# Vulnerabilities published in 2020


- [CVE-2020-14190](https://insights.sbomify.com/CVE-2020-14190/): Denial of service in Crucible (high 7.5)
- [CVE-2020-1419](https://insights.sbomify.com/CVE-2020-1419/): Information disclosure in Windows (medium 5.5)
- [CVE-2020-14189](https://insights.sbomify.com/CVE-2020-14189/): Code injection in gajira-comment (critical 9.8)
- [CVE-2020-14188](https://insights.sbomify.com/CVE-2020-14188/): gajira-create GitHub action vulnerable to arbitrary code execution (critical 9.8)
- [CVE-2020-14185](https://insights.sbomify.com/CVE-2020-14185/): Missing authorization in Jira Server (medium 5.3)
- [CVE-2020-14184](https://insights.sbomify.com/CVE-2020-14184/): Cross-site scripting in Jira Server (medium 5.4)
- [CVE-2020-14183](https://insights.sbomify.com/CVE-2020-14183/): Information disclosure in Jira Server (medium 4.3)
- [CVE-2020-14181](https://insights.sbomify.com/CVE-2020-14181/): Information disclosure in Jira Server (medium 5.3)
- [CVE-2020-14180](https://insights.sbomify.com/CVE-2020-14180/): Information disclosure in Jira Service Desk Server (medium 4.3)
- [CVE-2020-1418](https://insights.sbomify.com/CVE-2020-1418/): Privilege escalation in Windows (high 7.8)
- [CVE-2020-14179](https://insights.sbomify.com/CVE-2020-14179/): Information disclosure in Jira Server (medium 5.3)
- [CVE-2020-14178](https://insights.sbomify.com/CVE-2020-14178/): Information disclosure in Jira Server (high 7.5)
- [CVE-2020-14177](https://insights.sbomify.com/CVE-2020-14177/): Denial of service in Jira Server (medium 6.5)
- [CVE-2020-14175](https://insights.sbomify.com/CVE-2020-14175/): Cross-site scripting in Confluence Server (medium 5.4)
- [CVE-2020-14174](https://insights.sbomify.com/CVE-2020-14174/): Missing authorization in Jira Server (medium 4.3)
- [CVE-2020-14173](https://insights.sbomify.com/CVE-2020-14173/): Cross-site scripting in Jira Server (medium 5.4)
- [CVE-2020-14172](https://insights.sbomify.com/CVE-2020-14172/): Deserialization in Jira Server (critical 9.8)
- [CVE-2020-14171](https://insights.sbomify.com/CVE-2020-14171/): Information disclosure in Bitbucket Server (medium 6.5)
- [CVE-2020-14170](https://insights.sbomify.com/CVE-2020-14170/): Server-side request forgery in Bitbucket Server (medium 4.3)
- [CVE-2020-1417](https://insights.sbomify.com/CVE-2020-1417/): Windows Kernel Elevation of Privilege Vulnerability (medium 5.5)
- [CVE-2020-14169](https://insights.sbomify.com/CVE-2020-14169/): Cross-site scripting in Jira Server and Data Center (medium 6.1)
- [CVE-2020-14168](https://insights.sbomify.com/CVE-2020-14168/): Information disclosure in Jira Server and Data Center (medium 5.9)
- [CVE-2020-14167](https://insights.sbomify.com/CVE-2020-14167/): Denial of service in Jira Server and Data Center (high 7.5)
- [CVE-2020-14166](https://insights.sbomify.com/CVE-2020-14166/): Cross-site scripting in Jira Service Desk Server and Data Center (medium 4.8)
- [CVE-2020-14165](https://insights.sbomify.com/CVE-2020-14165/): Missing authorization in Jira Server and Data Center (medium 5.3)
- [CVE-2020-14164](https://insights.sbomify.com/CVE-2020-14164/): Cross-site scripting in Jira Server and Data Center (medium 6.1)
- [CVE-2020-14163](https://insights.sbomify.com/CVE-2020-14163/): Memory corruption in jerryscript:jerryscript (high 7.5)
- [CVE-2020-14162](https://insights.sbomify.com/CVE-2020-14162/): Privilege escalation in pi-hole:pi-hole (high 7.8)
- [CVE-2020-14161](https://insights.sbomify.com/CVE-2020-14161/): Cross-site scripting in thecodingmachine:gotenberg (medium 6.1)
- [CVE-2020-14160](https://insights.sbomify.com/CVE-2020-14160/): Server-side request forgery in thecodingmachine:gotenberg (high 7.5)
- [CVE-2020-1416](https://insights.sbomify.com/CVE-2020-1416/): Privilege escalation in Azure Storage Explorer (high 8.8)
- [CVE-2020-14159](https://insights.sbomify.com/CVE-2020-14159/): SQL injection in connectwise:automate api (high 8.8)
- [CVE-2020-14158](https://insights.sbomify.com/CVE-2020-14158/): Auth bypass in abus:secvest hybrid fumo50110 firmware (critical 9.1)
