# Vulnerabilities published in 2020


- [CVE-2020-13381](https://insights.sbomify.com/CVE-2020-13381/): SQL injection in os4ed:opensis (critical 9.8)
- [CVE-2020-13380](https://insights.sbomify.com/CVE-2020-13380/): openSIS before 7.4 allows SQL Injection. (critical 9.8)
- [CVE-2020-1338](https://insights.sbomify.com/CVE-2020-1338/): Microsoft Word Remote Code Execution Vulnerability (high 7.8)
- [CVE-2020-13379](https://insights.sbomify.com/CVE-2020-13379/): Server Side Request Forgery in Grafana (high 8.2)
- [CVE-2020-13378](https://insights.sbomify.com/CVE-2020-13378/): Command injection in loadbalancer:enterprise va max (high 8.8)
- [CVE-2020-13377](https://insights.sbomify.com/CVE-2020-13377/): Path traversal in loadbalancer:enterprise va max (high 8.1)
- [CVE-2020-13376](https://insights.sbomify.com/CVE-2020-13376/): File upload in securenvoy:securmail (critical 9.0)
- [CVE-2020-1337](https://insights.sbomify.com/CVE-2020-1337/): Windows Print Spooler Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-13365](https://insights.sbomify.com/CVE-2020-13365/): Auth bypass in zyxel:nas326 firmware (high 8.4)
- [CVE-2020-13364](https://insights.sbomify.com/CVE-2020-13364/): Hardcoded credentials in zyxel:nas326 firmware (medium 6.5)
- [CVE-2020-13362](https://insights.sbomify.com/CVE-2020-13362/): Memory corruption in canonical:ubuntu linux (low 3.2)
- [CVE-2020-13361](https://insights.sbomify.com/CVE-2020-13361/): Memory corruption in canonical:ubuntu linux (low 3.9)
- [CVE-2020-1336](https://insights.sbomify.com/CVE-2020-1336/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-13359](https://insights.sbomify.com/CVE-2020-13359/): Information disclosure in GitLab CE/EE (high 7.6)
- [CVE-2020-13358](https://insights.sbomify.com/CVE-2020-13358/): Missing authorization in Gitlab CE/EE (medium 4.7)
- [CVE-2020-13357](https://insights.sbomify.com/CVE-2020-13357/): Missing authorization in GitLab CE/EE (medium 4.3)
- [CVE-2020-13356](https://insights.sbomify.com/CVE-2020-13356/): Security feature bypass in GitLab CE/EE (high 8.2)
- [CVE-2020-13355](https://insights.sbomify.com/CVE-2020-13355/): Path traversal in GitLab CE/EE (high 7.5)
- [CVE-2020-13354](https://insights.sbomify.com/CVE-2020-13354/): Denial of service in GitLab CE/EE (medium 4.3)
- [CVE-2020-13353](https://insights.sbomify.com/CVE-2020-13353/): Gitaly Insufficient Session Expiration vulnerability (low 2.5)
- [CVE-2020-13352](https://insights.sbomify.com/CVE-2020-13352/): Information disclosure in GitLab CE/EE (low 3.7)
- [CVE-2020-13351](https://insights.sbomify.com/CVE-2020-13351/): Missing authorization in GitLab CE/EE (medium 6.5)
- [CVE-2020-13350](https://insights.sbomify.com/CVE-2020-13350/): Cross-site request forgery in GitLab CE/EE (low 3.1)
- [CVE-2020-1335](https://insights.sbomify.com/CVE-2020-1335/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8)
- [CVE-2020-13349](https://insights.sbomify.com/CVE-2020-13349/): Denial of service in GitLab EE (medium 4.3)
- [CVE-2020-13348](https://insights.sbomify.com/CVE-2020-13348/): Security feature bypass in GitLab EE (medium 5.7)
- [CVE-2020-13347](https://insights.sbomify.com/CVE-2020-13347/): Command injection in GitLab Runner (critical 9.1)
- [CVE-2020-13346](https://insights.sbomify.com/CVE-2020-13346/): Missing authorization in GitLab (medium 6.5)
- [CVE-2020-13345](https://insights.sbomify.com/CVE-2020-13345/): Cross-site scripting in GitLab (medium 5.5)
- [CVE-2020-13344](https://insights.sbomify.com/CVE-2020-13344/): Information disclosure in GitLab (medium 5.7)
- [CVE-2020-13343](https://insights.sbomify.com/CVE-2020-13343/): Missing authorization in GitLab (high 7.5)
- [CVE-2020-13342](https://insights.sbomify.com/CVE-2020-13342/): Denial of service in GitLab (low 2.7)
