# Vulnerabilities published in 2020


- [CVE-2020-1744](https://insights.sbomify.com/CVE-2020-1744/): Exposure of Sensitive Information in keycloak (medium 5.6)
- [CVE-2020-17439](https://insights.sbomify.com/CVE-2020-17439/): Other in uip project:uip (high 8.3)
- [CVE-2020-17438](https://insights.sbomify.com/CVE-2020-17438/): Memory corruption in uip project:uip (critical 9.8)
- [CVE-2020-17437](https://insights.sbomify.com/CVE-2020-17437/): Memory corruption in open-iscsi project:open-iscsi (high 8.2)
- [CVE-2020-17436](https://insights.sbomify.com/CVE-2020-17436/): Memory corruption in Studio Photo (low 3.3)
- [CVE-2020-17435](https://insights.sbomify.com/CVE-2020-17435/): Memory corruption in Studio Photo (low 3.3)
- [CVE-2020-17434](https://insights.sbomify.com/CVE-2020-17434/): Memory corruption in Studio Photo (low 3.3)
- [CVE-2020-17433](https://insights.sbomify.com/CVE-2020-17433/): Memory corruption in Studio Photo (low 3.3)
- [CVE-2020-17432](https://insights.sbomify.com/CVE-2020-17432/): Memory corruption in Studio Photo (low 3.3)
- [CVE-2020-17431](https://insights.sbomify.com/CVE-2020-17431/): Memory corruption in Studio Photo (high 7.8)
- [CVE-2020-17430](https://insights.sbomify.com/CVE-2020-17430/): Memory corruption in Studio Photo (high 7.8)
- [CVE-2020-17429](https://insights.sbomify.com/CVE-2020-17429/): Memory corruption in Studio Photo (low 3.3)
- [CVE-2020-17428](https://insights.sbomify.com/CVE-2020-17428/): Memory corruption in Studio Photo (low 3.3)
- [CVE-2020-17427](https://insights.sbomify.com/CVE-2020-17427/): Memory corruption in Studio Photo (high 7.8)
- [CVE-2020-17426](https://insights.sbomify.com/CVE-2020-17426/): Memory corruption in Studio Photo (high 7.8)
- [CVE-2020-17425](https://insights.sbomify.com/CVE-2020-17425/): Memory corruption in Studio Photo (high 7.8)
- [CVE-2020-17424](https://insights.sbomify.com/CVE-2020-17424/): Memory corruption in Studio Photo (high 7.8)
- [CVE-2020-17423](https://insights.sbomify.com/CVE-2020-17423/): Memory corruption in Studio Photo (high 7.8)
- [CVE-2020-17422](https://insights.sbomify.com/CVE-2020-17422/): Memory corruption in Studio Photo (low 3.3)
- [CVE-2020-17421](https://insights.sbomify.com/CVE-2020-17421/): Memory corruption in Studio Photo (high 7.8)
- [CVE-2020-17420](https://insights.sbomify.com/CVE-2020-17420/): Memory corruption in Studio Photo (low 3.3)
- [CVE-2020-1742](https://insights.sbomify.com/CVE-2020-1742/): Privilege escalation in nmstate/kubernetes-nmstate-handler (high 7.0)
- [CVE-2020-17419](https://insights.sbomify.com/CVE-2020-17419/): Memory corruption in Studio Photo (high 7.8)
- [CVE-2020-17418](https://insights.sbomify.com/CVE-2020-17418/): Memory corruption in Studio Photo (high 7.8)
- [CVE-2020-17417](https://insights.sbomify.com/CVE-2020-17417/): Use after free in Reader (high 7.8)
- [CVE-2020-17416](https://insights.sbomify.com/CVE-2020-17416/): Memory corruption in Reader (high 7.8)
- [CVE-2020-17415](https://insights.sbomify.com/CVE-2020-17415/): Privilege escalation in PhantomPDF (high 7.8)
- [CVE-2020-17414](https://insights.sbomify.com/CVE-2020-17414/): Privilege escalation in Reader (high 7.8)
- [CVE-2020-17413](https://insights.sbomify.com/CVE-2020-17413/): Memory corruption in PhantomPDF (high 7.8)
- [CVE-2020-17412](https://insights.sbomify.com/CVE-2020-17412/): Memory corruption in PhantomPDF (high 7.8)
- [CVE-2020-17411](https://insights.sbomify.com/CVE-2020-17411/): Memory corruption in PhantomPDF (low 3.3)
- [CVE-2020-17410](https://insights.sbomify.com/CVE-2020-17410/): Use after free in PhantomPDF (high 7.8)
- [CVE-2020-1741](https://insights.sbomify.com/CVE-2020-1741/): Misconfiguration in openshift-ansible (medium 5.9)
- [CVE-2020-17409](https://insights.sbomify.com/CVE-2020-17409/): Auth bypass in Multiple Routers (medium 6.5)
