE-2020-2205](https://insights.sbomify.com/CVE-2020-2205/): Stored XSS vulnerability in Jenkins VncRecorder Plugin (medium 4.8) - [CVE-2020-22049](https://insights.sbomify.com/CVE-2020-22049/): Denial of service in debian:debian linux (medium 6.5) - [CVE-2020-22048](https://insights.sbomify.com/CVE-2020-22048/): Denial of service in debian:debian linux (medium 6.5) - [CVE-2020-22046](https://insights.sbomify.com/CVE-2020-22046/): Denial of service in debian:debian linux (medium 6.5) - [CVE-2020-22044](https://insights.sbomify.com/CVE-2020-22044/): Denial of service in debian:debian linux (medium 6.5) - [CVE-2020-22043](https://insights.sbomify.com/CVE-2020-22043/): Denial of service in ffmpeg:ffmpeg (medium 6.5) - [CVE-2020-22042](https://insights.sbomify.com/CVE-2020-22042/): Denial of service in debian:debian linux (medium 6.5) - [CVE-2020-22041](https://insights.sbomify.com/CVE-2020-22041/): Denial of service in debian:debian linux (medium 6.5) - [CVE-2020-22040](https://insights.sbomify.com/CVE-2020-22040/): Denial of service in ffmpeg:ffmpeg (medium 6.5) - [CVE-2020-2204](https://insights.sbomify.com/CVE-2020-2204/): Missing permission checks in Jenkins Fortify on Demand Plugin (medium 5.4) - [CVE-2020-22039](https://insights.sbomify.com/CVE-2020-22039/): Denial of service in ffmpeg:ffmpeg (medium 6.5) - [CVE-2020-22038](https://insights.sbomify.com/CVE-2020-22038/): Denial of service in ffmpeg:ffmpeg (medium 6.5) - [CVE-2020-22037](https://insights.sbomify.com/CVE-2020-22037/): Denial of service in debian:debian linux (medium 6.5) - [CVE-2020-22036](https://insights.sbomify.com/CVE-2020-22036/): Memory corruption in debian:debian linux (high 8.8) - [CVE-2020-22035](https://insights.sbomify.com/CVE-2020-22035/): Memory corruption in debian:debian linux (high 8.8) - [CVE-2020-22034](https://insights.sbomify.com/CVE-2020-22034/): Memory corruption in debian:debian linux (high 8.8) - [CVE-2020-22033](https://insights.sbomify.com/CVE-2020-22033/): Memory corruption in debian:debian linux (medium 6.5) - [CVE-2020-22032](https://insights.sbomify.com/CVE-2020-22032/): Memory corruption in debian:debian linux (high 8.8) - [CVE-2020-22031](https://insights.sbomify.com/CVE-2020-22031/): Memory corruption in debian:debian linux (high 8.8) - [CVE-2020-22030](https://insights.sbomify.com/CVE-2020-22030/): Memory corruption in debian:debian linux (high 8.8) - [CVE-2020-2203](https://insights.sbomify.com/CVE-2020-2203/): CSRF vulnerability in Jenkins Fortify on Demand Plugin (medium 4.3) - [CVE-2020-22029](https://insights.sbomify.com/CVE-2020-22029/): Memory corruption in debian:debian linux (high 8.8) - [CVE-2020-22028](https://insights.sbomify.com/CVE-2020-22028/): Memory corruption in debian:debian linux (medium 6.5) - [CVE-2020-22027](https://insights.sbomify.com/CVE-2020-22027/): Memory corruption in debian:debian linux (high 8.8) - [CVE-2020-22026](https://insights.sbomify.com/CVE-2020-22026/): Memory corruption in debian:debian linux (medium 6.5) - [CVE-2020-22025](https://insights.sbomify.com/CVE-2020-22025/): Memory corruption in debian:debian linux (high 8.8) - [CVE-2020-22024](https://insights.sbomify.com/CVE-2020-22024/): Memory corruption in ffmpeg:ffmpeg (medium 6.5) - [CVE-2020-22023](https://insights.sbomify.com/CVE-2020-22023/): Memory corruption in debian:debian linux (high 8.8) - [CVE-2020-22022](https://insights.sbomify.com/CVE-2020-22022/): Memory corruption in debian:debian linux (high 8.8) - [CVE-2020-22021](https://insights.sbomify.com/CVE-2020-22021/): Memory corruption in debian:debian linux (medium 6.5) - [CVE-2020-22020](https://insights.sbomify.com/CVE-2020-22020/): Memory corruption in debian:debian linux (medium 6.5) - [CVE-2020-2202](https://insights.sbomify.com/CVE-2020-2202/): Users with Overall/Read access could enumerate credentials IDs in Jenkins Fortify on Demand Plugin (medium 4.3) - [CVE-2020-22019](https://insights.sbomify.com/CVE-2020-22019/): Memory corruption in debian:debian linux (medium 6.5) - [CVE-2020-22017](https://insights.sbomify.com/CVE-2020-22017/): Memory corruption in debian:debian linux (high 8.8) - [CVE-2020-22016](https://insights.sbomify.com/CVE-2020-22016/): Memory corruption in debian:debian linux (high 8.8) - [CVE-2020-22015](https://insights.sbomify.com/CVE-2020-22015/): Memory corruption in debian:debian linux (high 8.8) - [CVE-2020-2201](https://insights.sbomify.com/CVE-2020-2201/): Stored XSS vulnerability in Jenkins Sonargraph Integration Plugin (medium 5.4) - [CVE-2020-22007](https://insights.sbomify.com/CVE-2020-22007/): Command injection in okerthai:g955v1 firmware (medium 6.8) - [CVE-2020-22002](https://insights.sbomify.com/CVE-2020-22002/): Server-side request forgery in inim:smartliving 10100l firmware (high 7.5) - [CVE-2020-22001](https://insights.sbomify.com/CVE-2020-22001/): Auth bypass in homeautomation project:homeautomation (critical 9.8) - [CVE-2020-22000](https://insights.sbomify.com/CVE-2020-22000/): Command injection in homeautomation project:homeautomation (high 8.0) - [CVE-2020-2200](https://insights.sbomify.com/CVE-2020-2200/): OS command injection vulnerability in Jenkins Play Framework Plugin (high 8.8) - [CVE-2020-21999](https://insights.sbomify.com/CVE-2020-21999/): Command injection in iwt:facesentry access control system firmware (high 8.8) - [CVE-2020-21998](https://insights.sbomify.com/CVE-2020-21998/): Open redirect in homeautomation project:homeautomation (medium 6.1) - [CVE-2020-21997](https://insights.sbomify.com/CVE-2020-21997/): Missing authorization in smartwares:home easy firmware (high 7.5) - [CVE-2020-21996](https://insights.sbomify.com/CVE-2020-21996/): Missing authorization in ave:53ab-wbs firmware (high 7.5) - [CVE-2020-21995](https://insights.sbomify.com/CVE-2020-21995/): Hardcoded credentials in inim:smartliving 10100l firmware (critical 9.8) - [CVE-2020-21994](https://insights.sbomify.com/CVE-2020-21994/): Information disclosure in ave:53ab-wbs firmware (critical 9.8) - [CVE-2020-21993](https://insights.sbomify.com/CVE-2020-21993/): Cross-site scripting in wems:enterprise manager (medium 6.1) - [CVE-2020-21992](https://insights.sbomify.com/CVE-2020-21992/): Command injection in inim:smartliving 10100l firmware (high 8.8) --- From sbomify Insights: https://insights.sbomify.com/years/2020/page/130/