# Vulnerabilities published in 2020 - [CVE-2020-14530](https://insights.sbomify.com/CVE-2020-14530/): Information disclosure in Security Service (medium 5.9) - [CVE-2020-1453](https://insights.sbomify.com/CVE-2020-1453/): Microsoft SharePoint Remote Code Execution Vulnerability (high 8.6) - [CVE-2020-14529](https://insights.sbomify.com/CVE-2020-14529/): Other in Primavera Portfolio Management (medium 5.4) - [CVE-2020-14528](https://insights.sbomify.com/CVE-2020-14528/): Cross-site scripting in Primavera Portfolio Management (medium 6.1) - [CVE-2020-14527](https://insights.sbomify.com/CVE-2020-14527/): Other in Primavera Portfolio Management (medium 5.9) - [CVE-2020-14525](https://insights.sbomify.com/CVE-2020-14525/): Philips Clinical Collaboration Platform Improper Neutralization of Script in Attributes in a Web Page (low 3.5) - [CVE-2020-14524](https://insights.sbomify.com/CVE-2020-14524/): Softing Industrial Automation OPC (critical 9.8) - [CVE-2020-14523](https://insights.sbomify.com/CVE-2020-14523/): Mitsubishi Electric Factory Automation Products Path Traversal (high 8.3) - [CVE-2020-14522](https://insights.sbomify.com/CVE-2020-14522/): Softing Industrial Automation OPC (high 7.5) - [CVE-2020-14521](https://insights.sbomify.com/CVE-2020-14521/): Mitsubishi Electric Factory Automation Engineering Products Unquoted Search Path or Element (high 8.3) - [CVE-2020-14520](https://insights.sbomify.com/CVE-2020-14520/): Information disclosure in Ignition 8 (high 7.5) - [CVE-2020-1452](https://insights.sbomify.com/CVE-2020-1452/): Microsoft SharePoint Remote Code Execution Vulnerability (high 8.6) - [CVE-2020-14519](https://insights.sbomify.com/CVE-2020-14519/): Security feature bypass in CodeMeter (high 7.5) - [CVE-2020-14518](https://insights.sbomify.com/CVE-2020-14518/): Philips DreamMapper Insertion of Sensitive Information into Log File (medium 5.3) - [CVE-2020-14517](https://insights.sbomify.com/CVE-2020-14517/): Weak cryptography in CodeMeter (critical 9.8) - [CVE-2020-14516](https://insights.sbomify.com/CVE-2020-14516/): Weak cryptography in Rockwell Automation FactoryTalk Services Platform (critical 10.0) - [CVE-2020-14515](https://insights.sbomify.com/CVE-2020-14515/): Security feature bypass in CodeMeter (high 7.5) - [CVE-2020-14514](https://insights.sbomify.com/CVE-2020-14514/): Trailer Power Line Communications vulnerability (medium 4.3) - [CVE-2020-14513](https://insights.sbomify.com/CVE-2020-14513/): Denial of service in CodeMeter (high 7.5) - [CVE-2020-14512](https://insights.sbomify.com/CVE-2020-14512/): USE OF PASSWORD HASH WITH INSUFFICIENT COMPUTATIONAL EFFORT CWE-916 (high 8.1) - [CVE-2020-14511](https://insights.sbomify.com/CVE-2020-14511/): Memory corruption in EDR-G902 and EDR-G903 Series Routers (critical 9.8) - [CVE-2020-14510](https://insights.sbomify.com/CVE-2020-14510/): OFF-BY-ONE ERROR CWE-193 (critical 9.8) - [CVE-2020-1451](https://insights.sbomify.com/CVE-2020-1451/): Cross-site scripting in Microsoft SharePoint Enterprise Server (medium 5.4) - [CVE-2020-14509](https://insights.sbomify.com/CVE-2020-14509/): Memory corruption in CodeMeter (critical 