# Vulnerabilities published in 2020


- [CVE-2020-15823](https://insights.sbomify.com/CVE-2020-15823/): Server-side request forgery in jetbrains:youtrack (high 7.5)
- [CVE-2020-15822](https://insights.sbomify.com/CVE-2020-15822/): Server-side request forgery in jetbrains:youtrack (high 7.3)
- [CVE-2020-15821](https://insights.sbomify.com/CVE-2020-15821/): Missing authorization in jetbrains:youtrack (medium 6.5)
- [CVE-2020-15820](https://insights.sbomify.com/CVE-2020-15820/): Information disclosure in jetbrains:youtrack (medium 5.3)
- [CVE-2020-1582](https://insights.sbomify.com/CVE-2020-1582/): Microsoft Access Remote Code Execution Vulnerability (high 7.8)
- [CVE-2020-15819](https://insights.sbomify.com/CVE-2020-15819/): Server-side request forgery in jetbrains:youtrack (medium 5.3)
- [CVE-2020-15818](https://insights.sbomify.com/CVE-2020-15818/): Information disclosure in jetbrains:youtrack (medium 5.3)
- [CVE-2020-15817](https://insights.sbomify.com/CVE-2020-15817/): Missing authorization in jetbrains:youtrack (high 8.8)
- [CVE-2020-15816](https://insights.sbomify.com/CVE-2020-15816/): Code injection in westerndigital:wd discovery (high 8.8)
- [CVE-2020-15813](https://insights.sbomify.com/CVE-2020-15813/): Improper Certificate Validation in Graylog (high 8.1)
- [CVE-2020-15811](https://insights.sbomify.com/CVE-2020-15811/): Security feature bypass in canonical:ubuntu linux (medium 6.5)
- [CVE-2020-15810](https://insights.sbomify.com/CVE-2020-15810/): Other in canonical:ubuntu linux (medium 6.5)
- [CVE-2020-1581](https://insights.sbomify.com/CVE-2020-1581/): Microsoft Office Click-to-Run Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-15809](https://insights.sbomify.com/CVE-2020-15809/): Server-side request forgery in spinetix:diva firmware (medium 6.5)
- [CVE-2020-15807](https://insights.sbomify.com/CVE-2020-15807/): Null dereference in gnu:libredwg (medium 6.5)
- [CVE-2020-15806](https://insights.sbomify.com/CVE-2020-15806/): Denial of service in codesys:control for beaglebone (high 7.5)
- [CVE-2020-15803](https://insights.sbomify.com/CVE-2020-15803/): Cross-site scripting in debian:debian linux (medium 6.1)
- [CVE-2020-15802](https://insights.sbomify.com/CVE-2020-15802/): Auth bypass in bluetooth:bluetooth core specification (medium 5.9)
- [CVE-2020-15801](https://insights.sbomify.com/CVE-2020-15801/): Security feature bypass in netapp:max data (critical 9.8)
- [CVE-2020-15800](https://insights.sbomify.com/CVE-2020-15800/): Memory corruption in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (critical 9.8)
- [CVE-2020-1580](https://insights.sbomify.com/CVE-2020-1580/): Microsoft Office SharePoint XSS Vulnerability (medium 5.4)
- [CVE-2020-15799](https://insights.sbomify.com/CVE-2020-15799/): Missing authorization in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (medium 6.5)
- [CVE-2020-15798](https://insights.sbomify.com/CVE-2020-15798/): Auth bypass in SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (critical 9.8)
- [CVE-2020-15797](https://insights.sbomify.com/CVE-2020-15797/): Privilege escalation in DCA Vantage Analyzer (medium 6.8)
- [CVE-2020-15796](https://insights.sbomify.com/CVE-2020-15796/): Denial of service in SIMATIC ET 200SP Open Controller (incl. SIPLUS variants) (high 7.5)
