# Vulnerabilities published in 2020


- [CVE-2020-16289](https://insights.sbomify.com/CVE-2020-16289/): Memory corruption in artifex:ghostscript (medium 5.5)
- [CVE-2020-16288](https://insights.sbomify.com/CVE-2020-16288/): Memory corruption in artifex:ghostscript (medium 5.5)
- [CVE-2020-16287](https://insights.sbomify.com/CVE-2020-16287/): Memory corruption in artifex:ghostscript (medium 5.5)
- [CVE-2020-16282](https://insights.sbomify.com/CVE-2020-16282/): Privilege escalation in rangee:rangeeos (high 8.8)
- [CVE-2020-16281](https://insights.sbomify.com/CVE-2020-16281/): Security feature bypass in rangee:rangeeos (high 7.8)
- [CVE-2020-16280](https://insights.sbomify.com/CVE-2020-16280/): Information disclosure in rangee:rangeeos (medium 5.5)
- [CVE-2020-1628](https://insights.sbomify.com/CVE-2020-1628/): Junos OS: EX4300: Traffic from the network internal to the device (128.0.0.0) may be forwarded to egress interfaces (medium 5.3)
- [CVE-2020-16279](https://insights.sbomify.com/CVE-2020-16279/): Command injection in rangee:rangeeos (critical 9.8)
- [CVE-2020-16278](https://insights.sbomify.com/CVE-2020-16278/): Cross-site scripting in carson-saint:saint security suite (medium 6.1)
- [CVE-2020-16277](https://insights.sbomify.com/CVE-2020-16277/): SQL injection in carson-saint:saint security suite (high 8.8)
- [CVE-2020-16276](https://insights.sbomify.com/CVE-2020-16276/): SQL injection in carson-saint:saint security suite (high 8.8)
- [CVE-2020-16275](https://insights.sbomify.com/CVE-2020-16275/): Cross-site scripting in carson-saint:saint security suite (medium 6.1)
- [CVE-2020-16273](https://insights.sbomify.com/CVE-2020-16273/): Memory corruption in arm:armv8-m firmware (high 7.8)
- [CVE-2020-16272](https://insights.sbomify.com/CVE-2020-16272/): Auth bypass in kee:keepassrpc (critical 9.1)
- [CVE-2020-16271](https://insights.sbomify.com/CVE-2020-16271/): Weak cryptography in kee:keepassrpc (critical 9.1)
- [CVE-2020-16270](https://insights.sbomify.com/CVE-2020-16270/): Cross-site scripting in olimpoks:olimpok (medium 6.1)
- [CVE-2020-1627](https://insights.sbomify.com/CVE-2020-1627/): Junos OS: vMX and MX150: Denial of Service vulnerability in packet processing (high 7.5)
- [CVE-2020-16269](https://insights.sbomify.com/CVE-2020-16269/): Memory corruption in fedoraproject:fedora (medium 5.5)
- [CVE-2020-16268](https://insights.sbomify.com/CVE-2020-16268/): Privilege escalation in 1e:client (high 8.8)
- [CVE-2020-16267](https://insights.sbomify.com/CVE-2020-16267/): SQL injection in zohocorp:manageengine applications manager (high 8.8)
- [CVE-2020-16266](https://insights.sbomify.com/CVE-2020-16266/): MantisBT XSS issue on the view_all_bug_page.php (medium 5.4)
- [CVE-2020-16263](https://insights.sbomify.com/CVE-2020-16263/): Misconfiguration in winstonprivacy:winston firmware (critical 9.1)
- [CVE-2020-16262](https://insights.sbomify.com/CVE-2020-16262/): Privilege escalation in winstonprivacy:winston firmware (high 7.8)
- [CVE-2020-16261](https://insights.sbomify.com/CVE-2020-16261/): Privilege escalation in winstonprivacy:winston firmware (medium 6.8)
- [CVE-2020-16260](https://insights.sbomify.com/CVE-2020-16260/): Missing authorization in winstonprivacy:winston firmware (high 7.5)
- [CVE-2020-1626](https://insights.sbomify.com/CVE-2020-1626/): Junos OS Evolved: Denial of Service vulnerability in processing high rate of specific packets (high 7.5)
