# Vulnerabilities published in 2020


- [CVE-2020-1443](https://insights.sbomify.com/CVE-2020-1443/): Other in Microsoft SharePoint Enterprise Server (medium 5.4)
- [CVE-2020-14429](https://insights.sbomify.com/CVE-2020-14429/): Information disclosure in netgear:mk62 firmware (critical 9.6)
- [CVE-2020-14428](https://insights.sbomify.com/CVE-2020-14428/): Information disclosure in netgear:rbk752 firmware (critical 9.6)
- [CVE-2020-14427](https://insights.sbomify.com/CVE-2020-14427/): Information disclosure in netgear:rbk752 firmware (critical 9.6)
- [CVE-2020-14426](https://insights.sbomify.com/CVE-2020-14426/): Information disclosure in netgear:rbk752 firmware (critical 9.6)
- [CVE-2020-14425](https://insights.sbomify.com/CVE-2020-14425/): Code injection in foxitsoftware:foxit reader (high 7.8)
- [CVE-2020-14424](https://insights.sbomify.com/CVE-2020-14424/): Cross-site scripting in cacti:cacti (medium 6.1)
- [CVE-2020-14423](https://insights.sbomify.com/CVE-2020-14423/): Weak cryptography in convos:convos (medium 5.3)
- [CVE-2020-14422](https://insights.sbomify.com/CVE-2020-14422/): Incorrect Calculation and Use of Insufficiently Random Values in Python (medium 5.9)
- [CVE-2020-14421](https://insights.sbomify.com/CVE-2020-14421/): Command injection in aapanel:aapanel (high 7.2)
- [CVE-2020-1442](https://insights.sbomify.com/CVE-2020-1442/): Cross-site scripting in Microsoft Office Online Server (medium 6.1)
- [CVE-2020-14418](https://insights.sbomify.com/CVE-2020-14418/): Race condition in cisco:advanced malware protection (high 7.0)
- [CVE-2020-14416](https://insights.sbomify.com/CVE-2020-14416/): Use after free in linux:linux kernel (medium 4.2)
- [CVE-2020-14415](https://insights.sbomify.com/CVE-2020-14415/): Memory corruption in canonical:ubuntu linux (low 3.3)
- [CVE-2020-14414](https://insights.sbomify.com/CVE-2020-14414/): Command injection in nedi:nedi (high 8.8)
- [CVE-2020-14413](https://insights.sbomify.com/CVE-2020-14413/): Cross-site scripting in nedi:nedi (medium 6.1)
- [CVE-2020-14412](https://insights.sbomify.com/CVE-2020-14412/): Command injection in nedi:nedi (high 8.8)
- [CVE-2020-14410](https://insights.sbomify.com/CVE-2020-14410/): Memory corruption in debian:debian linux (medium 5.4)
- [CVE-2020-14409](https://insights.sbomify.com/CVE-2020-14409/): Integer overflow in debian:debian linux (high 7.8)
- [CVE-2020-14408](https://insights.sbomify.com/CVE-2020-14408/): Cross-site scripting in agentejo:cockpit (medium 6.1)
- [CVE-2020-14405](https://insights.sbomify.com/CVE-2020-14405/): Denial of service in canonical:ubuntu linux (medium 6.5)
- [CVE-2020-14404](https://insights.sbomify.com/CVE-2020-14404/): Memory corruption in canonical:ubuntu linux (medium 5.4)
- [CVE-2020-14403](https://insights.sbomify.com/CVE-2020-14403/): Memory corruption in canonical:ubuntu linux (medium 5.4)
- [CVE-2020-14402](https://insights.sbomify.com/CVE-2020-14402/): Memory corruption in canonical:ubuntu linux (medium 5.4)
- [CVE-2020-14401](https://insights.sbomify.com/CVE-2020-14401/): Integer overflow in debian:debian linux (medium 6.5)
- [CVE-2020-14400](https://insights.sbomify.com/CVE-2020-14400/): Memory corruption in canonical:ubuntu linux (high 7.5)
- [CVE-2020-1440](https://insights.sbomify.com/CVE-2020-1440/): Microsoft SharePoint Server Tampering Vulnerability (medium 6.3)
- [CVE-2020-14399](https://insights.sbomify.com/CVE-2020-14399/): Memory corruption in canonical:ubuntu linux (high 7.5)
- [CVE-2020-14398](https://insights.sbomify.com/CVE-2020-14398/): Denial of service in canonical:ubuntu linux (high 7.5)
- [CVE-2020-14397](https://insights.sbomify.com/CVE-2020-14397/): Null dereference in canonical:ubuntu linux (high 7.5)
- [CVE-2020-14396](https://insights.sbomify.com/CVE-2020-14396/): Null dereference in canonical:ubuntu linux (high 7.5)
- [CVE-2020-14394](https://insights.sbomify.com/CVE-2020-14394/): Denial of service in QEMU (low 3.2)
