# Vulnerabilities published in 2020


- [CVE-2020-11873](https://insights.sbomify.com/CVE-2020-11873/): Memory corruption in google:android (critical 9.8)
- [CVE-2020-11872](https://insights.sbomify.com/CVE-2020-11872/): Weak cryptography in bluetrace:opentrace (high 7.5)
- [CVE-2020-1187](https://insights.sbomify.com/CVE-2020-1187/): Windows State Repository Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-11869](https://insights.sbomify.com/CVE-2020-11869/): Integer overflow in qemu:qemu (low 3.3)
- [CVE-2020-11868](https://insights.sbomify.com/CVE-2020-11868/): Security feature bypass in debian:debian linux (medium 5.9)
- [CVE-2020-11867](https://insights.sbomify.com/CVE-2020-11867/): Misconfiguration in audacityteam:audacity (low 3.3)
- [CVE-2020-11866](https://insights.sbomify.com/CVE-2020-11866/): Use after free in fedoraproject:fedora (high 7.8)
- [CVE-2020-11865](https://insights.sbomify.com/CVE-2020-11865/): Memory corruption in fedoraproject:fedora (high 7.8)
- [CVE-2020-11864](https://insights.sbomify.com/CVE-2020-11864/): Denial of service in fedoraproject:fedora (medium 5.5)
- [CVE-2020-11863](https://insights.sbomify.com/CVE-2020-11863/): Denial of service in fedoraproject:fedora (medium 5.5)
- [CVE-2020-11862](https://insights.sbomify.com/CVE-2020-11862/): Insecure renegotiation in SSL protocol caused Denial of service attack in Privileged Account Manager (high 8.6)
- [CVE-2020-11861](https://insights.sbomify.com/CVE-2020-11861/): Privilege escalation in Operations Agent (high 7.8)
- [CVE-2020-11860](https://insights.sbomify.com/CVE-2020-11860/): Cross-site scripting in ArcSight Logger (medium 6.1)
- [CVE-2020-1186](https://insights.sbomify.com/CVE-2020-1186/): Windows State Repository Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-11859](https://insights.sbomify.com/CVE-2020-11859/): Potential Cross Site Scripting vulnerability in OpenText iManager (high 7.6)
- [CVE-2020-11858](https://insights.sbomify.com/CVE-2020-11858/): Privilege escalation in Operation Bridge (containerized) (high 7.8)
- [CVE-2020-11857](https://insights.sbomify.com/CVE-2020-11857/): Hardcoded credentials in Operation Bridge Reporter. (critical 9.8)
- [CVE-2020-11856](https://insights.sbomify.com/CVE-2020-11856/): Missing authorization in Operation Bridge Reporter. (critical 9.8)
- [CVE-2020-11855](https://insights.sbomify.com/CVE-2020-11855/): Privilege escalation in Operation Bridge Reporter. (high 7.8)
- [CVE-2020-11854](https://insights.sbomify.com/CVE-2020-11854/): Hardcoded credentials in Application Performance Management (critical 9.8)
- [CVE-2020-11853](https://insights.sbomify.com/CVE-2020-11853/): Arbitrary code execution vulnerability on multiple Micro Focus products (high 8.8)
- [CVE-2020-11852](https://insights.sbomify.com/CVE-2020-11852/): Command injection in Secure Messaging Gateway ( SMG). (high 8.8)
- [CVE-2020-11851](https://insights.sbomify.com/CVE-2020-11851/): Code injection in ArcSight Logger (critical 9.8)
- [CVE-2020-11850](https://insights.sbomify.com/CVE-2020-11850/): Cross site scripting vulnerability in Self Service Password Reset (high 7.3)