9.8) - [CVE-2020-14508](https://insights.sbomify.com/CVE-2020-14508/): OFF-BY-ONE ERROR CWE-193 (high 8.1) - [CVE-2020-14507](https://insights.sbomify.com/CVE-2020-14507/): Path traversal in Advantech iView (critical 9.8) - [CVE-2020-14506](https://insights.sbomify.com/CVE-2020-14506/): Philips Clinical Collaboration Platform Cross-site Request Forgery (low 3.4) - [CVE-2020-14505](https://insights.sbomify.com/CVE-2020-14505/): Command injection in Advantech iView (critical 9.8) - [CVE-2020-14504](https://insights.sbomify.com/CVE-2020-14504/): Auth bypass in 1734-AENTR (medium 5.3) - [CVE-2020-14503](https://insights.sbomify.com/CVE-2020-14503/): Code injection in Advantech iView (critical 9.8) - [CVE-2020-14502](https://insights.sbomify.com/CVE-2020-14502/): Cross-site scripting in 1734-AENTR (medium 6.1) - [CVE-2020-14501](https://insights.sbomify.com/CVE-2020-14501/): Auth bypass in Advantech iView (critical 9.8) - [CVE-2020-14500](https://insights.sbomify.com/CVE-2020-14500/): IMPROPER NEUTRALIZATION OF NULL BYTE OR NUL CHARACTER CWE-158 (critical 10.0) - [CVE-2020-1450](https://insights.sbomify.com/CVE-2020-1450/): Cross-site scripting in Microsoft SharePoint Enterprise Server (medium 5.4) - [CVE-2020-14499](https://insights.sbomify.com/CVE-2020-14499/): Missing authorization in Advantech iView (high 7.5) - [CVE-2020-14498](https://insights.sbomify.com/CVE-2020-14498/): HMS Industrial Networks AB eCatcher Stack-based Buffer Overflow (critical 9.6) - [CVE-2020-14497](https://insights.sbomify.com/CVE-2020-14497/): SQL injection in Advantech iView (critical 9.8) - [CVE-2020-14496](https://insights.sbomify.com/CVE-2020-14496/): Mitsubishi Electric Multiple Factory Automation Engineering Software Products (Update A) - Permission Issues (high 8.3) - [CVE-2020-14494](https://insights.sbomify.com/CVE-2020-14494/): Auth bypass in OpenClinic GA (critical 9.8) - [CVE-2020-14493](https://insights.sbomify.com/CVE-2020-14493/): OpenClinic GA (high 8.8) - [CVE-2020-14492](https://insights.sbomify.com/CVE-2020-14492/): OpenClinic GA (medium 5.4) - [CVE-2020-14491](https://insights.sbomify.com/CVE-2020-14491/): Missing authorization in OpenClinic GA (medium 6.5) - [CVE-2020-14490](https://insights.sbomify.com/CVE-2020-14490/): OpenClinic GA (high 8.8) - [CVE-2020-1449](https://insights.sbomify.com/CVE-2020-1449/): Code injection in Microsoft 365 Apps for Enterprise for 32-bit Systems (high 7.8) - [CVE-2020-14489](https://insights.sbomify.com/CVE-2020-14489/): OpenClinic GA (medium 6.2) - [CVE-2020-14488](https://insights.sbomify.com/CVE-2020-14488/): OpenClinic GA (high 8.8) - [CVE-2020-14487](https://insights.sbomify.com/CVE-2020-14487/): OpenClinic GA (critical 9.4) - [CVE-2020-14486](https://insights.sbomify.com/CVE-2020-14486/): OpenClinic GA (medium 6.3) - [CVE-2020-14485](https://insights.sbomify.com/CVE-2020-14485/): Auth bypass in OpenClinic GA (critical 9.8) - [CVE-2020-14484](https://insights.sbomify.com/CVE-2020-14484/): Security feature bypass in OpenClinic GA (critical 9.8) - [CVE-2020-14483](https://insights.sbomify.com/CVE-2020-14483/): Denial of service in Niagara (medium 4.3) - [CVE-2020-14482](https://insights.sbomify.com/CVE-2020-14482/): Memory