- [CVE-2020-14157](https://insights.sbomify.com/CVE-2020-14157/): Weak cryptography in abus:secvest wireless control fube50001 firmware (high 8.1)
- [CVE-2020-14156](https://insights.sbomify.com/CVE-2020-14156/): Misconfiguration in openbmc-project:openbmc (high 8.8)
- [CVE-2020-14155](https://insights.sbomify.com/CVE-2020-14155/): Integer overflow in apple:macos (medium 5.3)
- [CVE-2020-14154](https://insights.sbomify.com/CVE-2020-14154/): Security feature bypass in canonical:ubuntu linux (medium 4.8)
- [CVE-2020-14153](https://insights.sbomify.com/CVE-2020-14153/): Memory corruption in ijg:libjpeg (high 7.1)
- [CVE-2020-14152](https://insights.sbomify.com/CVE-2020-14152/): Denial of service in debian:debian linux (high 7.1)
- [CVE-2020-14150](https://insights.sbomify.com/CVE-2020-14150/): Denial of service in gnu:bison (medium 5.5)
- [CVE-2020-1415](https://insights.sbomify.com/CVE-2020-1415/): Privilege escalation in Windows (high 7.8)
- [CVE-2020-14149](https://insights.sbomify.com/CVE-2020-14149/): Null dereference in troglobit:uftpd (high 7.5)
- [CVE-2020-14148](https://insights.sbomify.com/CVE-2020-14148/): Memory corruption in barton:ngircd (high 7.5)
- [CVE-2020-14147](https://insights.sbomify.com/CVE-2020-14147/): Integer overflow in debian:debian linux (high 7.7)
- [CVE-2020-14146](https://insights.sbomify.com/CVE-2020-14146/): KumbiaPHP Cross-site Scripting (medium 5.4)
- [CVE-2020-14145](https://insights.sbomify.com/CVE-2020-14145/): Information disclosure in netapp:active iq unified manager (medium 5.9)
- [CVE-2020-14144](https://insights.sbomify.com/CVE-2020-14144/): Arbitrary Code Execution in Gitea (high 7.2)
- [CVE-2020-14140](https://insights.sbomify.com/CVE-2020-14140/): Missing authorization in Xiaomi Multiple Devices (high 7.5)
- [CVE-2020-1414](https://insights.sbomify.com/CVE-2020-1414/): Privilege escalation in Windows (high 7.8)
- [CVE-2020-14131](https://insights.sbomify.com/CVE-2020-14131/): Other in Xiaomi specific devices (critical 9.8)
- [CVE-2020-14130](https://insights.sbomify.com/CVE-2020-14130/): Missing authorization in Xiaomi community app (medium 5.3)
- [CVE-2020-1413](https://insights.sbomify.com/CVE-2020-1413/): Privilege escalation in Windows (high 7.8)
- [CVE-2020-14129](https://insights.sbomify.com/CVE-2020-14129/): Business logic in Xiaomi a certain APP (critical 9.8)
- [CVE-2020-14127](https://insights.sbomify.com/CVE-2020-14127/): Memory corruption in Redmi K40 ,Redmi Note10 Pro (high 7.5)
- [CVE-2020-14126](https://insights.sbomify.com/CVE-2020-14126/): Information disclosure in Mi Sound APP (high 7.5)
- [CVE-2020-14125](https://insights.sbomify.com/CVE-2020-14125/): Memory corruption in Redmi Note 11 ,Redmi Note 9T (high 7.5)
- [CVE-2020-14124](https://insights.sbomify.com/CVE-2020-14124/): Memory corruption in Xiaomi Router AX3600 (critical 9.8)
- [CVE-2020-14123](https://insights.sbomify.com/CVE-2020-14123/): Memory corruption in MIUI (high 7.5)
- [CVE-2020-14122](https://insights.sbomify.com/CVE-2020-14122/): Auth bypass in MIUI (medium 5.5)
- [CVE-2020-14121](https://insights.sbomify.com/CVE-2020-14121/): Business logic in Mi App Store (medium 5.5)
- [CVE-2020-14120](https://insights.sbomify.com/CVE-2020-14120/): Privilege escalation in MIUI (high 8.8)
- [CVE-2020-1412](https://insights.sbomify.com/CVE-2020-1412/): Memory corruption in Windows (high 8.8)
- [CVE-2020-14119](https://insights.sbomify.com/CVE-2020-14119/): Command injection in Xiaomi Router AX3600 (critical 9.8)
- [CVE-2020-14118](https://insights.sbomify.com/CVE-2020-14118/): Open redirect in Mi App Store (medium 6.1)
- [CVE-2020-14117](https://insights.sbomify.com/CVE-2020-14117/): Missing authorization in Xiaomi Content Center APP (medium 5.3)
- [CVE-2020-14116](https://insights.sbomify.com/CVE-2020-14116/): Other in Mi Browser (high 7.5)
- [CVE-2020-14115](https://insights.sbomify.com/CVE-2020-14115/): Command injection in Xiaomi Router AX3600 (critical 9.8)