- [CVE-2020-1185](https://insights.sbomify.com/CVE-2020-1185/): Windows State Repository Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-11849](https://insights.sbomify.com/CVE-2020-11849/): Elevation of privilege and unauthorized access in Micro Focus Identity Manager product (critical 9.8)
- [CVE-2020-11848](https://insights.sbomify.com/CVE-2020-11848/): Denial of service in ArcSight Management Center (high 7.5)
- [CVE-2020-11847](https://insights.sbomify.com/CVE-2020-11847/): Vulnerability in sshrelay in privileged access manager provides full system access. (high 8.2)
- [CVE-2020-11846](https://insights.sbomify.com/CVE-2020-11846/): Improper handling of token allows access to restricted resource in Privileged Access Manager (high 8.7)
- [CVE-2020-11845](https://insights.sbomify.com/CVE-2020-11845/): Cross-site scripting in Service Manager. (medium 6.1)
- [CVE-2020-11844](https://insights.sbomify.com/CVE-2020-11844/): Incorrect Authorization vulnerability in the Micro Focus Container Deployment Foundation affecting multiple products. (critical 10.0)
- [CVE-2020-11843](https://insights.sbomify.com/CVE-2020-11843/): Potential information leakage in administrator enabled debug mode (medium 6.5)
- [CVE-2020-11842](https://insights.sbomify.com/CVE-2020-11842/): Information disclosure in Verastream Host Integrator (VHI) (high 7.5)
- [CVE-2020-11841](https://insights.sbomify.com/CVE-2020-11841/): Information disclosure in ArcSight Management Center. (medium 4.3)
- [CVE-2020-11840](https://insights.sbomify.com/CVE-2020-11840/): Information disclosure in ArcSight Management Center. (medium 4.3)
- [CVE-2020-1184](https://insights.sbomify.com/CVE-2020-1184/): Windows State Repository Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-11839](https://insights.sbomify.com/CVE-2020-11839/): Cross-site scripting in ArcSight Logger. (medium 6.1)
- [CVE-2020-11838](https://insights.sbomify.com/CVE-2020-11838/): Cross-site scripting in ArcSight Management Center. (medium 5.4)
- [CVE-2020-11836](https://insights.sbomify.com/CVE-2020-11836/): Information disclosure in OPPO Android Phone with MTK chipset (medium 5.5)
- [CVE-2020-11835](https://insights.sbomify.com/CVE-2020-11835/): Memory corruption in OPPO Find X2 (medium 5.5)
- [CVE-2020-11834](https://insights.sbomify.com/CVE-2020-11834/): Memory corruption in OPPO Find X2 (medium 5.5)
- [CVE-2020-11833](https://insights.sbomify.com/CVE-2020-11833/): Memory corruption in OPPO Find X2 (medium 5.5)
- [CVE-2020-11832](https://insights.sbomify.com/CVE-2020-11832/): Memory corruption in OPPO Find X2 (medium 5.5)
- [CVE-2020-11831](https://insights.sbomify.com/CVE-2020-11831/): Misconfiguration in com.oppo.ovoicemanager (critical 9.8)
- [CVE-2020-11830](https://insights.sbomify.com/CVE-2020-11830/): Command injection in com.oppo.qualityprotect (critical 9.8)
- [CVE-2020-1183](https://insights.sbomify.com/CVE-2020-1183/): Cross-site scripting in Microsoft SharePoint Enterprise Server (medium 5.4)
- [CVE-2020-11829](https://insights.sbomify.com/CVE-2020-11829/): Privilege escalation in com.coloros.codebook (critical 9.8)
- [CVE-2020-11828](https://insights.sbomify.com/CVE-2020-11828/): Information disclosure in Color OS (high 7.5)
- [CVE-2020-11827](https://insights.sbomify.com/CVE-2020-11827/): Privilege escalation in gog:galaxy (high 7.8)
