# Vulnerabilities published in 2020


- [CVE-2020-12655](https://insights.sbomify.com/CVE-2020-12655/): Denial of service in linux:linux kernel (medium 5.5)
- [CVE-2020-12654](https://insights.sbomify.com/CVE-2020-12654/): Memory corruption in linux:linux kernel (high 7.1)
- [CVE-2020-12653](https://insights.sbomify.com/CVE-2020-12653/): Memory corruption in debian:debian linux (high 7.8)
- [CVE-2020-12652](https://insights.sbomify.com/CVE-2020-12652/): Race condition in linux:linux kernel (medium 4.1)
- [CVE-2020-12651](https://insights.sbomify.com/CVE-2020-12651/): Integer overflow in vandyke:securecrt (critical 9.8)
- [CVE-2020-1265](https://insights.sbomify.com/CVE-2020-1265/): Privilege escalation in Windows 10 Version 1903 for 32-bit Systems (high 7.8)
- [CVE-2020-12649](https://insights.sbomify.com/CVE-2020-12649/): Path traversal in gurbalib project:gurbalib (high 7.5)
- [CVE-2020-12648](https://insights.sbomify.com/CVE-2020-12648/): Cross-site scripting vulnerability in TinyMCE (medium 6.1)
- [CVE-2020-12647](https://insights.sbomify.com/CVE-2020-12647/): Other in unisys:algol compiler (high 8.8)
- [CVE-2020-12646](https://insights.sbomify.com/CVE-2020-12646/): Cross-site scripting in open-xchange:open-xchange appsuite (medium 5.4)
- [CVE-2020-12645](https://insights.sbomify.com/CVE-2020-12645/): Denial of service in open-xchange:open-xchange appsuite (critical 9.8)
- [CVE-2020-12644](https://insights.sbomify.com/CVE-2020-12644/): Server-side request forgery in open-xchange:open-xchange appsuite (medium 5.0)
- [CVE-2020-12643](https://insights.sbomify.com/CVE-2020-12643/): Missing authorization in open-xchange:open-xchange appsuite (medium 4.3)
- [CVE-2020-12642](https://insights.sbomify.com/CVE-2020-12642/): XXE vulnerability in Launch import (high 7.5)
- [CVE-2020-12641](https://insights.sbomify.com/CVE-2020-12641/): Roundcube Webmail Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2020-12640](https://insights.sbomify.com/CVE-2020-12640/): Path traversal in opensuse:backports sle (critical 9.8)
- [CVE-2020-1264](https://insights.sbomify.com/CVE-2020-1264/): Privilege escalation in Windows (high 7.8)
- [CVE-2020-12639](https://insights.sbomify.com/CVE-2020-12639/): Cross-site scripting in phplist:phplist (medium 6.1)
- [CVE-2020-12638](https://insights.sbomify.com/CVE-2020-12638/): Auth bypass in espressif:esp-idf (medium 6.8)
- [CVE-2020-12637](https://insights.sbomify.com/CVE-2020-12637/): Security feature bypass in zulipchat:zulip desktop (critical 9.8)
- [CVE-2020-12635](https://insights.sbomify.com/CVE-2020-12635/): Cross-site scripting in mageme:webforms pro m2 (medium 6.1)
- [CVE-2020-1263](https://insights.sbomify.com/CVE-2020-1263/): Information disclosure in Windows (medium 5.5)
- [CVE-2020-12629](https://insights.sbomify.com/CVE-2020-12629/): Cross-site scripting in enhancesoft:osticket (medium 5.4)
- [CVE-2020-12627](https://insights.sbomify.com/CVE-2020-12627/): Hardcoded credentials in janeczku:calibre-web (critical 9.8)
- [CVE-2020-12626](https://insights.sbomify.com/CVE-2020-12626/): Cross-site request forgery in debian:debian linux (medium 6.5)
- [CVE-2020-12625](https://insights.sbomify.com/CVE-2020-12625/): Cross-site scripting in debian:debian linux (medium 6.1)