- [CVE-2020-14393](https://insights.sbomify.com/CVE-2020-14393/): Memory corruption in perl-dbi (high 7.1)
- [CVE-2020-14392](https://insights.sbomify.com/CVE-2020-14392/): Memory corruption in perl-dbi (medium 5.5)
- [CVE-2020-14391](https://insights.sbomify.com/CVE-2020-14391/): Information disclosure in gnome-settings-daemon (medium 5.5)
- [CVE-2020-14390](https://insights.sbomify.com/CVE-2020-14390/): Memory corruption in kernel (medium 5.6)
- [CVE-2020-1439](https://insights.sbomify.com/CVE-2020-1439/): Deserialization in Microsoft SharePoint Enterprise Server (high 8.8)
- [CVE-2020-14389](https://insights.sbomify.com/CVE-2020-14389/): Improper privilege management in Keycloak (high 8.1)
- [CVE-2020-14388](https://insights.sbomify.com/CVE-2020-14388/): Missing authorization in Red Hat 3scale API Management (medium 6.3)
- [CVE-2020-14387](https://insights.sbomify.com/CVE-2020-14387/): Security feature bypass in rsync (high 7.4)
- [CVE-2020-14386](https://insights.sbomify.com/CVE-2020-14386/): Memory corruption in kernel (medium 6.7)
- [CVE-2020-14385](https://insights.sbomify.com/CVE-2020-14385/): Denial of service in kernel (medium 5.5)
- [CVE-2020-14384](https://insights.sbomify.com/CVE-2020-14384/): Denial of service in JBossWeb (high 7.5)
- [CVE-2020-14383](https://insights.sbomify.com/CVE-2020-14383/): Denial of service in samba (medium 6.5)
- [CVE-2020-14382](https://insights.sbomify.com/CVE-2020-14382/): Memory corruption in cryptsetup (high 7.8)
- [CVE-2020-14381](https://insights.sbomify.com/CVE-2020-14381/): Use after free in kernel (high 7.8)
- [CVE-2020-14380](https://insights.sbomify.com/CVE-2020-14380/): Auth bypass in Red Hat Satellite (high 7.5)
- [CVE-2020-1438](https://insights.sbomify.com/CVE-2020-1438/): Privilege escalation in Windows (high 7.8)
- [CVE-2020-14379](https://insights.sbomify.com/CVE-2020-14379/): XML external entity in Red Hat AMQ (medium 5.6)
- [CVE-2020-14378](https://insights.sbomify.com/CVE-2020-14378/): Integer overflow in dpdk (low 3.3)
- [CVE-2020-14377](https://insights.sbomify.com/CVE-2020-14377/): Memory corruption in dpdk (high 7.1)
- [CVE-2020-14376](https://insights.sbomify.com/CVE-2020-14376/): Memory corruption in dpdk (high 7.8)
- [CVE-2020-14375](https://insights.sbomify.com/CVE-2020-14375/): Race condition in dpdk (high 7.8)
- [CVE-2020-14374](https://insights.sbomify.com/CVE-2020-14374/): Memory corruption in dpdk (high 8.8)
- [CVE-2020-14373](https://insights.sbomify.com/CVE-2020-14373/): Use after free in ghostscript (medium 5.5)
- [CVE-2020-14372](https://insights.sbomify.com/CVE-2020-14372/): Security feature bypass in grub2 (high 7.5)
- [CVE-2020-14371](https://insights.sbomify.com/CVE-2020-14371/): Information disclosure in Red Hat Satellite (medium 6.5)
- [CVE-2020-14370](https://insights.sbomify.com/CVE-2020-14370/): Information disclosure in podman (medium 5.3)
- [CVE-2020-1437](https://insights.sbomify.com/CVE-2020-1437/): Privilege escalation in Windows (high 7.8)
- [CVE-2020-14369](https://insights.sbomify.com/CVE-2020-14369/): Cross-site request forgery in CloudForms (medium 6.3)
- [CVE-2020-14368](https://insights.sbomify.com/CVE-2020-14368/): Cross-site request forgery in eclipse (high 7.1)
- [CVE-2020-14367](https://insights.sbomify.com/CVE-2020-14367/): Path traversal in Chrony (medium 6.0)
- [CVE-2020-14366](https://insights.sbomify.com/CVE-2020-14366/): Path Traversal (medium 6.8)
- [CVE-2020-14365](https://insights.sbomify.com/CVE-2020-14365/): Improper Verification of Cryptographic Signature in ansible (high 7.1)
- [CVE-2020-14364](https://insights.sbomify.com/CVE-2020-14364/): Memory corruption in QEMU (medium 5.0)
- [CVE-2020-14363](https://insights.sbomify.com/CVE-2020-14363/): Integer overflow in libX11 (high 7.8)
- [CVE-2020-14362](https://insights.sbomify.com/CVE-2020-14362/): Integer overflow in xorg-x11-server (high 7.8)