- [CVE-2020-11826](https://insights.sbomify.com/CVE-2020-11826/): Information disclosure in appinghouse:memono (high 7.5)
- [CVE-2020-11825](https://insights.sbomify.com/CVE-2020-11825/): Dolibarr Cross-Site Request Forgery Vulnerability (high 8.8)
- [CVE-2020-11823](https://insights.sbomify.com/CVE-2020-11823/): Dolibarr stored Cross-site Scripting vulnerability (medium 5.4)
- [CVE-2020-11822](https://insights.sbomify.com/CVE-2020-11822/): Cross-site scripting in rukovoditel:rukovoditel (medium 6.1)
- [CVE-2020-11821](https://insights.sbomify.com/CVE-2020-11821/): Weak cryptography in rukovoditel:rukovoditel (medium 5.3)
- [CVE-2020-11820](https://insights.sbomify.com/CVE-2020-11820/): SQL injection in rukovoditel:rukovoditel (critical 9.8)
- [CVE-2020-1182](https://insights.sbomify.com/CVE-2020-1182/): Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability (high 7.3)
- [CVE-2020-11819](https://insights.sbomify.com/CVE-2020-11819/): Path traversal in rukovoditel:rukovoditel (critical 9.8)
- [CVE-2020-11818](https://insights.sbomify.com/CVE-2020-11818/): Cross-site request forgery in rukovoditel:rukovoditel (high 8.8)
- [CVE-2020-11817](https://insights.sbomify.com/CVE-2020-11817/): File upload in rukovoditel:rukovoditel (critical 9.8)
- [CVE-2020-11816](https://insights.sbomify.com/CVE-2020-11816/): SQL injection in rukovoditel:rukovoditel (critical 9.8)
- [CVE-2020-11815](https://insights.sbomify.com/CVE-2020-11815/): File upload in rukovoditel:rukovoditel (critical 9.8)
- [CVE-2020-11814](https://insights.sbomify.com/CVE-2020-11814/): Open redirect in qdpm:qdpm (medium 5.4)
- [CVE-2020-11813](https://insights.sbomify.com/CVE-2020-11813/): Cross-site scripting in rukovoditel:rukovoditel (medium 5.4)
- [CVE-2020-11812](https://insights.sbomify.com/CVE-2020-11812/): SQL injection in rukovoditel:rukovoditel (critical 9.8)
- [CVE-2020-11811](https://insights.sbomify.com/CVE-2020-11811/): File upload in qdpm:qdpm (critical 9.8)
- [CVE-2020-11810](https://insights.sbomify.com/CVE-2020-11810/): Race condition in debian:debian linux (low 3.7)
- [CVE-2020-1181](https://insights.sbomify.com/CVE-2020-1181/): Code injection in Microsoft SharePoint Enterprise Server (high 8.8)
- [CVE-2020-11807](https://insights.sbomify.com/CVE-2020-11807/): File upload in sourcefabric:newscoop (high 7.8)
- [CVE-2020-11806](https://insights.sbomify.com/CVE-2020-11806/): Security feature bypass in mailstore:mailstore server (medium 5.9)
- [CVE-2020-11805](https://insights.sbomify.com/CVE-2020-11805/): Security feature bypass in pexip:pexip infinity (critical 9.8)
- [CVE-2020-11804](https://insights.sbomify.com/CVE-2020-11804/): Code injection in titanhq:spamtitan (high 8.8)
- [CVE-2020-11803](https://insights.sbomify.com/CVE-2020-11803/): Code injection in titanhq:spamtitan (high 8.8)
- [CVE-2020-11800](https://insights.sbomify.com/CVE-2020-11800/): Other in debian:debian linux (critical 9.0)
- [CVE-2020-1180](https://insights.sbomify.com/CVE-2020-1180/): Scripting Engine Memory Corruption Vulnerability (medium 4.2)
- [CVE-2020-11799](https://insights.sbomify.com/CVE-2020-11799/): Privilege escalation in z-cron:z-cron (critical 9.8)