- [CVE-2020-12624](https://insights.sbomify.com/CVE-2020-12624/): Information disclosure in theleague:the league (medium 6.5)
- [CVE-2020-12621](https://insights.sbomify.com/CVE-2020-12621/): Auth bypass in teamwire:teamwire (medium 6.1)
- [CVE-2020-12620](https://insights.sbomify.com/CVE-2020-12620/): Command injection in pi-hole:pi-hole (high 7.8)
- [CVE-2020-1262](https://insights.sbomify.com/CVE-2020-1262/): Privilege escalation in Windows (high 7.8)
- [CVE-2020-12619](https://insights.sbomify.com/CVE-2020-12619/): Security feature bypass in freron:mailmate (medium 5.9)
- [CVE-2020-12618](https://insights.sbomify.com/CVE-2020-12618/): Security feature bypass in emclient:em client (medium 4.8)
- [CVE-2020-12615](https://insights.sbomify.com/CVE-2020-12615/): Privilege escalation in beyondtrust:privilege management for windows (high 7.8)
- [CVE-2020-12614](https://insights.sbomify.com/CVE-2020-12614/): Privilege escalation in beyondtrust:privilege management for windows (high 8.4)
- [CVE-2020-12613](https://insights.sbomify.com/CVE-2020-12613/): Privilege escalation in beyondtrust:privilege management for windows (high 8.8)
- [CVE-2020-12612](https://insights.sbomify.com/CVE-2020-12612/): Privilege escalation in beyondtrust:privilege management for windows (high 7.8)
- [CVE-2020-1261](https://insights.sbomify.com/CVE-2020-1261/): Information disclosure in Windows (medium 5.5)
- [CVE-2020-12608](https://insights.sbomify.com/CVE-2020-12608/): Misconfiguration in solarwinds:managed service provider patch management engine (high 7.8)
- [CVE-2020-12607](https://insights.sbomify.com/CVE-2020-12607/): Improper Verification of Cryptographic Signature in fastecdsa (high 7.5)
- [CVE-2020-12606](https://insights.sbomify.com/CVE-2020-12606/): SQL injection in dbsoft:sglac (critical 9.8)
- [CVE-2020-12605](https://insights.sbomify.com/CVE-2020-12605/): Denial of service in envoyproxy:envoy (high 7.5)
- [CVE-2020-12604](https://insights.sbomify.com/CVE-2020-12604/): Denial of service in envoyproxy:envoy (high 7.5)
- [CVE-2020-12603](https://insights.sbomify.com/CVE-2020-12603/): Denial of service in envoyproxy:envoy (high 7.5)
- [CVE-2020-1260](https://insights.sbomify.com/CVE-2020-1260/): Memory corruption in Internet Explorer 11 (high 7.5)
- [CVE-2020-12595](https://insights.sbomify.com/CVE-2020-12595/): Information disclosure in Symantec Messaging Gateway (SMG) (medium 4.9)
- [CVE-2020-12594](https://insights.sbomify.com/CVE-2020-12594/): Privilege escalation in Symantec Messaging Gateway (SMG) (high 7.2)
- [CVE-2020-12593](https://insights.sbomify.com/CVE-2020-12593/): Information disclosure in Symantec Endpoint Detection & Response (SEDR) (high 7.5)
- [CVE-2020-1259](https://insights.sbomify.com/CVE-2020-1259/): Security feature bypass in Windows (medium 4.3)
- [CVE-2020-1258](https://insights.sbomify.com/CVE-2020-1258/): Privilege escalation in Windows (medium 6.7)
- [CVE-2020-1257](https://insights.sbomify.com/CVE-2020-1257/): Privilege escalation in Microsoft Visual Studio (high 7.8)
- [CVE-2020-1256](https://insights.sbomify.com/CVE-2020-1256/): Windows GDI Information Disclosure Vulnerability (medium 5.5)
- [CVE-2020-1255](https://insights.sbomify.com/CVE-2020-1255/): Privilege escalation in Windows (high 8.8)