- [CVE-2020-13341](https://insights.sbomify.com/CVE-2020-13341/): Missing authorization in GitLab (medium 4.9)
- [CVE-2020-13340](https://insights.sbomify.com/CVE-2020-13340/): Cross-site scripting in GitLab (high 8.7)
- [CVE-2020-1334](https://insights.sbomify.com/CVE-2020-1334/): Privilege escalation in Windows (high 7.8)
- [CVE-2020-13339](https://insights.sbomify.com/CVE-2020-13339/): Cross-site scripting in GitLab (medium 5.5)
- [CVE-2020-13338](https://insights.sbomify.com/CVE-2020-13338/): Cross-site scripting in GitLab (medium 5.4)
- [CVE-2020-13337](https://insights.sbomify.com/CVE-2020-13337/): Cross-site scripting in GitLab (high 7.2)
- [CVE-2020-13336](https://insights.sbomify.com/CVE-2020-13336/): Cross-site scripting in GitLab (medium 4.0)
- [CVE-2020-13335](https://insights.sbomify.com/CVE-2020-13335/): Business logic in GitLab (medium 4.3)
- [CVE-2020-13334](https://insights.sbomify.com/CVE-2020-13334/): Missing authorization in GitLab (medium 5.9)
- [CVE-2020-13333](https://insights.sbomify.com/CVE-2020-13333/): Denial of service in GitLab (medium 4.3)
- [CVE-2020-13331](https://insights.sbomify.com/CVE-2020-13331/): Cross-site scripting in GitLab (medium 5.4)
- [CVE-2020-13330](https://insights.sbomify.com/CVE-2020-13330/): Cross-site scripting in GitLab (medium 4.4)
- [CVE-2020-1333](https://insights.sbomify.com/CVE-2020-1333/): Privilege escalation in Windows (medium 6.7)
- [CVE-2020-13329](https://insights.sbomify.com/CVE-2020-13329/): Cross-site scripting in GitLab (medium 6.5)
- [CVE-2020-13328](https://insights.sbomify.com/CVE-2020-13328/): Cross-site scripting in GitLab (medium 4.8)
- [CVE-2020-13327](https://insights.sbomify.com/CVE-2020-13327/): Misconfiguration in GitLab Runner (medium 6.0)
- [CVE-2020-13326](https://insights.sbomify.com/CVE-2020-13326/): Security feature bypass in GitLab (medium 4.3)
- [CVE-2020-13325](https://insights.sbomify.com/CVE-2020-13325/): Denial of service in GitLab (high 7.1)
- [CVE-2020-13324](https://insights.sbomify.com/CVE-2020-13324/): Information disclosure in GitLab (medium 6.5)
- [CVE-2020-13323](https://insights.sbomify.com/CVE-2020-13323/): Information disclosure in GitLab (high 7.7)
- [CVE-2020-13322](https://insights.sbomify.com/CVE-2020-13322/): Missing authorization in GitLab (high 7.2)
- [CVE-2020-13321](https://insights.sbomify.com/CVE-2020-13321/): Cross-site scripting in GitLab (high 8.3)
- [CVE-2020-13320](https://insights.sbomify.com/CVE-2020-13320/): Missing authorization in GitLab (medium 6.5)
- [CVE-2020-1332](https://insights.sbomify.com/CVE-2020-1332/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8)
- [CVE-2020-13319](https://insights.sbomify.com/CVE-2020-13319/): Missing authorization in GitLab (medium 4.3)
- [CVE-2020-13318](https://insights.sbomify.com/CVE-2020-13318/): Privilege escalation in GitLab (medium 6.4)
- [CVE-2020-13317](https://insights.sbomify.com/CVE-2020-13317/): Missing authorization in GitLab (medium 6.5)
- [CVE-2020-13316](https://insights.sbomify.com/CVE-2020-13316/): Auth bypass in GitLab (medium 5.4)
- [CVE-2020-13315](https://insights.sbomify.com/CVE-2020-13315/): Denial of service in GitLab (low 3.7)
- [CVE-2020-13314](https://insights.sbomify.com/CVE-2020-13314/): Cross-site scripting in GitLab (low 3.7)
- [CVE-2020-13313](https://insights.sbomify.com/CVE-2020-13313/): Missing authorization in GitLab (medium 4.3)
- [CVE-2020-13312](https://insights.sbomify.com/CVE-2020-13312/): Auth bypass in GitLab (medium 6.5)
- [CVE-2020-13311](https://insights.sbomify.com/CVE-2020-13311/): Denial of service in GitLab (medium 4.3)
- [CVE-2020-13310](https://insights.sbomify.com/CVE-2020-13310/): Denial of service in GitLab (medium 6.5)
