# Vulnerabilities published in 2020


- [CVE-2020-11774](https://insights.sbomify.com/CVE-2020-11774/): Cross-site scripting in netgear:d7800 firmware (medium 6.0)
- [CVE-2020-11773](https://insights.sbomify.com/CVE-2020-11773/): Cross-site scripting in netgear:d7800 firmware (medium 6.0)
- [CVE-2020-11772](https://insights.sbomify.com/CVE-2020-11772/): Cross-site scripting in netgear:d7800 firmware (medium 6.0)
- [CVE-2020-11771](https://insights.sbomify.com/CVE-2020-11771/): Cross-site scripting in netgear:d7800 firmware (medium 6.0)
- [CVE-2020-11770](https://insights.sbomify.com/CVE-2020-11770/): Command injection in netgear:d6220 firmware (high 8.0)
- [CVE-2020-1177](https://insights.sbomify.com/CVE-2020-1177/): Cross-site scripting in Microsoft SharePoint Enterprise Server (medium 5.4)
- [CVE-2020-11769](https://insights.sbomify.com/CVE-2020-11769/): Cross-site scripting in netgear:d7800 firmware (medium 6.0)
- [CVE-2020-11768](https://insights.sbomify.com/CVE-2020-11768/): Cross-site scripting in netgear:d7800 firmware (medium 6.0)
- [CVE-2020-11767](https://insights.sbomify.com/CVE-2020-11767/): Information disclosure in envoyproxy:envoy (low 3.1)
- [CVE-2020-11766](https://insights.sbomify.com/CVE-2020-11766/): Command injection in avantfax:avantfax (high 8.8)
- [CVE-2020-11765](https://insights.sbomify.com/CVE-2020-11765/): Memory corruption in apple:icloud (medium 5.5)
- [CVE-2020-11764](https://insights.sbomify.com/CVE-2020-11764/): Memory corruption in apple:icloud (medium 5.5)
- [CVE-2020-11763](https://insights.sbomify.com/CVE-2020-11763/): Memory corruption in apple:icloud (medium 5.5)
- [CVE-2020-11762](https://insights.sbomify.com/CVE-2020-11762/): Memory corruption in apple:icloud (medium 5.5)
- [CVE-2020-11761](https://insights.sbomify.com/CVE-2020-11761/): Memory corruption in apple:icloud (medium 5.5)
- [CVE-2020-11760](https://insights.sbomify.com/CVE-2020-11760/): Memory corruption in apple:icloud (medium 5.5)
- [CVE-2020-1176](https://insights.sbomify.com/CVE-2020-1176/): Jet Database Engine Remote Code Execution Vulnerability (high 7.8)
- [CVE-2020-11759](https://insights.sbomify.com/CVE-2020-11759/): Integer overflow in apple:icloud (medium 5.5)
- [CVE-2020-11758](https://insights.sbomify.com/CVE-2020-11758/): Memory corruption in apple:icloud (medium 5.5)
- [CVE-2020-11753](https://insights.sbomify.com/CVE-2020-11753/): Missing authorization in sonatype:nexus repository manager (high 8.8)
- [CVE-2020-1175](https://insights.sbomify.com/CVE-2020-1175/): Jet Database Engine Remote Code Execution Vulnerability (high 7.8)
- [CVE-2020-11749](https://insights.sbomify.com/CVE-2020-11749/): Cross-site scripting in pandorafms:pandora fms (critical 9.0)
- [CVE-2020-11743](https://insights.sbomify.com/CVE-2020-11743/): Denial of service in fedoraproject:fedora (medium 5.5)
- [CVE-2020-11742](https://insights.sbomify.com/CVE-2020-11742/): Denial of service in fedoraproject:fedora (medium 5.5)
- [CVE-2020-11741](https://insights.sbomify.com/CVE-2020-11741/): Memory corruption in debian:debian linux (high 8.8)
- [CVE-2020-11740](https://insights.sbomify.com/CVE-2020-11740/): Information disclosure in debian:debian linux (medium 5.5)
- [CVE-2020-1174](https://insights.sbomify.com/CVE-2020-1174/): Jet Database Engine Remote Code Execution Vulnerability (high 7.8)
- [CVE-2020-11739](https://insights.sbomify.com/CVE-2020-11739/): Race condition in debian:debian linux (high 7.8)
- [CVE-2020-11738](https://insights.sbomify.com/CVE-2020-11738/): WordPress Snap Creek Duplicator Plugin File Download (high 7.5, exploited in the wild)
- [CVE-2020-11737](https://insights.sbomify.com/CVE-2020-11737/): Cross-site scripting in Zimbra (medium 6.1)
- [CVE-2020-11736](https://insights.sbomify.com/CVE-2020-11736/): Path traversal in canonical:ubuntu linux (low 3.9)
- [CVE-2020-11735](https://insights.sbomify.com/CVE-2020-11735/): Weak cryptography in wolfssl:wolfssl (medium 5.3)
- [CVE-2020-11734](https://insights.sbomify.com/CVE-2020-11734/): Cross-site scripting in cybersolutions:cybermail (medium 6.1)
- [CVE-2020-11733](https://insights.sbomify.com/CVE-2020-11733/): Command injection in spirent:avalanche (medium 6.7)
