# Vulnerabilities published in 2020


- [CVE-2020-2078](https://insights.sbomify.com/CVE-2020-2078/): Information disclosure in SICK Package Analytics (medium 6.5)
- [CVE-2020-2077](https://insights.sbomify.com/CVE-2020-2077/): Misconfiguration in SICK Package Analytics (high 7.5)
- [CVE-2020-2076](https://insights.sbomify.com/CVE-2020-2076/): Auth bypass in SICK Package Analytics (critical 9.8)
- [CVE-2020-2075](https://insights.sbomify.com/CVE-2020-2075/): Denial of service in Bulkscan LMS111; Bulkscan LMS511; CLV62x – CLV65x; ICR890-3; LMS10x, LMS11x, LMS15x; LMS12x, LMS13x, LMS14x; LMS5xx, LMS53x; MSC800; RFH (high 7.5)
- [CVE-2020-20746](https://insights.sbomify.com/CVE-2020-20746/): Memory corruption in tendacn:ac9 firmware (high 7.2)
- [CVE-2020-20741](https://insights.sbomify.com/CVE-2020-20741/): Auth bypass in beckhoff:cx9020 (critical 9.8)
- [CVE-2020-20740](https://insights.sbomify.com/CVE-2020-20740/): Memory corruption in debian:debian linux (high 7.8)
- [CVE-2020-20739](https://insights.sbomify.com/CVE-2020-20739/): Information disclosure in debian:debian linux (medium 5.3)
- [CVE-2020-20735](https://insights.sbomify.com/CVE-2020-20735/): File upload in 8cms:ljcms (critical 9.8)
- [CVE-2020-20726](https://insights.sbomify.com/CVE-2020-20726/): GilaCMS Cross Site Request Forgery vulnerability (high 8.8)
- [CVE-2020-20725](https://insights.sbomify.com/CVE-2020-20725/): Cross-site scripting in taogogo:taocms (medium 6.1)
- [CVE-2020-20718](https://insights.sbomify.com/CVE-2020-20718/): File upload in pluck-cms:pluckcms (critical 9.8)
- [CVE-2020-20703](https://insights.sbomify.com/CVE-2020-20703/): Memory corruption in vim:vim (critical 9.8)
- [CVE-2020-20701](https://insights.sbomify.com/CVE-2020-20701/): Cross-site scripting in s-cms:s-cms (medium 4.8)
- [CVE-2020-20700](https://insights.sbomify.com/CVE-2020-20700/): Cross-site scripting in s-cms:s-cms (medium 4.8)
- [CVE-2020-20699](https://insights.sbomify.com/CVE-2020-20699/): Cross-site scripting in s-cms:s-cms (medium 4.8)
- [CVE-2020-20698](https://insights.sbomify.com/CVE-2020-20698/): Missing authorization in s-cms:s-cms (high 7.2)
- [CVE-2020-20697](https://insights.sbomify.com/CVE-2020-20697/): NodCMS Cross Site Scripting vulnerability (medium 4.8)
- [CVE-2020-20696](https://insights.sbomify.com/CVE-2020-20696/): Cross-site Scripting in GilaCMS (medium 5.4)
- [CVE-2020-20695](https://insights.sbomify.com/CVE-2020-20695/): Cross-site Scripting in GilaCMS (medium 5.4)
- [CVE-2020-20693](https://insights.sbomify.com/CVE-2020-20693/): Cross-Site Request Forgery in GilaCMS (high 8.8)
- [CVE-2020-20692](https://insights.sbomify.com/CVE-2020-20692/): SQL injection in gilacms:gila cms (high 7.2)
- [CVE-2020-20691](https://insights.sbomify.com/CVE-2020-20691/): File upload in monstra:monstra cms (medium 6.5)
- [CVE-2020-20675](https://insights.sbomify.com/CVE-2020-20675/): SQL injection in nuishop:nuishop (critical 9.8)
- [CVE-2020-20672](https://insights.sbomify.com/CVE-2020-20672/): File upload in kitesky:kitecms (high 7.8)
- [CVE-2020-20671](https://insights.sbomify.com/CVE-2020-20671/): Cross-site request forgery in kitesky:kitecms (high 8.8)
- [CVE-2020-20670](https://insights.sbomify.com/CVE-2020-20670/): File upload in zkea:zkeacms (high 8.8)
