# Vulnerabilities published in 2020


- [CVE-2020-11665](https://insights.sbomify.com/CVE-2020-11665/): Open redirect in CA API Developer Portal (medium 6.1)
- [CVE-2020-11664](https://insights.sbomify.com/CVE-2020-11664/): Open redirect in CA API Developer Portal (medium 6.1)
- [CVE-2020-11663](https://insights.sbomify.com/CVE-2020-11663/): Open redirect in CA API Developer Portal (medium 6.1)
- [CVE-2020-11662](https://insights.sbomify.com/CVE-2020-11662/): Cross-site request forgery in CA API Developer Portal (high 7.5)
- [CVE-2020-11661](https://insights.sbomify.com/CVE-2020-11661/): Missing authorization in CA API Developer Portal (high 8.1)
- [CVE-2020-11660](https://insights.sbomify.com/CVE-2020-11660/): Missing authorization in CA API Developer Portal (medium 6.5)
- [CVE-2020-1166](https://insights.sbomify.com/CVE-2020-1166/): Windows Clipboard Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-11659](https://insights.sbomify.com/CVE-2020-11659/): Missing authorization in CA API Developer Portal (medium 4.3)
- [CVE-2020-11658](https://insights.sbomify.com/CVE-2020-11658/): Auth bypass in CA API Developer Portal (critical 9.8)
- [CVE-2020-11656](https://insights.sbomify.com/CVE-2020-11656/): Use after free in netapp:ontap select deploy administration utility (critical 9.8)
- [CVE-2020-11655](https://insights.sbomify.com/CVE-2020-11655/): Denial of service in canonical:ubuntu linux (high 7.5)
- [CVE-2020-11653](https://insights.sbomify.com/CVE-2020-11653/): Denial of service in debian:debian linux (high 7.5)
- [CVE-2020-11652](https://insights.sbomify.com/CVE-2020-11652/): SaltStack Salt Path Traversal (medium 6.5, exploited in the wild)
- [CVE-2020-11651](https://insights.sbomify.com/CVE-2020-11651/): SaltStack Salt Authentication Bypass (critical 9.8, exploited in the wild)
- [CVE-2020-11650](https://insights.sbomify.com/CVE-2020-11650/): Denial of service in ixsystems:freenas firmware (high 7.5)
- [CVE-2020-1165](https://insights.sbomify.com/CVE-2020-1165/): Windows Clipboard Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-11649](https://insights.sbomify.com/CVE-2020-11649/): Auth bypass in gitlab:gitlab (medium 6.5)
- [CVE-2020-11647](https://insights.sbomify.com/CVE-2020-11647/): Denial of service in debian:debian linux (high 7.5)
- [CVE-2020-11646](https://insights.sbomify.com/CVE-2020-11646/): GateManager Log Information Disclosure Vulnerability (medium 4.3)
- [CVE-2020-11645](https://insights.sbomify.com/CVE-2020-11645/): GateManager Denial of Service Vulnerability (medium 6.5)
- [CVE-2020-11644](https://insights.sbomify.com/CVE-2020-11644/): GateManager Audit Message Spoofing Vulnerability (medium 6.5)
- [CVE-2020-11643](https://insights.sbomify.com/CVE-2020-11643/): GateManager Information Disclosure Vulnerability (medium 6.5)
- [CVE-2020-11642](https://insights.sbomify.com/CVE-2020-11642/): SiteManager Denial of Service via Local File Inclusion Vulnerability (high 7.7)
- [CVE-2020-11641](https://insights.sbomify.com/CVE-2020-11641/): SiteManager Local File Inclusion Vulnerability (high 7.7)
- [CVE-2020-11640](https://insights.sbomify.com/CVE-2020-11640/): Elevation of Privilege (high 8.8)
- [CVE-2020-1164](https://insights.sbomify.com/CVE-2020-1164/): Windows Runtime Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2020-11639](https://insights.sbomify.com/CVE-2020-11639/): Insufficient access control on Inter process communication, (high 7.8)
- [CVE-2020-11637](https://insights.sbomify.com/CVE-2020-11637/): Automation Runtime TFTP Service DoS Vulnerability (medium 5.8)
- [CVE-2020-11635](https://insights.sbomify.com/CVE-2020-11635/): Privilege escalation in Zscaler Client Connector for Windows (high 7.8)
- [CVE-2020-11634](https://insights.sbomify.com/CVE-2020-11634/): Privilege escalation in zscaler:client connector (high 7.8)
- [CVE-2020-11633](https://insights.sbomify.com/CVE-2020-11633/): Memory corruption in zscaler:client connector (critical 9.8)
- [CVE-2020-11632](https://insights.sbomify.com/CVE-2020-11632/): Privilege escalation in zscaler:client connector (high 7.8)
- [CVE-2020-11631](https://insights.sbomify.com/CVE-2020-11631/): Other in primekey:ejbca (medium 6.5)