- [CVE-2020-1254](https://insights.sbomify.com/CVE-2020-1254/): Privilege escalation in Windows (high 7.8)
- [CVE-2020-12530](https://insights.sbomify.com/CVE-2020-12530/): Cross-site scripting in mbCONNECT24 (medium 4.3)
- [CVE-2020-1253](https://insights.sbomify.com/CVE-2020-1253/): Privilege escalation in Windows (medium 6.7)
- [CVE-2020-12529](https://insights.sbomify.com/CVE-2020-12529/): Server-side request forgery in mbCONNECT24 (medium 5.8)
- [CVE-2020-12528](https://insights.sbomify.com/CVE-2020-12528/): Missing authorization in mbCONNECT24 (medium 6.5)
- [CVE-2020-12527](https://insights.sbomify.com/CVE-2020-12527/): Improper Access Validation in products of MB connect line and Helmholz (medium 6.5)
- [CVE-2020-12526](https://insights.sbomify.com/CVE-2020-12526/): BECKHOFF: DoS-Vulnerability for TwinCAT OPC UA Server and IPC Diagnostics UA Server (medium 5.3)
- [CVE-2020-12525](https://insights.sbomify.com/CVE-2020-12525/): WAGO/M&M Software Deserialization of untrusted data in fdtCONTAINER component (high 7.3)
- [CVE-2020-12524](https://insights.sbomify.com/CVE-2020-12524/): Phoenix Contact BTP Touch Panels uncontrolled resource consumption (high 7.5)
- [CVE-2020-12523](https://insights.sbomify.com/CVE-2020-12523/): Security feature bypass in FL MGUARD RS4004 TX/DTX (2701876) (medium 5.4)
- [CVE-2020-12522](https://insights.sbomify.com/CVE-2020-12522/): Command injection in Series PFC 100 (750-81xx/xxx-xxx) (critical 10.0)
- [CVE-2020-12521](https://insights.sbomify.com/CVE-2020-12521/): Denial of service in AXC F 1152 (1151412) (medium 6.5)
- [CVE-2020-1252](https://insights.sbomify.com/CVE-2020-1252/): Windows Remote Code Execution Vulnerability (high 7.8)
- [CVE-2020-12519](https://insights.sbomify.com/CVE-2020-12519/): Privilege escalation in AXC F 1152 (1151412) (high 8.8)
- [CVE-2020-12518](https://insights.sbomify.com/CVE-2020-12518/): Information disclosure in AXC F 1152 (1151412) (medium 5.5)
- [CVE-2020-12517](https://insights.sbomify.com/CVE-2020-12517/): Cross-site scripting in AXC F 1152 (1151412) (high 8.8)
- [CVE-2020-12516](https://insights.sbomify.com/CVE-2020-12516/): WAGO: PLC families 750-88x and 750-352 prone to DoS attack (high 7.5)
- [CVE-2020-12514](https://insights.sbomify.com/CVE-2020-12514/): Pepper+Fuchs Comtrol IO-Link Master NULL Pointer Dereference (medium 6.6)
- [CVE-2020-12513](https://insights.sbomify.com/CVE-2020-12513/): Pepper+Fuchs Comtrol IO-Link Master OS Command Injection (high 7.5)
- [CVE-2020-12512](https://insights.sbomify.com/CVE-2020-12512/): Pepper+Fuchs Comtrol IO-Link Master Cross-Site Scripting (high 7.5)
- [CVE-2020-12511](https://insights.sbomify.com/CVE-2020-12511/): Pepper+Fuchs Comtrol IO-Link Master Cross-Site Request Forgery (high 8.8)
- [CVE-2020-12510](https://insights.sbomify.com/CVE-2020-12510/): Beckhoff: Privilege Escalation through TwinCat System (high 7.3)
- [CVE-2020-1251](https://insights.sbomify.com/CVE-2020-1251/): Privilege escalation in Windows (medium 6.7)
- [CVE-2020-12509](https://insights.sbomify.com/CVE-2020-12509/): s::can moni::tools prone to path traversal in camera-file module (high 7.5)
- [CVE-2020-12508](https://insights.sbomify.com/CVE-2020-12508/): s::can moni::tools prone to path traversal in image-relocator module (high 7.5)