corruption in Delta Industrial Automation DOPSoft (high 7.8) - [CVE-2020-14481](https://insights.sbomify.com/CVE-2020-14481/): Weak cryptography in FactoryTalk View SE (high 7.8) - [CVE-2020-14480](https://insights.sbomify.com/CVE-2020-14480/): Information disclosure in FactoryTalk View SE (medium 5.5) - [CVE-2020-1448](https://insights.sbomify.com/CVE-2020-1448/): Memory corruption in Microsoft Office (high 8.8) - [CVE-2020-14479](https://insights.sbomify.com/CVE-2020-14479/): ICSA-20-147-01 Inductive Automation Ignition (Update B) (medium 5.3) - [CVE-2020-14478](https://insights.sbomify.com/CVE-2020-14478/): IMPROPER RESTRICTION OF XML EXTERNAL ENTITY REFERENCE CWE-611 (high 7.1) - [CVE-2020-14477](https://insights.sbomify.com/CVE-2020-14477/): Philips Ultrasound Systems Authentication Bypass Using an Alternate Path or Channel (low 3.6) - [CVE-2020-14475](https://insights.sbomify.com/CVE-2020-14475/): Dolibarr reflected cross-site scripting (XSS) vulnerability (medium 6.1) - [CVE-2020-14474](https://insights.sbomify.com/CVE-2020-14474/): Hardcoded credentials in cellebrite:ufed firmware (high 7.5) - [CVE-2020-14473](https://insights.sbomify.com/CVE-2020-14473/): Memory corruption in draytek:vigor2960 firmware (critical 9.8) - [CVE-2020-14472](https://insights.sbomify.com/CVE-2020-14472/): Command injection in draytek:vigor2960 firmware (critical 9.8) - [CVE-2020-14470](https://insights.sbomify.com/CVE-2020-14470/): Information disclosure in octopus:octopus deploy (medium 6.5) - [CVE-2020-1447](https://insights.sbomify.com/CVE-2020-1447/): Memory corruption in Microsoft 365 Apps for Enterprise for 32-bit Systems (high 8.8) - [CVE-2020-14462](https://insights.sbomify.com/CVE-2020-14462/): Cross-site scripting in mitre:caldera (medium 5.4) - [CVE-2020-14461](https://insights.sbomify.com/CVE-2020-14461/): Path traversal in zyxel:wap6806 firmware (high 8.6) - [CVE-2020-14460](https://insights.sbomify.com/CVE-2020-14460/): Missing authorization in mattermost:mattermost server (medium 6.5) - [CVE-2020-1446](https://insights.sbomify.com/CVE-2020-1446/): Memory corruption in Microsoft 365 Apps for Enterprise for 32-bit Systems (high 8.8) - [CVE-2020-14459](https://insights.sbomify.com/CVE-2020-14459/): Business logic in mattermost:mattermost server (high 7.5) - [CVE-2020-14458](https://insights.sbomify.com/CVE-2020-14458/): Information disclosure in mattermost:mattermost server (high 7.5) - [CVE-2020-14457](https://insights.sbomify.com/CVE-2020-14457/): Mattermost Server Sensitive Data Exposure (medium 5.3) - [CVE-2020-14456](https://insights.sbomify.com/CVE-2020-14456/): Security feature bypass in mattermost:mattermost desktop (high 7.3) - [CVE-2020-14455](https://insights.sbomify.com/CVE-2020-14455/): Auth bypass in mattermost:mattermost desktop (medium 6.5) - [CVE-2020-14454](https://insights.sbomify.com/CVE-2020-14454/): Open redirect in mattermost:mattermost desktop (medium 6.1) - [CVE-2020-14453](https://insights.sbomify.com/CVE-2020-14453/): Denial of service in mattermost:mattermost server (high 7.5) - [CVE-2020-14452](https://insights.sbomify.com/CVE-2020-14452/): Path traversal in mattermost:mattermost server (medium 