- [CVE-2020-14361](https://insights.sbomify.com/CVE-2020-14361/): Integer overflow in xorg-x11-server (high 7.8)
- [CVE-2020-14360](https://insights.sbomify.com/CVE-2020-14360/): Memory corruption in xorg-x11-server (high 7.8)
- [CVE-2020-1436](https://insights.sbomify.com/CVE-2020-1436/): Memory corruption in Windows (high 8.8)
- [CVE-2020-14359](https://insights.sbomify.com/CVE-2020-14359/): Keycloak Gatekeeper vulnerable to bypass on using lower case HTTP headers (high 7.3)
- [CVE-2020-14356](https://insights.sbomify.com/CVE-2020-14356/): Null dereference in Kernel (high 7.8)
- [CVE-2020-14355](https://insights.sbomify.com/CVE-2020-14355/): Memory corruption in spice (medium 6.6)
- [CVE-2020-14354](https://insights.sbomify.com/CVE-2020-14354/): Use after free in c-ares (low 3.3)
- [CVE-2020-14352](https://insights.sbomify.com/CVE-2020-14352/): Path traversal in librepo (high 8.0)
- [CVE-2020-14351](https://insights.sbomify.com/CVE-2020-14351/): Use after free in kernel (high 7.8)
- [CVE-2020-14350](https://insights.sbomify.com/CVE-2020-14350/): Untrusted Search Path in PostgreSQL (high 7.3)
- [CVE-2020-1435](https://insights.sbomify.com/CVE-2020-1435/): Memory corruption in Windows (high 8.8)
- [CVE-2020-14349](https://insights.sbomify.com/CVE-2020-14349/): SQL injection in PostgreSQL (high 7.1)
- [CVE-2020-14348](https://insights.sbomify.com/CVE-2020-14348/): Denial of service in AMQ (medium 4.3)
- [CVE-2020-14347](https://insights.sbomify.com/CVE-2020-14347/): Information disclosure in xorg-x11-server (medium 5.5)
- [CVE-2020-14346](https://insights.sbomify.com/CVE-2020-14346/): Integer overflow in xorg-x11-server (high 7.8)
- [CVE-2020-14345](https://insights.sbomify.com/CVE-2020-14345/): Memory corruption in xorg-x11-server (high 7.8)
- [CVE-2020-14344](https://insights.sbomify.com/CVE-2020-14344/): Integer overflow in libX11 (medium 6.7)
- [CVE-2020-14343](https://insights.sbomify.com/CVE-2020-14343/): Improper Input Validation in PyYAML (critical 9.8)
- [CVE-2020-14342](https://insights.sbomify.com/CVE-2020-14342/): Command injection in cifs-utils (medium 4.4)
- [CVE-2020-14341](https://insights.sbomify.com/CVE-2020-14341/): Server-side request forgery in Red Hat Single Sign-On (low 2.7)
- [CVE-2020-14340](https://insights.sbomify.com/CVE-2020-14340/): Uncontrolled Resource Consumption in XNIO (medium 5.9)
- [CVE-2020-1434](https://insights.sbomify.com/CVE-2020-1434/): Privilege escalation in Windows (medium 5.3)
- [CVE-2020-14339](https://insights.sbomify.com/CVE-2020-14339/): Privilege escalation in libvirt (high 8.8)
- [CVE-2020-14338](https://insights.sbomify.com/CVE-2020-14338/): Improper Input Validation in Xerces (medium 5.3)
- [CVE-2020-14337](https://insights.sbomify.com/CVE-2020-14337/): Information disclosure in Ansible Tower (medium 5.8)
- [CVE-2020-14336](https://insights.sbomify.com/CVE-2020-14336/): Denial of service in Openshift (medium 6.5)
- [CVE-2020-14335](https://insights.sbomify.com/CVE-2020-14335/): Information disclosure in Red Hat Satellite (medium 5.5)
- [CVE-2020-14334](https://insights.sbomify.com/CVE-2020-14334/): Information disclosure in Red Hat Satellite (high 8.8)
- [CVE-2020-14333](https://insights.sbomify.com/CVE-2020-14333/): Cross-site scripting in ovirt-engine (medium 6.3)
- [CVE-2020-14332](https://insights.sbomify.com/CVE-2020-14332/): Insertion of Sensitive Information into Log File and Improper Output Neutralization for Logs in ansible (medium 5.5)
- [CVE-2020-14331](https://insights.sbomify.com/CVE-2020-14331/): Memory corruption in Linux Kernel (medium 6.6)
- [CVE-2020-14330](https://insights.sbomify.com/CVE-2020-14330/): Improper Output Neutralization and Improper Encoding or Escaping of Output for Logs in ansible (medium 5.0)
- [CVE-2020-1433](https://insights.sbomify.com/CVE-2020-1433/): Information disclosure in Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systems (medium 6.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/167/