# Vulnerabilities published in 2020


- [CVE-2020-18470](https://insights.sbomify.com/CVE-2020-18470/): Cross-site scripting in rukovoditel:rukovoditel (medium 5.4)
- [CVE-2020-1847](https://insights.sbomify.com/CVE-2020-1847/): Denial of service in NIP6300;NIP6600;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG9500 (high 7.5)
- [CVE-2020-18469](https://insights.sbomify.com/CVE-2020-18469/): Cross-site scripting in rukovoditel:rukovoditel (medium 5.4)
- [CVE-2020-18468](https://insights.sbomify.com/CVE-2020-18468/): Cross-site scripting in qdpm:qdpm (medium 5.4)
- [CVE-2020-18467](https://insights.sbomify.com/CVE-2020-18467/): Cross-site scripting in bigtreecms:bigtree cms (medium 5.4)
- [CVE-2020-18464](https://insights.sbomify.com/CVE-2020-18464/): Cross-site request forgery in aikcms:aikcms (low 3.5)
- [CVE-2020-18463](https://insights.sbomify.com/CVE-2020-18463/): Cross-site request forgery in aikcms:aikcms (low 2.4)
- [CVE-2020-18462](https://insights.sbomify.com/CVE-2020-18462/): File upload in aikcms:aikcms (high 7.2)
- [CVE-2020-18460](https://insights.sbomify.com/CVE-2020-18460/): Cross-site request forgery in 711cms:711cms (high 8.8)
- [CVE-2020-18458](https://insights.sbomify.com/CVE-2020-18458/): Cross-site request forgery in damicms:damicms (high 8.0)
- [CVE-2020-18457](https://insights.sbomify.com/CVE-2020-18457/): Cross-site request forgery in bycms project:bycms (medium 6.8)
- [CVE-2020-18456](https://insights.sbomify.com/CVE-2020-18456/): Cross-site scripting in pbootcms:pbootcms (medium 4.8)
- [CVE-2020-18455](https://insights.sbomify.com/CVE-2020-18455/): Cross-site scripting in bycms project:bycms (medium 4.8)
- [CVE-2020-18454](https://insights.sbomify.com/CVE-2020-18454/): Cross-site request forgery in bycms project:bycms (medium 6.8)
- [CVE-2020-18451](https://insights.sbomify.com/CVE-2020-18451/): Cross-site scripting in damicms:damicms (medium 4.8)
- [CVE-2020-1845](https://insights.sbomify.com/CVE-2020-1845/): Privilege escalation in PCManager (medium 6.7)
- [CVE-2020-18449](https://insights.sbomify.com/CVE-2020-18449/): Cross-site scripting in ukcms:ukcms (medium 5.4)
- [CVE-2020-18446](https://insights.sbomify.com/CVE-2020-18446/): Cross-site scripting in yunucms:yunucms (medium 4.8)
- [CVE-2020-18445](https://insights.sbomify.com/CVE-2020-18445/): Cross-site scripting in yunucms:yunucms (medium 6.1)
- [CVE-2020-18442](https://insights.sbomify.com/CVE-2020-18442/): Denial of service in debian:debian linux (low 3.3)
- [CVE-2020-18440](https://insights.sbomify.com/CVE-2020-18440/): Memory corruption in phpok:phpok (critical 9.8)
- [CVE-2020-1844](https://insights.sbomify.com/CVE-2020-1844/): Privilege escalation in PCManager (high 7.8)
- [CVE-2020-18439](https://insights.sbomify.com/CVE-2020-18439/): File upload in phpok:phpok (critical 9.1)
- [CVE-2020-18438](https://insights.sbomify.com/CVE-2020-18438/): Path traversal in phpok:phpok (high 7.5)
- [CVE-2020-18432](https://insights.sbomify.com/CVE-2020-18432/): File upload in sem-cms:semcms (critical 9.8)
- [CVE-2020-18430](https://insights.sbomify.com/CVE-2020-18430/): Memory corruption in tinyexr project:tinyexr (high 7.5)
- [CVE-2020-1843](https://insights.sbomify.com/CVE-2020-1843/): Security feature bypass in HEGE-560 (medium 6.8)
- [CVE-2020-18428](https://insights.sbomify.com/CVE-2020-18428/): Memory corruption in tinyexr project:tinyexr (high 7.5)
- [CVE-2020-1842](https://insights.sbomify.com/CVE-2020-1842/): Auth bypass in HEGE-560 (medium 6.8)
- [CVE-2020-18418](https://insights.sbomify.com/CVE-2020-18418/): Cross-site request forgery in feifeicms:feifeicms (high 8.8)
- [CVE-2020-18416](https://insights.sbomify.com/CVE-2020-18416/): Cross-site request forgery in jyuu:jymusic (medium 6.8)
- [CVE-2020-18414](https://insights.sbomify.com/CVE-2020-18414/): Cross-site scripting in chaoji cms project:chaoji cms (medium 4.8)
- [CVE-2020-18413](https://insights.sbomify.com/CVE-2020-18413/): Cross-site scripting in chaoji cms project:chaoji cms (medium 4.8)
