# Vulnerabilities published in 2020 - [CVE-2020-13860](https://insights.sbomify.com/CVE-2020-13860/): Weak cryptography in mofinetwork:mofi4500-4gxelte firmware (high 7.5) - [CVE-2020-1386](https://insights.sbomify.com/CVE-2020-1386/): Information disclosure in Windows (medium 5.5) - [CVE-2020-13859](https://insights.sbomify.com/CVE-2020-13859/): Auth bypass in mofinetwork:mofi4500-4gxelte firmware (critical 9.8) - [CVE-2020-13858](https://insights.sbomify.com/CVE-2020-13858/): Hardcoded credentials in mofinetwork:mofi4500-4gxelte firmware (critical 9.8) - [CVE-2020-13857](https://insights.sbomify.com/CVE-2020-13857/): Missing authorization in mofinetwork:mofi4500-4gxelte firmware (high 7.5) - [CVE-2020-13856](https://insights.sbomify.com/CVE-2020-13856/): Missing authorization in mofinetwork:mofi4500-4gxelte firmware (high 7.5) - [CVE-2020-13855](https://insights.sbomify.com/CVE-2020-13855/): File upload in pandorafms:pandora fms (high 7.2) - [CVE-2020-13854](https://insights.sbomify.com/CVE-2020-13854/): Privilege escalation in pandorafms:pandora fms (critical 9.8) - [CVE-2020-13853](https://insights.sbomify.com/CVE-2020-13853/): Cross-site scripting in pandorafms:pandora fms (medium 5.4) - [CVE-2020-13852](https://insights.sbomify.com/CVE-2020-13852/): File upload in pandorafms:pandora fms (high 7.2) - [CVE-2020-13851](https://insights.sbomify.com/CVE-2020-13851/): Command injection in pandorafms:pandora fms (high 8.8) - [CVE-2020-13850](https://insights.sbomify.com/CVE-2020-13850/): Missing authorization in pandorafms:pandora fms (high 7.5) - [CVE-2020-1385](https://insights.sbomify.com/CVE-2020-1385/): Privilege escalation in Windows (high 7.8) - [CVE-2020-13849](https://insights.sbomify.com/CVE-2020-13849/): Denial of service in mqtt:mqtt (high 7.5) - [CVE-2020-13848](https://insights.sbomify.com/CVE-2020-13848/): Null dereference in debian:debian linux (high 7.5) - [CVE-2020-13847](https://insights.sbomify.com/CVE-2020-13847/): Security feature bypass in sylabs:singularity (high 7.5) - [CVE-2020-13846](https://insights.sbomify.com/CVE-2020-13846/): "Verify All" Returns Success Despite Validation Failures in Singularity (high 7.5) - [CVE-2020-13845](https://insights.sbomify.com/CVE-2020-13845/): Execution Control List (ECL) Is Insecure in Singularity (high 7.5) - [CVE-2020-13844](https://insights.sbomify.com/CVE-2020-13844/): Information disclosure in arm:cortex-a32 firmware (medium 5.5) - [CVE-2020-13843](https://insights.sbomify.com/CVE-2020-13843/): Denial of service in google:android (medium 5.5) - [CVE-2020-13842](https://insights.sbomify.com/CVE-2020-13842/): Other in google:android (high 7.8) - [CVE-2020-13841](https://insights.sbomify.com/CVE-2020-13841/): Security feature bypass in google:android (critical 9.8) - [CVE-2020-13840](https://insights.sbomify.com/CVE-2020-13840/): Memory corruption in google:android (critical 9.8) - [CVE-2020-1384](https://insights.sbomify.com/CVE-2020-1384/): Memory corruption in Windows (high 7.8) - [CVE-2020-13839](https://insights.sbomify.com/CVE-2020-13839/): Memory corruption in google:android (critical 9.8) - [CVE-2020-13838](https://insights.sbomify.com/CVE-2020-13838/): Security feature bypass in google:android (low 3.5) - [CVE-2020-13837](https://insights.sbomify.com/CVE-2020-13837/): Auth bypass in google:android (low 3.5) - [CVE-2020-13836](https://insights.sbomify.com/CVE-2020-13836/): Path traversal in google:android (high 7.5) - [CVE-2020-13835](https://insights.sbomify.com/CVE-2020-13835/): Auth bypass in google:android (critical 9.8) - [CVE-2020-13834](https://insights.sbomify.com/CVE-2020-13834/): Security feature bypass in google:android (high 7.5) - [CVE-2020-13833](https://insights.sbomify.com/CVE-2020-13833/): Path traversal in google:android (critical 9.1) - [CVE-2020-13832](https://insights.sbomify.com/CVE-2020-13832/): Memory corruption in google:android (critical 9.8) - [CVE-2020-13831](https://insights.sbomify.com/CVE-2020-13831/): Memory corruption in google:android (critical 9.8) - [CVE-2020-13830](https://insights.sbomify.com/CVE-2020-13830/): Information disclosure in google:android (high 7.5) - [CVE-2020-1383](https://insights.sbomify.com/CVE-2020-1383/): Windows