# Vulnerabilities published in 2020 - [CVE-2020-21687](https://insights.sbomify.com/CVE-2020-21687/): Memory corruption in nasm:netwide assembler (medium 5.5) - [CVE-2020-21686](https://insights.sbomify.com/CVE-2020-21686/): Use after free in nasm:netwide assembler (medium 5.5) - [CVE-2020-21685](https://insights.sbomify.com/CVE-2020-21685/): Memory corruption in nasm:netwide assembler (medium 5.5) - [CVE-2020-21684](https://insights.sbomify.com/CVE-2020-21684/): Memory corruption in fig2dev project:fig2dev (medium 5.5) - [CVE-2020-21683](https://insights.sbomify.com/CVE-2020-21683/): Memory corruption in fig2dev project:fig2dev (medium 5.5) - [CVE-2020-21682](https://insights.sbomify.com/CVE-2020-21682/): Memory corruption in fig2dev project:fig2dev (medium 5.5) - [CVE-2020-21681](https://insights.sbomify.com/CVE-2020-21681/): Memory corruption in fig2dev project:fig2dev (medium 5.5) - [CVE-2020-21680](https://insights.sbomify.com/CVE-2020-21680/): Memory corruption in fig2dev project:fig2dev (medium 5.5) - [CVE-2020-2168](https://insights.sbomify.com/CVE-2020-2168/): RCE vulnerability in Jenkins Azure Container Service Plugin (high 8.8) - [CVE-2020-21679](https://insights.sbomify.com/CVE-2020-21679/): Memory corruption in graphicsmagick:graphicsmagick (medium 5.5) - [CVE-2020-21678](https://insights.sbomify.com/CVE-2020-21678/): Memory corruption in fig2dev project:fig2dev (medium 5.5) - [CVE-2020-21677](https://insights.sbomify.com/CVE-2020-21677/): Memory corruption in saitoha:libsixel (medium 6.5) - [CVE-2020-21676](https://insights.sbomify.com/CVE-2020-21676/): Memory corruption in debian:debian linux (medium 5.5) - [CVE-2020-21675](https://insights.sbomify.com/CVE-2020-21675/): Memory corruption in debian:debian linux (medium 5.5) - [CVE-2020-21674](https://insights.sbomify.com/CVE-2020-21674/): Memory corruption in libarchive:libarchive (medium 6.5) - [CVE-2020-2167](https://insights.sbomify.com/CVE-2020-2167/): RCE vulnerability in Jenkins OpenShift Pipeline Plugin (high 8.8) - [CVE-2020-21667](https://insights.sbomify.com/CVE-2020-21667/): SQL injection in fastadmin-tp6 project:fastadmin-tp6 (high 7.2) - [CVE-2020-21665](https://insights.sbomify.com/CVE-2020-21665/): SQL injection in fastadmin:fastadmin (high 7.2) - [CVE-2020-21662](https://insights.sbomify.com/CVE-2020-21662/): SQL injection in yunyecms:yunyecms (critical 9.8) - [CVE-2020-2166](https://insights.sbomify.com/CVE-2020-2166/): RCE vulnerability in Jenkins Pipeline: AWS Steps Plugin (high 8.8) - [CVE-2020-21658](https://insights.sbomify.com/CVE-2020-21658/): Cross-site request forgery in wdja:wdja cms (medium 6.5) - [CVE-2020-21656](https://insights.sbomify.com/CVE-2020-21656/): Cross-site scripting in xyhcms:xyhcms (medium 5.4) - [CVE-2020-21654](https://insights.sbomify.com/CVE-2020-21654/): File upload in emlog:emlog (high 7.2) - [CVE-2020-21653](https://insights.sbomify.com/CVE-2020-21653/): Server-side request forgery in myucms project:myucms (critical 9.1) - [CVE-2020-21652](https://insights.sbomify.com/CVE-2020-21652/): Code injection in myucms project:myucms (critical 9.8) - [CVE-2020-21651](https://insights.sbomify.com/CVE-2020-21651/): Code injection in myucms project:myucms (critical 9.8) - [CVE-2020-21650](https://insights.sbomify.com/CVE-2020-21650/): Code injection in myucms project:myucms (high 8.8) - [CVE-2020-2165](https://insights.sbomify.com/CVE-2020-2165/): Passwords transmitted in plain text by Jenkins Artifactory Plugin (high 7.5) - [CVE-2020-21649](https://insights.sbomify.com/CVE-2020-21649/): Server-side request forgery in myucms project:myucms (high 8.1) - [CVE-2020-21648](https://insights.sbomify.com/CVE-2020-21648/): Path traversal in wdja:wdja cms (critical 9.1) - [CVE-2020-21643](https://insights.sbomify.com/CVE-2020-21643/): Cross-site scripting in hongcms project:hongcms (medium 6.1) - [CVE-2020-21642](https://insights.sbomify.com/CVE-2020-21642/): Path traversal in zohocorp:manageengine analytics plus (critical 9.8) - [CVE-2020-21641](https://insights.sbomify.com/CVE-2020-21641/): XML external entity in zohocorp:manageengine analytics plus (high 7.5) - [CVE-2020-2164](https://insights.sbomify.com/CVE-2020-2164/): Passwords