# Vulnerabilities published in 2020


- [CVE-2020-12483](https://insights.sbomify.com/CVE-2020-12483/): AppStore Remote Download and Installation Vulnerability (high 8.2)
- [CVE-2020-12480](https://insights.sbomify.com/CVE-2020-12480/): CSRF in Play Framework (medium 6.5)
- [CVE-2020-1248](https://insights.sbomify.com/CVE-2020-1248/): Memory corruption in Windows 10 Version 1903 for 32-bit Systems (high 8.8)
- [CVE-2020-12479](https://insights.sbomify.com/CVE-2020-12479/): TeamPass PHP arbitrary file include vulnerability (high 8.8)
- [CVE-2020-12478](https://insights.sbomify.com/CVE-2020-12478/): TeamPass files are available without authentication (high 7.5)
- [CVE-2020-12477](https://insights.sbomify.com/CVE-2020-12477/): Incorrect Authorization in TeamPass (high 7.5)
- [CVE-2020-12475](https://insights.sbomify.com/CVE-2020-12475/): Path traversal in tp-link:omada controller (medium 5.5)
- [CVE-2020-12474](https://insights.sbomify.com/CVE-2020-12474/): Other in telegram:telegram (medium 6.5)
- [CVE-2020-12473](https://insights.sbomify.com/CVE-2020-12473/): Code injection in mono:monox (high 7.2)
- [CVE-2020-12472](https://insights.sbomify.com/CVE-2020-12472/): Cross-site scripting in mono:monox (medium 5.4)
- [CVE-2020-12471](https://insights.sbomify.com/CVE-2020-12471/): Deserialization in mono:monox (critical 9.8)
- [CVE-2020-12470](https://insights.sbomify.com/CVE-2020-12470/): Code injection in mono:monox (high 7.2)
- [CVE-2020-1247](https://insights.sbomify.com/CVE-2020-1247/): Privilege escalation in Windows (high 7.8)
- [CVE-2020-12469](https://insights.sbomify.com/CVE-2020-12469/): Subrion CMS PHP Object Injection (medium 6.5)
- [CVE-2020-12468](https://insights.sbomify.com/CVE-2020-12468/): Subrion CMS CSV injection via Export Language (high 7.8)
- [CVE-2020-12467](https://insights.sbomify.com/CVE-2020-12467/): Session Fixation in Subrion CMS (medium 6.5)
- [CVE-2020-12465](https://insights.sbomify.com/CVE-2020-12465/): Memory corruption in linux:linux kernel (medium 6.7)
- [CVE-2020-12464](https://insights.sbomify.com/CVE-2020-12464/): Use after free in linux:linux kernel (medium 6.7)
- [CVE-2020-12463](https://insights.sbomify.com/CVE-2020-12463/): Privilege escalation in avira:software updater (high 7.8)
- [CVE-2020-12462](https://insights.sbomify.com/CVE-2020-12462/): Cross-site request forgery in ninjaforms:ninja forms (medium 6.1)
- [CVE-2020-12461](https://insights.sbomify.com/CVE-2020-12461/): SQL injection in php-fusion:php-fusion (high 8.8)
- [CVE-2020-12460](https://insights.sbomify.com/CVE-2020-12460/): Memory corruption in debian:debian linux (critical 9.8)
- [CVE-2020-1246](https://insights.sbomify.com/CVE-2020-1246/): Privilege escalation in Windows (high 7.8)
- [CVE-2020-12459](https://insights.sbomify.com/CVE-2020-12459/): Grafana world readable configuration files (medium 5.5)
- [CVE-2020-12458](https://insights.sbomify.com/CVE-2020-12458/): Grafana information disclosure (medium 5.5)
- [CVE-2020-12457](https://insights.sbomify.com/CVE-2020-12457/): Denial of service in wolfssl:wolfssl (high 7.5)
- [CVE-2020-12456](https://insights.sbomify.com/CVE-2020-12456/): Cross-site scripting in mitel:mivoice connect client (high 8.8)
- [CVE-2020-1245](https://insights.sbomify.com/CVE-2020-1245/): Win32k Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2020-12448](https://insights.sbomify.com/CVE-2020-12448/): Path traversal in gitlab:gitlab (medium 5.3)
- [CVE-2020-12447](https://insights.sbomify.com/CVE-2020-12447/): Path traversal in onkyo:tx-nr585 firmware (high 7.5)
- [CVE-2020-12446](https://insights.sbomify.com/CVE-2020-12446/): Privilege escalation in gskill:trident z lighting control (high 7.8)
- [CVE-2020-12443](https://insights.sbomify.com/CVE-2020-12443/): Path traversal in bigbluebutton:bigbluebutton (critical 9.8)
- [CVE-2020-12442](https://insights.sbomify.com/CVE-2020-12442/): SQL injection in ivanti:avalanche (critical 9.8)
- [CVE-2020-12441](https://insights.sbomify.com/CVE-2020-12441/): Memory corruption in ivanti:desktop\&server management (critical 9.8)
