# Vulnerabilities published in 2020


- [CVE-2020-16170](https://insights.sbomify.com/CVE-2020-16170/): Hardcoded credentials in robotemi:temi (high 7.5)
- [CVE-2020-1617](https://insights.sbomify.com/CVE-2020-1617/): Denial of service in Junos OS (high 7.5)
- [CVE-2020-16169](https://insights.sbomify.com/CVE-2020-16169/): Auth bypass in robotemi:robox os (critical 9.8)
- [CVE-2020-16168](https://insights.sbomify.com/CVE-2020-16168/): Auth bypass in robotemi:temi firmware (medium 6.5)
- [CVE-2020-16167](https://insights.sbomify.com/CVE-2020-16167/): Auth bypass in robotemi:launcher os (critical 9.1)
- [CVE-2020-16166](https://insights.sbomify.com/CVE-2020-16166/): Information disclosure in canonical:ubuntu linux (low 3.7)
- [CVE-2020-16165](https://insights.sbomify.com/CVE-2020-16165/): SQL injection in bladex:springblade (critical 9.8)
- [CVE-2020-16164](https://insights.sbomify.com/CVE-2020-16164/): Security feature bypass in ripe:rpki validator 3 (high 7.4)
- [CVE-2020-16163](https://insights.sbomify.com/CVE-2020-16163/): Security feature bypass in ripe:rpki validator 3 (critical 9.1)
- [CVE-2020-16162](https://insights.sbomify.com/CVE-2020-16162/): Security feature bypass in ripe:rpki validator 3 (high 7.5)
- [CVE-2020-16161](https://insights.sbomify.com/CVE-2020-16161/): Denial of service in gopro:gpmf-parser (high 7.5)
- [CVE-2020-16160](https://insights.sbomify.com/CVE-2020-16160/): Denial of service in gopro:gpmf-parser (high 7.5)
- [CVE-2020-1616](https://insights.sbomify.com/CVE-2020-1616/): JATP Series: JATP Is susceptible to slow brute force attacks on the SSH service. (medium 5.3)
- [CVE-2020-16159](https://insights.sbomify.com/CVE-2020-16159/): Memory corruption in gopro:gpmf-parser (critical 9.1)
- [CVE-2020-16158](https://insights.sbomify.com/CVE-2020-16158/): Memory corruption in gopro:gpmf-parser (high 8.8)
- [CVE-2020-16157](https://insights.sbomify.com/CVE-2020-16157/): Cross-site scripting in nagios:log server (medium 5.4)
- [CVE-2020-16156](https://insights.sbomify.com/CVE-2020-16156/): Security feature bypass in fedoraproject:fedora (high 7.8)
- [CVE-2020-16155](https://insights.sbomify.com/CVE-2020-16155/): Security feature bypass in cpan\:\ (medium 6.5)
- [CVE-2020-16154](https://insights.sbomify.com/CVE-2020-16154/): Security feature bypass in app\:\ (high 7.8)
- [CVE-2020-16152](https://insights.sbomify.com/CVE-2020-16152/): Code injection in extremenetworks:aerohive netconfig (critical 9.8)
- [CVE-2020-16150](https://insights.sbomify.com/CVE-2020-16150/): Weak cryptography in arm:mbed tls (medium 5.5)
- [CVE-2020-1615](https://insights.sbomify.com/CVE-2020-1615/): Junos OS: vMX: Default credentials supplied in vMX configuration (critical 9.8)
- [CVE-2020-16148](https://insights.sbomify.com/CVE-2020-16148/): Command injection in telmat:accesslog firmware (high 7.2)
- [CVE-2020-16147](https://insights.sbomify.com/CVE-2020-16147/): Command injection in telmat:accesslog firmware (critical 9.8)
- [CVE-2020-16146](https://insights.sbomify.com/CVE-2020-16146/): Memory corruption in espressif:esp-idf (high 7.5)
- [CVE-2020-16145](https://insights.sbomify.com/CVE-2020-16145/): Cross-site scripting in fedoraproject:fedora (medium 6.1)
- [CVE-2020-16144](https://insights.sbomify.com/CVE-2020-16144/): Misconfiguration in owncloud:files antivirus (medium 5.7)
- [CVE-2020-16143](https://insights.sbomify.com/CVE-2020-16143/): Other in seafile:seafile-client (high 7.8)
- [CVE-2020-16142](https://insights.sbomify.com/CVE-2020-16142/): Memory corruption in mercedes-benz:comand (low 3.5)
- [CVE-2020-16140](https://insights.sbomify.com/CVE-2020-16140/): Cross-site scripting in thembay:greenmart (medium 6.1)
- [CVE-2020-1614](https://insights.sbomify.com/CVE-2020-1614/): NFX250 Series: Hardcoded credentials in the vSRX VNF instance. (critical 10.0)
- [CVE-2020-16139](https://insights.sbomify.com/CVE-2020-16139/): Denial of service in cisco:unified ip conference station 7937g firmware (high 7.5)
- [CVE-2020-16138](https://insights.sbomify.com/CVE-2020-16138/): Denial of service in cisco:unified ip conference station 7937g firmware (high 7.5)