- [CVE-2020-17408](https://insights.sbomify.com/CVE-2020-17408/): XML external entity in ExpressCluster (high 7.5)
- [CVE-2020-17407](https://insights.sbomify.com/CVE-2020-17407/): Memory corruption in Bullet-LTE (critical 9.8)
- [CVE-2020-17406](https://insights.sbomify.com/CVE-2020-17406/): Command injection in Bullet-LTE (high 8.8)
- [CVE-2020-17405](https://insights.sbomify.com/CVE-2020-17405/): Deserialization in Symphony (high 8.8)
- [CVE-2020-17404](https://insights.sbomify.com/CVE-2020-17404/): Memory corruption in Studio Photo (high 7.8)
- [CVE-2020-17403](https://insights.sbomify.com/CVE-2020-17403/): Memory corruption in Studio Photo (high 7.8)
- [CVE-2020-17402](https://insights.sbomify.com/CVE-2020-17402/): Information disclosure in Desktop (medium 6.5)
- [CVE-2020-17401](https://insights.sbomify.com/CVE-2020-17401/): Memory corruption in Desktop (medium 6.0)
- [CVE-2020-17400](https://insights.sbomify.com/CVE-2020-17400/): Memory corruption in Desktop (high 8.8)
- [CVE-2020-1740](https://insights.sbomify.com/CVE-2020-1740/): Exposure of Sensitive Information to an Unauthorized Actor and Insecure Temporary File in Ansible (low 3.9)
- [CVE-2020-17399](https://insights.sbomify.com/CVE-2020-17399/): Memory corruption in Desktop (high 8.8)
- [CVE-2020-17398](https://insights.sbomify.com/CVE-2020-17398/): Memory corruption in Desktop (medium 6.5)
- [CVE-2020-17397](https://insights.sbomify.com/CVE-2020-17397/): Memory corruption in Desktop (high 7.5)
- [CVE-2020-17396](https://insights.sbomify.com/CVE-2020-17396/): Integer overflow in Desktop (high 8.8)
- [CVE-2020-17395](https://insights.sbomify.com/CVE-2020-17395/): Integer overflow in Desktop (high 7.5)
- [CVE-2020-17394](https://insights.sbomify.com/CVE-2020-17394/): Memory corruption in Desktop (medium 6.0)
- [CVE-2020-17393](https://insights.sbomify.com/CVE-2020-17393/): Information disclosure in Desktop (medium 6.5)
- [CVE-2020-17392](https://insights.sbomify.com/CVE-2020-17392/): Memory corruption in Desktop (high 8.8)
- [CVE-2020-17391](https://insights.sbomify.com/CVE-2020-17391/): Information disclosure in Desktop (medium 6.5)
- [CVE-2020-17390](https://insights.sbomify.com/CVE-2020-17390/): Memory corruption in Desktop (low 3.8)
- [CVE-2020-1739](https://insights.sbomify.com/CVE-2020-1739/): Exposure of Sensitive Information to an Unauthorized Actor in Ansible (low 3.9)
- [CVE-2020-17389](https://insights.sbomify.com/CVE-2020-17389/): Path traversal in QConvergeConsole (high 8.8)
- [CVE-2020-17388](https://insights.sbomify.com/CVE-2020-17388/): Auth bypass in QConvergeConsole (high 8.8)
- [CVE-2020-17387](https://insights.sbomify.com/CVE-2020-17387/): Path traversal in QConvergeConsole (high 8.8)
- [CVE-2020-17386](https://insights.sbomify.com/CVE-2020-17386/): Cellopoint CelloOS - Server-Side Request Forgery (SSRF) (medium 6.5)
- [CVE-2020-17385](https://insights.sbomify.com/CVE-2020-17385/): Cellopoint CelloOS - Unauthenticated Arbitrary File Disclosure (high 7.5)
- [CVE-2020-17384](https://insights.sbomify.com/CVE-2020-17384/): Cellopoint CelloOS - Remote Command Execution (RCE) (high 7.2)
- [CVE-2020-17383](https://insights.sbomify.com/CVE-2020-17383/): Path traversal in telosalliance:z\/ip one firmware (critical 9.8)
- [CVE-2020-17382](https://insights.sbomify.com/CVE-2020-17382/): Memory corruption in msi:ambientlink mslo64 firmware (high 7.8)
- [CVE-2020-17381](https://insights.sbomify.com/CVE-2020-17381/): Misconfiguration in ghisler:total commander (high 7.3)
- [CVE-2020-17380](https://insights.sbomify.com/CVE-2020-17380/): Memory corruption in debian:debian linux (medium 6.3)
- [CVE-2020-1738](https://insights.sbomify.com/CVE-2020-1738/): Argument Injection in Ansible (low 3.9)
- [CVE-2020-17376](https://insights.sbomify.com/CVE-2020-17376/): OpenStack Nova Live migration fails to update persistent domain XML (high 8.3)