- [CVE-2020-1244](https://insights.sbomify.com/CVE-2020-1244/): Denial of service in Windows (high 7.1)
- [CVE-2020-12439](https://insights.sbomify.com/CVE-2020-12439/): Grin allows attackers to adversely affect availability of data on a Mimblewimble blockchain (medium 5.3)
- [CVE-2020-12438](https://insights.sbomify.com/CVE-2020-12438/): Cross-site scripting in php-fusion:php-fusion (medium 5.4)
- [CVE-2020-12432](https://insights.sbomify.com/CVE-2020-12432/): Cross-site scripting in collaboraoffice:collabora online development edition (medium 6.1)
- [CVE-2020-12431](https://insights.sbomify.com/CVE-2020-12431/): Privilege escalation in splashtop:software updater (medium 6.6)
- [CVE-2020-12430](https://insights.sbomify.com/CVE-2020-12430/): Denial of service in redhat:enterprise linux (medium 6.5)
- [CVE-2020-1243](https://insights.sbomify.com/CVE-2020-1243/): Windows Hyper-V Denial of Service Vulnerability (high 7.8)
- [CVE-2020-12429](https://insights.sbomify.com/CVE-2020-12429/): SQL injection in phpgurukul:online course registration (critical 9.8)
- [CVE-2020-12427](https://insights.sbomify.com/CVE-2020-12427/): Cross-site request forgery in westerndigital:wd discovery (high 8.8)
- [CVE-2020-12426](https://insights.sbomify.com/CVE-2020-12426/): Memory corruption in Firefox (high 8.8)
- [CVE-2020-12425](https://insights.sbomify.com/CVE-2020-12425/): Memory corruption in Firefox (medium 6.5)
- [CVE-2020-12424](https://insights.sbomify.com/CVE-2020-12424/): Security feature bypass in Firefox (medium 6.5)
- [CVE-2020-12423](https://insights.sbomify.com/CVE-2020-12423/): Code injection in Firefox (high 7.8)
- [CVE-2020-12422](https://insights.sbomify.com/CVE-2020-12422/): Memory corruption in Firefox (high 8.8)
- [CVE-2020-12421](https://insights.sbomify.com/CVE-2020-12421/): Security feature bypass in Firefox (medium 6.5)
- [CVE-2020-12420](https://insights.sbomify.com/CVE-2020-12420/): Use after free in Firefox (high 8.8)
- [CVE-2020-1242](https://insights.sbomify.com/CVE-2020-1242/): Information disclosure in Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for 32-bit Systems (medium 5.3)
- [CVE-2020-12419](https://insights.sbomify.com/CVE-2020-12419/): Use after free in Firefox (high 8.8)
- [CVE-2020-12418](https://insights.sbomify.com/CVE-2020-12418/): Memory corruption in Firefox (medium 6.5)
- [CVE-2020-12417](https://insights.sbomify.com/CVE-2020-12417/): Memory corruption in Firefox (high 8.8)
- [CVE-2020-12416](https://insights.sbomify.com/CVE-2020-12416/): Use after free in Firefox (high 8.8)
- [CVE-2020-12415](https://insights.sbomify.com/CVE-2020-12415/): Security feature bypass in Firefox (medium 6.5)
- [CVE-2020-12414](https://insights.sbomify.com/CVE-2020-12414/): Information disclosure in Firefox for iOS (medium 6.5)
- [CVE-2020-12413](https://insights.sbomify.com/CVE-2020-12413/): Weak cryptography in Firefox (medium 5.9)
- [CVE-2020-12412](https://insights.sbomify.com/CVE-2020-12412/): Security feature bypass in Firefox (medium 4.3)
- [CVE-2020-12411](https://insights.sbomify.com/CVE-2020-12411/): Memory corruption in Firefox (high 8.8)
- [CVE-2020-12410](https://insights.sbomify.com/CVE-2020-12410/): Memory corruption in Firefox (high 8.8)
- [CVE-2020-1241](https://insights.sbomify.com/CVE-2020-1241/): Security feature bypass in Windows (high 7.8)
- [CVE-2020-12409](https://insights.sbomify.com/CVE-2020-12409/): Security feature bypass in Firefox (high 8.8)
- [CVE-2020-12408](https://insights.sbomify.com/CVE-2020-12408/): Other in Firefox (medium 6.5)
- [CVE-2020-12407](https://insights.sbomify.com/CVE-2020-12407/): Information disclosure in Firefox (medium 6.5)
- [CVE-2020-12406](https://insights.sbomify.com/CVE-2020-12406/): Memory corruption in Firefox (high 8.8)
- [CVE-2020-12405](https://insights.sbomify.com/CVE-2020-12405/): Race condition in Firefox (medium 5.3)
- [CVE-2020-12404](https://insights.sbomify.com/CVE-2020-12404/): Information disclosure in Firefox for iOS (medium 4.3)
