# Vulnerabilities published in 2020


- [CVE-2020-1886](https://insights.sbomify.com/CVE-2020-1886/): Memory corruption in WhatsApp Business for Android (high 8.8)
- [CVE-2020-1885](https://insights.sbomify.com/CVE-2020-1885/): Privilege escalation in Oculus Desktop (high 7.8)
- [CVE-2020-18839](https://insights.sbomify.com/CVE-2020-18839/): Memory corruption in freedesktop:poppler (medium 6.5)
- [CVE-2020-18831](https://insights.sbomify.com/CVE-2020-18831/): Memory corruption in exiv2:exiv2 (high 7.8)
- [CVE-2020-1883](https://insights.sbomify.com/CVE-2020-1883/): Denial of service in NIP6800 (medium 4.9)
- [CVE-2020-1882](https://insights.sbomify.com/CVE-2020-1882/): Missing authorization in Ever-L29B (medium 4.6)
- [CVE-2020-1881](https://insights.sbomify.com/CVE-2020-1881/): Denial of service in NIP6800;Secospace USG6600;USG9500 (high 7.5)
- [CVE-2020-1880](https://insights.sbomify.com/CVE-2020-1880/): Denial of service in Lion-AL00C (medium 5.5)
- [CVE-2020-1879](https://insights.sbomify.com/CVE-2020-1879/): Security feature bypass in HEGE-560;HEGE-570;OSCA-550;OSCA-550A;OSCA-550AX;OSCA-550X (low 3.9)
- [CVE-2020-18781](https://insights.sbomify.com/CVE-2020-18781/): Memory corruption in audiofile:audiofile (medium 5.5)
- [CVE-2020-18780](https://insights.sbomify.com/CVE-2020-18780/): Use after free in nasm:netwide assembler (medium 5.5)
- [CVE-2020-1878](https://insights.sbomify.com/CVE-2020-1878/): Auth bypass in OxfordS-AN00A (medium 5.5)
- [CVE-2020-18778](https://insights.sbomify.com/CVE-2020-18778/): Memory corruption in libav:libav (medium 6.5)
- [CVE-2020-18776](https://insights.sbomify.com/CVE-2020-18776/): Memory corruption in libav:libav (medium 6.5)
- [CVE-2020-18775](https://insights.sbomify.com/CVE-2020-18775/): Memory corruption in libav:libav (medium 6.5)
- [CVE-2020-18774](https://insights.sbomify.com/CVE-2020-18774/): Denial of service in exiv2:exiv2 (medium 6.5)
- [CVE-2020-18773](https://insights.sbomify.com/CVE-2020-18773/): Memory corruption in exiv2:exiv2 (medium 6.5)
- [CVE-2020-18771](https://insights.sbomify.com/CVE-2020-18771/): Memory corruption in debian:debian linux (high 8.1)
- [CVE-2020-18770](https://insights.sbomify.com/CVE-2020-18770/): Denial of service in gdraheim:zziplib (medium 5.5)
- [CVE-2020-1877](https://insights.sbomify.com/CVE-2020-1877/): Memory corruption in NIP6800;Secospace USG6600;USG9500 (medium 4.4)
- [CVE-2020-18768](https://insights.sbomify.com/CVE-2020-18768/): Memory corruption in libtiff:libtiff (medium 5.5)
- [CVE-2020-18766](https://insights.sbomify.com/CVE-2020-18766/): Cross-site scripting in antsword project:antsword (critical 9.6)
- [CVE-2020-1876](https://insights.sbomify.com/CVE-2020-1876/): Memory corruption in NIP6800;Secospace USG6600;USG9500 (high 7.5)
- [CVE-2020-18759](https://insights.sbomify.com/CVE-2020-18759/): Information disclosure in dcce:mac1100 plc firmware (high 7.5)
- [CVE-2020-18758](https://insights.sbomify.com/CVE-2020-18758/): Command injection in dcce:mac1100 plc firmware (critical 9.8)