stored in plain text by Jenkins Artifactory Plugin (medium 6.5) - [CVE-2020-21639](https://insights.sbomify.com/CVE-2020-21639/): Cross-site scripting in ruijie:rg-uac 6000-e50 firmware (medium 6.1) - [CVE-2020-2163](https://insights.sbomify.com/CVE-2020-2163/): Cross-site scripting in Jenkins (medium 5.4) - [CVE-2020-21627](https://insights.sbomify.com/CVE-2020-21627/): Denial of service in ruijie:rg-uac firmware (high 7.5) - [CVE-2020-2162](https://insights.sbomify.com/CVE-2020-2162/): Improper Neutralization of Input During Web Page Generation in Jenkins (medium 5.4) - [CVE-2020-2161](https://insights.sbomify.com/CVE-2020-2161/): Cross-site scripting in Jenkins (medium 5.4) - [CVE-2020-21606](https://insights.sbomify.com/CVE-2020-21606/): Memory corruption in struktur:libde265 (medium 6.5) - [CVE-2020-21605](https://insights.sbomify.com/CVE-2020-21605/): Memory corruption in struktur:libde265 (medium 6.5) - [CVE-2020-21604](https://insights.sbomify.com/CVE-2020-21604/): Memory corruption in struktur:libde265 (medium 6.5) - [CVE-2020-21603](https://insights.sbomify.com/CVE-2020-21603/): Memory corruption in struktur:libde265 (medium 6.5) - [CVE-2020-21602](https://insights.sbomify.com/CVE-2020-21602/): Memory corruption in struktur:libde265 (medium 6.5) - [CVE-2020-21601](https://insights.sbomify.com/CVE-2020-21601/): Memory corruption in struktur:libde265 (medium 6.5) - [CVE-2020-21600](https://insights.sbomify.com/CVE-2020-21600/): Memory corruption in struktur:libde265 (medium 6.5) - [CVE-2020-2160](https://insights.sbomify.com/CVE-2020-2160/): Cross-Site Request Forgery in Jenkins (high 8.8) - [CVE-2020-21599](https://insights.sbomify.com/CVE-2020-21599/): Memory corruption in debian:debian linux (medium 6.5) - [CVE-2020-21598](https://insights.sbomify.com/CVE-2020-21598/): Memory corruption in debian:debian linux (high 8.8) - [CVE-2020-21597](https://insights.sbomify.com/CVE-2020-21597/): Memory corruption in debian:debian linux (medium 6.5) - [CVE-2020-21596](https://insights.sbomify.com/CVE-2020-21596/): Memory corruption in debian:debian linux (medium 6.5) - [CVE-2020-21595](https://insights.sbomify.com/CVE-2020-21595/): Memory corruption in struktur:libde265 (medium 6.5) - [CVE-2020-21594](https://insights.sbomify.com/CVE-2020-21594/): Memory corruption in struktur:libde265 (medium 6.5) - [CVE-2020-21590](https://insights.sbomify.com/CVE-2020-21590/): Path traversal in wuzhicms:wuzhicms (medium 4.3) - [CVE-2020-2159](https://insights.sbomify.com/CVE-2020-2159/): OS command injection in CryptoMove Plugin (high 8.8) - [CVE-2020-21588](https://insights.sbomify.com/CVE-2020-21588/): Memory corruption in coreftp:core ftp (medium 5.5) - [CVE-2020-21585](https://insights.sbomify.com/CVE-2020-21585/): File upload in emlog:emlog (critical 9.8) - [CVE-2020-21583](https://insights.sbomify.com/CVE-2020-21583/): Command injection in kernel:util-linux (medium 6.7) - [CVE-2020-2158](https://insights.sbomify.com/CVE-2020-2158/): Remote Code Execution vulnerability in Jenkins Literate Plugin (high 8.8) - [CVE-2020-21574](https://insights.sbomify.com/CVE-2020-21574/): Memory corruption in c-http project:c-http (high 7.5) - [CVE-2020-21573](https://insights.sbomify.com/CVE-2020-21573/): Denial of service in image-processing project:image-processing (medium 5.5) - [CVE-2020-21572](https://insights.sbomify.com/CVE-2020-21572/): Memory corruption in gilcc project:gilcc (high 7.5) - [CVE-2020-2157](https://insights.sbomify.com/CVE-2020-2157/): Credentials transmitted in plain text by Skytap Cloud CI Plugin (medium 4.3) - [CVE-2020-21564](https://insights.sbomify.com/CVE-2020-21564/): File upload in pluck-cms:pluck (high 8.8) - [CVE-2020-2156](https://insights.sbomify.com/CVE-2020-2156/): Credentials transmitted in plain text by Jenkins DeployHub Plugin (medium 4.3) - [CVE-2020-21554](https://insights.sbomify.com/CVE-2020-21554/): Path traversal in tinyrise:tinyshop (high 8.1) - [CVE-2020-2155](https://insights.sbomify.com/CVE-2020-2155/): Credentials transmitted in plain text by OpenShift Deployer Plugin (medium 5.3) - [CVE-2020-21548](https://insights.sbomify.com/CVE-2020-21548/): Memory