# Vulnerabilities published in 2020


- [CVE-2020-15479](https://insights.sbomify.com/CVE-2020-15479/): Memory corruption in passmark:burnintest (high 8.8)
- [CVE-2020-15478](https://insights.sbomify.com/CVE-2020-15478/): Information disclosure in journal-theme:journal (high 7.5)
- [CVE-2020-15477](https://insights.sbomify.com/CVE-2020-15477/): Command injection in raspberrytorte:raspberrytortoise (critical 9.8)
- [CVE-2020-15476](https://insights.sbomify.com/CVE-2020-15476/): Memory corruption in debian:debian linux (high 7.5)
- [CVE-2020-15475](https://insights.sbomify.com/CVE-2020-15475/): Use after free in ntop:ndpi (critical 9.8)
- [CVE-2020-15474](https://insights.sbomify.com/CVE-2020-15474/): Memory corruption in ntop:ndpi (critical 9.8)
- [CVE-2020-15473](https://insights.sbomify.com/CVE-2020-15473/): Memory corruption in ntop:ndpi (critical 9.1)
- [CVE-2020-15472](https://insights.sbomify.com/CVE-2020-15472/): Memory corruption in debian:debian linux (critical 9.1)
- [CVE-2020-15471](https://insights.sbomify.com/CVE-2020-15471/): Memory corruption in ntop:ndpi (critical 9.1)
- [CVE-2020-15470](https://insights.sbomify.com/CVE-2020-15470/): Memory corruption in rockcarry:ffjpeg (medium 5.5)
- [CVE-2020-1547](https://insights.sbomify.com/CVE-2020-1547/): Windows Backup Engine Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-15469](https://insights.sbomify.com/CVE-2020-15469/): Null dereference in debian:debian linux (low 2.3)
- [CVE-2020-15468](https://insights.sbomify.com/CVE-2020-15468/): SQL injection in persian vip download script project:persian vip download script (critical 9.8)
- [CVE-2020-15467](https://insights.sbomify.com/CVE-2020-15467/): Command injection in cohesive:vns3 (high 8.8)
- [CVE-2020-15466](https://insights.sbomify.com/CVE-2020-15466/): Denial of service in debian:debian linux (high 7.5)
- [CVE-2020-1546](https://insights.sbomify.com/CVE-2020-1546/): Windows Backup Engine Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-1545](https://insights.sbomify.com/CVE-2020-1545/): Windows Backup Engine Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-1544](https://insights.sbomify.com/CVE-2020-1544/): Windows Backup Engine Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-15437](https://insights.sbomify.com/CVE-2020-15437/): Null dereference in linux kernel (medium 4.4)
- [CVE-2020-15436](https://insights.sbomify.com/CVE-2020-15436/): Use after free in linux kernel (medium 6.7)
- [CVE-2020-15435](https://insights.sbomify.com/CVE-2020-15435/): Command injection in CentOS Web Panel (critical 9.8)
- [CVE-2020-15434](https://insights.sbomify.com/CVE-2020-15434/): Command injection in CentOS Web Panel (critical 9.8)
- [CVE-2020-15433](https://insights.sbomify.com/CVE-2020-15433/): Command injection in CentOS Web Panel (critical 9.8)
- [CVE-2020-15432](https://insights.sbomify.com/CVE-2020-15432/): Command injection in CentOS Web Panel (critical 9.8)
- [CVE-2020-15431](https://insights.sbomify.com/CVE-2020-15431/): Command injection in CentOS Web Panel (critical 9.8)
- [CVE-2020-15430](https://insights.sbomify.com/CVE-2020-15430/): Command injection in CentOS Web Panel (critical 9.8)
- [CVE-2020-1543](https://insights.sbomify.com/CVE-2020-1543/): Windows Backup Engine Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-15429](https://insights.sbomify.com/CVE-2020-15429/): Command injection in CentOS Web Panel (critical 9.8)
- [CVE-2020-15428](https://insights.sbomify.com/CVE-2020-15428/): Command injection in CentOS Web Panel (critical 9.8)
- [CVE-2020-15427](https://insights.sbomify.com/CVE-2020-15427/): Command injection in CentOS Web Panel (critical 9.8)
- [CVE-2020-15426](https://insights.sbomify.com/CVE-2020-15426/): Command injection in CentOS Web Panel (critical 9.8)
- [CVE-2020-15425](https://insights.sbomify.com/CVE-2020-15425/): Command injection in CentOS Web Panel (critical 9.8)
- [CVE-2020-15424](https://insights.sbomify.com/CVE-2020-15424/): Command injection in CentOS Web Panel (critical 9.8)
