# Vulnerabilities published in 2020


- [CVE-2020-10851](https://insights.sbomify.com/CVE-2020-10851/): Memory corruption in google:android (high 7.8)
- [CVE-2020-10850](https://insights.sbomify.com/CVE-2020-10850/): Memory corruption in google:android (critical 9.8)
- [CVE-2020-1085](https://insights.sbomify.com/CVE-2020-1085/): Privilege escalation in Windows (high 7.8)
- [CVE-2020-10849](https://insights.sbomify.com/CVE-2020-10849/): Auth bypass in google:android (critical 9.8)
- [CVE-2020-10848](https://insights.sbomify.com/CVE-2020-10848/): Memory corruption in google:android (critical 9.8)
- [CVE-2020-10847](https://insights.sbomify.com/CVE-2020-10847/): Auth bypass in google:android (medium 6.8)
- [CVE-2020-10846](https://insights.sbomify.com/CVE-2020-10846/): Security feature bypass in google:android (medium 5.5)
- [CVE-2020-10845](https://insights.sbomify.com/CVE-2020-10845/): Use after free in google:android (medium 6.4)
- [CVE-2020-10844](https://insights.sbomify.com/CVE-2020-10844/): Memory corruption in google:android (medium 6.5)
- [CVE-2020-10843](https://insights.sbomify.com/CVE-2020-10843/): Race condition in google:android (high 7.0)
- [CVE-2020-10842](https://insights.sbomify.com/CVE-2020-10842/): Memory corruption in google:android (high 7.8)
- [CVE-2020-10841](https://insights.sbomify.com/CVE-2020-10841/): Memory corruption in google:android (high 7.8)
- [CVE-2020-10840](https://insights.sbomify.com/CVE-2020-10840/): Information disclosure in google:android (high 7.1)
- [CVE-2020-1084](https://insights.sbomify.com/CVE-2020-1084/): Connected User Experiences and Telemetry Service Denial of Service Vulnerability (medium 5.5)
- [CVE-2020-10839](https://insights.sbomify.com/CVE-2020-10839/): Security feature bypass in google:android (medium 6.8)
- [CVE-2020-10838](https://insights.sbomify.com/CVE-2020-10838/): Use after free in google:android (high 7.8)
- [CVE-2020-10837](https://insights.sbomify.com/CVE-2020-10837/): Memory corruption in google:android (critical 9.8)
- [CVE-2020-10836](https://insights.sbomify.com/CVE-2020-10836/): Memory corruption in google:android (critical 9.8)
- [CVE-2020-10835](https://insights.sbomify.com/CVE-2020-10835/): Memory corruption in samsung:exynos (critical 9.8)
- [CVE-2020-10834](https://insights.sbomify.com/CVE-2020-10834/): Security feature bypass in google:android (medium 5.3)
- [CVE-2020-10833](https://insights.sbomify.com/CVE-2020-10833/): Auth bypass in google:android (high 7.5)
- [CVE-2020-10832](https://insights.sbomify.com/CVE-2020-10832/): Memory corruption in google:android (high 7.8)
- [CVE-2020-10831](https://insights.sbomify.com/CVE-2020-10831/): Security feature bypass in google:android (high 7.5)
- [CVE-2020-10830](https://insights.sbomify.com/CVE-2020-10830/): Security feature bypass in google:android (low 2.4)
- [CVE-2020-1083](https://insights.sbomify.com/CVE-2020-1083/): Microsoft Graphics Component Information Disclosure Vulnerability (medium 5.5)
- [CVE-2020-10829](https://insights.sbomify.com/CVE-2020-10829/): Memory corruption in google:android (high 7.8)
- [CVE-2020-10828](https://insights.sbomify.com/CVE-2020-10828/): Memory corruption in draytek:vigor2960 firmware (critical 9.8)
- [CVE-2020-10827](https://insights.sbomify.com/CVE-2020-10827/): Memory corruption in draytek:vigor2960 firmware (critical 9.8)
- [CVE-2020-10826](https://insights.sbomify.com/CVE-2020-10826/): Command injection in draytek:vigor2960 firmware (critical 9.8)
- [CVE-2020-10825](https://insights.sbomify.com/CVE-2020-10825/): Memory corruption in draytek:vigor2960 firmware (critical 9.8)
- [CVE-2020-10824](https://insights.sbomify.com/CVE-2020-10824/): Memory corruption in draytek:vigor2960 firmware (critical 9.8)
- [CVE-2020-10823](https://insights.sbomify.com/CVE-2020-10823/): Memory corruption in draytek:vigor2960 firmware (critical 9.8)
- [CVE-2020-10821](https://insights.sbomify.com/CVE-2020-10821/): Cross-site scripting in nagios:nagios xi (medium 4.8)
- [CVE-2020-10820](https://insights.sbomify.com/CVE-2020-10820/): Cross-site scripting in nagios:nagios xi (medium 4.8)
- [CVE-2020-1082](https://insights.sbomify.com/CVE-2020-1082/): Windows Error Reporting Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-10819](https://insights.sbomify.com/CVE-2020-10819/): Cross-site scripting in nagios:nagios xi (medium 4.8)