- [CVE-2020-16259](https://insights.sbomify.com/CVE-2020-16259/): Hardcoded credentials in winstonprivacy:winston firmware (critical 9.8)
- [CVE-2020-16258](https://insights.sbomify.com/CVE-2020-16258/): Hardcoded credentials in winstonprivacy:winston firmware (high 7.1)
- [CVE-2020-16257](https://insights.sbomify.com/CVE-2020-16257/): Command injection in winstonprivacy:winston firmware (critical 9.8)
- [CVE-2020-16256](https://insights.sbomify.com/CVE-2020-16256/): Cross-site request forgery in winstonprivacy:winston firmware (high 8.8)
- [CVE-2020-16255](https://insights.sbomify.com/CVE-2020-16255/): Cross-site scripting in owncloud:owncloud (medium 6.1)
- [CVE-2020-16254](https://insights.sbomify.com/CVE-2020-16254/): CSS Injection in Chartkick gem (medium 6.1)
- [CVE-2020-16253](https://insights.sbomify.com/CVE-2020-16253/): PgHero gem allows CSRF (high 8.1)
- [CVE-2020-16252](https://insights.sbomify.com/CVE-2020-16252/): Field Test CSRF vulnerability (medium 4.3)
- [CVE-2020-16251](https://insights.sbomify.com/CVE-2020-16251/): HashiCorp Vault Authentication bypass (high 8.2)
- [CVE-2020-16250](https://insights.sbomify.com/CVE-2020-16250/): Authentication Bypass by Spoofing and Insufficient Verification of Data Authenticity in Hashicorp Vault (high 8.2)
- [CVE-2020-1625](https://insights.sbomify.com/CVE-2020-1625/): Junos OS: Kernel memory leak in virtual-memory due to interface flaps (medium 6.5)
- [CVE-2020-16248](https://insights.sbomify.com/CVE-2020-16248/): Server-side request forgery in prometheus:blackbox exporter (medium 5.8)
- [CVE-2020-16247](https://insights.sbomify.com/CVE-2020-16247/): Philips Clinical Collaboration Platform Configuration (medium 6.8)
- [CVE-2020-16246](https://insights.sbomify.com/CVE-2020-16246/): GE Reason S20 Ethernet Switch (medium 6.1)
- [CVE-2020-16245](https://insights.sbomify.com/CVE-2020-16245/): Path traversal in Advantech iView (critical 9.8)
- [CVE-2020-16244](https://insights.sbomify.com/CVE-2020-16244/): Weak cryptography in GE Digital APM Classic (high 7.2)
- [CVE-2020-16243](https://insights.sbomify.com/CVE-2020-16243/): Memory corruption in LeviStudioU (high 7.8)
- [CVE-2020-16242](https://insights.sbomify.com/CVE-2020-16242/): GE Reason S20 Ethernet Switch (medium 6.1)
- [CVE-2020-16241](https://insights.sbomify.com/CVE-2020-16241/): Philips SureSigns VS4 Improper Access Control (medium 6.3)
- [CVE-2020-16240](https://insights.sbomify.com/CVE-2020-16240/): Missing authorization in GE Digital APM Classic (medium 5.3)
- [CVE-2020-1624](https://insights.sbomify.com/CVE-2020-1624/): Junos OS Evolved: objmon logs may leak sensitive information (medium 5.5)
- [CVE-2020-16239](https://insights.sbomify.com/CVE-2020-16239/): Philips SureSigns VS4 Improper Authentication (medium 4.9)
- [CVE-2020-16238](https://insights.sbomify.com/CVE-2020-16238/): B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus (medium 6.7)
- [CVE-2020-16237](https://insights.sbomify.com/CVE-2020-16237/): Philips SureSigns VS4 Improper Input Validation (low 2.1)
- [CVE-2020-16236](https://insights.sbomify.com/CVE-2020-16236/): anasonic FPWIN Pro (high 7.8)
- [CVE-2020-16235](https://insights.sbomify.com/CVE-2020-16235/): Emerson OpenEnterprise - Inadequate Encryption Strength (low 3.8)
