# Vulnerabilities published in 2020


- [CVE-2020-10952](https://insights.sbomify.com/CVE-2020-10952/): Missing authorization in gitlab:gitlab (medium 6.5)
- [CVE-2020-10951](https://insights.sbomify.com/CVE-2020-10951/): Other in westerndigital:ibi (medium 4.7)
- [CVE-2020-10948](https://insights.sbomify.com/CVE-2020-10948/): Code injection in alienform2 project:alienform2 (critical 9.8)
- [CVE-2020-10947](https://insights.sbomify.com/CVE-2020-10947/): Privilege escalation in sophos:anti-virus for sophos central (high 8.8)
- [CVE-2020-10946](https://insights.sbomify.com/CVE-2020-10946/): Cross-site scripting in centreon:centreon host-monitoring widget (medium 6.1)
- [CVE-2020-10945](https://insights.sbomify.com/CVE-2020-10945/): Centreon Sensitive Data Exposure vulnerability (medium 4.3)
- [CVE-2020-10944](https://insights.sbomify.com/CVE-2020-10944/): Cross-site scripting in hashicorp:nomad (medium 5.4)
- [CVE-2020-10942](https://insights.sbomify.com/CVE-2020-10942/): Memory corruption in canonical:ubuntu linux (medium 5.3)
- [CVE-2020-10941](https://insights.sbomify.com/CVE-2020-10941/): Information disclosure in arm:mbed crypto (medium 5.9)
- [CVE-2020-10940](https://insights.sbomify.com/CVE-2020-10940/): Privilege escalation in phoenixcontact:portico server 16 client (high 7.8)
- [CVE-2020-1094](https://insights.sbomify.com/CVE-2020-1094/): Privilege escalation in Windows (high 7.8)
- [CVE-2020-10939](https://insights.sbomify.com/CVE-2020-10939/): Misconfiguration in phoenixcontact:pc worx srt (high 7.8)
- [CVE-2020-10938](https://insights.sbomify.com/CVE-2020-10938/): Integer overflow in debian:debian linux (critical 9.8)
- [CVE-2020-10937](https://insights.sbomify.com/CVE-2020-10937/): Access Restriction Bypass in go-ipfs (high 7.5)
- [CVE-2020-10936](https://insights.sbomify.com/CVE-2020-10936/): Privilege escalation in canonical:ubuntu linux (high 7.8)
- [CVE-2020-10935](https://insights.sbomify.com/CVE-2020-10935/): Cross-site scripting in zulip:zulip server (medium 5.4)
- [CVE-2020-10934](https://insights.sbomify.com/CVE-2020-10934/): File upload in acyba:acymailing (high 7.2)
- [CVE-2020-10933](https://insights.sbomify.com/CVE-2020-10933/): Information disclosure in debian:debian linux (medium 5.3)
- [CVE-2020-10932](https://insights.sbomify.com/CVE-2020-10932/): Weak cryptography in arm:mbed tls (medium 4.7)
- [CVE-2020-10931](https://insights.sbomify.com/CVE-2020-10931/): Memory corruption in memcached:memcached (high 7.5)
- [CVE-2020-10930](https://insights.sbomify.com/CVE-2020-10930/): Information disclosure in R6700 (medium 6.5)
- [CVE-2020-1093](https://insights.sbomify.com/CVE-2020-1093/): VBScript Remote Code Execution Vulnerability (high 7.5)
- [CVE-2020-10929](https://insights.sbomify.com/CVE-2020-10929/): Integer overflow in R6700 (high 8.8)
- [CVE-2020-10928](https://insights.sbomify.com/CVE-2020-10928/): Memory corruption in R6700 (high 8.4)
- [CVE-2020-10927](https://insights.sbomify.com/CVE-2020-10927/): Weak cryptography in R6700 (high 7.5)
- [CVE-2020-10926](https://insights.sbomify.com/CVE-2020-10926/): Security feature bypass in R6700 (high 7.5)
- [CVE-2020-10925](https://insights.sbomify.com/CVE-2020-10925/): Security feature bypass in R6700 (high 7.5)
- [CVE-2020-10924](https://insights.sbomify.com/CVE-2020-10924/): Memory corruption in R6700 (high 8.8)
- [CVE-2020-10923](https://insights.sbomify.com/CVE-2020-10923/): Auth bypass in R6700 (medium 6.5)
- [CVE-2020-10922](https://insights.sbomify.com/CVE-2020-10922/): Denial of service in HMI EA9 (high 7.5)
- [CVE-2020-10921](https://insights.sbomify.com/CVE-2020-10921/): Auth bypass in HMI EA9 (critical 9.8)
- [CVE-2020-10920](https://insights.sbomify.com/CVE-2020-10920/): Missing authorization in HMI EA9 (critical 9.8)
- [CVE-2020-1092](https://insights.sbomify.com/CVE-2020-1092/): Internet Explorer Memory Corruption Vulnerability (high 7.5)
