# Vulnerabilities published in 2020 - [CVE-2020-11971](https://insights.sbomify.com/CVE-2020-11971/): Improper Input Validation in Apache Camel (high 7.5) - [CVE-2020-1197](https://insights.sbomify.com/CVE-2020-1197/): Privilege escalation in Windows (high 7.8) - [CVE-2020-11969](https://insights.sbomify.com/CVE-2020-11969/): Missing Authentication for Critical Function in Apache TomEE (critical 9.8) - [CVE-2020-11968](https://insights.sbomify.com/CVE-2020-11968/): Information disclosure in evenroute:iqrouter firmware (high 7.5) - [CVE-2020-11967](https://insights.sbomify.com/CVE-2020-11967/): Missing authorization in evenroute:iqrouter firmware (critical 9.8) - [CVE-2020-11966](https://insights.sbomify.com/CVE-2020-11966/): Auth bypass in evenroute:iqrouter firmware (critical 9.8) - [CVE-2020-11965](https://insights.sbomify.com/CVE-2020-11965/): Hardcoded credentials in evenroute:iqrouter firmware (critical 9.8) - [CVE-2020-11964](https://insights.sbomify.com/CVE-2020-11964/): Auth bypass in evenroute:iqrouter firmware (high 7.5) - [CVE-2020-11963](https://insights.sbomify.com/CVE-2020-11963/): Command injection in evenroute:iqrouter firmware (critical 9.8) - [CVE-2020-11961](https://insights.sbomify.com/CVE-2020-11961/): Missing authorization in mi:xiaomi r3600 firmware (high 7.5) - [CVE-2020-11960](https://insights.sbomify.com/CVE-2020-11960/): Path traversal in mi:xiaomi r3600 firmware (critical 9.8) - [CVE-2020-1196](https://insights.sbomify.com/CVE-2020-1196/): Privilege escalation in Windows (high 7.8) - [CVE-2020-11959](https://insights.sbomify.com/CVE-2020-11959/): Misconfiguration in mi:xiaomi r3600 firmware (high 7.5) - [CVE-2020-11958](https://insights.sbomify.com/CVE-2020-11958/): Memory corruption in canonical:ubuntu linux (high 7.8) - [CVE-2020-11957](https://insights.sbomify.com/CVE-2020-11957/): Weak cryptography in cypress:psoc 4.2 ble (high 7.5) - [CVE-2020-11956](https://insights.sbomify.com/CVE-2020-11956/): Privilege escalation in rittal:cmc iii pu 7030.000 firmware (critical 9.8) - [CVE-2020-11955](https://insights.sbomify.com/CVE-2020-11955/): Misconfiguration in rittal:cmc iii pu 7030.000 firmware (high 8.8) - [CVE-2020-11953](https://insights.sbomify.com/CVE-2020-11953/): Command injection in rittal:cmc iii pu 7030.000 firmware (high 8.8) - [CVE-2020-11952](https://insights.sbomify.com/CVE-2020-11952/): Security feature bypass in rittal:cmc iii pu 7030.000 firmware (medium 6.2) - [CVE-2020-11951](https://insights.sbomify.com/CVE-2020-11951/): Hardcoded credentials in rittal:cmc iii pu 7030.000 firmware (critical 9.8) - [CVE-2020-11950](https://insights.sbomify.com/CVE-2020-11950/): Command injection in vivotek:cc8160\(hs\) firmware (high 8.8) - [CVE-2020-1195](https://insights.sbomify.com/CVE-2020-1195/): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (low 3.1) - [CVE-2020-11949](https://insights.sbomify.com/CVE-2020-11949/): Path traversal in vivotek:cc8160\(hs\) firmware (medium 6.5) - [CVE-2020-11947](https://insights.sbomify.com/CVE-2020-11947/): Memory corruption in qemu:qemu (low 3.8) - [CVE-2020-11946](https://insights.sbomify.com/CVE-2020-11946/): Missing