# Vulnerabilities published in 2020


- [CVE-2020-12768](https://insights.sbomify.com/CVE-2020-12768/): Denial of service in canonical:ubuntu linux (medium 5.5)
- [CVE-2020-12767](https://insights.sbomify.com/CVE-2020-12767/): Denial of service in canonical:ubuntu linux (medium 5.5)
- [CVE-2020-12766](https://insights.sbomify.com/CVE-2020-12766/): SQL injection in solis:gnuteca (critical 9.8)
- [CVE-2020-12765](https://insights.sbomify.com/CVE-2020-12765/): Path traversal in solis:miolo (medium 5.3)
- [CVE-2020-12764](https://insights.sbomify.com/CVE-2020-12764/): Path traversal in solis:gnuteca (medium 5.3)
- [CVE-2020-12763](https://insights.sbomify.com/CVE-2020-12763/): Memory corruption in trendnet:tv-ip512wn firmware (critical 9.8)
- [CVE-2020-12762](https://insights.sbomify.com/CVE-2020-12762/): Integer overflow in canonical:ubuntu linux (high 7.8)
- [CVE-2020-12761](https://insights.sbomify.com/CVE-2020-12761/): Integer overflow in enlightenment:imlib2 (critical 9.1)
- [CVE-2020-12760](https://insights.sbomify.com/CVE-2020-12760/): OpenNMS Horizon RCE via Unsafe Deserialization (high 8.8)
- [CVE-2020-1276](https://insights.sbomify.com/CVE-2020-1276/): Privilege escalation in Windows (high 7.8)
- [CVE-2020-12759](https://insights.sbomify.com/CVE-2020-12759/): Cross-site scripting in zulip:zulip server (medium 6.1)
- [CVE-2020-12758](https://insights.sbomify.com/CVE-2020-12758/): Denial of Service (DoS) in HashiCorp Consul (high 7.5)
- [CVE-2020-12757](https://insights.sbomify.com/CVE-2020-12757/): Improper Input Validation in HashiCorp Vault (critical 9.8)
- [CVE-2020-12755](https://insights.sbomify.com/CVE-2020-12755/): Information disclosure in kde:kio-extras (low 3.3)
- [CVE-2020-12754](https://insights.sbomify.com/CVE-2020-12754/): Privilege escalation in google:android (high 7.8)
- [CVE-2020-12753](https://insights.sbomify.com/CVE-2020-12753/): Memory corruption in google:android (critical 9.8)
- [CVE-2020-12752](https://insights.sbomify.com/CVE-2020-12752/): Auth bypass in google:android (high 7.5)
- [CVE-2020-12751](https://insights.sbomify.com/CVE-2020-12751/): Memory corruption in google:android (high 7.8)
- [CVE-2020-12750](https://insights.sbomify.com/CVE-2020-12750/): Security feature bypass in google:android (high 7.5)
- [CVE-2020-1275](https://insights.sbomify.com/CVE-2020-1275/): Privilege escalation in Windows 10 Version 1903 for 32-bit Systems (high 7.8)
- [CVE-2020-12749](https://insights.sbomify.com/CVE-2020-12749/): Memory corruption in google:android (high 7.8)
- [CVE-2020-12748](https://insights.sbomify.com/CVE-2020-12748/): Security feature bypass in google:android (medium 5.3)
- [CVE-2020-12747](https://insights.sbomify.com/CVE-2020-12747/): Memory corruption in google:android (critical 9.8)
- [CVE-2020-12746](https://insights.sbomify.com/CVE-2020-12746/): Memory corruption in google:android (critical 9.8)
- [CVE-2020-12745](https://insights.sbomify.com/CVE-2020-12745/): Security feature bypass in google:android (high 7.5)
- [CVE-2020-12744](https://insights.sbomify.com/CVE-2020-12744/): Privilege escalation in verint:desktop and process analytics (high 7.8)
- [CVE-2020-12743](https://insights.sbomify.com/CVE-2020-12743/): Code injection in gazie project:gazie (critical 9.8)
- [CVE-2020-12742](https://insights.sbomify.com/CVE-2020-12742/): Other in iubenda:iubenda-cookie-law-solution (medium 6.1)
- [CVE-2020-12740](https://insights.sbomify.com/CVE-2020-12740/): Memory corruption in broadcom:tcpreplay (critical 9.1)
- [CVE-2020-1274](https://insights.sbomify.com/CVE-2020-1274/): Privilege escalation in Windows (high 7.8)
- [CVE-2020-12739](https://insights.sbomify.com/CVE-2020-12739/): Denial of service in fanuc:power motion i-model a firmware (medium 5.3)
- [CVE-2020-12737](https://insights.sbomify.com/CVE-2020-12737/): Path traversal in maxum:rumpus (medium 6.5)
- [CVE-2020-12736](https://insights.sbomify.com/CVE-2020-12736/): Code injection in code42:code42 (high 7.2)
- [CVE-2020-12735](https://insights.sbomify.com/CVE-2020-12735/): Weak cryptography in domainmod:domainmod (critical 9.8)