- [CVE-2020-10919](https://insights.sbomify.com/CVE-2020-10919/): Weak cryptography in HMI EA9 (medium 5.9)
- [CVE-2020-10918](https://insights.sbomify.com/CVE-2020-10918/): Auth bypass in HMI EA9 (high 7.5)
- [CVE-2020-10917](https://insights.sbomify.com/CVE-2020-10917/): Deserialization in ESMPRO Manager (critical 9.8)
- [CVE-2020-10916](https://insights.sbomify.com/CVE-2020-10916/): Auth bypass in TL-WA855RE (high 8.0)
- [CVE-2020-10915](https://insights.sbomify.com/CVE-2020-10915/): Deserialization in One Agent (critical 9.8)
- [CVE-2020-10914](https://insights.sbomify.com/CVE-2020-10914/): Deserialization in One Agent (critical 9.8)
- [CVE-2020-10913](https://insights.sbomify.com/CVE-2020-10913/): Memory corruption in PhantomPDF (high 7.8)
- [CVE-2020-10912](https://insights.sbomify.com/CVE-2020-10912/): Memory corruption in PhantomPDF (high 7.8)
- [CVE-2020-10911](https://insights.sbomify.com/CVE-2020-10911/): Memory corruption in PhantomPDF (high 7.8)
- [CVE-2020-10910](https://insights.sbomify.com/CVE-2020-10910/): Memory corruption in PhantomPDF (high 7.8)
- [CVE-2020-1091](https://insights.sbomify.com/CVE-2020-1091/): Windows Graphics Component Information Disclosure Vulnerability (medium 6.5)
- [CVE-2020-10909](https://insights.sbomify.com/CVE-2020-10909/): Memory corruption in PhantomPDF (high 7.8)
- [CVE-2020-10908](https://insights.sbomify.com/CVE-2020-10908/): Memory corruption in PhantomPDF (high 7.8)
- [CVE-2020-10907](https://insights.sbomify.com/CVE-2020-10907/): Use after free in Reader (high 7.8)
- [CVE-2020-10906](https://insights.sbomify.com/CVE-2020-10906/): Use after free in Reader (high 7.8)
- [CVE-2020-10905](https://insights.sbomify.com/CVE-2020-10905/): Memory corruption in PhantomPDF (low 3.3)
- [CVE-2020-10904](https://insights.sbomify.com/CVE-2020-10904/): Memory corruption in PhantomPDF (high 7.8)
- [CVE-2020-10903](https://insights.sbomify.com/CVE-2020-10903/): Memory corruption in PhantomPDF (low 3.3)
- [CVE-2020-10902](https://insights.sbomify.com/CVE-2020-10902/): Memory corruption in PhantomPDF (high 7.8)
- [CVE-2020-10901](https://insights.sbomify.com/CVE-2020-10901/): Memory corruption in PhantomPDF (low 3.3)
- [CVE-2020-10900](https://insights.sbomify.com/CVE-2020-10900/): Use after free in Reader (high 7.8)
- [CVE-2020-1090](https://insights.sbomify.com/CVE-2020-1090/): Windows Runtime Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-10899](https://insights.sbomify.com/CVE-2020-10899/): Use after free in Reader (high 7.8)
- [CVE-2020-10898](https://insights.sbomify.com/CVE-2020-10898/): Memory corruption in PhantomPDF (high 7.8)
- [CVE-2020-10897](https://insights.sbomify.com/CVE-2020-10897/): Memory corruption in PhantomPDF (high 7.8)
- [CVE-2020-10896](https://insights.sbomify.com/CVE-2020-10896/): Memory corruption in PhantomPDF (high 7.8)
- [CVE-2020-10895](https://insights.sbomify.com/CVE-2020-10895/): Memory corruption in PhantomPDF (high 7.8)
- [CVE-2020-10894](https://insights.sbomify.com/CVE-2020-10894/): Memory corruption in PhantomPDF (low 3.3)
- [CVE-2020-10893](https://insights.sbomify.com/CVE-2020-10893/): Memory corruption in PhantomPDF (high 7.8)
- [CVE-2020-10892](https://insights.sbomify.com/CVE-2020-10892/): Code injection in PhantomPDF (high 7.8)
- [CVE-2020-10891](https://insights.sbomify.com/CVE-2020-10891/): Memory corruption in PhantomPDF (high 7.8)
- [CVE-2020-10890](https://insights.sbomify.com/CVE-2020-10890/): Code injection in PhantomPDF (high 7.8)
- [CVE-2020-10889](https://insights.sbomify.com/CVE-2020-10889/): Memory corruption in PhantomPDF (high 7.8)
- [CVE-2020-10888](https://insights.sbomify.com/CVE-2020-10888/): Auth bypass in Archer A7 (medium 5.9)
- [CVE-2020-10887](https://insights.sbomify.com/CVE-2020-10887/): Security feature bypass in Archer A7 (high 8.1)