- [CVE-2020-11630](https://insights.sbomify.com/CVE-2020-11630/): Deserialization in primekey:ejbca (critical 9.8)
- [CVE-2020-1163](https://insights.sbomify.com/CVE-2020-1163/): Privilege escalation in Microsoft Forefront Endpoint Protection (high 7.8)
- [CVE-2020-11629](https://insights.sbomify.com/CVE-2020-11629/): File upload in primekey:ejbca (high 7.2)
- [CVE-2020-11628](https://insights.sbomify.com/CVE-2020-11628/): Security feature bypass in primekey:ejbca (medium 5.3)
- [CVE-2020-11627](https://insights.sbomify.com/CVE-2020-11627/): Cross-site request forgery in primekey:ejbca (high 8.8)
- [CVE-2020-11626](https://insights.sbomify.com/CVE-2020-11626/): Cross-site scripting in primekey:ejbca (medium 6.1)
- [CVE-2020-11625](https://insights.sbomify.com/CVE-2020-11625/): Information disclosure in avertx:hd438 firmware (medium 5.3)
- [CVE-2020-11624](https://insights.sbomify.com/CVE-2020-11624/): Hardcoded credentials in avertx:hd438 firmware (critical 9.8)
- [CVE-2020-11623](https://insights.sbomify.com/CVE-2020-11623/): Security feature bypass in avertx:hd438 firmware (medium 6.8)
- [CVE-2020-11622](https://insights.sbomify.com/CVE-2020-11622/): Other in arista:cloudeos (high 7.5)
- [CVE-2020-11620](https://insights.sbomify.com/CVE-2020-11620/): jackson-databind mishandles the interaction between serialization gadgets and typing (high 8.1)
- [CVE-2020-1162](https://insights.sbomify.com/CVE-2020-1162/): Privilege escalation in Windows (high 7.8)
- [CVE-2020-11619](https://insights.sbomify.com/CVE-2020-11619/): jackson-databind mishandles the interaction between serialization gadgets and typing (high 8.1)
- [CVE-2020-11618](https://insights.sbomify.com/CVE-2020-11618/): Hardcoded credentials in philips:dtr3502bfta dvb-t2 firmware (high 7.8)
- [CVE-2020-11617](https://insights.sbomify.com/CVE-2020-11617/): Security feature bypass in philips:dtr3502bfta dvb-t2 firmware (medium 5.9)
- [CVE-2020-11616](https://insights.sbomify.com/CVE-2020-11616/): Weak cryptography in NVIDIA DGX Servers (high 7.5)
- [CVE-2020-11615](https://insights.sbomify.com/CVE-2020-11615/): Hardcoded credentials in NVIDIA DGX Servers (high 7.5)
- [CVE-2020-11614](https://insights.sbomify.com/CVE-2020-11614/): Supply chain in mids\' reborn hero designer project:mids\' reborn hero designer (high 8.1)
- [CVE-2020-11613](https://insights.sbomify.com/CVE-2020-11613/): Misconfiguration in mids\' reborn hero designer project:mids\' reborn hero designer (high 7.8)
- [CVE-2020-11612](https://insights.sbomify.com/CVE-2020-11612/): Denial of Service in Netty (high 7.5)
- [CVE-2020-11611](https://insights.sbomify.com/CVE-2020-11611/): Open Redirect in xdLocalStorage (medium 6.1)
- [CVE-2020-11610](https://insights.sbomify.com/CVE-2020-11610/): xdlocalstorage does not verify request origin (high 8.8)
- [CVE-2020-1161](https://insights.sbomify.com/CVE-2020-1161/): ASP.NET Core Denial of Service Vulnerability (high 7.5)
- [CVE-2020-11609](https://insights.sbomify.com/CVE-2020-11609/): Null dereference in canonical:ubuntu linux (medium 4.3)
- [CVE-2020-11608](https://insights.sbomify.com/CVE-2020-11608/): Null dereference in canonical:ubuntu linux (medium 4.3)
- [CVE-2020-11607](https://insights.sbomify.com/CVE-2020-11607/): Security feature bypass in google:android (medium 5.3)
- [CVE-2020-11606](https://insights.sbomify.com/CVE-2020-11606/): Information disclosure in google:android (low 2.4)
- [CVE-2020-11605](https://insights.sbomify.com/CVE-2020-11605/): Information disclosure in google:android (high 7.5)
- [CVE-2020-11604](https://insights.sbomify.com/CVE-2020-11604/): Memory corruption in google:android (critical 9.1)
- [CVE-2020-11603](https://insights.sbomify.com/CVE-2020-11603/): Memory corruption in google:android (critical 9.8)
- [CVE-2020-11602](https://insights.sbomify.com/CVE-2020-11602/): Information disclosure in google:android (low 2.4)
- [CVE-2020-11601](https://insights.sbomify.com/CVE-2020-11601/): Security feature bypass in google:android (medium 5.5)
- [CVE-2020-11600](https://insights.sbomify.com/CVE-2020-11600/): Memory corruption in google:android (critical 9.8)