- [CVE-2020-18410](https://insights.sbomify.com/CVE-2020-18410/): Cross-site scripting in chaoji cms project:chaoji cms (medium 4.8)
- [CVE-2020-1841](https://insights.sbomify.com/CVE-2020-1841/): Information disclosure in CloudLink Board (high 7.5)
- [CVE-2020-18409](https://insights.sbomify.com/CVE-2020-18409/): Cross-site request forgery in catfishcms project:catfishcms (medium 6.8)
- [CVE-2020-18406](https://insights.sbomify.com/CVE-2020-18406/): Information disclosure in cmseasy:cmseasy (high 7.5)
- [CVE-2020-18404](https://insights.sbomify.com/CVE-2020-18404/): Cross-site scripting in ecisp:espcms (medium 4.8)
- [CVE-2020-1840](https://insights.sbomify.com/CVE-2020-1840/): Auth bypass in HUAWEI Mate 20 (medium 6.0)
- [CVE-2020-18395](https://insights.sbomify.com/CVE-2020-18395/): Null dereference in gnu:gama (high 7.5)
- [CVE-2020-18392](https://insights.sbomify.com/CVE-2020-18392/): Denial of service in cesanta:mjs (medium 5.5)
- [CVE-2020-1839](https://insights.sbomify.com/CVE-2020-1839/): Race condition in HUAWEI Mate 30 (medium 6.3)
- [CVE-2020-18382](https://insights.sbomify.com/CVE-2020-18382/): Memory corruption in webassembly:binaryen (medium 6.5)
- [CVE-2020-1838](https://insights.sbomify.com/CVE-2020-1838/): Auth bypass in HUAWEI Mate 30 Pro (medium 5.5)
- [CVE-2020-18378](https://insights.sbomify.com/CVE-2020-18378/): Null dereference in webassembly:binaryen (medium 6.5)
- [CVE-2020-1837](https://insights.sbomify.com/CVE-2020-1837/): Denial of service in ChangXiang 8 Plus (medium 5.3)
- [CVE-2020-1836](https://insights.sbomify.com/CVE-2020-1836/): Misconfiguration in HUAWEI P30;HUAWEI P30 Pro (medium 5.3)
- [CVE-2020-1835](https://insights.sbomify.com/CVE-2020-1835/): Information disclosure in HUAWEI Mate 30 (medium 6.5)
- [CVE-2020-1834](https://insights.sbomify.com/CVE-2020-1834/): Security feature bypass in HUAWEI P30;HUAWEI P30 Pro (medium 4.6)
- [CVE-2020-18336](https://insights.sbomify.com/CVE-2020-18336/): Cross-site scripting in typora:typora (high 7.4)
- [CVE-2020-18331](https://insights.sbomify.com/CVE-2020-18331/): Path traversal in chinamobileltd:gpn2.4p21-c-cn firmware (critical 9.1)
- [CVE-2020-18330](https://insights.sbomify.com/CVE-2020-18330/): Path traversal in chinamobileltd:gpn2.4p21-c-cn firmware (critical 9.1)
- [CVE-2020-1833](https://insights.sbomify.com/CVE-2020-1833/): Auth bypass in Honor 9X (low 2.4)
- [CVE-2020-18329](https://insights.sbomify.com/CVE-2020-18329/): Auth bypass in carel:pcoweb card bios (high 7.5)
- [CVE-2020-18327](https://insights.sbomify.com/CVE-2020-18327/): Cross-site scripting in alfresco:alfresco (medium 6.1)
- [CVE-2020-18326](https://insights.sbomify.com/CVE-2020-18326/): Cross Site Request Forgery in intelliants/subrion (high 8.8)
- [CVE-2020-18325](https://insights.sbomify.com/CVE-2020-18325/): Cross-site Scripting in intelliants/subrion (medium 6.1)
- [CVE-2020-18324](https://insights.sbomify.com/CVE-2020-18324/): Cross-site Scripting in Subrion CMS (medium 6.1)
- [CVE-2020-1832](https://insights.sbomify.com/CVE-2020-1832/): Memory corruption in E6878-370 (high 8.8)
- [CVE-2020-1831](https://insights.sbomify.com/CVE-2020-1831/): Security feature bypass in HUAWEI Mate 20 (low 2.4)
- [CVE-2020-18305](https://insights.sbomify.com/CVE-2020-18305/): Auth bypass in extremenetworks:extremexos (high 8.0)
- [CVE-2020-1830](https://insights.sbomify.com/CVE-2020-1830/): Memory corruption in NIP6800 (medium 5.3)
- [CVE-2020-1829](https://insights.sbomify.com/CVE-2020-1829/): Memory corruption in NIP6800 (high 7.5)
- [CVE-2020-18282](https://insights.sbomify.com/CVE-2020-18282/): Cross-site scripting in 5none:nonecms (medium 6.1)
- [CVE-2020-18280](https://insights.sbomify.com/CVE-2020-18280/): Cross-site scripting in md project:md (medium 6.1)
- [CVE-2020-1828](https://insights.sbomify.com/CVE-2020-1828/): Memory corruption in NIP6800 (high 7.5)