- [CVE-2020-11732](https://insights.sbomify.com/CVE-2020-11732/): Path traversal in davidlingren:media library assistant (high 7.5)
- [CVE-2020-11731](https://insights.sbomify.com/CVE-2020-11731/): Cross-site scripting in davidlingren:media library assistant (medium 6.1)
- [CVE-2020-1173](https://insights.sbomify.com/CVE-2020-1173/): Microsoft Power BI Report Server Spoofing Vulnerability (medium 6.8)
- [CVE-2020-11729](https://insights.sbomify.com/CVE-2020-11729/): Weak cryptography in davical:andrew\'s web libraries (critical 9.8)
- [CVE-2020-11728](https://insights.sbomify.com/CVE-2020-11728/): Weak cryptography in davical:andrew\'s web libraries (high 7.5)
- [CVE-2020-11727](https://insights.sbomify.com/CVE-2020-11727/): Cross-site scripting in algolplus:advanced order export for woocommerce (medium 6.1)
- [CVE-2020-11725](https://insights.sbomify.com/CVE-2020-11725/): Memory corruption in linux:linux kernel (high 7.8)
- [CVE-2020-11724](https://insights.sbomify.com/CVE-2020-11724/): Other in debian:debian linux (high 7.5)
- [CVE-2020-11723](https://insights.sbomify.com/CVE-2020-11723/): Hardcoded credentials in cellebrite:ufed firmware (medium 5.5)
- [CVE-2020-11722](https://insights.sbomify.com/CVE-2020-11722/): Code injection in dungeon crawl stone soup project:dungeon crawl stone soup (critical 9.8)
- [CVE-2020-11721](https://insights.sbomify.com/CVE-2020-11721/): Memory corruption in saitoha:libsixel (medium 6.5)
- [CVE-2020-11720](https://insights.sbomify.com/CVE-2020-11720/): Hardcoded credentials in bilanc:bilanc (critical 9.8)
- [CVE-2020-1172](https://insights.sbomify.com/CVE-2020-1172/): Scripting Engine Memory Corruption Vulnerability (medium 4.2)
- [CVE-2020-11719](https://insights.sbomify.com/CVE-2020-11719/): Hardcoded credentials in bilanc:bilanc (high 7.5)
- [CVE-2020-11718](https://insights.sbomify.com/CVE-2020-11718/): Weak cryptography in bilanc:bilanc (high 7.4)
- [CVE-2020-11717](https://insights.sbomify.com/CVE-2020-11717/): SQL injection in bilanc:bilanc (critical 9.8)
- [CVE-2020-11716](https://insights.sbomify.com/CVE-2020-11716/): Misconfiguration in panasonic:eluga ray 530 firmware (critical 9.8)
- [CVE-2020-11715](https://insights.sbomify.com/CVE-2020-11715/): Missing authorization in panasonic:p99 firmware (critical 9.8)
- [CVE-2020-11714](https://insights.sbomify.com/CVE-2020-11714/): Cross-site scripting in etentech:psg-6528vm firmware (medium 5.4)
- [CVE-2020-11713](https://insights.sbomify.com/CVE-2020-11713/): Weak cryptography in wolfssl:wolfssl (high 7.5)
- [CVE-2020-11712](https://insights.sbomify.com/CVE-2020-11712/): Cross-site scripting in open upload project:open upload (medium 6.1)
- [CVE-2020-11711](https://insights.sbomify.com/CVE-2020-11711/): Cross-site scripting in stormshield:stormshield network security (medium 4.8)
- [CVE-2020-11710](https://insights.sbomify.com/CVE-2020-11710/): Misconfiguration in konghq:docker-kong (critical 9.8)
- [CVE-2020-1171](https://insights.sbomify.com/CVE-2020-1171/): Visual Studio Code Python Extension Remote Code Execution Vulnerability (high 8.8)
- [CVE-2020-11709](https://insights.sbomify.com/CVE-2020-11709/): Other in yhirose:cpp-httplib (high 7.5)
- [CVE-2020-11708](https://insights.sbomify.com/CVE-2020-11708/): Privilege escalation in provideserver:provide ftp server (critical 9.8)
- [CVE-2020-11707](https://insights.sbomify.com/CVE-2020-11707/): Security feature bypass in provideserver:provide ftp server (high 8.8)
- [CVE-2020-11706](https://insights.sbomify.com/CVE-2020-11706/): Cross-site request forgery in provideserver:provide ftp server (high 8.8)
- [CVE-2020-11705](https://insights.sbomify.com/CVE-2020-11705/): Path traversal in provideserver:provide ftp server (critical 9.8)
- [CVE-2020-11704](https://insights.sbomify.com/CVE-2020-11704/): Cross-site scripting in provideserver:provide ftp server (medium 6.1)
- [CVE-2020-11703](https://insights.sbomify.com/CVE-2020-11703/): Other in provideserver:provide ftp server (high 7.5)
- [CVE-2020-11702](https://insights.sbomify.com/CVE-2020-11702/): Cross-site scripting in provideserver:provide ftp server (medium 6.1)