- [CVE-2020-18757](https://insights.sbomify.com/CVE-2020-18757/): Missing authorization in dcce:mac1100 plc firmware (high 7.5)
- [CVE-2020-18756](https://insights.sbomify.com/CVE-2020-18756/): Memory corruption in dcce:mac1100 plc firmware (high 7.5)
- [CVE-2020-18754](https://insights.sbomify.com/CVE-2020-18754/): Information disclosure in dcce:mac1100 plc firmware (high 7.5)
- [CVE-2020-18753](https://insights.sbomify.com/CVE-2020-18753/): Missing authorization in dcce:mac1100 plc firmware (critical 9.8)
- [CVE-2020-18750](https://insights.sbomify.com/CVE-2020-18750/): Memory corruption in flowpaper:pdf2json (high 7.8)
- [CVE-2020-1875](https://insights.sbomify.com/CVE-2020-1875/): Memory corruption in NIP6800;Secospace USG6600;USG9500 (medium 5.5)
- [CVE-2020-18748](https://insights.sbomify.com/CVE-2020-18748/): Cross-site scripting in typora:typora (medium 6.1)
- [CVE-2020-18746](https://insights.sbomify.com/CVE-2020-18746/): SQL injection in aitecms:aitecms (high 7.2)
- [CVE-2020-18741](https://insights.sbomify.com/CVE-2020-18741/): Missing authorization in thinksaas:thinksaas (medium 5.3)
- [CVE-2020-1874](https://insights.sbomify.com/CVE-2020-1874/): Memory corruption in NIP6800;Secospace USG6600;USG9500 (medium 5.5)
- [CVE-2020-18737](https://insights.sbomify.com/CVE-2020-18737/): Cross-site scripting in typora:typora (medium 6.1)
- [CVE-2020-18735](https://insights.sbomify.com/CVE-2020-18735/): Memory corruption in eclipse:cyclone data distribution service (high 7.5)
- [CVE-2020-18734](https://insights.sbomify.com/CVE-2020-18734/): Memory corruption in eclipse:cyclone data distribution service (high 7.5)
- [CVE-2020-18731](https://insights.sbomify.com/CVE-2020-18731/): Null dereference in iec104 project:iec104 (high 7.5)
- [CVE-2020-18730](https://insights.sbomify.com/CVE-2020-18730/): Null dereference in iec104 project:iec104 (high 7.5)
- [CVE-2020-1873](https://insights.sbomify.com/CVE-2020-1873/): Memory corruption in NIP6800;Secospace USG6600;USG9500 (high 7.5)
- [CVE-2020-18724](https://insights.sbomify.com/CVE-2020-18724/): Cross-site scripting in altn:mdaemon webmail (medium 5.4)
- [CVE-2020-18723](https://insights.sbomify.com/CVE-2020-18723/): Cross-site scripting in altn:mdaemon webmail (medium 5.4)
- [CVE-2020-1872](https://insights.sbomify.com/CVE-2020-1872/): Security feature bypass in HUAWEI P10 Plus (medium 4.6)
- [CVE-2020-18717](https://insights.sbomify.com/CVE-2020-18717/): SQL injection in zzzcms:zzzphp (critical 9.8)
- [CVE-2020-18716](https://insights.sbomify.com/CVE-2020-18716/): SQL injection in rockoa:rockoa (critical 9.8)
- [CVE-2020-18714](https://insights.sbomify.com/CVE-2020-18714/): SQL injection in rockoa:rockoa (critical 9.8)
- [CVE-2020-18713](https://insights.sbomify.com/CVE-2020-18713/): SQL injection in rockoa:rockoa (critical 9.8)
- [CVE-2020-1871](https://insights.sbomify.com/CVE-2020-1871/): Other in USG9500 (high 8.2)
- [CVE-2020-18705](https://insights.sbomify.com/CVE-2020-18705/): Improper Restriction of XML External Entity Reference in Quokka (critical 9.8)