authorization in zohocorp:manageengine opmanager (high 7.5) - [CVE-2020-11945](https://insights.sbomify.com/CVE-2020-11945/): Integer overflow in canonical:ubuntu linux (critical 9.8) - [CVE-2020-11944](https://insights.sbomify.com/CVE-2020-11944/): Cross-site scripting in bitcoin-abe project:bitcoin-abe (medium 6.1) - [CVE-2020-11943](https://insights.sbomify.com/CVE-2020-11943/): File upload in opmantek:open-audit (high 8.8) - [CVE-2020-11942](https://insights.sbomify.com/CVE-2020-11942/): SQL injection in opmantek:open-audit (critical 9.8) - [CVE-2020-11941](https://insights.sbomify.com/CVE-2020-11941/): Command injection in opmantek:open-audit (high 8.8) - [CVE-2020-11940](https://insights.sbomify.com/CVE-2020-11940/): Memory corruption in ntop:ndpi (high 7.5) - [CVE-2020-1194](https://insights.sbomify.com/CVE-2020-1194/): Denial of service in Windows (medium 5.5) - [CVE-2020-11939](https://insights.sbomify.com/CVE-2020-11939/): Integer overflow in ntop:ndpi (critical 9.8) - [CVE-2020-11938](https://insights.sbomify.com/CVE-2020-11938/): Information disclosure in jetbrains:teamcity (medium 4.9) - [CVE-2020-11937](https://insights.sbomify.com/CVE-2020-11937/): Resource exhaustion vulnerability in whoopsie (medium 5.5) - [CVE-2020-11936](https://insights.sbomify.com/CVE-2020-11936/): gdbus setgid privilege escalation (low 3.1) - [CVE-2020-11935](https://insights.sbomify.com/CVE-2020-11935/): aufs: improperly managed inode reference counts in the vfsub_dentry_open() method (medium 4.4) - [CVE-2020-11934](https://insights.sbomify.com/CVE-2020-11934/): Sandbox escape vulnerability via snapctl user-open (xdg-open) (medium 5.9) - [CVE-2020-11933](https://insights.sbomify.com/CVE-2020-11933/): local snapd exploit through cloud-init (high 7.3) - [CVE-2020-11932](https://insights.sbomify.com/CVE-2020-11932/): Subiquity server installer logged LUKS full disk encryption password (low 2.3) - [CVE-2020-11931](https://insights.sbomify.com/CVE-2020-11931/): Ubuntu modifications to pulseaudio to provide snap security enforcement could be unloaded (low 3.3) - [CVE-2020-11930](https://insights.sbomify.com/CVE-2020-11930/): Cross-site scripting in gtranslate:translate wordpress with gtranslate (medium 6.1) - [CVE-2020-1193](https://insights.sbomify.com/CVE-2020-1193/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8) - [CVE-2020-11928](https://insights.sbomify.com/CVE-2020-11928/): Code injection in davidlingren:media library assistant (critical 9.8) - [CVE-2020-11926](https://insights.sbomify.com/CVE-2020-11926/): An issue was discovered in Luvion Grand Elite 3 Connect through 2020-02-25. (high 7.5) - [CVE-2020-11925](https://insights.sbomify.com/CVE-2020-11925/): Hardcoded credentials in luvion:grand elite 3 connect firmware (high 8.8) - [CVE-2020-11924](https://insights.sbomify.com/CVE-2020-11924/): Information disclosure in wizconnected:colors a60 firmware (medium 5.5) - [CVE-2020-11923](https://insights.sbomify.com/CVE-2020-11923/): Information disclosure in wizconnected:wiz (medium 5.5) - [CVE-2020-11922](https://insights.sbomify.com/CVE-2020-11922/): Information disclosure in wizconnected:a60 