# Vulnerabilities published in 2020


- [CVE-2020-14329](https://insights.sbomify.com/CVE-2020-14329/): Information disclosure in Tower (low 3.3)
- [CVE-2020-14328](https://insights.sbomify.com/CVE-2020-14328/): Server-side request forgery in Tower (low 3.3)
- [CVE-2020-14327](https://insights.sbomify.com/CVE-2020-14327/): Server-side request forgery in Tower (medium 5.5)
- [CVE-2020-14326](https://insights.sbomify.com/CVE-2020-14326/): RESTEasy 4.5.5.Final in hash flooding (high 7.5)
- [CVE-2020-14325](https://insights.sbomify.com/CVE-2020-14325/): Privilege escalation in CloudForms (critical 9.1)
- [CVE-2020-14324](https://insights.sbomify.com/CVE-2020-14324/): Command injection in CloudForms (critical 9.1)
- [CVE-2020-14323](https://insights.sbomify.com/CVE-2020-14323/): Null dereference in Samba (medium 5.5)
- [CVE-2020-14322](https://insights.sbomify.com/CVE-2020-14322/): Denial of service in Moodle (high 7.5)
- [CVE-2020-14321](https://insights.sbomify.com/CVE-2020-14321/): Moodle Incorrect Authorization vulnerability (high 8.8)
- [CVE-2020-14320](https://insights.sbomify.com/CVE-2020-14320/): Moodle reflected XSS Vulnerability (medium 6.1)
- [CVE-2020-1432](https://insights.sbomify.com/CVE-2020-1432/): Information disclosure in Internet Explorer 11 (medium 4.3)
- [CVE-2020-14319](https://insights.sbomify.com/CVE-2020-14319/): Cross-site request forgery in AMQ-Online and EnMasse (medium 5.9)
- [CVE-2020-14318](https://insights.sbomify.com/CVE-2020-14318/): Information disclosure in samba (medium 4.3)
- [CVE-2020-14317](https://insights.sbomify.com/CVE-2020-14317/): Race condition in Wildfly (medium 5.5)
- [CVE-2020-14316](https://insights.sbomify.com/CVE-2020-14316/): Privilege Escalation in kubevirt (critical 9.9)
- [CVE-2020-14315](https://insights.sbomify.com/CVE-2020-14315/): Memory corruption in bsdiff (critical 9.8)
- [CVE-2020-14314](https://insights.sbomify.com/CVE-2020-14314/): Memory corruption in kernel (medium 5.5)
- [CVE-2020-14313](https://insights.sbomify.com/CVE-2020-14313/): Information disclosure in Quay (medium 4.3)
- [CVE-2020-14312](https://insights.sbomify.com/CVE-2020-14312/): Misconfiguration in dnsmasq (medium 5.9)
- [CVE-2020-14311](https://insights.sbomify.com/CVE-2020-14311/): Integer overflow in grub2 (medium 5.7)
- [CVE-2020-14310](https://insights.sbomify.com/CVE-2020-14310/): Integer overflow in grub2 (medium 5.7)
- [CVE-2020-1431](https://insights.sbomify.com/CVE-2020-1431/): Privilege escalation in Windows (high 7.8)
- [CVE-2020-14309](https://insights.sbomify.com/CVE-2020-14309/): Integer overflow in Grub (medium 6.7)
- [CVE-2020-14308](https://insights.sbomify.com/CVE-2020-14308/): Integer overflow in Grub (medium 6.4)
- [CVE-2020-14307](https://insights.sbomify.com/CVE-2020-14307/): Denial of service in wildfly (medium 6.5)
- [CVE-2020-14306](https://insights.sbomify.com/CVE-2020-14306/): Missing authorization in openshift-service-mesh/istio-rhel8-operator (high 8.8)
- [CVE-2020-14305](https://insights.sbomify.com/CVE-2020-14305/): Memory corruption in kernel (high 8.1)
- [CVE-2020-14304](https://insights.sbomify.com/CVE-2020-14304/): Information disclosure in kernel (medium 4.4)
- [CVE-2020-14303](https://insights.sbomify.com/CVE-2020-14303/): Denial of service in Samba (high 7.5)
- [CVE-2020-14302](https://insights.sbomify.com/CVE-2020-14302/): Auth bypass in keycloak (medium 4.9)
- [CVE-2020-14301](https://insights.sbomify.com/CVE-2020-14301/): Information disclosure in libvirt (medium 6.5)
- [CVE-2020-14300](https://insights.sbomify.com/CVE-2020-14300/): Privilege escalation in Docker (high 8.8)
- [CVE-2020-1430](https://insights.sbomify.com/CVE-2020-1430/): Memory corruption in Windows (high 7.8)
- [CVE-2020-14299](https://insights.sbomify.com/CVE-2020-14299/): Auth bypass in picketbox (medium 6.5)
- [CVE-2020-14298](https://insights.sbomify.com/CVE-2020-14298/): Misconfiguration in Docker (high 8.8)