- [CVE-2020-16234](https://insights.sbomify.com/CVE-2020-16234/): FATEK Automation PLC WinProladder (high 7.8)
- [CVE-2020-16233](https://insights.sbomify.com/CVE-2020-16233/): Information disclosure in CodeMeter (high 7.5)
- [CVE-2020-16232](https://insights.sbomify.com/CVE-2020-16232/): Yokogawa WideField3 Buffer Copy Without Checking Size of Input (low 2.8)
- [CVE-2020-16231](https://insights.sbomify.com/CVE-2020-16231/): All Bachmann M1 System Processor Modules - Use of Password Hash with Insufficient Computational Effort (high 7.2)
- [CVE-2020-16230](https://insights.sbomify.com/CVE-2020-16230/): Misconfiguration in HMS Networks Ewon Flexy and Cosy (low 2.3)
- [CVE-2020-1623](https://insights.sbomify.com/CVE-2020-1623/): Junos OS Evolved: ev.ops file may leak sensitive information (medium 5.5)
- [CVE-2020-16229](https://insights.sbomify.com/CVE-2020-16229/): Memory corruption in Advantech WebAccess HMI Designer (high 7.8)
- [CVE-2020-16228](https://insights.sbomify.com/CVE-2020-16228/): Philips Patient Monitoring Devices Improper Check for Certificate Revocation (medium 6.4)
- [CVE-2020-16227](https://insights.sbomify.com/CVE-2020-16227/): Other in Delta Electronics TPEditor (high 7.8)
- [CVE-2020-16226](https://insights.sbomify.com/CVE-2020-16226/): Mitsubishi Electric Multiple Products (critical 9.8)
- [CVE-2020-16225](https://insights.sbomify.com/CVE-2020-16225/): Memory corruption in Delta Electronics TPEditor (high 7.8)
- [CVE-2020-16224](https://insights.sbomify.com/CVE-2020-16224/): Philips Patient Monitoring Devices Improper Handling of Length Parameter Inconsistency (medium 6.5)
- [CVE-2020-16223](https://insights.sbomify.com/CVE-2020-16223/): Memory corruption in Delta Electronics TPEditor (high 7.8)
- [CVE-2020-16222](https://insights.sbomify.com/CVE-2020-16222/): Philips Patient Monitoring Devices Improper Authentication (high 8.8)
- [CVE-2020-16221](https://insights.sbomify.com/CVE-2020-16221/): Memory corruption in Delta Electronics TPEditor (high 7.8)
- [CVE-2020-16220](https://insights.sbomify.com/CVE-2020-16220/): Philips Patient Monitoring Devices Improper Validation of Syntactic Correctness of Input (medium 4.3)
- [CVE-2020-1622](https://insights.sbomify.com/CVE-2020-1622/): Junos OS Evolved: EvoSharedObjStore may leak sensitive information (medium 5.5)
- [CVE-2020-16219](https://insights.sbomify.com/CVE-2020-16219/): Memory corruption in Delta Electronics TPEditor (high 7.8)
- [CVE-2020-16218](https://insights.sbomify.com/CVE-2020-16218/): Philips Patient Monitoring Devices Cross-site Scripting (low 3.5)
- [CVE-2020-16217](https://insights.sbomify.com/CVE-2020-16217/): Memory corruption in Advantech WebAccess HMI Designer (high 7.8)
- [CVE-2020-16216](https://insights.sbomify.com/CVE-2020-16216/): Philips Patient Monitoring Devices Improper Input Validation (medium 6.5)
- [CVE-2020-16215](https://insights.sbomify.com/CVE-2020-16215/): Memory corruption in Advantech WebAccess HMI Designer (high 7.8)
- [CVE-2020-16214](https://insights.sbomify.com/CVE-2020-16214/): Philips Patient Monitoring Devices Improper Neutralization of Formula Elements in a CSV File (medium 5.0)
- [CVE-2020-16213](https://insights.sbomify.com/CVE-2020-16213/): Memory corruption in Advantech WebAccess HMI Designer (high 7.8)