- [CVE-2020-1827](https://insights.sbomify.com/CVE-2020-1827/): Information disclosure in NIP6800 (high 7.5)
- [CVE-2020-18268](https://insights.sbomify.com/CVE-2020-18268/): Open redirect in zblogcn:z-blogphp (medium 6.1)
- [CVE-2020-18265](https://insights.sbomify.com/CVE-2020-18265/): Cross-site request forgery in simple-log project:simple-log (high 8.8)
- [CVE-2020-18264](https://insights.sbomify.com/CVE-2020-18264/): Cross-site request forgery in simple-log project:simple-log (high 8.8)
- [CVE-2020-18263](https://insights.sbomify.com/CVE-2020-18263/): SQL injection in php-cms project:php-cms (high 7.5)
- [CVE-2020-18262](https://insights.sbomify.com/CVE-2020-18262/): SQL injection in ed01-cms project:ed01-cms (critical 9.8)
- [CVE-2020-18261](https://insights.sbomify.com/CVE-2020-18261/): File upload in ed01-cms project:ed01-cms (critical 9.8)
- [CVE-2020-1826](https://insights.sbomify.com/CVE-2020-1826/): Weak cryptography in Honor Magic2 (medium 4.4)
- [CVE-2020-18259](https://insights.sbomify.com/CVE-2020-18259/): Cross-site scripting in ed01-cms project:ed01-cms (medium 6.1)
- [CVE-2020-1825](https://insights.sbomify.com/CVE-2020-1825/): Denial of service in FusionAccess (medium 6.5)
- [CVE-2020-18243](https://insights.sbomify.com/CVE-2020-18243/): SQL injection in enricozab:cms (medium 6.5)
- [CVE-2020-1824](https://insights.sbomify.com/CVE-2020-1824/): Memory corruption in IPS Module (low 3.7)
- [CVE-2020-18232](https://insights.sbomify.com/CVE-2020-18232/): Memory corruption in hdfgroup:hdf5 (high 8.8)
- [CVE-2020-18230](https://insights.sbomify.com/CVE-2020-18230/): Cross-site scripting in phpmywind:phpmywind (medium 4.8)
- [CVE-2020-1823](https://insights.sbomify.com/CVE-2020-1823/): Memory corruption in IPS Module (low 3.7)
- [CVE-2020-18229](https://insights.sbomify.com/CVE-2020-18229/): Cross-site scripting in phpmywind:phpmywind (medium 4.8)
- [CVE-2020-18221](https://insights.sbomify.com/CVE-2020-18221/): Cross-site scripting in typora:typora (medium 6.1)
- [CVE-2020-18220](https://insights.sbomify.com/CVE-2020-18220/): Weak cryptography in html-js:doracms (high 7.5)
- [CVE-2020-1822](https://insights.sbomify.com/CVE-2020-1822/): Memory corruption in IPS Module (low 3.7)
- [CVE-2020-18215](https://insights.sbomify.com/CVE-2020-18215/): SQL injection in phpshe:phpshe (high 8.8)
- [CVE-2020-1821](https://insights.sbomify.com/CVE-2020-1821/): Memory corruption in IPS Module (low 3.7)
- [CVE-2020-1820](https://insights.sbomify.com/CVE-2020-1820/): Memory corruption in IPS Module (low 3.7)
- [CVE-2020-18198](https://insights.sbomify.com/CVE-2020-18198/): Cross-site request forgery in pluck-cms:pluck (high 8.8)
- [CVE-2020-18195](https://insights.sbomify.com/CVE-2020-18195/): Cross-site request forgery in pluck-cms:pluck (high 8.8)
- [CVE-2020-18194](https://insights.sbomify.com/CVE-2020-18194/): Cross-site scripting in emlog:emlog (medium 6.1)
- [CVE-2020-18191](https://insights.sbomify.com/CVE-2020-18191/): Path traversal in get-simple:getsimplecms (critical 9.1)
- [CVE-2020-18190](https://insights.sbomify.com/CVE-2020-18190/): Path traversal in bludit:bludit (critical 9.1)
- [CVE-2020-1819](https://insights.sbomify.com/CVE-2020-1819/): Memory corruption in IPS Module (low 3.7)
- [CVE-2020-18185](https://insights.sbomify.com/CVE-2020-18185/): Code injection in pluxml:pluxml (critical 9.8)
- [CVE-2020-18184](https://insights.sbomify.com/CVE-2020-18184/): Code injection in pluxxml:pluxxml (high 7.2)
- [CVE-2020-1818](https://insights.sbomify.com/CVE-2020-1818/): Memory corruption in IPS Module (low 3.7)
- [CVE-2020-18178](https://insights.sbomify.com/CVE-2020-18178/): Path traversal in hongcms project:hongcms (critical 9.8)
- [CVE-2020-18175](https://insights.sbomify.com/CVE-2020-18175/): SQL injection in metinfo:metinfo (critical 9.8)
- [CVE-2020-18174](https://insights.sbomify.com/CVE-2020-18174/): Privilege escalation in autohotkey:autohotkey (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/142/