colors firmware (medium 4.3) - [CVE-2020-11921](https://insights.sbomify.com/CVE-2020-11921/): An issue was discovered in Lush 2 through 2020-02-25. (high 8.8) - [CVE-2020-11920](https://insights.sbomify.com/CVE-2020-11920/): Command injection in svakom:siime eye firmware (critical 9.8) - [CVE-2020-1192](https://insights.sbomify.com/CVE-2020-1192/): Visual Studio Code Python Extension Remote Code Execution Vulnerability (high 7.8) - [CVE-2020-11919](https://insights.sbomify.com/CVE-2020-11919/): Cross-site request forgery in svakom:svakom siime eye firmware (high 8.0) - [CVE-2020-11918](https://insights.sbomify.com/CVE-2020-11918/): Information disclosure in svakom:svakom siime eye firmware (medium 5.4) - [CVE-2020-11917](https://insights.sbomify.com/CVE-2020-11917/): Information disclosure in svakom:svakom siime eye firmware (medium 4.3) - [CVE-2020-11916](https://insights.sbomify.com/CVE-2020-11916/): Weak cryptography in svakom:svakom siime eye firmware (medium 6.3) - [CVE-2020-11915](https://insights.sbomify.com/CVE-2020-11915/): Hardcoded credentials in svakom:siime eye firmware (medium 6.8) - [CVE-2020-11914](https://insights.sbomify.com/CVE-2020-11914/): Memory corruption in treck:tcp\/ip (medium 4.3) - [CVE-2020-11913](https://insights.sbomify.com/CVE-2020-11913/): Memory corruption in treck:tcp\/ip (medium 5.3) - [CVE-2020-11912](https://insights.sbomify.com/CVE-2020-11912/): Memory corruption in treck:tcp\/ip (medium 5.3) - [CVE-2020-11911](https://insights.sbomify.com/CVE-2020-11911/): Security feature bypass in treck:tcp\/ip (medium 5.3) - [CVE-2020-11910](https://insights.sbomify.com/CVE-2020-11910/): Memory corruption in treck:tcp\/ip (critical 9.8) - [CVE-2020-1191](https://insights.sbomify.com/CVE-2020-1191/): Windows State Repository Service Elevation of Privilege Vulnerability (high 7.8) - [CVE-2020-11909](https://insights.sbomify.com/CVE-2020-11909/): Integer overflow in treck:tcp\/ip (critical 9.1) - [CVE-2020-11908](https://insights.sbomify.com/CVE-2020-11908/): Other in treck:tcp\/ip (medium 4.3) - [CVE-2020-11907](https://insights.sbomify.com/CVE-2020-11907/): Other in treck:tcp\/ip (medium 6.3) - [CVE-2020-11906](https://insights.sbomify.com/CVE-2020-11906/): Integer overflow in treck:tcp\/ip (medium 6.3) - [CVE-2020-11905](https://insights.sbomify.com/CVE-2020-11905/): Memory corruption in treck:tcp\/ip (medium 6.5) - [CVE-2020-11904](https://insights.sbomify.com/CVE-2020-11904/): Integer overflow in treck:tcp\/ip (high 7.3) - [CVE-2020-11903](https://insights.sbomify.com/CVE-2020-11903/): Memory corruption in treck:tcp\/ip (medium 6.5) - [CVE-2020-11902](https://insights.sbomify.com/CVE-2020-11902/): Memory corruption in treck:tcp\/ip (high 7.3) - [CVE-2020-11901](https://insights.sbomify.com/CVE-2020-11901/): Memory corruption in treck:tcp\/ip (critical 9.0) - [CVE-2020-11900](https://insights.sbomify.com/CVE-2020-11900/): Memory corruption in treck:tcp\/ip (high 8.2) - [CVE-2020-1190](https://insights.sbomify.com/CVE-2020-1190/): Windows State Repository Service Elevation of Privilege Vulnerability (high 7.8) - [CVE-2020-11899](https://insights.sbomify.com/CVE-2020-11899/): Treck