- [CVE-2020-12734](https://insights.sbomify.com/CVE-2020-12734/): Missing authorization in depstech:wifi digital microscope 3 firmware (high 8.1)
- [CVE-2020-12733](https://insights.sbomify.com/CVE-2020-12733/): Hardcoded credentials in depstech:wifi digital microscope 3 firmware (high 7.5)
- [CVE-2020-12732](https://insights.sbomify.com/CVE-2020-12732/): Hardcoded credentials in depstech:wifi digital microscope 3 firmware (medium 6.5)
- [CVE-2020-12731](https://insights.sbomify.com/CVE-2020-12731/): Information disclosure in magicsmotion:flamingo 2 firmware (high 7.5)
- [CVE-2020-12730](https://insights.sbomify.com/CVE-2020-12730/): Weak cryptography in magicsmotion:flamingo 2 firmware (medium 5.3)
- [CVE-2020-1273](https://insights.sbomify.com/CVE-2020-1273/): Privilege escalation in Windows 10 Version 1903 for 32-bit Systems (high 7.8)
- [CVE-2020-12729](https://insights.sbomify.com/CVE-2020-12729/): Missing authorization in magicsmotion:flamingo 2 firmware (medium 4.6)
- [CVE-2020-12725](https://insights.sbomify.com/CVE-2020-12725/): Server-side request forgery in redash:redash (high 7.2)
- [CVE-2020-12723](https://insights.sbomify.com/CVE-2020-12723/): Memory corruption in fedoraproject:fedora (high 7.5)
- [CVE-2020-12720](https://insights.sbomify.com/CVE-2020-12720/): Missing authorization in vbulletin:vbulletin (critical 9.8)
- [CVE-2020-1272](https://insights.sbomify.com/CVE-2020-1272/): Privilege escalation in Windows (high 7.8)
- [CVE-2020-12719](https://insights.sbomify.com/CVE-2020-12719/): XML external entity in wso2:api manager (high 8.7)
- [CVE-2020-12718](https://insights.sbomify.com/CVE-2020-12718/): Cross-site scripting in php-fusion:php-fusion (medium 5.4)
- [CVE-2020-12717](https://insights.sbomify.com/CVE-2020-12717/): Denial of service in alberta:abtracetogether (medium 6.5)
- [CVE-2020-12715](https://insights.sbomify.com/CVE-2020-12715/): Missing authorization in rainbowfishsoftware:pacsone server (high 8.8)
- [CVE-2020-12714](https://insights.sbomify.com/CVE-2020-12714/): Weak cryptography in ciphermail:gateway (medium 5.9)
- [CVE-2020-12713](https://insights.sbomify.com/CVE-2020-12713/): Privilege escalation in ciphermail:gateway (high 7.2)
- [CVE-2020-12712](https://insights.sbomify.com/CVE-2020-12712/): Weak cryptography in sos-berlin:jobscheduler (high 7.5)
- [CVE-2020-1271](https://insights.sbomify.com/CVE-2020-1271/): Privilege escalation in Windows (high 7.8)
- [CVE-2020-12708](https://insights.sbomify.com/CVE-2020-12708/): Cross-site scripting in php-fusion:php-fusion (medium 6.1)
- [CVE-2020-12707](https://insights.sbomify.com/CVE-2020-12707/): Cross-site scripting in lepton-cms:lepton cms (medium 6.1)
- [CVE-2020-12706](https://insights.sbomify.com/CVE-2020-12706/): Cross-site scripting in php-fusion:php-fusion (medium 5.4)
- [CVE-2020-12705](https://insights.sbomify.com/CVE-2020-12705/): Cross-site scripting in lepton-cms:leptoncms (medium 6.1)
- [CVE-2020-12704](https://insights.sbomify.com/CVE-2020-12704/): Cross-site scripting in ulicms:ulicms (medium 6.1)
- [CVE-2020-12703](https://insights.sbomify.com/CVE-2020-12703/): Cross-site scripting in ulicms:ulicms (medium 6.1)
- [CVE-2020-12702](https://insights.sbomify.com/CVE-2020-12702/): Weak cryptography in coolkit:ewelink (medium 4.6)
- [CVE-2020-12700](https://insights.sbomify.com/CVE-2020-12700/): Missing Authorization in TYPO3 extension (medium 4.3)
- [CVE-2020-1270](https://insights.sbomify.com/CVE-2020-1270/): Privilege escalation in Windows (high 7.8)
- [CVE-2020-12699](https://insights.sbomify.com/CVE-2020-12699/): Open redirect in direct_mail (medium 6.1)
- [CVE-2020-12698](https://insights.sbomify.com/CVE-2020-12698/): Missing Authorization in TYPO3 extension (medium 4.3)
- [CVE-2020-12697](https://insights.sbomify.com/CVE-2020-12697/): Denial of service in direct_mail (medium 5.3)
- [CVE-2020-12696](https://insights.sbomify.com/CVE-2020-12696/): Cross-site scripting in iframe project:iframe (medium 6.1)
- [CVE-2020-12695](https://insights.sbomify.com/CVE-2020-12695/): Security feature bypass in asus:rt-n11 (high 7.5)
- [CVE-2020-12693](https://insights.sbomify.com/CVE-2020-12693/): Race condition in debian:debian linux (high 8.1)