- [CVE-2020-15795](https://insights.sbomify.com/CVE-2020-15795/): Memory corruption in APOGEE PXC Compact (BACnet) (high 8.1)
- [CVE-2020-15794](https://insights.sbomify.com/CVE-2020-15794/): Information disclosure in Desigo Insight (medium 4.3)
- [CVE-2020-15793](https://insights.sbomify.com/CVE-2020-15793/): Other in Desigo Insight (medium 5.4)
- [CVE-2020-15792](https://insights.sbomify.com/CVE-2020-15792/): SQL injection in Desigo Insight (medium 4.3)
- [CVE-2020-15791](https://insights.sbomify.com/CVE-2020-15791/): Weak cryptography in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (medium 6.5)
- [CVE-2020-15790](https://insights.sbomify.com/CVE-2020-15790/): Information disclosure in Spectrum Power 4 (medium 5.3)
- [CVE-2020-1579](https://insights.sbomify.com/CVE-2020-1579/): Windows Function Discovery SSDP Provider Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-15789](https://insights.sbomify.com/CVE-2020-15789/): Cross-site request forgery in Polarion Subversion Webclient (high 8.1)
- [CVE-2020-15788](https://insights.sbomify.com/CVE-2020-15788/): Cross-site scripting in Polarion Subversion Webclient (medium 6.1)
- [CVE-2020-15787](https://insights.sbomify.com/CVE-2020-15787/): Auth bypass in SIMATIC HMI Unified Comfort Panels (critical 9.8)
- [CVE-2020-15786](https://insights.sbomify.com/CVE-2020-15786/): Auth bypass in SIMATIC HMI Basic Panels 2nd Generation (incl. SIPLUS variants) (critical 9.8)
- [CVE-2020-15785](https://insights.sbomify.com/CVE-2020-15785/): Information disclosure in Siveillance Video Client (medium 5.3)
- [CVE-2020-15784](https://insights.sbomify.com/CVE-2020-15784/): Information disclosure in Spectrum Power 4 (medium 5.3)
- [CVE-2020-15783](https://insights.sbomify.com/CVE-2020-15783/): Denial of service in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (high 7.5)
- [CVE-2020-15782](https://insights.sbomify.com/CVE-2020-15782/): Memory corruption in SIMATIC Drive Controller family (critical 9.8)
- [CVE-2020-15781](https://insights.sbomify.com/CVE-2020-15781/): Cross-site scripting in SICAM WEB firmware for SICAM A8000 RTUs (critical 9.6)
- [CVE-2020-15780](https://insights.sbomify.com/CVE-2020-15780/): Security feature bypass in canonical:ubuntu linux (medium 6.7)
- [CVE-2020-1578](https://insights.sbomify.com/CVE-2020-1578/): Windows Kernel Information Disclosure Vulnerability (medium 4.7)
- [CVE-2020-15779](https://insights.sbomify.com/CVE-2020-15779/): Path Traversal in socket.io-file (high 7.5)
- [CVE-2020-15778](https://insights.sbomify.com/CVE-2020-15778/): Command injection in broadcom:fabric operating system (high 7.8)
- [CVE-2020-15777](https://insights.sbomify.com/CVE-2020-15777/): Maven Extension plugin for Gradle Enterprise vulnerable to Deserialization of Untrusted Data (high 7.8)
- [CVE-2020-15776](https://insights.sbomify.com/CVE-2020-15776/): Cross-site request forgery in gradle:enterprise (high 8.8)
- [CVE-2020-15775](https://insights.sbomify.com/CVE-2020-15775/): Information disclosure in gradle:enterprise (high 7.5)
- [CVE-2020-15774](https://insights.sbomify.com/CVE-2020-15774/): Auth bypass in gradle:enterprise (medium 6.8)