- [CVE-2020-1331](https://insights.sbomify.com/CVE-2020-1331/): Other in System Center 2016 Operations Manager (medium 5.4)
- [CVE-2020-13309](https://insights.sbomify.com/CVE-2020-13309/): Server-side request forgery in GitLab (medium 5.4)
- [CVE-2020-13308](https://insights.sbomify.com/CVE-2020-13308/): Business logic in GitLab (low 2.7)
- [CVE-2020-13307](https://insights.sbomify.com/CVE-2020-13307/): Auth bypass in GitLab (low 3.8)
- [CVE-2020-13306](https://insights.sbomify.com/CVE-2020-13306/): Denial of service in GitLab (low 3.7)
- [CVE-2020-13305](https://insights.sbomify.com/CVE-2020-13305/): Auth bypass in GitLab (low 3.5)
- [CVE-2020-13304](https://insights.sbomify.com/CVE-2020-13304/): Weak cryptography in GitLab (low 3.8)
- [CVE-2020-13303](https://insights.sbomify.com/CVE-2020-13303/): Missing authorization in GitLab (high 7.1)
- [CVE-2020-13302](https://insights.sbomify.com/CVE-2020-13302/): Auth bypass in GitLab (low 3.8)
- [CVE-2020-13301](https://insights.sbomify.com/CVE-2020-13301/): Cross-site scripting in GitLab (medium 5.5)
- [CVE-2020-13300](https://insights.sbomify.com/CVE-2020-13300/): Security feature bypass in GitLab (high 8.0)
- [CVE-2020-1330](https://insights.sbomify.com/CVE-2020-1330/): Information disclosure in Windows (medium 5.5)
- [CVE-2020-13299](https://insights.sbomify.com/CVE-2020-13299/): Auth bypass in GitLab (high 8.1)
- [CVE-2020-13298](https://insights.sbomify.com/CVE-2020-13298/): Information disclosure in GitLab (high 7.2)
- [CVE-2020-13297](https://insights.sbomify.com/CVE-2020-13297/): Security feature bypass in GitLab (low 3.8)
- [CVE-2020-13296](https://insights.sbomify.com/CVE-2020-13296/): Missing authorization in GitLab (medium 6.5)
- [CVE-2020-13295](https://insights.sbomify.com/CVE-2020-13295/): Server-side request forgery in GitLab Runner (medium 5.4)
- [CVE-2020-13294](https://insights.sbomify.com/CVE-2020-13294/): Business logic in GitLab (medium 4.2)
- [CVE-2020-13293](https://insights.sbomify.com/CVE-2020-13293/): Business logic in GitLab (medium 6.3)
- [CVE-2020-13292](https://insights.sbomify.com/CVE-2020-13292/): Auth bypass in GitLab (critical 9.6)
- [CVE-2020-13291](https://insights.sbomify.com/CVE-2020-13291/): Security feature bypass in GitLab (high 8.1)
- [CVE-2020-13290](https://insights.sbomify.com/CVE-2020-13290/): Missing authorization in GitLab (high 7.5)
- [CVE-2020-1329](https://insights.sbomify.com/CVE-2020-1329/): Other in Microsoft Bing Search for Android (medium 6.5)
- [CVE-2020-13289](https://insights.sbomify.com/CVE-2020-13289/): Auth bypass in GitLab (medium 5.4)
- [CVE-2020-13288](https://insights.sbomify.com/CVE-2020-13288/): Cross-site scripting in GitLab (medium 5.5)
- [CVE-2020-13287](https://insights.sbomify.com/CVE-2020-13287/): Information disclosure in GitLab (medium 4.3)
- [CVE-2020-13286](https://insights.sbomify.com/CVE-2020-13286/): Server-side request forgery in GitLab (medium 6.4)
- [CVE-2020-13285](https://insights.sbomify.com/CVE-2020-13285/): Cross-site scripting in GitLab (high 7.3)
- [CVE-2020-13284](https://insights.sbomify.com/CVE-2020-13284/): Auth bypass in GitLab (medium 6.5)
- [CVE-2020-13283](https://insights.sbomify.com/CVE-2020-13283/): Cross-site scripting in GitLab (high 7.3)
- [CVE-2020-13282](https://insights.sbomify.com/CVE-2020-13282/): Missing authorization in GitLab (low 3.1)
- [CVE-2020-13281](https://insights.sbomify.com/CVE-2020-13281/): Denial of service in GitLab (medium 6.5)
- [CVE-2020-13280](https://insights.sbomify.com/CVE-2020-13280/): Denial of service in GitLab (medium 6.5)
- [CVE-2020-13279](https://insights.sbomify.com/CVE-2020-13279/): Code injection in gitlab-vscode-extension (high 8.6)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/176/