- [CVE-2020-11701](https://insights.sbomify.com/CVE-2020-11701/): Cross-site request forgery in provideserver:provide ftp server (high 8.8)
- [CVE-2020-11700](https://insights.sbomify.com/CVE-2020-11700/): Path traversal in titanhq:spamtitan (medium 6.5)
- [CVE-2020-1170](https://insights.sbomify.com/CVE-2020-1170/): Privilege escalation in Microsoft Forefront Endpoint Protection (high 7.8)
- [CVE-2020-11699](https://insights.sbomify.com/CVE-2020-11699/): Command injection in titanhq:spamtitan (high 8.8)
- [CVE-2020-11698](https://insights.sbomify.com/CVE-2020-11698/): Command injection in titanhq:spamtitan (critical 9.8)
- [CVE-2020-11697](https://insights.sbomify.com/CVE-2020-11697/): Cross-site scripting in combodo:itop (medium 6.1)
- [CVE-2020-11696](https://insights.sbomify.com/CVE-2020-11696/): Cross-site scripting in combodo:itop (medium 6.1)
- [CVE-2020-11694](https://insights.sbomify.com/CVE-2020-11694/): Hardcoded credentials in jetbrains:pycharm (high 7.5)
- [CVE-2020-11693](https://insights.sbomify.com/CVE-2020-11693/): Denial of service in jetbrains:youtrack (high 7.5)
- [CVE-2020-11692](https://insights.sbomify.com/CVE-2020-11692/): Missing authorization in jetbrains:youtrack (low 2.7)
- [CVE-2020-11691](https://insights.sbomify.com/CVE-2020-11691/): Other in jetbrains:hub (high 7.5)
- [CVE-2020-11690](https://insights.sbomify.com/CVE-2020-11690/): Security feature bypass in jetbrains:intellij idea (critical 9.8)
- [CVE-2020-1169](https://insights.sbomify.com/CVE-2020-1169/): Windows Runtime Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-11689](https://insights.sbomify.com/CVE-2020-11689/): Missing authorization in jetbrains:teamcity (medium 6.5)
- [CVE-2020-11688](https://insights.sbomify.com/CVE-2020-11688/): Auth bypass in jetbrains:teamcity (high 7.5)
- [CVE-2020-11687](https://insights.sbomify.com/CVE-2020-11687/): Information disclosure in jetbrains:teamcity (high 7.5)
- [CVE-2020-11686](https://insights.sbomify.com/CVE-2020-11686/): Information disclosure in jetbrains:teamcity (low 2.7)
- [CVE-2020-11685](https://insights.sbomify.com/CVE-2020-11685/): Weak cryptography in jetbrains:goland (high 7.5)
- [CVE-2020-11684](https://insights.sbomify.com/CVE-2020-11684/): Information disclosure in linux4sam:at91bootstrap (critical 9.1)
- [CVE-2020-11683](https://insights.sbomify.com/CVE-2020-11683/): Weak cryptography in linux4sam:at91bootstrap (medium 6.8)
- [CVE-2020-11682](https://insights.sbomify.com/CVE-2020-11682/): Cross-site request forgery in castel:nextgen dvr firmware (medium 6.5)
- [CVE-2020-11681](https://insights.sbomify.com/CVE-2020-11681/): Information disclosure in castel:nextgen dvr firmware (high 8.1)
- [CVE-2020-11680](https://insights.sbomify.com/CVE-2020-11680/): Missing authorization in castel:nextgen dvr firmware (medium 6.5)
- [CVE-2020-11679](https://insights.sbomify.com/CVE-2020-11679/): Privilege escalation in castel:nextgen dvr firmware (high 8.8)
- [CVE-2020-11677](https://insights.sbomify.com/CVE-2020-11677/): Memory corruption in cerner:medico (high 8.8)
- [CVE-2020-11676](https://insights.sbomify.com/CVE-2020-11676/): Memory corruption in cerner:medico (high 8.8)
- [CVE-2020-11675](https://insights.sbomify.com/CVE-2020-11675/): Memory corruption in cerner:medico (high 8.8)
- [CVE-2020-11674](https://insights.sbomify.com/CVE-2020-11674/): Memory corruption in cerner:medico (high 8.8)
- [CVE-2020-11673](https://insights.sbomify.com/CVE-2020-11673/): Missing authorization in total-soft:responsive poll (critical 9.8)
- [CVE-2020-11671](https://insights.sbomify.com/CVE-2020-11671/): Missing Authorization in TeamPass (high 8.1)
- [CVE-2020-1167](https://insights.sbomify.com/CVE-2020-1167/): Microsoft Graphics Components Remote Code Execution Vulnerability (high 7.8)
- [CVE-2020-11669](https://insights.sbomify.com/CVE-2020-11669/): Other in linux:linux kernel (medium 5.5)
- [CVE-2020-11668](https://insights.sbomify.com/CVE-2020-11668/): Null dereference in linux:linux kernel (high 7.1)
- [CVE-2020-11666](https://insights.sbomify.com/CVE-2020-11666/): Privilege escalation in CA API Developer Portal (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/188/