- [CVE-2020-20665](https://insights.sbomify.com/CVE-2020-20665/): Denial of service in rudp project:rudp (high 7.5)
- [CVE-2020-20664](https://insights.sbomify.com/CVE-2020-20664/): Memory corruption in libiec iccp mod project:libiec iccp mod (medium 6.5)
- [CVE-2020-20663](https://insights.sbomify.com/CVE-2020-20663/): Memory corruption in libiec iccp mod project:libiec iccp mod (medium 6.5)
- [CVE-2020-20662](https://insights.sbomify.com/CVE-2020-20662/): Memory corruption in libiec iccp mod project:libiec iccp mod (medium 6.5)
- [CVE-2020-20658](https://insights.sbomify.com/CVE-2020-20658/): Memory corruption in libiec iccp mod project:libiec iccp mod (high 7.5)
- [CVE-2020-20657](https://insights.sbomify.com/CVE-2020-20657/): Memory corruption in libiec iccp mod project:libiec iccp mod (high 7.5)
- [CVE-2020-20645](https://insights.sbomify.com/CVE-2020-20645/): Cross-site scripting in eyoucms:eyoucms (medium 5.4)
- [CVE-2020-20642](https://insights.sbomify.com/CVE-2020-20642/): Cross-site request forgery in eyoucms:eyoucms (high 8.8)
- [CVE-2020-20640](https://insights.sbomify.com/CVE-2020-20640/): Cross-site scripting in shopex:ecshop (medium 6.1)
- [CVE-2020-20636](https://insights.sbomify.com/CVE-2020-20636/): SQL injection in joyplus-cms project:joyplus-cms (high 7.5)
- [CVE-2020-20634](https://insights.sbomify.com/CVE-2020-20634/): Missing authorization in elementor:website builder (medium 6.5)
- [CVE-2020-20633](https://insights.sbomify.com/CVE-2020-20633/): Cross-site scripting in cookielawinfo:gdpr cookie consent (medium 5.4)
- [CVE-2020-20628](https://insights.sbomify.com/CVE-2020-20628/): Cross-site scripting in appsaloon:wp-gdpr (medium 6.1)
- [CVE-2020-20627](https://insights.sbomify.com/CVE-2020-20627/): Missing authorization in givewp:givewp (medium 5.3)
- [CVE-2020-20626](https://insights.sbomify.com/CVE-2020-20626/): Cross-site scripting in lara\'s google analytics project:lara\'s google analytics (medium 5.4)
- [CVE-2020-20625](https://insights.sbomify.com/CVE-2020-20625/): SQL injection in slicedinvoices:sliced invoices (high 7.5)
- [CVE-2020-20605](https://insights.sbomify.com/CVE-2020-20605/): Cross-site scripting in personal blog cms project:personal blog cms (medium 6.1)
- [CVE-2020-20601](https://insights.sbomify.com/CVE-2020-20601/): Code injection in thinkcmf:thinkcmf (critical 9.8)
- [CVE-2020-20600](https://insights.sbomify.com/CVE-2020-20600/): Cross-site scripting in metinfo:metinfo (medium 5.4)
- [CVE-2020-20598](https://insights.sbomify.com/CVE-2020-20598/): Cross-site scripting in mossle:lemon (medium 6.1)
- [CVE-2020-20597](https://insights.sbomify.com/CVE-2020-20597/): Cross-site scripting in mossle:lemon (medium 6.1)
- [CVE-2020-20595](https://insights.sbomify.com/CVE-2020-20595/): Cross-site request forgery in opms project:opms (medium 6.5)
- [CVE-2020-20593](https://insights.sbomify.com/CVE-2020-20593/): Cross-site request forgery in rockoa:rockoa (high 8.0)
- [CVE-2020-20589](https://insights.sbomify.com/CVE-2020-20589/): FeehiCMS vulnerable to Cross Site Scripting (medium 6.1)
- [CVE-2020-20588](https://insights.sbomify.com/CVE-2020-20588/): File upload in ibarn project:ibarn (high 8.8)