- [CVE-2020-14297](https://insights.sbomify.com/CVE-2020-14297/): Wildfly EJB Client causes DoS (medium 6.5)
- [CVE-2020-14296](https://insights.sbomify.com/CVE-2020-14296/): Server-side request forgery in CloudForms (high 7.1)
- [CVE-2020-14295](https://insights.sbomify.com/CVE-2020-14295/): SQL injection in cacti:cacti (high 7.2)
- [CVE-2020-14294](https://insights.sbomify.com/CVE-2020-14294/): Cross-site scripting in secudos:qiata fta (medium 6.1)
- [CVE-2020-14293](https://insights.sbomify.com/CVE-2020-14293/): Command injection in secudos:domos (high 7.5)
- [CVE-2020-14292](https://insights.sbomify.com/CVE-2020-14292/): Information disclosure in health:covidsafe (medium 5.7)
- [CVE-2020-1429](https://insights.sbomify.com/CVE-2020-1429/): Privilege escalation in Windows (high 7.8)
- [CVE-2020-1428](https://insights.sbomify.com/CVE-2020-1428/): Privilege escalation in Windows (high 7.8)
- [CVE-2020-14275](https://insights.sbomify.com/CVE-2020-14275/): Other in HCL Commerce (critical 9.8)
- [CVE-2020-14274](https://insights.sbomify.com/CVE-2020-14274/): Information disclosure in HCL Commerce (high 7.5)
- [CVE-2020-14273](https://insights.sbomify.com/CVE-2020-14273/): Denial of service in HCL Domino (high 7.5)
- [CVE-2020-14271](https://insights.sbomify.com/CVE-2020-14271/): Cross-site scripting in HCL iNotes (medium 6.1)
- [CVE-2020-14270](https://insights.sbomify.com/CVE-2020-14270/): Information disclosure in HCL Domino (medium 5.3)
- [CVE-2020-1427](https://insights.sbomify.com/CVE-2020-1427/): Privilege escalation in Windows (high 7.8)
- [CVE-2020-14268](https://insights.sbomify.com/CVE-2020-14268/): Memory corruption in HCL Notes (critical 9.8)
- [CVE-2020-14264](https://insights.sbomify.com/CVE-2020-14264/): Weak cryptography in "HCL Traveler Companion" (low 3.9)
- [CVE-2020-14263](https://insights.sbomify.com/CVE-2020-14263/): Weak cryptography in "HCL Traveler Companion" (low 3.9)
- [CVE-2020-14260](https://insights.sbomify.com/CVE-2020-14260/): Memory corruption in HCL Domino (critical 9.8)
- [CVE-2020-1426](https://insights.sbomify.com/CVE-2020-1426/): Information disclosure in Windows (medium 5.5)
- [CVE-2020-14258](https://insights.sbomify.com/CVE-2020-14258/): Denial of service in HCL Notes (high 7.5)
- [CVE-2020-14255](https://insights.sbomify.com/CVE-2020-14255/): Information disclosure in HCL Digital Experience (high 7.5)
- [CVE-2020-14254](https://insights.sbomify.com/CVE-2020-14254/): Weak cryptography in HCL BigFix Inventory (high 7.5)
- [CVE-2020-1425](https://insights.sbomify.com/CVE-2020-1425/): Memory corruption in Windows 10 Version 1709 for 32-bit Systems (high 7.8)
- [CVE-2020-14248](https://insights.sbomify.com/CVE-2020-14248/): Information disclosure in HCL BigFix Inventory (medium 5.3)
- [CVE-2020-14247](https://insights.sbomify.com/CVE-2020-14247/): Auth bypass in HCL OneTest Performance (medium 6.5)
- [CVE-2020-14246](https://insights.sbomify.com/CVE-2020-14246/): Weak cryptography in HCL OneTest Performance (high 7.5)
- [CVE-2020-14245](https://insights.sbomify.com/CVE-2020-14245/): Missing authorization in HCL OneTest UI (critical 9.8)
- [CVE-2020-14244](https://insights.sbomify.com/CVE-2020-14244/): Memory corruption in HCL Domino (critical 9.8)
- [CVE-2020-14240](https://insights.sbomify.com/CVE-2020-14240/): Cross-site scripting in HCL Notes (medium 6.1)
- [CVE-2020-1424](https://insights.sbomify.com/CVE-2020-1424/): Privilege escalation in Windows (high 7.8)
- [CVE-2020-14234](https://insights.sbomify.com/CVE-2020-14234/): Denial of service in HCL Domino (high 7.5)
- [CVE-2020-14232](https://insights.sbomify.com/CVE-2020-14232/): Memory corruption in HCL Notes (high 8.8)
- [CVE-2020-14231](https://insights.sbomify.com/CVE-2020-14231/): Memory corruption in HCL Client Application Access (high 8.8)
- [CVE-2020-14230](https://insights.sbomify.com/CVE-2020-14230/): Denial of service in HCL Domino (high 7.5)