- [CVE-2020-12507](https://insights.sbomify.com/CVE-2020-12507/): s::can moni::tools autheticated SQL injection (high 8.8)
- [CVE-2020-12506](https://insights.sbomify.com/CVE-2020-12506/): WAGO: Authentication Bypass Vulnerability in WAGO 750-36X and WAGO 750-8XX Versions <= FW03 (critical 9.1)
- [CVE-2020-12505](https://insights.sbomify.com/CVE-2020-12505/): WAGO: Vulnerability in web-based authentication in WAGO 750-8XX Version <= FW07 (high 8.2)
- [CVE-2020-12504](https://insights.sbomify.com/CVE-2020-12504/): Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products (critical 9.8)
- [CVE-2020-12503](https://insights.sbomify.com/CVE-2020-12503/): Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products (high 7.2)
- [CVE-2020-12502](https://insights.sbomify.com/CVE-2020-12502/): Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products (high 8.8)
- [CVE-2020-12501](https://insights.sbomify.com/CVE-2020-12501/): Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products (critical 9.8)
- [CVE-2020-12500](https://insights.sbomify.com/CVE-2020-12500/): Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products (critical 9.8)
- [CVE-2020-1250](https://insights.sbomify.com/CVE-2020-1250/): Win32k Information Disclosure Vulnerability (medium 5.5)
- [CVE-2020-12499](https://insights.sbomify.com/CVE-2020-12499/): PHOENIX CONTACT PLCnext Engineer version 2020.3.1 and earlier: Improper path sanitation vulnerability. (high 8.2)
- [CVE-2020-12498](https://insights.sbomify.com/CVE-2020-12498/): Phoenix Contact Automation Worx <= 1.87: out-of-bounds read remote code execution (high 7.8)
- [CVE-2020-12497](https://insights.sbomify.com/CVE-2020-12497/): Phoenix Contact Automation Worx <= 1.87: stack-based overflow (high 7.8)
- [CVE-2020-12496](https://insights.sbomify.com/CVE-2020-12496/): Missing authorization in ORSG35 - Ecograph T Neutral/Private Label (medium 6.5)
- [CVE-2020-12495](https://insights.sbomify.com/CVE-2020-12495/): ENDRESS+HAUSER: Ecograph T utilizing Webserver firmware version 1.x has improper privilege management (critical 9.1)
- [CVE-2020-12494](https://insights.sbomify.com/CVE-2020-12494/): Beckhoff: Etherleak in TwinCAT RT network driver (medium 5.3)
- [CVE-2020-12493](https://insights.sbomify.com/CVE-2020-12493/): Critical Vulnerability in SWARCO CPU LS4000 (critical 10.0)
- [CVE-2020-12492](https://insights.sbomify.com/CVE-2020-12492/): Wifi information acquisition vulnerability in Framework Services (low 1.0)
- [CVE-2020-12491](https://insights.sbomify.com/CVE-2020-12491/): Framework Information Disclosure Vulnerability (medium 4.8)
- [CVE-2020-1249](https://insights.sbomify.com/CVE-2020-1249/): Privilege escalation in Windows (high 7.8)
- [CVE-2020-12488](https://insights.sbomify.com/CVE-2020-12488/): Broken Access Control Vulnerability in Jovi Smart Scene (medium 5.5)
- [CVE-2020-12487](https://insights.sbomify.com/CVE-2020-12487/): Command Execution Vulnerability in ABE service (high 7.0)
- [CVE-2020-12485](https://insights.sbomify.com/CVE-2020-12485/): Memory corruption in The frame touch module (medium 5.5)
- [CVE-2020-12484](https://insights.sbomify.com/CVE-2020-12484/): Auth bypass in Wifi (medium 6.4)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/181/