corruption in saitoha:libsixel (high 8.8) - [CVE-2020-21547](https://insights.sbomify.com/CVE-2020-21547/): Memory corruption in saitoha:libsixel (high 8.8) - [CVE-2020-2154](https://insights.sbomify.com/CVE-2020-2154/): Jenkins Zephyr for JIRA Test Management Plugin stores credentials in plain text (medium 5.5) - [CVE-2020-21535](https://insights.sbomify.com/CVE-2020-21535/): Memory corruption in debian:debian linux (medium 5.5) - [CVE-2020-21534](https://insights.sbomify.com/CVE-2020-21534/): Memory corruption in debian:debian linux (medium 5.5) - [CVE-2020-21533](https://insights.sbomify.com/CVE-2020-21533/): Memory corruption in debian:debian linux (medium 5.5) - [CVE-2020-21532](https://insights.sbomify.com/CVE-2020-21532/): Memory corruption in debian:debian linux (medium 5.5) - [CVE-2020-21531](https://insights.sbomify.com/CVE-2020-21531/): Memory corruption in debian:debian linux (medium 5.5) - [CVE-2020-21530](https://insights.sbomify.com/CVE-2020-21530/): Memory corruption in debian:debian linux (medium 5.5) - [CVE-2020-2153](https://insights.sbomify.com/CVE-2020-2153/): Credentials transmitted in plain text by Backlog Plugin (medium 4.3) - [CVE-2020-21529](https://insights.sbomify.com/CVE-2020-21529/): Memory corruption in debian:debian linux (medium 5.5) - [CVE-2020-21528](https://insights.sbomify.com/CVE-2020-21528/): Memory corruption in nasm:netwide assembler (medium 5.5) - [CVE-2020-21527](https://insights.sbomify.com/CVE-2020-21527/): Path traversal in halo:halo (high 7.7) - [CVE-2020-21526](https://insights.sbomify.com/CVE-2020-21526/): Path traversal in halo:halo (critical 9.8) - [CVE-2020-21525](https://insights.sbomify.com/CVE-2020-21525/): Path traversal in halo:halo (high 7.5) - [CVE-2020-21524](https://insights.sbomify.com/CVE-2020-21524/): XML external entity in halo:halo (critical 9.1) - [CVE-2020-21523](https://insights.sbomify.com/CVE-2020-21523/): Code injection in halo:halo (critical 9.8) - [CVE-2020-21522](https://insights.sbomify.com/CVE-2020-21522/): Path traversal in halo:halo (critical 9.8) - [CVE-2020-2152](https://insights.sbomify.com/CVE-2020-2152/): Jenkins Subversion Release Manager Plugin vulnerable to cross-site scripting (XSS) (medium 6.1) - [CVE-2020-21517](https://insights.sbomify.com/CVE-2020-21517/): Cross-site scripting in metinfo:metinfo (medium 6.1) - [CVE-2020-21516](https://insights.sbomify.com/CVE-2020-21516/): FeehiCMS has an arbitrary file upload vulnerability (critical 9.8) - [CVE-2020-21514](https://insights.sbomify.com/CVE-2020-21514/): Fluent Fluentd and Fluent-ui use default password (high 8.8) - [CVE-2020-2151](https://insights.sbomify.com/CVE-2020-2151/): Jenkins Quality Gates Plugin transmits credentials in plain text during configuration (medium 5.3) - [CVE-2020-21506](https://insights.sbomify.com/CVE-2020-21506/): Cross-site scripting in waimai super cms project:waimai super cms (medium 6.1) - [CVE-2020-21505](https://insights.sbomify.com/CVE-2020-21505/): Cross-site scripting in waimai super cms project:waimai super cms (medium 6.1) - [CVE-2020-21504](https://insights.sbomify.com/CVE-2020-21504/): Cross-site scripting in waimai super cms project:waimai super cms (medium 6.1) - [CVE-2020-21503](https://insights.sbomify.com/CVE-2020-21503/): Business logic in waimai super cms project:waimai super cms (high 7.5) - [CVE-2020-2150](https://insights.sbomify.com/CVE-2020-2150/): Jenkins Sonar Quality Gates Plugin transmits credentials in plain text during configuration (medium 5.3) - [CVE-2020-21496](https://insights.sbomify.com/CVE-2020-21496/): Cross-site scripting in xiuno:xiunobbs (medium 6.1) - [CVE-2020-21495](https://insights.sbomify.com/CVE-2020-21495/): Cross-site scripting in xiuno:xiunobbs (medium 6.1) - [CVE-2020-21494](https://insights.sbomify.com/CVE-2020-21494/): Cross-site scripting in xiuno:xiunobbs (medium 6.1) - [CVE-2020-21493](https://insights.sbomify.com/CVE-2020-21493/): Information disclosure in xiuno:xiunobbs (medium 5.3) - [CVE-2020-21490](https://insights.sbomify.com/CVE-2020-21490/): Denial of service in gnu:binutils (medium 5.5) --- From sbomify Insights: https://insights.sbomify.com/years/2020/page/132/