- [CVE-2020-18704](https://insights.sbomify.com/CVE-2020-18704/): Unrestricted Upload of File with Dangerous Type in django-widgy (critical 9.8)
- [CVE-2020-18703](https://insights.sbomify.com/CVE-2020-18703/): Improper Restriction of XML External Entity Reference in Quokka (critical 9.8)
- [CVE-2020-18702](https://insights.sbomify.com/CVE-2020-18702/): Cross Site Scripting (XSS) in Quokka (medium 6.1)
- [CVE-2020-18701](https://insights.sbomify.com/CVE-2020-18701/): Auth bypass in talelin:lin-cms-flask (critical 9.8)
- [CVE-2020-1870](https://insights.sbomify.com/CVE-2020-1870/): Denial of service in CloudEngine 12800 (high 7.5)
- [CVE-2020-18699](https://insights.sbomify.com/CVE-2020-18699/): Lin-CMS-Flask Cross Site Scripting (XSS) vulnerability (medium 6.1)
- [CVE-2020-18698](https://insights.sbomify.com/CVE-2020-18698/): Lin-CMS-Flask vulnerable to Improper Authentication (critical 9.8)
- [CVE-2020-18694](https://insights.sbomify.com/CVE-2020-18694/): Cross-site request forgery in ignitedcms:ignitedcms (high 8.8)
- [CVE-2020-18693](https://insights.sbomify.com/CVE-2020-18693/): Cross-site scripting in mineweb:minewebcms (medium 5.4)
- [CVE-2020-18685](https://insights.sbomify.com/CVE-2020-18685/): Other in atlassian:floodlight (critical 9.8)
- [CVE-2020-18684](https://insights.sbomify.com/CVE-2020-18684/): Integer overflow in atlassian:floodlight (critical 9.8)
- [CVE-2020-18683](https://insights.sbomify.com/CVE-2020-18683/): Other in atlassian:floodlight (critical 9.8)
- [CVE-2020-18671](https://insights.sbomify.com/CVE-2020-18671/): Cross-site scripting in roundcube:webmail (medium 5.4)
- [CVE-2020-18670](https://insights.sbomify.com/CVE-2020-18670/): Cross-site scripting in roundcube:webmail (medium 5.4)
- [CVE-2020-18668](https://insights.sbomify.com/CVE-2020-18668/): Cross-site scripting in webport:web port (medium 5.4)
- [CVE-2020-18667](https://insights.sbomify.com/CVE-2020-18667/): SQL injection in webport:webport (critical 9.8)
- [CVE-2020-18665](https://insights.sbomify.com/CVE-2020-18665/): Path traversal in webport:web port (medium 5.3)
- [CVE-2020-18664](https://insights.sbomify.com/CVE-2020-18664/): Cross-site scripting in webport:web port (medium 5.4)
- [CVE-2020-18663](https://insights.sbomify.com/CVE-2020-18663/): Cross-site scripting in sir:gnuboard (medium 6.1)
- [CVE-2020-18662](https://insights.sbomify.com/CVE-2020-18662/): SQL injection in sir:gnuboard (critical 9.8)
- [CVE-2020-18661](https://insights.sbomify.com/CVE-2020-18661/): Cross-site scripting in sir:gnuboard (medium 6.1)
- [CVE-2020-18660](https://insights.sbomify.com/CVE-2020-18660/): Open redirect in get-simple:getsimplecms (medium 6.1)
- [CVE-2020-1866](https://insights.sbomify.com/CVE-2020-1866/): Memory corruption in NIP6800;S12700;S2700;S5700;S6700;S7700;S9700;Secospace USG6600;USG9500 (medium 6.5)
- [CVE-2020-18659](https://insights.sbomify.com/CVE-2020-18659/): Cross-site scripting in get-simple:getsimplecms (medium 6.1)
- [CVE-2020-18658](https://insights.sbomify.com/CVE-2020-18658/): Cross-site scripting in get-simple:getsimplecms (medium 6.1)