RRAS Service Information Disclosure Vulnerability (medium 5.5) - [CVE-2020-13829](https://insights.sbomify.com/CVE-2020-13829/): Security feature bypass in google:android (high 7.5) - [CVE-2020-13828](https://insights.sbomify.com/CVE-2020-13828/): Dolibarr stored Cross-Site Scripting (XSS) vulnerability (medium 5.4) - [CVE-2020-13827](https://insights.sbomify.com/CVE-2020-13827/): Cross-site scripting in phplist:phplist (medium 6.1) - [CVE-2020-13826](https://insights.sbomify.com/CVE-2020-13826/): Code injection in i-doit:i-doit (high 8.8) - [CVE-2020-13825](https://insights.sbomify.com/CVE-2020-13825/): Cross-site scripting in i-doit:i-doit (medium 6.1) - [CVE-2020-13822](https://insights.sbomify.com/CVE-2020-13822/): Signature Malleabillity in elliptic (high 7.7) - [CVE-2020-13821](https://insights.sbomify.com/CVE-2020-13821/): Cross-site scripting in hivemq:broker control center (medium 5.4) - [CVE-2020-13820](https://insights.sbomify.com/CVE-2020-13820/): Cross-site scripting in extremenetworks:extreme management center (medium 6.1) - [CVE-2020-1382](https://insights.sbomify.com/CVE-2020-1382/): Use after free in Windows 10 Version 1903 for 32-bit Systems (high 7.8) - [CVE-2020-13819](https://insights.sbomify.com/CVE-2020-13819/): Cross-site scripting in extremenetworks:extreme management center (medium 6.1) - [CVE-2020-13818](https://insights.sbomify.com/CVE-2020-13818/): Path traversal in zohocorp:manageengine opmanager (high 7.5) - [CVE-2020-13817](https://insights.sbomify.com/CVE-2020-13817/): Weak cryptography in fujitsu:m10-1 firmware (medium 5.9) - [CVE-2020-13815](https://insights.sbomify.com/CVE-2020-13815/): Denial of service in foxitsoftware:phantompdf (high 7.5) - [CVE-2020-13814](https://insights.sbomify.com/CVE-2020-13814/): Use after free in foxitsoftware:phantompdf (critical 9.8) - [CVE-2020-13813](https://insights.sbomify.com/CVE-2020-13813/): Privilege escalation in foxitsoftware:foxit studio photo (high 7.8) - [CVE-2020-13812](https://insights.sbomify.com/CVE-2020-13812/): Privilege escalation in foxitsoftware:foxit studio photo (high 7.8) - [CVE-2020-13811](https://insights.sbomify.com/CVE-2020-13811/): Memory corruption in foxitsoftware:foxit studio photo (high 7.8) - [CVE-2020-13810](https://insights.sbomify.com/CVE-2020-13810/): Security feature bypass in foxitsoftware:phantompdf (high 7.5) - [CVE-2020-1381](https://insights.sbomify.com/CVE-2020-1381/): Use after free in Windows 10 Version 1903 for 32-bit Systems (high 7.8) - [CVE-2020-13809](https://insights.sbomify.com/CVE-2020-13809/): Denial of service in foxitsoftware:phantompdf (high 7.5) - [CVE-2020-13808](https://insights.sbomify.com/CVE-2020-13808/): Denial of service in foxitsoftware:phantompdf (high 7.5) - [CVE-2020-13807](https://insights.sbomify.com/CVE-2020-13807/): Denial of service in foxitsoftware:phantompdf (high 7.5) - [CVE-2020-13806](https://insights.sbomify.com/CVE-2020-13806/): Use after free in foxitsoftware:phantompdf (high 7.5) - [CVE-2020-13805](https://insights.sbomify.com/CVE-2020-13805/): Auth bypass in foxitsoftware:phantompdf (critical 9.8) - [CVE-2020-13804](https://insights.sbomify.com/CVE-2020-13804/): Hardcoded credentials in foxitsoftware:phantompdf (critical 9.8) - [CVE-2020-13803](https://insights.sbomify.com/CVE-2020-13803/): Security feature bypass in foxitsoftware:phantompdf (high 7.5) - [CVE-2020-13802](https://insights.sbomify.com/CVE-2020-13802/): Command injection in erlang:rebar3 (critical 9.8) - [CVE-2020-13800](https://insights.sbomify.com/CVE-2020-13800/): Denial of service in canonical:ubuntu linux (medium 6.0) - [CVE-2020-1380](https://insights.sbomify.com/CVE-2020-1380/): Microsoft Internet Explorer Scripting Engine Memory Corruption (high 7.8, exploited in the wild) - [CVE-2020-13799](https://insights.sbomify.com/CVE-2020-13799/): Security feature bypass in trustedfirmware:op-tee (medium 6.8) - [CVE-2020-13798](https://insights.sbomify.com/CVE-2020-13798/): Cross-site scripting in naviwebs:navigate cms (medium 6.1) - [CVE-2020-13797](https://insights.sbomify.com/CVE-2020-13797/): Cross-site scripting in naviwebs:navigate cms (medium 