# Vulnerabilities published in 2020


- [CVE-2020-16856](https://insights.sbomify.com/CVE-2020-16856/): Visual Studio Remote Code Execution Vulnerability (high 7.8)
- [CVE-2020-16855](https://insights.sbomify.com/CVE-2020-16855/): Microsoft Office Information Disclosure Vulnerability (medium 5.5)
- [CVE-2020-16854](https://insights.sbomify.com/CVE-2020-16854/): Windows Kernel Information Disclosure Vulnerability (medium 5.5)
- [CVE-2020-16853](https://insights.sbomify.com/CVE-2020-16853/): OneDrive for Windows Elevation of Privilege Vulnerability (high 7.1)
- [CVE-2020-16852](https://insights.sbomify.com/CVE-2020-16852/): OneDrive for Windows Elevation of Privilege Vulnerability (high 7.1)
- [CVE-2020-16851](https://insights.sbomify.com/CVE-2020-16851/): OneDrive for Windows Elevation of Privilege Vulnerability (high 7.1)
- [CVE-2020-16850](https://insights.sbomify.com/CVE-2020-16850/): Denial of service in mitsubishielectric:r00cpu firmware (high 7.5)
- [CVE-2020-1685](https://insights.sbomify.com/CVE-2020-1685/): Junos OS: EX4600, QFX5K Series: Stateless firewall filter matching 'user-vlan-id' will cause incomplete discard action (medium 5.8)
- [CVE-2020-16849](https://insights.sbomify.com/CVE-2020-16849/): Information disclosure in canon:ir2202n firmware (high 7.5)
- [CVE-2020-16847](https://insights.sbomify.com/CVE-2020-16847/): Cross-site scripting in extremenetworks:extreme management center (medium 6.1)
- [CVE-2020-16846](https://insights.sbomify.com/CVE-2020-16846/): SaltStack Salt Shell Injection (critical 9.8, exploited in the wild)
- [CVE-2020-16845](https://insights.sbomify.com/CVE-2020-16845/): Withdrawn Advisory: Infinite loop in xz (high 7.5)
- [CVE-2020-16844](https://insights.sbomify.com/CVE-2020-16844/): Authorization bypass in Istio (medium 6.8)
- [CVE-2020-16843](https://insights.sbomify.com/CVE-2020-16843/): Denial of service in amazon:firecracker (medium 5.9)
- [CVE-2020-1684](https://insights.sbomify.com/CVE-2020-1684/): Junos OS: SRX Series: High CPU load due to processing for HTTP traffic when Application Identification is enabled. (high 7.5)
- [CVE-2020-16839](https://insights.sbomify.com/CVE-2020-16839/): Auth bypass in crestron:dm-nvx-dir-160 firmware (high 7.5)
- [CVE-2020-1683](https://insights.sbomify.com/CVE-2020-1683/): Junos OS: Memory leak leads to kernel crash (vmcore) due to SNMP polling (high 7.5)
- [CVE-2020-1682](https://insights.sbomify.com/CVE-2020-1682/): Junos OS: SRX1500, vSRX, SRX4K, NFX150, NFX250: Denial of service vulnerability executing local CLI command (medium 5.5)
- [CVE-2020-1681](https://insights.sbomify.com/CVE-2020-1681/): Junos OS Evolved: Receipt of a specifically malformed NDP packet could lead to Denial of Service (medium 6.5)
- [CVE-2020-1680](https://insights.sbomify.com/CVE-2020-1680/): Junos OS: MX Series: MS-MPC/MIC might crash when processing malformed IPv6 packet in NAT64 configuration. (medium 5.3)
- [CVE-2020-1679](https://insights.sbomify.com/CVE-2020-1679/): Denial of service in Junos OS (high 7.5)
- [CVE-2020-1678](https://insights.sbomify.com/CVE-2020-1678/): Junos OS and Junos OS Evolved: RPD can crash due to a slow memory leak. (medium 6.5)
- [CVE-2020-1677](https://insights.sbomify.com/CVE-2020-1677/): Juniper Networks Mist Cloud UI: SAML authentication attribute elements handling vulnerability. (high 7.2)
- [CVE-2020-1676](https://insights.sbomify.com/CVE-2020-1676/): Juniper Networks Mist Cloud UI: SAML authentication response handling vulnerability. (high 7.2)