- [CVE-2020-12692](https://insights.sbomify.com/CVE-2020-12692/): OpenStack Keystone does not check signature TTL of the EC2 credential auth method (medium 5.4)
- [CVE-2020-12691](https://insights.sbomify.com/CVE-2020-12691/): OpenStack Keystone V3 /credentials endpoint policy logic allows to change credentials owner or target project ID (high 8.8)
- [CVE-2020-12690](https://insights.sbomify.com/CVE-2020-12690/): Insufficient Session Expiration in OpenStack Keystone (high 8.8)
- [CVE-2020-1269](https://insights.sbomify.com/CVE-2020-1269/): Privilege escalation in Windows (high 7.8)
- [CVE-2020-12689](https://insights.sbomify.com/CVE-2020-12689/): OpenStack Keystone EC2 and/or credential endpoints are not protected from a scoped context (high 8.8)
- [CVE-2020-12687](https://insights.sbomify.com/CVE-2020-12687/): Missing authorization in serpico project:serpico (medium 6.5)
- [CVE-2020-12685](https://insights.sbomify.com/CVE-2020-12685/): Cross-site scripting in redhat:interchange (medium 6.1)
- [CVE-2020-12684](https://insights.sbomify.com/CVE-2020-12684/): XML external entity in inetsoftware:i-net clear reports (critical 9.8)
- [CVE-2020-12683](https://insights.sbomify.com/CVE-2020-12683/): Cross-site scripting in katyshop2 project:katyshop2 (medium 5.4)
- [CVE-2020-12681](https://insights.sbomify.com/CVE-2020-12681/): Security feature bypass in 3xlogic:infinias eidc32 firmware (high 7.5)
- [CVE-2020-12680](https://insights.sbomify.com/CVE-2020-12680/): Missing authorization in avira:free antivirus (medium 5.5)
- [CVE-2020-1268](https://insights.sbomify.com/CVE-2020-1268/): Information disclosure in Windows 10 Version 1903 for 32-bit Systems (medium 5.5)
- [CVE-2020-12679](https://insights.sbomify.com/CVE-2020-12679/): Cross-site scripting in mitel:mivoice connect (medium 6.1)
- [CVE-2020-12677](https://insights.sbomify.com/CVE-2020-12677/): Cross-site scripting in progress:moveit automation (medium 6.1)
- [CVE-2020-12676](https://insights.sbomify.com/CVE-2020-12676/): Auth bypass in fusionauth:samlv2 (critical 9.1)
- [CVE-2020-12675](https://insights.sbomify.com/CVE-2020-12675/): Missing authorization in mappresspro:mappress (high 8.8)
- [CVE-2020-12674](https://insights.sbomify.com/CVE-2020-12674/): Memory corruption in canonical:ubuntu linux (high 7.5)
- [CVE-2020-12673](https://insights.sbomify.com/CVE-2020-12673/): Memory corruption in canonical:ubuntu linux (high 7.5)
- [CVE-2020-12672](https://insights.sbomify.com/CVE-2020-12672/): Memory corruption in debian:debian linux (high 7.5)
- [CVE-2020-12670](https://insights.sbomify.com/CVE-2020-12670/): Cross-site scripting in webmin:webmin (medium 6.1)
- [CVE-2020-1267](https://insights.sbomify.com/CVE-2020-1267/): Denial of service in Windows (medium 4.9)
- [CVE-2020-12669](https://insights.sbomify.com/CVE-2020-12669/): Incorrect Authorization in Dolibarr (high 8.8)
- [CVE-2020-12668](https://insights.sbomify.com/CVE-2020-12668/): Unauthorized access to Class instance in Jinjava (medium 6.5)
- [CVE-2020-12667](https://insights.sbomify.com/CVE-2020-12667/): Denial of service in nic:knot resolver (high 7.5)
- [CVE-2020-12666](https://insights.sbomify.com/CVE-2020-12666/): gopkg.in/macaron.v1 Open Redirect vulnerability (medium 6.1)
- [CVE-2020-12663](https://insights.sbomify.com/CVE-2020-12663/): Denial of service in canonical:ubuntu linux (high 7.5)
- [CVE-2020-12662](https://insights.sbomify.com/CVE-2020-12662/): Denial of service in canonical:ubuntu linux (high 7.5)
- [CVE-2020-1266](https://insights.sbomify.com/CVE-2020-1266/): Privilege escalation in Windows (high 7.8)
- [CVE-2020-12659](https://insights.sbomify.com/CVE-2020-12659/): Memory corruption in linux:linux kernel (medium 6.7)
- [CVE-2020-12658](https://insights.sbomify.com/CVE-2020-12658/): Race condition in debian:debian linux (critical 9.8)
- [CVE-2020-12657](https://insights.sbomify.com/CVE-2020-12657/): Use after free in linux:linux kernel (high 7.8)
- [CVE-2020-12656](https://insights.sbomify.com/CVE-2020-12656/): Denial of service in canonical:ubuntu linux (medium 5.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/180/