6.1) - [CVE-2020-13796](https://insights.sbomify.com/CVE-2020-13796/): Cross-site scripting in naviwebs:navigate cms (medium 6.1) - [CVE-2020-13795](https://insights.sbomify.com/CVE-2020-13795/): Path traversal in naviwebs:navigate cms (medium 5.3) - [CVE-2020-13794](https://insights.sbomify.com/CVE-2020-13794/): Authenticated users can exploit an enumeration vulnerability in Harbor (medium 4.3) - [CVE-2020-13793](https://insights.sbomify.com/CVE-2020-13793/): Hardcoded credentials in ivanti:dsm netinst (critical 9.8) - [CVE-2020-13792](https://insights.sbomify.com/CVE-2020-13792/): Path traversal in playtube:playtube (medium 4.3) - [CVE-2020-13791](https://insights.sbomify.com/CVE-2020-13791/): Memory corruption in qemu:qemu (medium 5.5) - [CVE-2020-13790](https://insights.sbomify.com/CVE-2020-13790/): Memory corruption in libjpeg-turbo:libjpeg-turbo (high 8.1) - [CVE-2020-1379](https://insights.sbomify.com/CVE-2020-1379/): Media Foundation Memory Corruption Vulnerability (medium 5.5) - [CVE-2020-13788](https://insights.sbomify.com/CVE-2020-13788/): Harbor is vulnerable to a limited Server-Side Request Forgery (SSRF) (CVE-2020-13788) (medium 4.3) - [CVE-2020-13787](https://insights.sbomify.com/CVE-2020-13787/): Information disclosure in dlink:dir-865l firmware (high 7.5) - [CVE-2020-13786](https://insights.sbomify.com/CVE-2020-13786/): Cross-site request forgery in dlink:dir-865l firmware (high 8.8) - [CVE-2020-13785](https://insights.sbomify.com/CVE-2020-13785/): Weak cryptography in dlink:dir-865l firmware (high 7.5) - [CVE-2020-13784](https://insights.sbomify.com/CVE-2020-13784/): Weak cryptography in dlink:dir-865l firmware (high 7.5) - [CVE-2020-13783](https://insights.sbomify.com/CVE-2020-13783/): Information disclosure in dlink:dir-865l firmware (high 7.5) - [CVE-2020-13782](https://insights.sbomify.com/CVE-2020-13782/): Command injection in dlink:dir-865l firmware (high 8.8) - [CVE-2020-1378](https://insights.sbomify.com/CVE-2020-1378/): Windows Registry Elevation of Privilege Vulnerability (high 7.5) - [CVE-2020-13778](https://insights.sbomify.com/CVE-2020-13778/): Command injection in rconfig:rconfig (high 8.8) - [CVE-2020-13777](https://insights.sbomify.com/CVE-2020-13777/): Weak cryptography in canonical:ubuntu linux (high 7.4) - [CVE-2020-13776](https://insights.sbomify.com/CVE-2020-13776/): Privilege escalation in fedoraproject:fedora (medium 6.7) - [CVE-2020-13775](https://insights.sbomify.com/CVE-2020-13775/): Null dereference in fedoraproject:fedora (medium 6.5) - [CVE-2020-13774](https://insights.sbomify.com/CVE-2020-13774/): File upload in ivanti:endpoint manager (critical 9.9) - [CVE-2020-13773](https://insights.sbomify.com/CVE-2020-13773/): Cross-site scripting in ivanti:endpoint manager (medium 5.4) - [CVE-2020-13772](https://insights.sbomify.com/CVE-2020-13772/): Information disclosure in ivanti:endpoint manager (medium 5.3) - [CVE-2020-13771](https://insights.sbomify.com/CVE-2020-13771/): Privilege escalation in ivanti:endpoint manager (high 7.8) - [CVE-2020-13770](https://insights.sbomify.com/CVE-2020-13770/): Privilege escalation in ivanti:endpoint manager (high 7.8) - [CVE-2020-1377](https://insights.sbomify.com/CVE-2020-1377/): Windows Registry Elevation of Privilege Vulnerability (high 7.8) - [CVE-2020-13769](https://insights.sbomify.com/CVE-2020-13769/): SQL injection in ivanti:endpoint manager (high 8.8) - [CVE-2020-13768](https://insights.sbomify.com/CVE-2020-13768/): Memory corruption in minishare project:minishare (critical 9.8) - [CVE-2020-13767](https://insights.sbomify.com/CVE-2020-13767/): Missing authorization in mitel:micollab (medium 5.9) - [CVE-2020-13765](https://insights.sbomify.com/CVE-2020-13765/): Memory corruption in canonical:ubuntu linux (medium 5.6) - [CVE-2020-13764](https://insights.sbomify.com/CVE-2020-13764/): Gravity Forms plugin leak hashed passwords (high 7.5) - [CVE-2020-13763](https://insights.sbomify.com/CVE-2020-13763/): Cross-site scripting in joomla:joomla\! (high 7.5) - [CVE-2020-13762](https://insights.sbomify.com/CVE-2020-13762/): Cross-site scripting in joomla:joomla\! (medium 6.1) --- From sbomify Insights: https://insights.sbomify.com/years/2020/page/172/