- [CVE-2020-1160](https://insights.sbomify.com/CVE-2020-1160/): Information disclosure in Windows (medium 5.5)
- [CVE-2020-11599](https://insights.sbomify.com/CVE-2020-11599/): Information disclosure in cipplanner:cipace (high 7.5)
- [CVE-2020-11598](https://insights.sbomify.com/CVE-2020-11598/): File upload in cipplanner:cipace (critical 9.8)
- [CVE-2020-11597](https://insights.sbomify.com/CVE-2020-11597/): SQL injection in cipplanner:cipace (critical 9.8)
- [CVE-2020-11596](https://insights.sbomify.com/CVE-2020-11596/): Path traversal in cipplanner:cipace (high 7.5)
- [CVE-2020-11595](https://insights.sbomify.com/CVE-2020-11595/): Information disclosure in cipplanner:cipace (high 7.5)
- [CVE-2020-11594](https://insights.sbomify.com/CVE-2020-11594/): Information disclosure in cipplanner:cipace (high 7.5)
- [CVE-2020-11593](https://insights.sbomify.com/CVE-2020-11593/): Other in cipplanner:cipace (high 7.5)
- [CVE-2020-11592](https://insights.sbomify.com/CVE-2020-11592/): Information disclosure in cipplanner:cipace (high 7.5)
- [CVE-2020-11591](https://insights.sbomify.com/CVE-2020-11591/): Information disclosure in cipplanner:cipace (medium 5.3)
- [CVE-2020-11590](https://insights.sbomify.com/CVE-2020-11590/): Information disclosure in cipplanner:cipace (medium 5.3)
- [CVE-2020-1159](https://insights.sbomify.com/CVE-2020-1159/): Windows Elevation of Privilege Vulnerability (medium 6.6)
- [CVE-2020-11589](https://insights.sbomify.com/CVE-2020-11589/): Missing authorization in cipplanner:cipace (high 7.5)
- [CVE-2020-11588](https://insights.sbomify.com/CVE-2020-11588/): Information disclosure in cipplanner:cipace (medium 5.3)
- [CVE-2020-11587](https://insights.sbomify.com/CVE-2020-11587/): Missing authorization in cipplanner:cipace (high 7.5)
- [CVE-2020-11586](https://insights.sbomify.com/CVE-2020-11586/): XML external entity in cipplanner:cipace (critical 9.8)
- [CVE-2020-11585](https://insights.sbomify.com/CVE-2020-11585/): Information disclosure in dnnsoftware:dotnetnuke (medium 4.3)
- [CVE-2020-11584](https://insights.sbomify.com/CVE-2020-11584/): Cross-site scripting in plesk:onyx (medium 6.1)
- [CVE-2020-11583](https://insights.sbomify.com/CVE-2020-11583/): Cross-site scripting in plesk:obsidian (medium 6.1)
- [CVE-2020-11582](https://insights.sbomify.com/CVE-2020-11582/): Security feature bypass in pulsesecure:pulse connect secure (high 8.8)
- [CVE-2020-11581](https://insights.sbomify.com/CVE-2020-11581/): Command injection in pulsesecure:pulse connect secure (high 8.1)
- [CVE-2020-11580](https://insights.sbomify.com/CVE-2020-11580/): Security feature bypass in pulsesecure:pulse connect secure (critical 9.1)
- [CVE-2020-1158](https://insights.sbomify.com/CVE-2020-1158/): Windows Runtime Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-11579](https://insights.sbomify.com/CVE-2020-11579/): Information disclosure in chadhaajay:phpkb (high 7.5)
- [CVE-2020-11576](https://insights.sbomify.com/CVE-2020-11576/): Observable Discrepancy in Argo (medium 5.3)
- [CVE-2020-1157](https://insights.sbomify.com/CVE-2020-1157/): Windows Runtime Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-11565](https://insights.sbomify.com/CVE-2020-11565/): Memory corruption in canonical:ubuntu linux (medium 6.0)
- [CVE-2020-11561](https://insights.sbomify.com/CVE-2020-11561/): Privilege escalation in nchsoftware:express invoice (high 8.8)
- [CVE-2020-11560](https://insights.sbomify.com/CVE-2020-11560/): Information disclosure in nchsoftware:express invoice (high 7.8)
- [CVE-2020-1156](https://insights.sbomify.com/CVE-2020-1156/): Windows Runtime Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-11558](https://insights.sbomify.com/CVE-2020-11558/): Use after free in gpac:gpac (critical 9.8)
- [CVE-2020-11557](https://insights.sbomify.com/CVE-2020-11557/): Information disclosure in castlerock:snmpc online (high 7.5)
- [CVE-2020-11556](https://insights.sbomify.com/CVE-2020-11556/): Cross-site scripting in castlerock:snmpc online (medium 5.4)
- [CVE-2020-11555](https://insights.sbomify.com/CVE-2020-11555/): Information disclosure in castlerock:snmpc online (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/189/