- [CVE-2020-15773](https://insights.sbomify.com/CVE-2020-15773/): Security feature bypass in gradle:enterprise (medium 6.5)
- [CVE-2020-15772](https://insights.sbomify.com/CVE-2020-15772/): XML external entity in gradle:enterprise (medium 4.9)
- [CVE-2020-15771](https://insights.sbomify.com/CVE-2020-15771/): Cross-site request forgery in gradle:enterprise (high 7.5)
- [CVE-2020-15770](https://insights.sbomify.com/CVE-2020-15770/): Auth bypass in gradle:enterprise (medium 5.5)
- [CVE-2020-1577](https://insights.sbomify.com/CVE-2020-1577/): DirectWrite Information Disclosure Vulnerability (high 7.8)
- [CVE-2020-15769](https://insights.sbomify.com/CVE-2020-15769/): Cross-site scripting in gradle:enterprise (medium 6.1)
- [CVE-2020-15768](https://insights.sbomify.com/CVE-2020-15768/): Information disclosure in gradle:enterprise (high 7.5)
- [CVE-2020-15767](https://insights.sbomify.com/CVE-2020-15767/): Cross-site request forgery in gradle:enterprise (medium 5.3)
- [CVE-2020-1576](https://insights.sbomify.com/CVE-2020-1576/): Microsoft SharePoint Remote Code Execution Vulnerability (high 8.5)
- [CVE-2020-1575](https://insights.sbomify.com/CVE-2020-1575/): Microsoft Office SharePoint XSS Vulnerability (medium 5.4)
- [CVE-2020-15744](https://insights.sbomify.com/CVE-2020-15744/): Stack-based buffer overflow leading to RCE in Victure Camera (critical 9.6)
- [CVE-2020-1574](https://insights.sbomify.com/CVE-2020-1574/): Microsoft Windows Codecs Library Remote Code Execution Vulnerability (medium 5.5)
- [CVE-2020-15734](https://insights.sbomify.com/CVE-2020-15734/): Same-origin policy vulnerability in Bitdefender Safepay (medium 5.5)
- [CVE-2020-15733](https://insights.sbomify.com/CVE-2020-15733/): URL Spoofing Vulnerability in Bitdefender SafePay (VA-8958) (medium 6.5)
- [CVE-2020-15732](https://insights.sbomify.com/CVE-2020-15732/): Security feature bypass in Antivirus Plus (medium 6.5)
- [CVE-2020-15731](https://insights.sbomify.com/CVE-2020-15731/): Local Privilege Escalation in Bitdefender Engines (VA-8953) (low 3.2)
- [CVE-2020-1573](https://insights.sbomify.com/CVE-2020-1573/): Microsoft Office SharePoint XSS Vulnerability (medium 5.5)
- [CVE-2020-15724](https://insights.sbomify.com/CVE-2020-15724/): Privilege escalation in 360 Total Security (high 7.8)
- [CVE-2020-15723](https://insights.sbomify.com/CVE-2020-15723/): Privilege escalation in 360 Total Security (high 7.8)
- [CVE-2020-15722](https://insights.sbomify.com/CVE-2020-15722/): Privilege escalation in 360 Total Security (high 7.8)
- [CVE-2020-15721](https://insights.sbomify.com/CVE-2020-15721/): Cross-site Scripting in RosarioSIS (medium 6.1)
- [CVE-2020-15720](https://insights.sbomify.com/CVE-2020-15720/): Security feature bypass in dogtagpki:dogtagpki (medium 6.8)
- [CVE-2020-15719](https://insights.sbomify.com/CVE-2020-15719/): Security feature bypass in mcafee:policy auditor (medium 4.2)
- [CVE-2020-15718](https://insights.sbomify.com/CVE-2020-15718/): Cross-site scripting in rosariosis:rosariosis (medium 6.1)
- [CVE-2020-15717](https://insights.sbomify.com/CVE-2020-15717/): Cross-site scripting in rosariosis:rosariosis (medium 6.1)
- [CVE-2020-15716](https://insights.sbomify.com/CVE-2020-15716/): Cross-site scripting in rosariosis:rosariosis (medium 6.1)