- [CVE-2020-20586](https://insights.sbomify.com/CVE-2020-20586/): Cross-site request forgery in xyhcms:xyhcms (medium 4.5)
- [CVE-2020-20585](https://insights.sbomify.com/CVE-2020-20585/): SQL injection in metinfo:metinfo (high 7.5)
- [CVE-2020-20584](https://insights.sbomify.com/CVE-2020-20584/): Cross-site scripting in baigo:baigo cms (medium 6.1)
- [CVE-2020-20583](https://insights.sbomify.com/CVE-2020-20583/): SQL injection in 8cms:ljcms (high 7.5)
- [CVE-2020-20582](https://insights.sbomify.com/CVE-2020-20582/): Server-side request forgery in mipcms:mipcms (high 7.5)
- [CVE-2020-20545](https://insights.sbomify.com/CVE-2020-20545/): Cross-site scripting in seeyon:g6 government collaborative system (medium 5.4)
- [CVE-2020-20523](https://insights.sbomify.com/CVE-2020-20523/): Gila CMS Cross-site Scripting Vulnerability (medium 6.1)
- [CVE-2020-20522](https://insights.sbomify.com/CVE-2020-20522/): Cross-site scripting in kitesky:kitecms (medium 6.1)
- [CVE-2020-20521](https://insights.sbomify.com/CVE-2020-20521/): Cross-site scripting in kitesky:kitecms (medium 6.1)
- [CVE-2020-20514](https://insights.sbomify.com/CVE-2020-20514/): Cross-site request forgery in maccms:maccms (high 8.1)
- [CVE-2020-20508](https://insights.sbomify.com/CVE-2020-20508/): Cross-site scripting in shopkit project:shopkit (medium 6.1)
- [CVE-2020-20502](https://insights.sbomify.com/CVE-2020-20502/): Cross-site request forgery in yzmcms:yzmcms (medium 6.5)
- [CVE-2020-2050](https://insights.sbomify.com/CVE-2020-2050/): PAN-OS: Authentication bypass vulnerability in GlobalProtect SSL VPN client certificate verification (high 8.2)
- [CVE-2020-20495](https://insights.sbomify.com/CVE-2020-20495/): Path traversal in bludit:bludit (critical 9.1)
- [CVE-2020-20491](https://insights.sbomify.com/CVE-2020-20491/): SQL injection in opencart:opencart (high 7.2)
- [CVE-2020-20490](https://insights.sbomify.com/CVE-2020-20490/): Memory corruption in libiec iccp mod project:libiec iccp mod (high 7.5)
- [CVE-2020-2049](https://insights.sbomify.com/CVE-2020-2049/): Cortex XDR Agent: Improper control of loaded DLL leads to local privilege escalation (high 7.8)
- [CVE-2020-20486](https://insights.sbomify.com/CVE-2020-20486/): Memory corruption in iec104 project:iec104 (high 7.5)
- [CVE-2020-2048](https://insights.sbomify.com/CVE-2020-2048/): PAN-OS: System proxy passwords may be logged in clear text while viewing system state (low 3.3)
- [CVE-2020-20474](https://insights.sbomify.com/CVE-2020-20474/): SQL injection in white shark systems project:white shark systems (high 7.5)
- [CVE-2020-20473](https://insights.sbomify.com/CVE-2020-20473/): SQL injection in white shark systems project:white shark systems (high 7.5)
- [CVE-2020-20472](https://insights.sbomify.com/CVE-2020-20472/): Missing authorization in white shark systems project:white shark systems (medium 5.3)
- [CVE-2020-20471](https://insights.sbomify.com/CVE-2020-20471/): Privilege escalation in white shark systems project:white shark systems (high 8.8)
- [CVE-2020-20470](https://insights.sbomify.com/CVE-2020-20470/): Information disclosure in white shark systems project:white shark systems (medium 5.3)
