# Vulnerabilities published in 2020


- [CVE-2020-15599](https://insights.sbomify.com/CVE-2020-15599/): Cross-site scripting in victor cms project:victor cms (medium 6.1)
- [CVE-2020-15598](https://insights.sbomify.com/CVE-2020-15598/): Denial of service in debian:debian linux (high 7.5)
- [CVE-2020-15597](https://insights.sbomify.com/CVE-2020-15597/): Cross-site scripting in soplanning:soplanning (medium 5.4)
- [CVE-2020-15596](https://insights.sbomify.com/CVE-2020-15596/): Information disclosure in hp:elite x2 1012 g1 firmware (medium 6.7)
- [CVE-2020-15595](https://insights.sbomify.com/CVE-2020-15595/): Information disclosure in zohocorp:manageengine application control plus (medium 4.3)
- [CVE-2020-15594](https://insights.sbomify.com/CVE-2020-15594/): Server-side request forgery in zohocorp:manageengine application control plus (medium 4.3)
- [CVE-2020-15593](https://insights.sbomify.com/CVE-2020-15593/): Privilege escalation in riverbed:steelcentral aternity agent (high 7.8)
- [CVE-2020-15592](https://insights.sbomify.com/CVE-2020-15592/): Path traversal in riverbed:steelcentral aternity agent (high 7.5)
- [CVE-2020-15591](https://insights.sbomify.com/CVE-2020-15591/): Code injection in uni-stuttgart:frams\' fast file exchange (critical 9.8)
- [CVE-2020-15590](https://insights.sbomify.com/CVE-2020-15590/): Security feature bypass in privateinternetaccess:private internet access vpn client (high 7.5)
- [CVE-2020-1559](https://insights.sbomify.com/CVE-2020-1559/): Windows Storage Services Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-15589](https://insights.sbomify.com/CVE-2020-15589/): Security feature bypass in zohocorp:manageengine desktop central (high 8.1)
- [CVE-2020-15588](https://insights.sbomify.com/CVE-2020-15588/): Integer overflow in zohocorp:manageengine desktop central (critical 9.8)
- [CVE-2020-15586](https://insights.sbomify.com/CVE-2020-15586/): Race condition in cloudfoundry:cf-deployment (medium 5.9)
- [CVE-2020-15584](https://insights.sbomify.com/CVE-2020-15584/): Memory corruption in google:android (medium 5.5)
- [CVE-2020-15583](https://insights.sbomify.com/CVE-2020-15583/): Path traversal in google:android (medium 5.5)
- [CVE-2020-15582](https://insights.sbomify.com/CVE-2020-15582/): Memory corruption in google:android (medium 5.5)
- [CVE-2020-15581](https://insights.sbomify.com/CVE-2020-15581/): Information disclosure in google:android (medium 5.3)
- [CVE-2020-15580](https://insights.sbomify.com/CVE-2020-15580/): Security feature bypass in google:android (medium 5.5)
- [CVE-2020-1558](https://insights.sbomify.com/CVE-2020-1558/): Jet Database Engine Remote Code Execution Vulnerability (high 7.8)
- [CVE-2020-15579](https://insights.sbomify.com/CVE-2020-15579/): Security feature bypass in google:android (high 7.5)
- [CVE-2020-15578](https://insights.sbomify.com/CVE-2020-15578/): Missing authorization in google:android (medium 5.5)
- [CVE-2020-15577](https://insights.sbomify.com/CVE-2020-15577/): Other in google:android (medium 5.5)
- [CVE-2020-15576](https://insights.sbomify.com/CVE-2020-15576/): Information disclosure in solarwinds:serv-u (high 7.5)
- [CVE-2020-15575](https://insights.sbomify.com/CVE-2020-15575/): Cross-site scripting in solarwinds:serv-u (medium 6.1)
- [CVE-2020-15574](https://insights.sbomify.com/CVE-2020-15574/): Security feature bypass in solarwinds:serv-u (high 7.5)
- [CVE-2020-15573](https://insights.sbomify.com/CVE-2020-15573/): Cross-site scripting in solarwinds:serv-u (medium 6.1)
- [CVE-2020-15572](https://insights.sbomify.com/CVE-2020-15572/): Memory corruption in torproject:tor (high 7.5)
- [CVE-2020-15570](https://insights.sbomify.com/CVE-2020-15570/): Denial of service in whoopsie project:whoopsie (medium 5.5)
- [CVE-2020-1557](https://insights.sbomify.com/CVE-2020-1557/): Jet Database Engine Remote Code Execution Vulnerability (high 7.3)
- [CVE-2020-15569](https://insights.sbomify.com/CVE-2020-15569/): Use after free in debian:debian linux (medium 5.5)
- [CVE-2020-15568](https://insights.sbomify.com/CVE-2020-15568/): Code injection in terra-master:tos (critical 9.8)
- [CVE-2020-15567](https://insights.sbomify.com/CVE-2020-15567/): Race condition in debian:debian linux (high 7.8)