- [CVE-2020-12403](https://insights.sbomify.com/CVE-2020-12403/): Memory corruption in nss (critical 9.1)
- [CVE-2020-12402](https://insights.sbomify.com/CVE-2020-12402/): Weak cryptography in Firefox (medium 4.4)
- [CVE-2020-12401](https://insights.sbomify.com/CVE-2020-12401/): Weak cryptography in Firefox (medium 4.7)
- [CVE-2020-12400](https://insights.sbomify.com/CVE-2020-12400/): Weak cryptography in Firefox (medium 4.7)
- [CVE-2020-1240](https://insights.sbomify.com/CVE-2020-1240/): Memory corruption in Microsoft 365 Apps for Enterprise for 32-bit Systems (high 8.8)
- [CVE-2020-12399](https://insights.sbomify.com/CVE-2020-12399/): Weak cryptography in Firefox (medium 4.4)
- [CVE-2020-12398](https://insights.sbomify.com/CVE-2020-12398/): Information disclosure in Thunderbird (high 7.5)
- [CVE-2020-12397](https://insights.sbomify.com/CVE-2020-12397/): Security feature bypass in Thunderbird (medium 4.3)
- [CVE-2020-12396](https://insights.sbomify.com/CVE-2020-12396/): Memory corruption in Firefox (critical 9.8)
- [CVE-2020-12395](https://insights.sbomify.com/CVE-2020-12395/): Memory corruption in Firefox (critical 9.8)
- [CVE-2020-12394](https://insights.sbomify.com/CVE-2020-12394/): Security feature bypass in Firefox (low 3.3)
- [CVE-2020-12393](https://insights.sbomify.com/CVE-2020-12393/): Command injection in Firefox (high 7.8)
- [CVE-2020-12392](https://insights.sbomify.com/CVE-2020-12392/): Path traversal in Firefox (medium 5.5)
- [CVE-2020-12391](https://insights.sbomify.com/CVE-2020-12391/): Security feature bypass in Firefox (high 7.5)
- [CVE-2020-12390](https://insights.sbomify.com/CVE-2020-12390/): Security feature bypass in Firefox (critical 9.8)
- [CVE-2020-1239](https://insights.sbomify.com/CVE-2020-1239/): Memory corruption in Windows (high 8.8)
- [CVE-2020-12389](https://insights.sbomify.com/CVE-2020-12389/): Security feature bypass in Firefox (critical 10.0)
- [CVE-2020-12388](https://insights.sbomify.com/CVE-2020-12388/): Security feature bypass in Firefox (critical 10.0)
- [CVE-2020-12387](https://insights.sbomify.com/CVE-2020-12387/): Use after free in Firefox (high 8.1)
- [CVE-2020-12386](https://insights.sbomify.com/CVE-2020-12386/): Memory corruption in Intel(R) Graphics Drivers (medium 5.5)
- [CVE-2020-12385](https://insights.sbomify.com/CVE-2020-12385/): Privilege escalation in Intel(R) Graphics Drivers (high 7.8)
- [CVE-2020-12384](https://insights.sbomify.com/CVE-2020-12384/): Privilege escalation in Intel(R) Graphics Drivers (high 7.8)
- [CVE-2020-12380](https://insights.sbomify.com/CVE-2020-12380/): Memory corruption in Intel(R) Server Boards, Server Systems and Compute Modules (high 7.8)
- [CVE-2020-1238](https://insights.sbomify.com/CVE-2020-1238/): Memory corruption in Windows (high 8.8)
- [CVE-2020-12377](https://insights.sbomify.com/CVE-2020-12377/): Privilege escalation in Intel(R) Server Boards, Server Systems and Compute Modules (high 7.8)
- [CVE-2020-12376](https://insights.sbomify.com/CVE-2020-12376/): Hardcoded credentials in Intel(R) Server Boards, Server Systems and Compute Modules (medium 5.5)
- [CVE-2020-12375](https://insights.sbomify.com/CVE-2020-12375/): Memory corruption in Intel(R) Server Boards, Server Systems and Compute Modules (medium 6.7)
- [CVE-2020-12374](https://insights.sbomify.com/CVE-2020-12374/): Memory corruption in Intel(R) Server Boards, Server Systems and Compute Modules (medium 6.7)
- [CVE-2020-12373](https://insights.sbomify.com/CVE-2020-12373/): Use after free in Intel(R) Graphics Drivers (medium 6.7)
- [CVE-2020-12372](https://insights.sbomify.com/CVE-2020-12372/): Denial of service in Intel(R) Graphics Drivers (medium 5.5)
- [CVE-2020-12371](https://insights.sbomify.com/CVE-2020-12371/): Denial of service in Intel(R) Graphics Drivers (medium 5.5)
- [CVE-2020-12370](https://insights.sbomify.com/CVE-2020-12370/): Memory corruption in Intel(R) Graphics Drivers (medium 5.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/182/