- [CVE-2020-20469](https://insights.sbomify.com/CVE-2020-20469/): SQL injection in white shark systems project:white shark systems (high 7.5)
- [CVE-2020-20468](https://insights.sbomify.com/CVE-2020-20468/): Cross-site request forgery in white shark systems project:white shark systems (medium 6.5)
- [CVE-2020-20467](https://insights.sbomify.com/CVE-2020-20467/): Missing authorization in white shark systems project:white shark systems (medium 6.5)
- [CVE-2020-20466](https://insights.sbomify.com/CVE-2020-20466/): Missing authorization in white shark systems project:white shark systems (critical 9.8)
- [CVE-2020-20453](https://insights.sbomify.com/CVE-2020-20453/): Denial of service in debian:debian linux (medium 6.5)
- [CVE-2020-20451](https://insights.sbomify.com/CVE-2020-20451/): Denial of service in debian:debian linux (high 7.5)
- [CVE-2020-20450](https://insights.sbomify.com/CVE-2020-20450/): Null dereference in debian:debian linux (high 7.5)
- [CVE-2020-20448](https://insights.sbomify.com/CVE-2020-20448/): Denial of service in ffmpeg:ffmpeg (medium 6.5)
- [CVE-2020-20446](https://insights.sbomify.com/CVE-2020-20446/): Denial of service in debian:debian linux (medium 6.5)
- [CVE-2020-20445](https://insights.sbomify.com/CVE-2020-20445/): Denial of service in debian:debian linux (medium 6.5)
- [CVE-2020-20444](https://insights.sbomify.com/CVE-2020-20444/): Path traversal in openclinic project:openclinic (high 7.2)
- [CVE-2020-2044](https://insights.sbomify.com/CVE-2020-2044/): PAN-OS: Passwords may be logged in clear text while storing operational command (op command) history (low 3.3)
- [CVE-2020-2043](https://insights.sbomify.com/CVE-2020-2043/): PAN-OS: Passwords may be logged in clear text when using after-change-detail custom syslog field for config logs (low 3.3)
- [CVE-2020-20426](https://insights.sbomify.com/CVE-2020-20426/): Cross-site scripting in s-cms:s-cms (medium 6.1)
- [CVE-2020-20425](https://insights.sbomify.com/CVE-2020-20425/): Cross-site scripting in s-cms:s-cms (medium 6.1)
- [CVE-2020-2042](https://insights.sbomify.com/CVE-2020-2042/): PAN-OS: Buffer overflow in the management web interface (high 7.2)
- [CVE-2020-20413](https://insights.sbomify.com/CVE-2020-20413/): SQL injection in wuzhicms:wuzhicms (critical 9.8)
- [CVE-2020-20412](https://insights.sbomify.com/CVE-2020-20412/): Memory corruption in stepmania:stepmania (medium 6.5)
- [CVE-2020-2041](https://insights.sbomify.com/CVE-2020-2041/): PAN-OS: Management web interface denial-of-service (DoS) (high 7.5)
- [CVE-2020-20406](https://insights.sbomify.com/CVE-2020-20406/): Cross-site scripting in elementor:elementor page builder (medium 5.4)
- [CVE-2020-20402](https://insights.sbomify.com/CVE-2020-20402/): Auth bypass in portfoliocms project:portfoliocms (high 7.5)
- [CVE-2020-2040](https://insights.sbomify.com/CVE-2020-2040/): PAN-OS: Buffer overflow when Captive Portal or Multi-Factor Authentication (MFA) is enabled (critical 9.8)
- [CVE-2020-20392](https://insights.sbomify.com/CVE-2020-20392/): SQL injection in txjia:imcat (critical 9.8)
- [CVE-2020-20391](https://insights.sbomify.com/CVE-2020-20391/): Cross-site scripting in get-simple:getsimplecms (medium 5.4)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/135/