- [CVE-2020-15566](https://insights.sbomify.com/CVE-2020-15566/): Denial of service in debian:debian linux (medium 6.5)
- [CVE-2020-15565](https://insights.sbomify.com/CVE-2020-15565/): Other in debian:debian linux (high 8.8)
- [CVE-2020-15564](https://insights.sbomify.com/CVE-2020-15564/): Denial of service in debian:debian linux (medium 6.5)
- [CVE-2020-15563](https://insights.sbomify.com/CVE-2020-15563/): Null dereference in debian:debian linux (medium 6.5)
- [CVE-2020-15562](https://insights.sbomify.com/CVE-2020-15562/): Cross-site scripting in debian:debian linux (medium 6.1)
- [CVE-2020-1556](https://insights.sbomify.com/CVE-2020-1556/): Windows WalletService Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-1555](https://insights.sbomify.com/CVE-2020-1555/): Scripting Engine Memory Corruption Vulnerability (high 8.8)
- [CVE-2020-15543](https://insights.sbomify.com/CVE-2020-15543/): Other in solarwinds:serv-u ftp server (critical 9.8)
- [CVE-2020-15542](https://insights.sbomify.com/CVE-2020-15542/): Other in solarwinds:serv-u ftp server (critical 9.8)
- [CVE-2020-15541](https://insights.sbomify.com/CVE-2020-15541/): Command injection in solarwinds:serv-u ftp server (critical 9.8)
- [CVE-2020-15540](https://insights.sbomify.com/CVE-2020-15540/): SQL injection in we-com:opendata cms (critical 9.8)
- [CVE-2020-1554](https://insights.sbomify.com/CVE-2020-1554/): Media Foundation Memory Corruption Vulnerability (high 7.8)
- [CVE-2020-15539](https://insights.sbomify.com/CVE-2020-15539/): SQL injection in we-com:municipality portal cms (critical 9.8)
- [CVE-2020-15538](https://insights.sbomify.com/CVE-2020-15538/): Cross-site scripting in we-com:municipality portal cms (medium 6.1)
- [CVE-2020-15537](https://insights.sbomify.com/CVE-2020-15537/): Cross-site scripting in vanguard project:vanguard (medium 6.1)
- [CVE-2020-15536](https://insights.sbomify.com/CVE-2020-15536/): Cross-site scripting in online hotel booking system project:online hotel booking system (medium 6.1)
- [CVE-2020-15535](https://insights.sbomify.com/CVE-2020-15535/): Cross-site scripting in bestsoftinc:car rental system (medium 6.1)
- [CVE-2020-15533](https://insights.sbomify.com/CVE-2020-15533/): SQL injection in zohocorp:manageengine applications manager (critical 9.8)
- [CVE-2020-15532](https://insights.sbomify.com/CVE-2020-15532/): Memory corruption in silabs:bluetooth low energy software development kit (medium 6.5)
- [CVE-2020-15531](https://insights.sbomify.com/CVE-2020-15531/): Memory corruption in silabs:bluetooth low energy software development kit (high 8.8)
- [CVE-2020-15530](https://insights.sbomify.com/CVE-2020-15530/): Race condition in valvesoftware:steam client (high 7.8)
- [CVE-2020-1553](https://insights.sbomify.com/CVE-2020-1553/): Windows Runtime Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-15529](https://insights.sbomify.com/CVE-2020-15529/): Privilege escalation in gog:galaxy (high 7.8)
- [CVE-2020-15528](https://insights.sbomify.com/CVE-2020-15528/): Privilege escalation in gog:galaxy (high 7.8)
- [CVE-2020-15526](https://insights.sbomify.com/CVE-2020-15526/): Security feature bypass in red-gate:sql monitor (medium 5.9)
- [CVE-2020-15525](https://insights.sbomify.com/CVE-2020-15525/): Missing authorization in gitlab:gitlab (medium 5.3)
- [CVE-2020-15523](https://insights.sbomify.com/CVE-2020-15523/): Other in netapp:snapcenter (high 7.8)
- [CVE-2020-15522](https://insights.sbomify.com/CVE-2020-15522/): Timing based private key exposure in Bouncy Castle (medium 5.9)
- [CVE-2020-15521](https://insights.sbomify.com/CVE-2020-15521/): Cross-site scripting in zohocorp:manageengine applications manager (medium 6.1)
- [CVE-2020-1552](https://insights.sbomify.com/CVE-2020-1552/): Windows Work Folder Service Elevation of Privilege Vulnerability (high 8.0)
- [CVE-2020-15518](https://insights.sbomify.com/CVE-2020-15518/): Missing authorization in veeam:veeam availability suite (high 8.8)
- [CVE-2020-15517](https://insights.sbomify.com/CVE-2020-15517/): ke_search for Typo3 XSS Vulnerability (medium 5.4)
- [CVE-2020-15516](https://insights.sbomify.com/CVE-2020-15516/): Cross-Site Request Forgery in mm_forum (medium 5.4)
- [CVE-2020-15515](https://insights.sbomify.com/CVE-2020-15515/): Remote code execution in turn extension for TYPO3 (high 8.8)