- [CVE-2020-15715](https://insights.sbomify.com/CVE-2020-15715/): Code injection in rconfig:rconfig (critical 9.9)
- [CVE-2020-15714](https://insights.sbomify.com/CVE-2020-15714/): SQL injection in rconfig:rconfig (high 8.8)
- [CVE-2020-15713](https://insights.sbomify.com/CVE-2020-15713/): SQL injection in rconfig:rconfig (high 8.8)
- [CVE-2020-15712](https://insights.sbomify.com/CVE-2020-15712/): Path traversal in rconfig:rconfig (medium 4.3)
- [CVE-2020-15711](https://insights.sbomify.com/CVE-2020-15711/): Cross-site request forgery in misp-project:misp (high 8.8)
- [CVE-2020-15710](https://insights.sbomify.com/CVE-2020-15710/): Potential double-free in pulseaudio (medium 5.3)
- [CVE-2020-1571](https://insights.sbomify.com/CVE-2020-1571/): Windows Setup Elevation of Privilege Vulnerability (high 7.3)
- [CVE-2020-15709](https://insights.sbomify.com/CVE-2020-15709/): add-apt-repository print ASNI terminal codes (medium 5.5)
- [CVE-2020-15708](https://insights.sbomify.com/CVE-2020-15708/): Libvirt Service Arbitrary File Write Privilege Escalation Vulnerability (critical 9.3)
- [CVE-2020-15707](https://insights.sbomify.com/CVE-2020-15707/): GRUB2 contained integer overflows when handling the initrd command, leading to a heap-based buffer overflow. (medium 5.7)
- [CVE-2020-15706](https://insights.sbomify.com/CVE-2020-15706/): Use after free in grub2 in Ubuntu (medium 6.4)
- [CVE-2020-15705](https://insights.sbomify.com/CVE-2020-15705/): GRUB2: avoid loading unsigned kernels when GRUB is booted directly under secureboot without shim (medium 6.4)
- [CVE-2020-15704](https://insights.sbomify.com/CVE-2020-15704/): pppd arbitrary file read information disclosure vulnerability (medium 5.5)
- [CVE-2020-15703](https://insights.sbomify.com/CVE-2020-15703/): aptdaemon allows unprivileged users to test for the presence of local files via the transaction Locale property (medium 4.0)
- [CVE-2020-15702](https://insights.sbomify.com/CVE-2020-15702/): TOCTOU in apport (high 7.0)
- [CVE-2020-15701](https://insights.sbomify.com/CVE-2020-15701/): Unhandled exception in apport (medium 5.5)
- [CVE-2020-15700](https://insights.sbomify.com/CVE-2020-15700/): Cross-site request forgery in joomla:joomla\! (medium 6.3)
- [CVE-2020-1570](https://insights.sbomify.com/CVE-2020-1570/): Scripting Engine Memory Corruption Vulnerability (high 7.5)
- [CVE-2020-15699](https://insights.sbomify.com/CVE-2020-15699/): Other in joomla:joomla\! (medium 5.3)
- [CVE-2020-15698](https://insights.sbomify.com/CVE-2020-15698/): Information disclosure in joomla:joomla\! (medium 5.3)
- [CVE-2020-15697](https://insights.sbomify.com/CVE-2020-15697/): Missing authorization in joomla:joomla\! (medium 4.3)
- [CVE-2020-15696](https://insights.sbomify.com/CVE-2020-15696/): Cross-site scripting in joomla:joomla\! (medium 6.1)
- [CVE-2020-15695](https://insights.sbomify.com/CVE-2020-15695/): Cross-site request forgery in joomla:joomla\! (medium 6.3)
- [CVE-2020-15694](https://insights.sbomify.com/CVE-2020-15694/): Other in nim-lang:nim (high 7.5)
- [CVE-2020-15693](https://insights.sbomify.com/CVE-2020-15693/): Other in nim-lang:nim (medium 6.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/154/