- [CVE-2020-11798](https://insights.sbomify.com/CVE-2020-11798/): Path traversal in mitel:micollab audio\, web \& video conferencing (medium 5.3)
- [CVE-2020-11797](https://insights.sbomify.com/CVE-2020-11797/): Auth bypass in mitel:micollab audio\, web \& video conferencing (high 7.5)
- [CVE-2020-11796](https://insights.sbomify.com/CVE-2020-11796/): Auth bypass in jetbrains:space (critical 9.8)
- [CVE-2020-11795](https://insights.sbomify.com/CVE-2020-11795/): Misconfiguration in jetbrains:space (high 7.5)
- [CVE-2020-11793](https://insights.sbomify.com/CVE-2020-11793/): Use after free in canonical:ubuntu linux (high 8.8)
- [CVE-2020-11792](https://insights.sbomify.com/CVE-2020-11792/): Information disclosure in netgear:r8900 firmware (high 7.5)
- [CVE-2020-11791](https://insights.sbomify.com/CVE-2020-11791/): Cross-site scripting in netgear:jgs516pe firmware (medium 5.2)
- [CVE-2020-11790](https://insights.sbomify.com/CVE-2020-11790/): Other in netgear:r7800 firmware (critical 9.4)
- [CVE-2020-1179](https://insights.sbomify.com/CVE-2020-1179/): Windows GDI Information Disclosure Vulnerability (medium 6.5)
- [CVE-2020-11789](https://insights.sbomify.com/CVE-2020-11789/): Command injection in netgear:r6400 firmware (high 8.3)
- [CVE-2020-11788](https://insights.sbomify.com/CVE-2020-11788/): Auth bypass in netgear:d6200 firmware (medium 6.5)
- [CVE-2020-11787](https://insights.sbomify.com/CVE-2020-11787/): Cross-site scripting in netgear:d7800 firmware (medium 6.0)
- [CVE-2020-11786](https://insights.sbomify.com/CVE-2020-11786/): Cross-site scripting in netgear:d7800 firmware (medium 6.0)
- [CVE-2020-11785](https://insights.sbomify.com/CVE-2020-11785/): Cross-site scripting in netgear:d7800 firmware (medium 6.0)
- [CVE-2020-11784](https://insights.sbomify.com/CVE-2020-11784/): Cross-site scripting in netgear:d7800 firmware (medium 6.0)
- [CVE-2020-11783](https://insights.sbomify.com/CVE-2020-11783/): Cross-site scripting in netgear:d7800 firmware (medium 6.0)
- [CVE-2020-11782](https://insights.sbomify.com/CVE-2020-11782/): Cross-site scripting in netgear:d7800 firmware (medium 6.0)
- [CVE-2020-11781](https://insights.sbomify.com/CVE-2020-11781/): Cross-site scripting in netgear:d7800 firmware (medium 6.0)
- [CVE-2020-11780](https://insights.sbomify.com/CVE-2020-11780/): Cross-site scripting in netgear:d7800 firmware (medium 6.0)
- [CVE-2020-1178](https://insights.sbomify.com/CVE-2020-1178/): Privilege escalation in Microsoft SharePoint Enterprise Server (high 8.8)
- [CVE-2020-11779](https://insights.sbomify.com/CVE-2020-11779/): Cross-site scripting in netgear:d7800 firmware (medium 6.0)
- [CVE-2020-11778](https://insights.sbomify.com/CVE-2020-11778/): Cross-site scripting in netgear:d7800 firmware (medium 6.0)
- [CVE-2020-11777](https://insights.sbomify.com/CVE-2020-11777/): Cross-site scripting in netgear:d7800 firmware (medium 6.0)
- [CVE-2020-11776](https://insights.sbomify.com/CVE-2020-11776/): Cross-site scripting in netgear:d7800 firmware (medium 6.0)
- [CVE-2020-11775](https://insights.sbomify.com/CVE-2020-11775/): Cross-site scripting in netgear:d7800 firmware (medium 6.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/187/