- [CVE-2020-15514](https://insights.sbomify.com/CVE-2020-15514/): jh_captcha for Typo3 XSS Vulnerability (medium 5.4)
- [CVE-2020-15513](https://insights.sbomify.com/CVE-2020-15513/): Incorrect access control in typo3_forum (medium 5.3)
- [CVE-2020-15511](https://insights.sbomify.com/CVE-2020-15511/): Auth bypass in hashicorp:terraform enterprise (medium 5.3)
- [CVE-2020-1551](https://insights.sbomify.com/CVE-2020-1551/): Windows Backup Engine Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-15509](https://insights.sbomify.com/CVE-2020-15509/): Weak cryptography in nordicsemi:android ble library (medium 6.5)
- [CVE-2020-15507](https://insights.sbomify.com/CVE-2020-15507/): Path traversal in mobileiron:cloud (high 7.5)
- [CVE-2020-15506](https://insights.sbomify.com/CVE-2020-15506/): Auth bypass in mobileiron:cloud (critical 9.8)
- [CVE-2020-15505](https://insights.sbomify.com/CVE-2020-15505/): Ivanti MobileIron Multiple Products Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2020-15504](https://insights.sbomify.com/CVE-2020-15504/): SQL injection in sophos:xg firewall firmware (critical 9.8)
- [CVE-2020-15503](https://insights.sbomify.com/CVE-2020-15503/): Memory corruption in debian:debian linux (high 7.5)
- [CVE-2020-15502](https://insights.sbomify.com/CVE-2020-15502/): Information disclosure in duckduckgo:duckduckgo (high 7.5)
- [CVE-2020-15501](https://insights.sbomify.com/CVE-2020-15501/): Missing authorization in smarter:smarter coffee maker 1st generation (medium 6.5)
- [CVE-2020-15500](https://insights.sbomify.com/CVE-2020-15500/): Cross-site scripting in TileServer GL (medium 6.1)
- [CVE-2020-1550](https://insights.sbomify.com/CVE-2020-1550/): Windows CDP User Components Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-15499](https://insights.sbomify.com/CVE-2020-15499/): Cross-site scripting in asus:rt-ac1900p firmware (medium 6.1)
- [CVE-2020-15498](https://insights.sbomify.com/CVE-2020-15498/): Security feature bypass in asus:rt-ac1900p firmware (medium 5.9)
- [CVE-2020-15497](https://insights.sbomify.com/CVE-2020-15497/): Cross-site scripting in jalios:jcms (medium 5.3)
- [CVE-2020-15496](https://insights.sbomify.com/CVE-2020-15496/): Privilege escalation in acronis:true image (high 7.8)
- [CVE-2020-15495](https://insights.sbomify.com/CVE-2020-15495/): Privilege escalation in acronis:true image (high 7.8)
- [CVE-2020-15492](https://insights.sbomify.com/CVE-2020-15492/): Path traversal in inneo:startup tools (critical 9.8)
- [CVE-2020-15490](https://insights.sbomify.com/CVE-2020-15490/): Memory corruption in wavlink:wl-wn530hg4 firmware (critical 9.8)
- [CVE-2020-1549](https://insights.sbomify.com/CVE-2020-1549/): Windows CDP User Components Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-15489](https://insights.sbomify.com/CVE-2020-15489/): Command injection in wavlink:wl-wn530hg4 firmware (critical 9.8)
- [CVE-2020-15488](https://insights.sbomify.com/CVE-2020-15488/): Re:Desk 2.3 allows insecure file upload. (high 7.5)
- [CVE-2020-15487](https://insights.sbomify.com/CVE-2020-15487/): SQL injection in re-desk:re\ (critical 9.8)
- [CVE-2020-15486](https://insights.sbomify.com/CVE-2020-15486/): Missing authorization in drtrust:electrocardiogram pen firmware (medium 6.5)
- [CVE-2020-15485](https://insights.sbomify.com/CVE-2020-15485/): Information disclosure in niscomed:m1000 multipara patient monitor firmware (medium 5.5)
- [CVE-2020-15484](https://insights.sbomify.com/CVE-2020-15484/): Information disclosure in niscomed:m1000 multipara patient monitor firmware (high 7.5)
- [CVE-2020-15483](https://insights.sbomify.com/CVE-2020-15483/): Auth bypass in niscomed:m1000 multipara patient monitor firmware (medium 6.8)
- [CVE-2020-15482](https://insights.sbomify.com/CVE-2020-15482/): Hardcoded credentials in niscomed:m1000 multipara patient monitor firmware (high 7.8)
- [CVE-2020-15481](https://insights.sbomify.com/CVE-2020-15481/): Privilege escalation in passmark:burnintest (high 7.8)
- [CVE-2020-15480](https://insights.sbomify.com/CVE-2020-15480/): Privilege escalation in passmark:burnintest (high 8.8)
- [CVE-2020-1548](https://insights.sbomify.com/CVE-2020-1548/): Windows WaasMedic Service Information Disclosure Vulnerability (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/156/