- [CVE-2020-18657](https://insights.sbomify.com/CVE-2020-18657/): Cross-site scripting in get-simple:getsimplecms (medium 6.1)
- [CVE-2020-18654](https://insights.sbomify.com/CVE-2020-18654/): Cross-site scripting in wuzhicms:wuzhicms (medium 6.1)
- [CVE-2020-18652](https://insights.sbomify.com/CVE-2020-18652/): Memory corruption in exempi project:exempi (medium 6.5)
- [CVE-2020-18651](https://insights.sbomify.com/CVE-2020-18651/): Memory corruption in exempi project:exempi (medium 6.5)
- [CVE-2020-1865](https://insights.sbomify.com/CVE-2020-1865/): Memory corruption in CloudEngine 12800;CloudEngine 5800;CloudEngine 6800;CloudEngine 7800 (medium 6.5)
- [CVE-2020-18648](https://insights.sbomify.com/CVE-2020-18648/): Cross-site request forgery in juqingcms:juqingcms (high 8.8)
- [CVE-2020-18647](https://insights.sbomify.com/CVE-2020-18647/): Information disclosure in 5none:nonecms (high 7.5)
- [CVE-2020-18646](https://insights.sbomify.com/CVE-2020-18646/): Information disclosure in 5none:nonecms (high 7.5)
- [CVE-2020-1864](https://insights.sbomify.com/CVE-2020-1864/): Auth bypass in Secospace AntiDDoS8000 (high 8.1)
- [CVE-2020-1863](https://insights.sbomify.com/CVE-2020-1863/): Memory corruption in Huawei USG6000V (high 7.5)
- [CVE-2020-1862](https://insights.sbomify.com/CVE-2020-1862/): Memory corruption in CampusInsight;ManageOne (low 3.3)
- [CVE-2020-1861](https://insights.sbomify.com/CVE-2020-1861/): Information disclosure in CloudEngine 12800 (medium 4.4)
- [CVE-2020-1860](https://insights.sbomify.com/CVE-2020-1860/): Security feature bypass in NIP6800;Secospace USG6600;USG9500 (high 7.5)
- [CVE-2020-1858](https://insights.sbomify.com/CVE-2020-1858/): Denial of service in NIP6800 (high 7.5)
- [CVE-2020-1857](https://insights.sbomify.com/CVE-2020-1857/): Information disclosure in NIP6800 (medium 5.5)
- [CVE-2020-18568](https://insights.sbomify.com/CVE-2020-18568/): Command injection in dlink:dsr-1000n firmware (critical 9.8)
- [CVE-2020-1856](https://insights.sbomify.com/CVE-2020-1856/): Information disclosure in NGFW Module, NIP6300, NIP6600, Secospace USG6500, Secospace USG6600, USG9500 (high 7.5)
- [CVE-2020-1855](https://insights.sbomify.com/CVE-2020-1855/): Security feature bypass in HEGE-560, OSCA-550, OSCA-550A, OSCA-550AX, OSCA-550X (medium 6.1)
- [CVE-2020-18544](https://insights.sbomify.com/CVE-2020-18544/): SQL injection in wms project:wms (critical 9.8)
- [CVE-2020-1853](https://insights.sbomify.com/CVE-2020-1853/): Path traversal in GaussDB 200 (medium 6.5)
- [CVE-2020-18494](https://insights.sbomify.com/CVE-2020-18494/): Memory corruption in hdfgroup:hdf5 (high 8.8)
- [CVE-2020-1848](https://insights.sbomify.com/CVE-2020-1848/): Other in Jackman-AL00D (medium 5.5)
- [CVE-2020-18477](https://insights.sbomify.com/CVE-2020-18477/): SQL injection in hucart:hucart (high 8.8)
- [CVE-2020-18476](https://insights.sbomify.com/CVE-2020-18476/): SQL injection in hucart:hucart (high 8.8)
- [CVE-2020-18475](https://insights.sbomify.com/CVE-2020-18475/): Cross-site scripting in hucart:hucart (medium 5.4)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/141/