- [CVE-2020-15423](https://insights.sbomify.com/CVE-2020-15423/): Command injection in CentOS Web Panel (critical 9.8)
- [CVE-2020-15422](https://insights.sbomify.com/CVE-2020-15422/): Command injection in CentOS Web Panel (critical 9.8)
- [CVE-2020-15421](https://insights.sbomify.com/CVE-2020-15421/): Command injection in CentOS Web Panel (critical 9.8)
- [CVE-2020-15420](https://insights.sbomify.com/CVE-2020-15420/): Command injection in CentOS Web Panel (critical 9.8)
- [CVE-2020-1542](https://insights.sbomify.com/CVE-2020-1542/): Windows Backup Engine Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-15419](https://insights.sbomify.com/CVE-2020-15419/): XML external entity in ONE (high 7.5)
- [CVE-2020-15418](https://insights.sbomify.com/CVE-2020-15418/): XML external entity in ONE (high 7.5)
- [CVE-2020-15417](https://insights.sbomify.com/CVE-2020-15417/): Memory corruption in R6700 (medium 6.3)
- [CVE-2020-15416](https://insights.sbomify.com/CVE-2020-15416/): Memory corruption in R6700 (high 8.8)
- [CVE-2020-15415](https://insights.sbomify.com/CVE-2020-15415/): DrayTek Multiple Vigor Routers OS Command Injection (critical 9.8, exploited in the wild)
- [CVE-2020-15412](https://insights.sbomify.com/CVE-2020-15412/): Missing authorization in misp-project:misp (medium 4.3)
- [CVE-2020-15411](https://insights.sbomify.com/CVE-2020-15411/): Missing authorization in misp-project:misp (critical 9.8)
- [CVE-2020-1541](https://insights.sbomify.com/CVE-2020-1541/): Windows Backup Engine Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-15408](https://insights.sbomify.com/CVE-2020-15408/): Privilege escalation in pulsesecure:pulse connect secure (low 3.7)
- [CVE-2020-15401](https://insights.sbomify.com/CVE-2020-15401/): Privilege escalation in iobit:malware fighter (medium 4.4)
- [CVE-2020-15400](https://insights.sbomify.com/CVE-2020-15400/): Cross-Site Request Forgery in CakePHP (medium 4.3)
- [CVE-2020-1540](https://insights.sbomify.com/CVE-2020-1540/): Windows Backup Engine Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-15397](https://insights.sbomify.com/CVE-2020-15397/): Privilege escalation in hylafax\+ project:hylafax\+ (high 7.8)
- [CVE-2020-15396](https://insights.sbomify.com/CVE-2020-15396/): Race condition in fedoraproject:fedora (high 7.8)
- [CVE-2020-15395](https://insights.sbomify.com/CVE-2020-15395/): Memory corruption in fedoraproject:fedora (high 7.8)
- [CVE-2020-15394](https://insights.sbomify.com/CVE-2020-15394/): SQL injection in zohocorp:manageengine applications manager (critical 9.8)
- [CVE-2020-15393](https://insights.sbomify.com/CVE-2020-15393/): Denial of service in canonical:ubuntu linux (medium 5.5)
- [CVE-2020-15392](https://insights.sbomify.com/CVE-2020-15392/): Information disclosure in venki:supravizio bpm (medium 5.3)
- [CVE-2020-15391](https://insights.sbomify.com/CVE-2020-15391/): DevSpace vulnerable to remote code execution (critical 9.8)
- [CVE-2020-15390](https://insights.sbomify.com/CVE-2020-15390/): Missing authorization in pega:pega platform (critical 9.8)
- [CVE-2020-1539](https://insights.sbomify.com/CVE-2020-1539/): Windows Backup Engine Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-15389](https://insights.sbomify.com/CVE-2020-15389/): Use after free in debian:debian linux (medium 6.5)
- [CVE-2020-15388](https://insights.sbomify.com/CVE-2020-15388/): Other in Brocade Fabric OS (medium 6.5)
- [CVE-2020-15387](https://insights.sbomify.com/CVE-2020-15387/): Weak cryptography in Brocade SANnav & Brocade Fabric OS (high 7.4)
- [CVE-2020-15386](https://insights.sbomify.com/CVE-2020-15386/): Denial of service in Brocade Fabric OS (medium 5.3)
- [CVE-2020-15385](https://insights.sbomify.com/CVE-2020-15385/): Missing authorization in Brocade SANnav (medium 5.4)
- [CVE-2020-15384](https://insights.sbomify.com/CVE-2020-15384/): Information disclosure in Brocade SANnav (medium 5.3)
- [CVE-2020-15383](https://insights.sbomify.com/CVE-2020-15383/): Denial of service in Brocade Fabric OS (high 7.5)
- [CVE-2020-15382](https://insights.sbomify.com/CVE-2020-15382/): Hardcoded credentials in Brocade SANnav (high 7.2)