5.3) - [CVE-2020-14451](https://insights.sbomify.com/CVE-2020-14451/): Information disclosure in mattermost:mattermost mobile (high 7.5) - [CVE-2020-14450](https://insights.sbomify.com/CVE-2020-14450/): Denial of service in mattermost:mattermost server (high 7.5) - [CVE-2020-1445](https://insights.sbomify.com/CVE-2020-1445/): Information disclosure in Microsoft 365 Apps for Enterprise for 32-bit Systems (medium 5.5) - [CVE-2020-14449](https://insights.sbomify.com/CVE-2020-14449/): Information disclosure in mattermost:mattermost mobile (high 7.5) - [CVE-2020-14448](https://insights.sbomify.com/CVE-2020-14448/): Denial of service in mattermost:mattermost server (high 7.5) - [CVE-2020-14447](https://insights.sbomify.com/CVE-2020-14447/): Denial of service in mattermost:mattermost server (high 7.5) - [CVE-2020-14446](https://insights.sbomify.com/CVE-2020-14446/): Open redirect in wso2:identity server (medium 6.1) - [CVE-2020-14445](https://insights.sbomify.com/CVE-2020-14445/): Cross-site scripting in wso2:identity server (medium 4.4) - [CVE-2020-14444](https://insights.sbomify.com/CVE-2020-14444/): Cross-site scripting in wso2:identity server (medium 5.4) - [CVE-2020-14443](https://insights.sbomify.com/CVE-2020-14443/): Dolibarr SQL injection vulnerability in accountancy/customer/card.php (high 8.8) - [CVE-2020-14442](https://insights.sbomify.com/CVE-2020-14442/): Command injection in netgear:rbk752 firmware (critical 9.6) - [CVE-2020-14441](https://insights.sbomify.com/CVE-2020-14441/): Command injection in netgear:rbk752 firmware (critical 9.6) - [CVE-2020-14440](https://insights.sbomify.com/CVE-2020-14440/): Command injection in netgear:rbk752 firmware (critical 9.6) - [CVE-2020-1444](https://insights.sbomify.com/CVE-2020-1444/): Code injection in Microsoft SharePoint Enterprise Server (medium 4.3) - [CVE-2020-14439](https://insights.sbomify.com/CVE-2020-14439/): Command injection in netgear:rbk752 firmware (critical 9.6) - [CVE-2020-14438](https://insights.sbomify.com/CVE-2020-14438/): Command injection in netgear:rbk752 firmware (critical 9.6) - [CVE-2020-14437](https://insights.sbomify.com/CVE-2020-14437/): Command injection in netgear:rbk752 firmware (critical 9.6) - [CVE-2020-14436](https://insights.sbomify.com/CVE-2020-14436/): Command injection in netgear:rbk752 firmware (critical 9.6) - [CVE-2020-14435](https://insights.sbomify.com/CVE-2020-14435/): Command injection in netgear:srk60 firmware (medium 6.8) - [CVE-2020-14434](https://insights.sbomify.com/CVE-2020-14434/): Command injection in netgear:rbk752 firmware (high 8.4) - [CVE-2020-14433](https://insights.sbomify.com/CVE-2020-14433/): Command injection in netgear:rbk752 firmware (high 8.4) - [CVE-2020-14432](https://insights.sbomify.com/CVE-2020-14432/): Cross-site request forgery in netgear:rbk752 firmware (high 8.4) - [CVE-2020-14431](https://insights.sbomify.com/CVE-2020-14431/): Information disclosure in netgear:rbk752 firmware (critical 9.6) - [CVE-2020-14430](https://insights.sbomify.com/CVE-2020-14430/): Information disclosure in netgear:rbk752 firmware (critical 9.6) --- From sbomify Insights: https://insights.sbomify.com/years/2020/page/166/