- [CVE-2020-1423](https://insights.sbomify.com/CVE-2020-1423/): Privilege escalation in Windows 10 Version 2004 for ARM64-based Systems (high 7.8)
- [CVE-2020-14225](https://insights.sbomify.com/CVE-2020-14225/): Other in HCL iNotes (medium 6.5)
- [CVE-2020-14224](https://insights.sbomify.com/CVE-2020-14224/): Memory corruption in HCL Notes (critical 9.8)
- [CVE-2020-14223](https://insights.sbomify.com/CVE-2020-14223/): Cross-site scripting in HCL Digital Experience (medium 6.1)
- [CVE-2020-14222](https://insights.sbomify.com/CVE-2020-14222/): Cross-site scripting in HCL Digital Experience (medium 6.1)
- [CVE-2020-14221](https://insights.sbomify.com/CVE-2020-14221/): Information disclosure in HCL Digital Experience (medium 4.9)
- [CVE-2020-1422](https://insights.sbomify.com/CVE-2020-1422/): Privilege escalation in Windows (high 7.8)
- [CVE-2020-14215](https://insights.sbomify.com/CVE-2020-14215/): Privilege escalation in zulip:zulip server (high 7.5)
- [CVE-2020-14214](https://insights.sbomify.com/CVE-2020-14214/): Auth bypass in zammad:zammad (medium 6.5)
- [CVE-2020-14213](https://insights.sbomify.com/CVE-2020-14213/): Missing authorization in zammad:zammad (medium 5.4)
- [CVE-2020-14212](https://insights.sbomify.com/CVE-2020-14212/): Memory corruption in ffmpeg:ffmpeg (high 8.8)
- [CVE-2020-14210](https://insights.sbomify.com/CVE-2020-14210/): Cross-site scripting in monitorapp:application insight web application (medium 6.1)
- [CVE-2020-1421](https://insights.sbomify.com/CVE-2020-1421/): Code injection in Windows (high 8.8)
- [CVE-2020-14209](https://insights.sbomify.com/CVE-2020-14209/): Dolibarr Unrestricted Upload of File with Dangerous Type (high 8.8)
- [CVE-2020-14208](https://insights.sbomify.com/CVE-2020-14208/): Cross-site scripting in salesagility:suitecrm (medium 5.4)
- [CVE-2020-14207](https://insights.sbomify.com/CVE-2020-14207/): SQL injection in divebook project:divebook (medium 5.3)
- [CVE-2020-14206](https://insights.sbomify.com/CVE-2020-14206/): Cross-site scripting in divebook project:divebook (medium 6.1)
- [CVE-2020-14205](https://insights.sbomify.com/CVE-2020-14205/): Missing authorization in divebook project:divebook (medium 5.3)
- [CVE-2020-14204](https://insights.sbomify.com/CVE-2020-14204/): XML external entity in ibi:webfocus business intelligence (high 8.2)
- [CVE-2020-14203](https://insights.sbomify.com/CVE-2020-14203/): Cross-site request forgery in ibi:webfocus business intelligence (high 8.8)
- [CVE-2020-14202](https://insights.sbomify.com/CVE-2020-14202/): Cross-site scripting in ibi:webfocus business intelligence (medium 6.1)
- [CVE-2020-14201](https://insights.sbomify.com/CVE-2020-14201/): Dolibarr CRM allows Privilege Escalation (medium 6.5)
- [CVE-2020-1420](https://insights.sbomify.com/CVE-2020-1420/): Information disclosure in Windows (medium 5.5)
- [CVE-2020-14199](https://insights.sbomify.com/CVE-2020-14199/): Business logic in satoshilabs:trezor model t firmware (medium 6.5)
- [CVE-2020-14198](https://insights.sbomify.com/CVE-2020-14198/): Denial of service in bitcoin:bitcoin core (high 7.5)
- [CVE-2020-14196](https://insights.sbomify.com/CVE-2020-14196/): Missing authorization in powerdns:recursor (medium 5.3)
- [CVE-2020-14195](https://insights.sbomify.com/CVE-2020-14195/): Deserialization of untrusted data in Jackson Databind (high 8.1)
- [CVE-2020-14194](https://insights.sbomify.com/CVE-2020-14194/): Other in zulip:zulip server (medium 5.4)
- [CVE-2020-14193](https://insights.sbomify.com/CVE-2020-14193/): Code injection in Automation for Jira (medium 5.4)
- [CVE-2020-14192](https://insights.sbomify.com/CVE-2020-14192/): Information disclosure in Crucible (medium 4.3)
- [CVE-2020-14191](https://insights.sbomify.com/CVE-2020-14191/): Denial of service in Crucible (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/168/