- [CVE-2020-1675](https://insights.sbomify.com/CVE-2020-1675/): Juniper Networks Mist Cloud UI: SAML authentication certificate vulnerability. (high 8.3)
- [CVE-2020-1673](https://insights.sbomify.com/CVE-2020-1673/): Junos OS: Reflected Cross-site Scripting vulnerability in J-Web and web based (HTTP/HTTPS) services (high 8.8)
- [CVE-2020-1672](https://insights.sbomify.com/CVE-2020-1672/): Junos OS: jdhcpd process crash when processing a specific DHCPDv6 packet in DHCPv6 relay configuration. (high 7.5)
- [CVE-2020-1671](https://insights.sbomify.com/CVE-2020-1671/): Junos OS: Receipt of malformed DHCPv6 packets causes jdhcpd to crash. (high 7.5)
- [CVE-2020-1670](https://insights.sbomify.com/CVE-2020-1670/): Junos OS: EX4300 Series: High CPU load due to receipt of specific IPv4 packets (medium 6.5)
- [CVE-2020-1669](https://insights.sbomify.com/CVE-2020-1669/): Junos OS: NFX350: Password hashes stored in world-readable format (medium 6.3)
- [CVE-2020-1668](https://insights.sbomify.com/CVE-2020-1668/): Junos OS: EX2300 Series: High CPU load due to receipt of specific multicast packets on layer 2 interface (medium 6.5)
- [CVE-2020-1667](https://insights.sbomify.com/CVE-2020-1667/): Junos OS: MX Series: Services card might restart due to a race condition when DNS filtering is enabled. (high 8.3)
- [CVE-2020-1666](https://insights.sbomify.com/CVE-2020-1666/): Junos OS Evolved: 'console log-out-on-disconnect' fails to terminate session on console cable disconnection (medium 6.6)
- [CVE-2020-1665](https://insights.sbomify.com/CVE-2020-1665/): Junos OS: MX series/EX9200 Series: IPv6 DDoS protection does not work as expected. (medium 5.3)
- [CVE-2020-1664](https://insights.sbomify.com/CVE-2020-1664/): Junos OS: Buffer overflow vulnerability in device control daemon (high 7.8)
- [CVE-2020-16632](https://insights.sbomify.com/CVE-2020-16632/): Cross-site scripting in dedecms:dedecms (medium 5.4)
- [CVE-2020-16630](https://insights.sbomify.com/CVE-2020-16630/): Auth bypass in ti:15.4-stack (medium 6.8)
- [CVE-2020-16629](https://insights.sbomify.com/CVE-2020-16629/): SQL injection in phpok:phpok (critical 9.8)
- [CVE-2020-1662](https://insights.sbomify.com/CVE-2020-1662/): Junos OS and Junos OS Evolved: RPD crash due to BGP session flapping. (high 7.5)
- [CVE-2020-16610](https://insights.sbomify.com/CVE-2020-16610/): Cross-site request forgery in hoosk:hoosk (medium 4.3)
- [CVE-2020-1661](https://insights.sbomify.com/CVE-2020-1661/): Junos OS: jdhcpd process crash when forwarding a malformed DHCP packet. (medium 5.3)
- [CVE-2020-16608](https://insights.sbomify.com/CVE-2020-16608/): Cross-site scripting in notable:notable (critical 9.6)
- [CVE-2020-16602](https://insights.sbomify.com/CVE-2020-16602/): Race condition in razer:chroma sdk (high 8.1)
- [CVE-2020-16600](https://insights.sbomify.com/CVE-2020-16600/): Use after free in artifex:mupdf (high 7.8)
- [CVE-2020-1660](https://insights.sbomify.com/CVE-2020-1660/): Junos OS: MX Series: Receipt of specific packets can cause services card to restart when DNS filtering is configured. (high 8.3)
- [CVE-2020-16599](https://insights.sbomify.com/CVE-2020-16599/): Null dereference in gnu:binutils (medium 5.5)
- [CVE-2020-16593](https://insights.sbomify.com/CVE-2020-16593/): Null dereference in gnu:binutils (medium 5.5)
- [CVE-2020-16592](https://insights.sbomify.com/CVE-2020-16592/): Use after free in fedoraproject:fedora (medium 5.5)