- [CVE-2020-14114](https://insights.sbomify.com/CVE-2020-14114/): Information disclosure in Xiaomi SmartHome APP (high 7.5)
- [CVE-2020-14112](https://insights.sbomify.com/CVE-2020-14112/): Information disclosure in Router AX6000 (medium 5.3)
- [CVE-2020-14111](https://insights.sbomify.com/CVE-2020-14111/): Command injection in Xiaomi Router Router AX3600 (high 7.8)
- [CVE-2020-14110](https://insights.sbomify.com/CVE-2020-14110/): Missing authorization in miwifi6 AX3600 (high 7.8)
- [CVE-2020-1411](https://insights.sbomify.com/CVE-2020-1411/): Privilege escalation in Windows (high 7.8)
- [CVE-2020-14109](https://insights.sbomify.com/CVE-2020-14109/): Command injection in Xiaomi Router AX3600 (high 7.2)
- [CVE-2020-14107](https://insights.sbomify.com/CVE-2020-14107/): Memory corruption in Xiaomi mirror screen (high 7.5)
- [CVE-2020-14106](https://insights.sbomify.com/CVE-2020-14106/): Missing authorization in Xiaomi Mobile Phone (medium 5.5)
- [CVE-2020-14105](https://insights.sbomify.com/CVE-2020-14105/): Information disclosure in Xiaomi 10 (medium 5.5)
- [CVE-2020-14104](https://insights.sbomify.com/CVE-2020-14104/): Race condition in Xiaomi router AX3600 (high 8.1)
- [CVE-2020-14103](https://insights.sbomify.com/CVE-2020-14103/): Information disclosure in Xiaomi 10 (medium 5.5)
- [CVE-2020-14102](https://insights.sbomify.com/CVE-2020-14102/): Command injection in Xiaomi route RM1800 (high 7.2)
- [CVE-2020-14101](https://insights.sbomify.com/CVE-2020-14101/): Information disclosure in Xiaomi route RM1800 (high 7.5)
- [CVE-2020-14100](https://insights.sbomify.com/CVE-2020-14100/): Command injection in Xiaomi router R3600 (critical 9.8)
- [CVE-2020-1410](https://insights.sbomify.com/CVE-2020-1410/): Memory corruption in Windows (high 7.8)
- [CVE-2020-14099](https://insights.sbomify.com/CVE-2020-14099/): Hardcoded credentials in Xiaomi Router AX1800,Xiaomi Rourer RM1800 (high 7.5)
- [CVE-2020-14098](https://insights.sbomify.com/CVE-2020-14098/): Auth bypass in Xiaomi route RM1800 (high 7.5)
- [CVE-2020-14097](https://insights.sbomify.com/CVE-2020-14097/): Misconfiguration in Xiaomi router AX6 (high 7.5)
- [CVE-2020-14096](https://insights.sbomify.com/CVE-2020-14096/): Memory corruption in Xiaomi AI speaker (critical 9.8)
- [CVE-2020-14095](https://insights.sbomify.com/CVE-2020-14095/): Memory corruption in Xiaomi router R3600 (critical 9.8)
- [CVE-2020-14094](https://insights.sbomify.com/CVE-2020-14094/): Memory corruption in Xiaomi router R3600 (critical 9.8)
- [CVE-2020-14093](https://insights.sbomify.com/CVE-2020-14093/): Weak cryptography in canonical:ubuntu linux (medium 5.9)
- [CVE-2020-14092](https://insights.sbomify.com/CVE-2020-14092/): SQL injection in ithemes:paypal pro (critical 9.8)
- [CVE-2020-1409](https://insights.sbomify.com/CVE-2020-1409/): Memory corruption in Microsoft Office (high 7.8)
- [CVE-2020-14081](https://insights.sbomify.com/CVE-2020-14081/): Command injection in trendnet:tew-827dru firmware (high 8.8)
- [CVE-2020-14080](https://insights.sbomify.com/CVE-2020-14080/): Memory corruption in trendnet:tew-827dru firmware (critical 9.8)
- [CVE-2020-1408](https://insights.sbomify.com/CVE-2020-1408/): Memory corruption in Windows (high 8.8)
- [CVE-2020-14079](https://insights.sbomify.com/CVE-2020-14079/): Memory corruption in trendnet:tew-827dru firmware (high 8.8)
- [CVE-2020-14078](https://insights.sbomify.com/CVE-2020-14078/): Memory corruption in trendnet:tew-827dru firmware (high 8.8)
- [CVE-2020-14077](https://insights.sbomify.com/CVE-2020-14077/): Memory corruption in trendnet:tew-827dru firmware (high 8.8)
- [CVE-2020-14076](https://insights.sbomify.com/CVE-2020-14076/): Memory corruption in trendnet:tew-827dru firmware (high 8.8)
- [CVE-2020-14075](https://insights.sbomify.com/CVE-2020-14075/): Command injection in trendnet:tew-827dru firmware (high 8.8)
- [CVE-2020-14074](https://insights.sbomify.com/CVE-2020-14074/): Memory corruption in trendnet:tew-827dru firmware (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/169/