- [CVE-2020-16137](https://insights.sbomify.com/CVE-2020-16137/): Privilege escalation in cisco:unified ip conference station 7937g firmware (critical 9.8)
- [CVE-2020-16136](https://insights.sbomify.com/CVE-2020-16136/): Path traversal in tgstation13:tgstation-server (high 7.7)
- [CVE-2020-16135](https://insights.sbomify.com/CVE-2020-16135/): Null dereference in canonical:ubuntu linux (medium 5.9)
- [CVE-2020-16134](https://insights.sbomify.com/CVE-2020-16134/): Privilege escalation in swisscom:internet-box 2 firmware (high 8.0)
- [CVE-2020-16131](https://insights.sbomify.com/CVE-2020-16131/): Cross-site scripting in tiki:tiki (medium 6.1)
- [CVE-2020-1613](https://insights.sbomify.com/CVE-2020-1613/): Junos OS: BGP session termination upon receipt of specific BGP FlowSpec advertisement. (high 8.6)
- [CVE-2020-16128](https://insights.sbomify.com/CVE-2020-16128/): Aptdaemon error messages disclosed file existence to unprivileged users via dbus properties (low 3.8)
- [CVE-2020-16127](https://insights.sbomify.com/CVE-2020-16127/): accountsservice .pam_environment infinite loop (low 2.8)
- [CVE-2020-16126](https://insights.sbomify.com/CVE-2020-16126/): accountsservice drops ruid, allows unprivileged users to send it signals (low 3.3)
- [CVE-2020-16125](https://insights.sbomify.com/CVE-2020-16125/): gdm3 would start gnome-initial-setup if it cannot contact accountservice (high 7.2)
- [CVE-2020-16124](https://insights.sbomify.com/CVE-2020-16124/): Integer overflow in ROS communications library (high 7.3)
- [CVE-2020-16123](https://insights.sbomify.com/CVE-2020-16123/): Bypass of snapd pulseaudio restrictions (medium 4.4)
- [CVE-2020-16122](https://insights.sbomify.com/CVE-2020-16122/): Packagekit's apt backend lets user install untrusted local packages (high 8.2)
- [CVE-2020-16121](https://insights.sbomify.com/CVE-2020-16121/): PackageKit error messages leak presence and mimetype of files to unprivileged users (low 3.3)
- [CVE-2020-16120](https://insights.sbomify.com/CVE-2020-16120/): Unprivileged overlay + shiftfs read access (medium 5.1)
- [CVE-2020-16119](https://insights.sbomify.com/CVE-2020-16119/): DCCP CCID structure use-after-free (medium 6.3)
- [CVE-2020-16118](https://insights.sbomify.com/CVE-2020-16118/): Null dereference in gnome:balsa (high 7.5)
- [CVE-2020-16117](https://insights.sbomify.com/CVE-2020-16117/): Null dereference in debian:debian linux (medium 5.9)
- [CVE-2020-16116](https://insights.sbomify.com/CVE-2020-16116/): Path traversal in canonical:ubuntu linux (low 3.3)
- [CVE-2020-1611](https://insights.sbomify.com/CVE-2020-1611/): Junos Space: Malicious HTTP packets sent to Junos Space allow an attacker to view all files on the device. (medium 6.5)
- [CVE-2020-16104](https://insights.sbomify.com/CVE-2020-16104/): SQL injection in Command Centre (high 8.2)
- [CVE-2020-16103](https://insights.sbomify.com/CVE-2020-16103/): Memory corruption in Command Centre (high 8.8)
- [CVE-2020-16102](https://insights.sbomify.com/CVE-2020-16102/): Auth bypass in Command Centre (high 7.1)
- [CVE-2020-16101](https://insights.sbomify.com/CVE-2020-16101/): Memory corruption in Command Centre (high 7.5)
- [CVE-2020-16100](https://insights.sbomify.com/CVE-2020-16100/): Denial of service in Command Centre (high 7.5)
- [CVE-2020-16099](https://insights.sbomify.com/CVE-2020-16099/): Denial of service in Command Centre (medium 4.3)
- [CVE-2020-16098](https://insights.sbomify.com/CVE-2020-16098/): Auth bypass in Command Centre (critical 9.8)
- [CVE-2020-16097](https://insights.sbomify.com/CVE-2020-16097/): Information disclosure in Command Centre (high 7.3)
- [CVE-2020-16096](https://insights.sbomify.com/CVE-2020-16096/): Missing authorization in Command Centre (critical 9.9)
- [CVE-2020-16095](https://insights.sbomify.com/CVE-2020-16095/): Cross-site Scripting vulnerability in Kitodo.Presentation (medium 6.1)
- [CVE-2020-16094](https://insights.sbomify.com/CVE-2020-16094/): Denial of service in claws-mail:claws-mail (high 7.5)
- [CVE-2020-16093](https://insights.sbomify.com/CVE-2020-16093/): Security feature bypass in debian:debian linux (high 7.5)