- [CVE-2020-10886](https://insights.sbomify.com/CVE-2020-10886/): Command injection in Archer A7 (high 8.1)
- [CVE-2020-10885](https://insights.sbomify.com/CVE-2020-10885/): Other in Archer A7 (high 8.1)
- [CVE-2020-10884](https://insights.sbomify.com/CVE-2020-10884/): Hardcoded credentials in Archer A7 (high 8.1)
- [CVE-2020-10883](https://insights.sbomify.com/CVE-2020-10883/): Privilege escalation in Archer A7 (medium 5.3)
- [CVE-2020-10882](https://insights.sbomify.com/CVE-2020-10882/): Command injection in Archer A7 (high 8.8)
- [CVE-2020-10881](https://insights.sbomify.com/CVE-2020-10881/): Memory corruption in Archer A7 (critical 9.8)
- [CVE-2020-1088](https://insights.sbomify.com/CVE-2020-1088/): Windows Error Reporting Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-10879](https://insights.sbomify.com/CVE-2020-10879/): Command injection in rconfig:rconfig (critical 9.8)
- [CVE-2020-10878](https://insights.sbomify.com/CVE-2020-10878/): Integer overflow in fedoraproject:fedora (high 8.6)
- [CVE-2020-10876](https://insights.sbomify.com/CVE-2020-10876/): Auth bypass in oklok project:oklok (high 7.5)
- [CVE-2020-10875](https://insights.sbomify.com/CVE-2020-10875/): Path traversal in zebra:fx9500 firmware (high 7.5)
- [CVE-2020-10874](https://insights.sbomify.com/CVE-2020-10874/): Missing authorization in motorola:fx9500-41324d41-us firmware (high 7.5)
- [CVE-2020-10871](https://insights.sbomify.com/CVE-2020-10871/): Information disclosure in openwrt:luci (medium 5.3)
- [CVE-2020-10870](https://insights.sbomify.com/CVE-2020-10870/): Race condition in zim-wiki:zim (medium 5.5)
- [CVE-2020-1087](https://insights.sbomify.com/CVE-2020-1087/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-10868](https://insights.sbomify.com/CVE-2020-10868/): Privilege escalation in avast:antivirus (high 7.5)
- [CVE-2020-10867](https://insights.sbomify.com/CVE-2020-10867/): Security feature bypass in avast:antivirus (critical 9.8)
- [CVE-2020-10866](https://insights.sbomify.com/CVE-2020-10866/): Information disclosure in avast:antivirus (high 7.5)
- [CVE-2020-10865](https://insights.sbomify.com/CVE-2020-10865/): Missing authorization in avast:antivirus (high 7.5)
- [CVE-2020-10864](https://insights.sbomify.com/CVE-2020-10864/): Missing authorization in avast:antivirus (medium 6.5)
- [CVE-2020-10863](https://insights.sbomify.com/CVE-2020-10863/): Missing authorization in avast:antivirus (high 7.5)
- [CVE-2020-10862](https://insights.sbomify.com/CVE-2020-10862/): Privilege escalation in avast:antivirus (high 7.8)
- [CVE-2020-10861](https://insights.sbomify.com/CVE-2020-10861/): Missing authorization in avast:antivirus (high 7.5)
- [CVE-2020-10860](https://insights.sbomify.com/CVE-2020-10860/): Memory corruption in avast:antivirus (high 7.5)
- [CVE-2020-1086](https://insights.sbomify.com/CVE-2020-1086/): Windows Runtime Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-10859](https://insights.sbomify.com/CVE-2020-10859/): Path traversal in zohocorp:manageengine desktop central (medium 6.5)
- [CVE-2020-10858](https://insights.sbomify.com/CVE-2020-10858/): Missing authorization in zulip:zulip desktop (medium 5.3)
- [CVE-2020-10857](https://insights.sbomify.com/CVE-2020-10857/): Command injection in zulip:zulip desktop (critical 9.8)
- [CVE-2020-10855](https://insights.sbomify.com/CVE-2020-10855/): Security feature bypass in google:android (medium 4.6)
- [CVE-2020-10854](https://insights.sbomify.com/CVE-2020-10854/): Information disclosure in google:android (high 7.5)
- [CVE-2020-10853](https://insights.sbomify.com/CVE-2020-10853/): Information disclosure in google:android (medium 5.3)
- [CVE-2020-10852](https://insights.sbomify.com/CVE-2020-10852/): Memory corruption in google:android (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/195/