TCP/IP stack Out-of-Bounds Read (medium 5.4, exploited in the wild) - [CVE-2020-11898](https://insights.sbomify.com/CVE-2020-11898/): Memory corruption in treck:tcp\/ip (critical 9.1) - [CVE-2020-11897](https://insights.sbomify.com/CVE-2020-11897/): Memory corruption in treck:tcp\/ip (critical 10.0) - [CVE-2020-11896](https://insights.sbomify.com/CVE-2020-11896/): Memory corruption in treck:tcp\/ip (critical 10.0) - [CVE-2020-11895](https://insights.sbomify.com/CVE-2020-11895/): Memory corruption in libming:libming (critical 9.1) - [CVE-2020-11894](https://insights.sbomify.com/CVE-2020-11894/): Memory corruption in libming:libming (critical 9.1) - [CVE-2020-11891](https://insights.sbomify.com/CVE-2020-11891/): Missing authorization in joomla:joomla\! (medium 5.3) - [CVE-2020-11890](https://insights.sbomify.com/CVE-2020-11890/): Other in joomla:joomla\! (medium 5.3) - [CVE-2020-1189](https://insights.sbomify.com/CVE-2020-1189/): Windows State Repository Service Elevation of Privilege Vulnerability (high 7.8) - [CVE-2020-11889](https://insights.sbomify.com/CVE-2020-11889/): Missing authorization in joomla:joomla\! (medium 5.3) - [CVE-2020-11888](https://insights.sbomify.com/CVE-2020-11888/): XSS in python-markdown2 (medium 6.1) - [CVE-2020-11887](https://insights.sbomify.com/CVE-2020-11887/): XSS in svg2png (NPM package) (medium 6.1) - [CVE-2020-11886](https://insights.sbomify.com/CVE-2020-11886/): SQL injection in opennms:horizon (high 8.1) - [CVE-2020-11885](https://insights.sbomify.com/CVE-2020-11885/): XML external entity in wso2:enterprise integrator (medium 4.0) - [CVE-2020-11884](https://insights.sbomify.com/CVE-2020-11884/): Race condition in canonical:ubuntu linux (high 7.0) - [CVE-2020-11883](https://insights.sbomify.com/CVE-2020-11883/): Diavante vue-storefront-api and storefront-api disclose stack trace (medium 5.3) - [CVE-2020-11882](https://insights.sbomify.com/CVE-2020-11882/): Open redirect in telefonica:o2 business (medium 6.1) - [CVE-2020-11881](https://insights.sbomify.com/CVE-2020-11881/): Denial of service in mikrotik:routeros (high 7.5) - [CVE-2020-11880](https://insights.sbomify.com/CVE-2020-11880/): Security feature bypass in kde:kmail (medium 6.5) - [CVE-2020-1188](https://insights.sbomify.com/CVE-2020-1188/): Windows State Repository Service Elevation of Privilege Vulnerability (high 7.8) - [CVE-2020-11879](https://insights.sbomify.com/CVE-2020-11879/): Security feature bypass in gnome:evolution (medium 6.5) - [CVE-2020-11878](https://insights.sbomify.com/CVE-2020-11878/): Hardcoded credentials in jitsi:meet (critical 9.8) - [CVE-2020-11877](https://insights.sbomify.com/CVE-2020-11877/): Weak cryptography in zoom:meetings (high 7.5) - [CVE-2020-11876](https://insights.sbomify.com/CVE-2020-11876/): Weak cryptography in zoom:meetings (high 7.5) - [CVE-2020-11875](https://insights.sbomify.com/CVE-2020-11875/): Privilege escalation in google:android (high 7.8) - [CVE-2020-11874](https://insights.sbomify.com/CVE-2020-11874/): Security feature bypass in google:android (high 7.5) --- From sbomify Insights: https://insights.sbomify.com/years/2020/page/186/