- [CVE-2020-16591](https://insights.sbomify.com/CVE-2020-16591/): Memory corruption in gnu:binutils (medium 5.5)
- [CVE-2020-16590](https://insights.sbomify.com/CVE-2020-16590/): Memory corruption in gnu:binutils (medium 5.5)
- [CVE-2020-16589](https://insights.sbomify.com/CVE-2020-16589/): Memory corruption in debian:debian linux (medium 5.5)
- [CVE-2020-16588](https://insights.sbomify.com/CVE-2020-16588/): Null dereference in debian:debian linux (medium 5.5)
- [CVE-2020-16587](https://insights.sbomify.com/CVE-2020-16587/): Memory corruption in debian:debian linux (medium 5.5)
- [CVE-2020-1657](https://insights.sbomify.com/CVE-2020-1657/): Junos OS: SRX Series: An attacker sending spoofed packets to IPSec peers may cause a Denial of Service. (high 7.5)
- [CVE-2020-1656](https://insights.sbomify.com/CVE-2020-1656/): Null dereference in Junos OS (high 8.8)
- [CVE-2020-1655](https://insights.sbomify.com/CVE-2020-1655/): Junos OS: MX Series: PFE crash on MPC7/8/9 upon receipt of large packets requiring fragmentation (medium 5.3)
- [CVE-2020-1654](https://insights.sbomify.com/CVE-2020-1654/): Memory corruption in Junos OS (critical 9.8)
- [CVE-2020-1653](https://insights.sbomify.com/CVE-2020-1653/): Junos OS: Kernel crash (vmcore) or FPC crash due to mbuf leak (high 7.5)
- [CVE-2020-1652](https://insights.sbomify.com/CVE-2020-1652/): Junos Space: OpenNMS is accessible via port 9443 (medium 5.6)
- [CVE-2020-1651](https://insights.sbomify.com/CVE-2020-1651/): Junos OS: MX Series: PFE on the line card may crash due to memory leak. (medium 6.5)
- [CVE-2020-1650](https://insights.sbomify.com/CVE-2020-1650/): Junos OS: MX Series: Denial of Service vulnerability in MS-PIC component on MS-MIC or MS-MPC (high 7.5)
- [CVE-2020-1649](https://insights.sbomify.com/CVE-2020-1649/): Junos OS: MX Series: PFE crash on MPC7/8/9 upon receipt of small fragments requiring reassembly (high 7.5)
- [CVE-2020-1648](https://insights.sbomify.com/CVE-2020-1648/): Junos OS and Junos OS Evolved: RPD crash when processing a specific BGP packet (high 7.5)
- [CVE-2020-1647](https://insights.sbomify.com/CVE-2020-1647/): Memory corruption in Junos OS (critical 9.8)
- [CVE-2020-1646](https://insights.sbomify.com/CVE-2020-1646/): Junos OS and Junos OS Evolved: RPD crash while processing a specific BGP update information. (high 7.5)
- [CVE-2020-1645](https://insights.sbomify.com/CVE-2020-1645/): Junos OS: MX Series: Services card might restart when DNS filtering is enabled (high 8.3)
- [CVE-2020-1644](https://insights.sbomify.com/CVE-2020-1644/): Junos OS and Junos OS Evolved: RPD crash due to specific BGP UPDATE packets (high 7.5)
- [CVE-2020-1643](https://insights.sbomify.com/CVE-2020-1643/): Denial of service in Junos OS (medium 5.5)
- [CVE-2020-1641](https://insights.sbomify.com/CVE-2020-1641/): Junos OS: A race condition on receipt of crafted LLDP packets leads to a memory leak and an LLDP crash. (medium 6.5)
- [CVE-2020-1640](https://insights.sbomify.com/CVE-2020-1640/): Junos OS: Receipt of certain genuine BGP packets from any BGP Speaker causes RPD to crash. (high 7.5)
- [CVE-2020-1639](https://insights.sbomify.com/CVE-2020-1639/): Denial of service in Junos OS (high 7.5)
- [CVE-2020-1638](https://insights.sbomify.com/CVE-2020-1638/): Junos OS & Junos OS Evolved: A specific IPv4 packet can lead to FPC restart. (high 7.5)
- [CVE-2020-1637](https://insights.sbomify.com/CVE-2020-1637/): Junos OS: SRX Series: Unified Access Control (UAC) bypass vulnerability (high 7.2)