- [CVE-2020-15381](https://insights.sbomify.com/CVE-2020-15381/): Information disclosure in Brocade SANnav (high 7.5)
- [CVE-2020-15380](https://insights.sbomify.com/CVE-2020-15380/): Information disclosure in Brocade SANnav (high 7.5)
- [CVE-2020-1538](https://insights.sbomify.com/CVE-2020-1538/): Windows UPnP Device Host Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-15379](https://insights.sbomify.com/CVE-2020-15379/): Denial of service in Brocade SANnav (high 7.5)
- [CVE-2020-15378](https://insights.sbomify.com/CVE-2020-15378/): Misconfiguration in Brocade SANnav (medium 5.3)
- [CVE-2020-15377](https://insights.sbomify.com/CVE-2020-15377/): Server-side request forgery in Brocade SANnav (critical 9.8)
- [CVE-2020-15376](https://insights.sbomify.com/CVE-2020-15376/): Auth bypass in Brocade Fabric OS (medium 4.3)
- [CVE-2020-15375](https://insights.sbomify.com/CVE-2020-15375/): Command injection in Brocade Fabric OS (medium 6.7)
- [CVE-2020-15374](https://insights.sbomify.com/CVE-2020-15374/): Other in Brocade Fabric OS (critical 9.8)
- [CVE-2020-15373](https://insights.sbomify.com/CVE-2020-15373/): Memory corruption in Brocade Fabric OS (critical 9.8)
- [CVE-2020-15372](https://insights.sbomify.com/CVE-2020-15372/): Privilege escalation in Brocade Fabric OS (medium 5.5)
- [CVE-2020-15371](https://insights.sbomify.com/CVE-2020-15371/): Code injection in Brocade Fabric OS (critical 9.8)
- [CVE-2020-15370](https://insights.sbomify.com/CVE-2020-15370/): Information disclosure in Brocade Fabric OS (medium 6.5)
- [CVE-2020-1537](https://insights.sbomify.com/CVE-2020-1537/): Windows Remote Access Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-15369](https://insights.sbomify.com/CVE-2020-15369/): Information disclosure in Brocade Fabric OS (high 8.8)
- [CVE-2020-15368](https://insights.sbomify.com/CVE-2020-15368/): Privilege escalation in asrock:rgb driver firmware (medium 6.1)
- [CVE-2020-15367](https://insights.sbomify.com/CVE-2020-15367/): Auth bypass in venki:supravizio bpm (critical 9.8)
- [CVE-2020-15366](https://insights.sbomify.com/CVE-2020-15366/): Prototype Pollution in Ajv (medium 5.6)
- [CVE-2020-15365](https://insights.sbomify.com/CVE-2020-15365/): Memory corruption in libraw:libraw (medium 6.5)
- [CVE-2020-15364](https://insights.sbomify.com/CVE-2020-15364/): Cross-site scripting in nexos project:nexos (medium 6.1)
- [CVE-2020-15363](https://insights.sbomify.com/CVE-2020-15363/): SQL injection in nexos project:nexos (critical 9.8)
- [CVE-2020-15362](https://insights.sbomify.com/CVE-2020-15362/): OS Command Injection in wifiscanner (critical 9.8)
- [CVE-2020-15360](https://insights.sbomify.com/CVE-2020-15360/): Missing authorization in docker:docker desktop (high 7.8)
- [CVE-2020-1536](https://insights.sbomify.com/CVE-2020-1536/): Windows Backup Engine Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-15358](https://insights.sbomify.com/CVE-2020-15358/): Memory corruption in apple:icloud (medium 5.5)
- [CVE-2020-15357](https://insights.sbomify.com/CVE-2020-15357/): Command injection in askey:ap5100w firmware (critical 9.8)
- [CVE-2020-15352](https://insights.sbomify.com/CVE-2020-15352/): XML external entity in ivanti:connect secure (high 7.2)
- [CVE-2020-15351](https://insights.sbomify.com/CVE-2020-15351/): Misconfiguration in idrive:idrive (high 7.8)
- [CVE-2020-15350](https://insights.sbomify.com/CVE-2020-15350/): Memory corruption in riot-os:riot (critical 9.8)
- [CVE-2020-1535](https://insights.sbomify.com/CVE-2020-1535/): Windows Backup Engine Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-15349](https://insights.sbomify.com/CVE-2020-15349/): Privilege escalation in binarynights:forklift (high 7.8)
- [CVE-2020-15348](https://insights.sbomify.com/CVE-2020-15348/): Code injection in zyxel:cloud cnm secumanager (critical 9.8)
- [CVE-2020-15347](https://insights.sbomify.com/CVE-2020-15347/): Hardcoded credentials in zyxel:cloudcnm secumanager (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/157/