- [CVE-2020-16092](https://insights.sbomify.com/CVE-2020-16092/): Denial of service in canonical:ubuntu linux (low 3.8)
- [CVE-2020-1609](https://insights.sbomify.com/CVE-2020-1609/): Command injection in Junos OS (high 8.8)
- [CVE-2020-16088](https://insights.sbomify.com/CVE-2020-16088/): Auth bypass in openbsd:openbsd (critical 9.8)
- [CVE-2020-16087](https://insights.sbomify.com/CVE-2020-16087/): Command injection in vng:zalo desktop (high 8.6)
- [CVE-2020-1608](https://insights.sbomify.com/CVE-2020-1608/): Junos OS: MX Series: In BBE configurations, receipt of a specific MPLS or IPv6 packet causes a Denial of Service (high 7.5)
- [CVE-2020-1607](https://insights.sbomify.com/CVE-2020-1607/): Junos OS: Cross-Site Scripting (XSS) in J-Web (high 7.5)
- [CVE-2020-1606](https://insights.sbomify.com/CVE-2020-1606/): Junos OS: Path traversal vulnerability in J-Web (medium 5.4)
- [CVE-2020-1605](https://insights.sbomify.com/CVE-2020-1605/): Command injection in Junos OS (high 8.8)
- [CVE-2020-16048](https://insights.sbomify.com/CVE-2020-16048/): Memory corruption in google:angle (medium 6.5)
- [CVE-2020-16046](https://insights.sbomify.com/CVE-2020-16046/): Cross-site scripting in Chrome (medium 6.1)
- [CVE-2020-16045](https://insights.sbomify.com/CVE-2020-16045/): Use after free in Chrome (critical 9.6)
- [CVE-2020-16044](https://insights.sbomify.com/CVE-2020-16044/): Use after free in Chrome (high 8.8)
- [CVE-2020-16043](https://insights.sbomify.com/CVE-2020-16043/): Security feature bypass in Chrome (high 8.8)
- [CVE-2020-16042](https://insights.sbomify.com/CVE-2020-16042/): Information disclosure in Chrome (medium 6.5)
- [CVE-2020-16041](https://insights.sbomify.com/CVE-2020-16041/): Memory corruption in Chrome (high 8.1)
- [CVE-2020-16040](https://insights.sbomify.com/CVE-2020-16040/): Memory corruption in Chrome (medium 6.5)
- [CVE-2020-1604](https://insights.sbomify.com/CVE-2020-1604/): Junos OS: EX4300/EX4600/QFX3500/QFX5100 Series: Stateless IP firewall filter may fail to evaluate certain packets (medium 6.5)
- [CVE-2020-16039](https://insights.sbomify.com/CVE-2020-16039/): Use after free in Chrome (high 8.8)
- [CVE-2020-16038](https://insights.sbomify.com/CVE-2020-16038/): Use after free in Chrome (high 8.8)
- [CVE-2020-16037](https://insights.sbomify.com/CVE-2020-16037/): Use after free in Chrome (high 8.8)
- [CVE-2020-16036](https://insights.sbomify.com/CVE-2020-16036/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2020-16035](https://insights.sbomify.com/CVE-2020-16035/): Security feature bypass in Chrome (high 8.8)
- [CVE-2020-16034](https://insights.sbomify.com/CVE-2020-16034/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2020-16033](https://insights.sbomify.com/CVE-2020-16033/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2020-16032](https://insights.sbomify.com/CVE-2020-16032/): Other in Chrome (medium 4.3)
- [CVE-2020-16031](https://insights.sbomify.com/CVE-2020-16031/): Other in Chrome (medium 4.3)
- [CVE-2020-16030](https://insights.sbomify.com/CVE-2020-16030/): Cross-site scripting in Chrome (medium 6.1)
- [CVE-2020-1603](https://insights.sbomify.com/CVE-2020-1603/): Junos OS: Improper handling of specific IPv6 packets sent by clients eventually kernel crash (vmcore) the device. (high 8.6)
- [CVE-2020-16029](https://insights.sbomify.com/CVE-2020-16029/): Security feature bypass in Chrome (high 8.8)
- [CVE-2020-16028](https://insights.sbomify.com/CVE-2020-16028/): Memory corruption in Chrome (high 8.8)
- [CVE-2020-16027](https://insights.sbomify.com/CVE-2020-16027/): Missing authorization in Chrome (medium 6.5)
- [CVE-2020-16026](https://insights.sbomify.com/CVE-2020-16026/): Use after free in Chrome (high 8.8)
- [CVE-2020-16025](https://insights.sbomify.com/CVE-2020-16025/): Memory corruption in Chrome (critical 9.6)
- [CVE-2020-16024](https://insights.sbomify.com/CVE-2020-16024/): Memory corruption in Chrome (critical 9.6)
- [CVE-2020-16023](https://insights.sbomify.com/CVE-2020-16023/): Use after free in Chrome (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/151/