- [CVE-2020-1634](https://insights.sbomify.com/CVE-2020-1634/): Junos OS: High-End SRX Series: Multicast traffic might cause all FPCs to reset. (high 7.5)
- [CVE-2020-1633](https://insights.sbomify.com/CVE-2020-1633/): Denial of service in Junos OS (high 7.4)
- [CVE-2020-1632](https://insights.sbomify.com/CVE-2020-1632/): Junos OS and Junos OS Evolved: Invalid BGP UPDATE sent to peer device may cause BGP session to terminate. (high 8.6)
- [CVE-2020-16310](https://insights.sbomify.com/CVE-2020-16310/): Denial of service in artifex:ghostscript (medium 5.5)
- [CVE-2020-1631](https://insights.sbomify.com/CVE-2020-1631/): Juniper Junos OS Path Traversal (high 8.8, exploited in the wild)
- [CVE-2020-16309](https://insights.sbomify.com/CVE-2020-16309/): Memory corruption in artifex:ghostscript (medium 5.5)
- [CVE-2020-16308](https://insights.sbomify.com/CVE-2020-16308/): Memory corruption in artifex:ghostscript (medium 5.5)
- [CVE-2020-16307](https://insights.sbomify.com/CVE-2020-16307/): Null dereference in artifex:ghostscript (medium 5.5)
- [CVE-2020-16306](https://insights.sbomify.com/CVE-2020-16306/): Null dereference in artifex:ghostscript (medium 5.5)
- [CVE-2020-16305](https://insights.sbomify.com/CVE-2020-16305/): Memory corruption in artifex:ghostscript (medium 5.5)
- [CVE-2020-16304](https://insights.sbomify.com/CVE-2020-16304/): Memory corruption in artifex:ghostscript (medium 5.5)
- [CVE-2020-16303](https://insights.sbomify.com/CVE-2020-16303/): Use after free in artifex:ghostscript (high 7.8)
- [CVE-2020-16302](https://insights.sbomify.com/CVE-2020-16302/): Memory corruption in artifex:ghostscript (medium 5.5)
- [CVE-2020-16301](https://insights.sbomify.com/CVE-2020-16301/): Memory corruption in artifex:ghostscript (medium 5.5)
- [CVE-2020-16300](https://insights.sbomify.com/CVE-2020-16300/): Memory corruption in artifex:ghostscript (medium 5.5)
- [CVE-2020-1630](https://insights.sbomify.com/CVE-2020-1630/): Junos OS: Privilege escalation vulnerability in dual REs, VC or HA cluster may allow unauthorized configuration change. (medium 5.0)
- [CVE-2020-16299](https://insights.sbomify.com/CVE-2020-16299/): Denial of service in artifex:ghostscript (medium 5.5)
- [CVE-2020-16298](https://insights.sbomify.com/CVE-2020-16298/): Memory corruption in artifex:ghostscript (medium 5.5)
- [CVE-2020-16297](https://insights.sbomify.com/CVE-2020-16297/): Memory corruption in artifex:ghostscript (medium 5.5)
- [CVE-2020-16296](https://insights.sbomify.com/CVE-2020-16296/): Memory corruption in artifex:ghostscript (medium 5.5)
- [CVE-2020-16295](https://insights.sbomify.com/CVE-2020-16295/): Null dereference in artifex:ghostscript (medium 5.5)
- [CVE-2020-16294](https://insights.sbomify.com/CVE-2020-16294/): Memory corruption in artifex:ghostscript (medium 5.5)
- [CVE-2020-16293](https://insights.sbomify.com/CVE-2020-16293/): Null dereference in artifex:ghostscript (medium 5.5)
- [CVE-2020-16292](https://insights.sbomify.com/CVE-2020-16292/): Memory corruption in artifex:ghostscript (medium 5.5)
- [CVE-2020-16291](https://insights.sbomify.com/CVE-2020-16291/): Memory corruption in artifex:ghostscript (medium 5.5)
- [CVE-2020-16290](https://insights.sbomify.com/CVE-2020-16290/): Memory corruption in artifex:ghostscript (medium 5.5)
- [CVE-2020-1629](https://insights.sbomify.com/CVE-2020-1629/): Junos OS: A race condition vulnerability may cause RPD daemon to crash when processing a BGP NOTIFICATION message. (medium 5.9)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/149/