- [CVE-2020-16212](https://insights.sbomify.com/CVE-2020-16212/): Philips Patient Monitoring Devices Exposure of Resource to Wrong Sphere (medium 6.8)
- [CVE-2020-16211](https://insights.sbomify.com/CVE-2020-16211/): Memory corruption in Advantech WebAccess HMI Designer (medium 5.5)
- [CVE-2020-16210](https://insights.sbomify.com/CVE-2020-16210/): Cross-site scripting in N-Tron 702-W / 702M12-W (critical 9.0)
- [CVE-2020-1621](https://insights.sbomify.com/CVE-2020-1621/): Junos OS Evolved: Configd leaks hashes via stream and is world readable (medium 5.5)
- [CVE-2020-16209](https://insights.sbomify.com/CVE-2020-16209/): Fieldcomm Group HART-IP and hipserver - Stack-based Buffer Overflow (critical 9.8)
- [CVE-2020-16208](https://insights.sbomify.com/CVE-2020-16208/): Cross-site request forgery in N-Tron 702-W / 702M12-W (high 8.8)
- [CVE-2020-16207](https://insights.sbomify.com/CVE-2020-16207/): Memory corruption in Advantech WebAccess HMI Designer (high 7.8)
- [CVE-2020-16206](https://insights.sbomify.com/CVE-2020-16206/): Cross-site scripting in N-Tron 702-W / 702M12-W (critical 9.0)
- [CVE-2020-16205](https://insights.sbomify.com/CVE-2020-16205/): Command injection in G-Cam and G-Code (high 7.2)
- [CVE-2020-16204](https://insights.sbomify.com/CVE-2020-16204/): Command injection in N-Tron 702-W / 702M12-W (critical 9.8)
- [CVE-2020-16203](https://insights.sbomify.com/CVE-2020-16203/): Memory corruption in Delta Industrial Automation CNCSoft ScreenEditor (high 7.8)
- [CVE-2020-16202](https://insights.sbomify.com/CVE-2020-16202/): Misconfiguration in WebAccess Node (high 7.8)
- [CVE-2020-16201](https://insights.sbomify.com/CVE-2020-16201/): Memory corruption in Delta Industrial Automation CNCSoft ScreenEditor (low 3.3)
- [CVE-2020-16200](https://insights.sbomify.com/CVE-2020-16200/): Philips Clinical Collaboration Platform Algorithm Downgrade (medium 6.5)
- [CVE-2020-1620](https://insights.sbomify.com/CVE-2020-1620/): Junos OS Evolved: Configd leaks hashes via log file and is world readable (medium 5.5)
- [CVE-2020-16199](https://insights.sbomify.com/CVE-2020-16199/): Memory corruption in Delta Industrial Automation CNCSoft ScreenEditor (high 7.8)
- [CVE-2020-16198](https://insights.sbomify.com/CVE-2020-16198/): Philips Clinical Collaboration Platform Protection Mechanism Failure (medium 5.0)
- [CVE-2020-16197](https://insights.sbomify.com/CVE-2020-16197/): Security feature bypass in octopus:octopus server (medium 4.3)
- [CVE-2020-16194](https://insights.sbomify.com/CVE-2020-16194/): Missing authorization in store-opart:op\'art devis (medium 5.3)
- [CVE-2020-16193](https://insights.sbomify.com/CVE-2020-16193/): Cross-site scripting in enhancesoft:osticket (medium 5.4)
- [CVE-2020-16192](https://insights.sbomify.com/CVE-2020-16192/): Cross-site scripting in limesurvey:limesurvey (medium 6.1)
- [CVE-2020-1619](https://insights.sbomify.com/CVE-2020-1619/): Junos OS: QFX10K Series, EX9200 Series, MX Series, PTX Series: Privilege escalation vulnerability in NG-RE. (medium 6.0)
- [CVE-2020-1618](https://insights.sbomify.com/CVE-2020-1618/): Junos OS: EX and QFX Series: Console port authentication bypass vulnerability (medium 6.3)
- [CVE-2020-16171](https://insights.sbomify.com/CVE-2020-16171/): Server-side request forgery in acronis:cyber backup (medium 6.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/150/