- [CVE-2020-17373](https://insights.sbomify.com/CVE-2020-17373/): SQL injection in sugarcrm:sugarcrm (medium 5.3)
- [CVE-2020-17372](https://insights.sbomify.com/CVE-2020-17372/): Cross-site scripting in sugarcrm:sugarcrm (medium 5.4)
- [CVE-2020-1737](https://insights.sbomify.com/CVE-2020-1737/): Path Traversal in Ansible (high 7.5)
- [CVE-2020-17368](https://insights.sbomify.com/CVE-2020-17368/): Command injection in debian:debian linux (critical 9.8)
- [CVE-2020-17367](https://insights.sbomify.com/CVE-2020-17367/): Command injection in debian:debian linux (high 7.8)
- [CVE-2020-17366](https://insights.sbomify.com/CVE-2020-17366/): Security feature bypass in nlnetlabs:routinator (high 7.4)
- [CVE-2020-17365](https://insights.sbomify.com/CVE-2020-17365/): Privilege escalation in pango:hotspot shield (high 7.8)
- [CVE-2020-17364](https://insights.sbomify.com/CVE-2020-17364/): Cross-site scripting in usvn:user-friendly svn (medium 6.1)
- [CVE-2020-17363](https://insights.sbomify.com/CVE-2020-17363/): Command injection in usvn:usvn (critical 9.9)
- [CVE-2020-17362](https://insights.sbomify.com/CVE-2020-17362/): Cross-site scripting in themeinprogress:nova lite (medium 6.1)
- [CVE-2020-17361](https://insights.sbomify.com/CVE-2020-17361/): Memory corruption in readytalk:avian (medium 5.5)
- [CVE-2020-17360](https://insights.sbomify.com/CVE-2020-17360/): Integer overflow in readytalk:avian (high 7.8)
- [CVE-2020-1736](https://insights.sbomify.com/CVE-2020-1736/): Incorrect Permission Assignment for Critical Resource in Ansible (low 2.2)
- [CVE-2020-17355](https://insights.sbomify.com/CVE-2020-17355/): Denial of service in arista:eos (high 7.5)
- [CVE-2020-17354](https://insights.sbomify.com/CVE-2020-17354/): Security feature bypass in lilypond:lilypond (high 8.6)
- [CVE-2020-17353](https://insights.sbomify.com/CVE-2020-17353/): Code injection in debian:debian linux (critical 9.8)
- [CVE-2020-17352](https://insights.sbomify.com/CVE-2020-17352/): Command injection in sophos:xg firewall firmware (high 8.8)
- [CVE-2020-1735](https://insights.sbomify.com/CVE-2020-1735/): Path Traversal in Ansible (medium 4.2)
- [CVE-2020-1734](https://insights.sbomify.com/CVE-2020-1734/): OS Command Injection in ansible (high 7.4)
- [CVE-2020-1733](https://insights.sbomify.com/CVE-2020-1733/): Ansible vulnerable to Exposure of Resource to Wrong Sphere and Insecure Temporary File (medium 5.0)
- [CVE-2020-1732](https://insights.sbomify.com/CVE-2020-1732/): Race condition in Soteria (medium 4.2)
- [CVE-2020-1731](https://insights.sbomify.com/CVE-2020-1731/): Predictable password in Keycloak (critical 9.1)
- [CVE-2020-1730](https://insights.sbomify.com/CVE-2020-1730/): Null dereference in libssh (medium 5.3)
- [CVE-2020-1729](https://insights.sbomify.com/CVE-2020-1729/): Permissions bypass in SmallRye (medium 4.4)
- [CVE-2020-1728](https://insights.sbomify.com/CVE-2020-1728/): Improper Restriction of Rendered UI Layers or Frames in Keycloak (medium 4.8)
- [CVE-2020-1727](https://insights.sbomify.com/CVE-2020-1727/): Other in keycloak (medium 6.4)
- [CVE-2020-1726](https://insights.sbomify.com/CVE-2020-1726/): Podman has Files or Directories Accessible to External Parties (medium 5.9)
- [CVE-2020-1725](https://insights.sbomify.com/CVE-2020-1725/): Incorrect Authorization in keycloak (medium 5.4)
- [CVE-2020-1724](https://insights.sbomify.com/CVE-2020-1724/): Keycloak Insufficient Session Expiry (medium 4.3)
- [CVE-2020-1723](https://insights.sbomify.com/CVE-2020-1723/): Open redirect in Keycloak Gatekeeper (medium 6.1)
- [CVE-2020-1722](https://insights.sbomify.com/CVE-2020-1722/): Denial of service in ipa (medium 5.3)
- [CVE-2020-1721](https://insights.sbomify.com/CVE-2020-1721/): Cross-site scripting in pki-core (medium 6.1)
- [CVE-2020-1720](https://insights.sbomify.com/CVE-2020-1720/): Missing authorization in postgresql (low 3.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/145/