- [CVE-2020-10818](https://insights.sbomify.com/CVE-2020-10818/): Command injection in articatech:artica proxy (high 7.2)
- [CVE-2020-10817](https://insights.sbomify.com/CVE-2020-10817/): SQL injection in custom searchable data entry system project:custom searchable data entry system (high 8.8)
- [CVE-2020-10816](https://insights.sbomify.com/CVE-2020-10816/): Auth bypass in zohocorp:manageengine applications manager (high 7.5)
- [CVE-2020-10814](https://insights.sbomify.com/CVE-2020-10814/): Memory corruption in codeblocks:code\ (medium 5.5)
- [CVE-2020-10813](https://insights.sbomify.com/CVE-2020-10813/): Memory corruption in ftpdmin project:ftpdmin (high 7.5)
- [CVE-2020-10812](https://insights.sbomify.com/CVE-2020-10812/): Null dereference in hdfgroup:hdf5 (medium 5.5)
- [CVE-2020-10811](https://insights.sbomify.com/CVE-2020-10811/): Memory corruption in hdfgroup:hdf5 (medium 5.5)
- [CVE-2020-10810](https://insights.sbomify.com/CVE-2020-10810/): Null dereference in hdfgroup:hdf5 (medium 5.5)
- [CVE-2020-1081](https://insights.sbomify.com/CVE-2020-1081/): Windows Printer Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-10809](https://insights.sbomify.com/CVE-2020-10809/): Memory corruption in hdfgroup:hdf5 (medium 5.5)
- [CVE-2020-10808](https://insights.sbomify.com/CVE-2020-10808/): Command injection in vestacp:vesta control panel (high 8.8)
- [CVE-2020-10807](https://insights.sbomify.com/CVE-2020-10807/): Auth bypass in mitre:caldera (medium 5.3)
- [CVE-2020-10806](https://insights.sbomify.com/CVE-2020-10806/): eZ Publish Kernel and Legacy Unrestricted Upload of File with Dangerous Type (critical 9.8)
- [CVE-2020-10804](https://insights.sbomify.com/CVE-2020-10804/): phpMyAdmin SQL Injection (high 8.0)
- [CVE-2020-10803](https://insights.sbomify.com/CVE-2020-10803/): phpMyAdmin SQL injection vulnerability (medium 5.4)
- [CVE-2020-10802](https://insights.sbomify.com/CVE-2020-10802/): phpMyAdmin SQL injection vulnerability (high 8.0)
- [CVE-2020-10800](https://insights.sbomify.com/CVE-2020-10800/): Machine-In-The-Middle in lix (high 8.1)
- [CVE-2020-1080](https://insights.sbomify.com/CVE-2020-1080/): Windows Hyper-V Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2020-10799](https://insights.sbomify.com/CVE-2020-10799/): SVGlib Vulnerable to XXE Attacks (critical 9.8)
- [CVE-2020-10797](https://insights.sbomify.com/CVE-2020-10797/): Cross-site scripting in netgate:pfsense (medium 6.1)
- [CVE-2020-10795](https://insights.sbomify.com/CVE-2020-10795/): Command injection in gira:tks-ip-gateway firmware (high 7.2)
- [CVE-2020-10794](https://insights.sbomify.com/CVE-2020-10794/): Path traversal in gira:tks-ip-gateway firmware (critical 9.8)
- [CVE-2020-10793](https://insights.sbomify.com/CVE-2020-10793/): CodeIgniter Improper Privilege Management (high 8.8)
- [CVE-2020-10792](https://insights.sbomify.com/CVE-2020-10792/): Security feature bypass in it-novum:openitcockpit (high 7.5)
- [CVE-2020-10791](https://insights.sbomify.com/CVE-2020-10791/): Server-side request forgery in it-novum:openitcockpit (medium 6.5)
- [CVE-2020-10790](https://insights.sbomify.com/CVE-2020-10790/): Cross-site scripting in it-novum:openitcockpit (medium 5.4)
- [CVE-2020-1079](https://insights.sbomify.com/CVE-2020-1079/): Microsoft Windows Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-10789](https://insights.sbomify.com/CVE-2020-10789/): Command injection in it-novum:openitcockpit (critical 9.8)
- [CVE-2020-10788](https://insights.sbomify.com/CVE-2020-10788/): Hardcoded credentials in it-novum:openitcockpit (critical 9.1)
- [CVE-2020-10787](https://insights.sbomify.com/CVE-2020-10787/): Privilege escalation in vestacp:vesta control panel (high 8.8)
- [CVE-2020-10786](https://insights.sbomify.com/CVE-2020-10786/): Command injection in vestacp:vesta control panel (high 8.8)
- [CVE-2020-10783](https://insights.sbomify.com/CVE-2020-10783/): Privilege escalation in CloudForms (high 8.3)
- [CVE-2020-10782](https://insights.sbomify.com/CVE-2020-10782/): Misconfiguration in Ansible Tower (medium 6.5)
- [CVE-2020-10781](https://insights.sbomify.com/CVE-2020-10781/): Denial of service in kernel (medium 5.5)
- [CVE-2020-10780](https://insights.sbomify.com/CVE-2020-10780/): Code injection in CloudForms (medium 6.3)
- [CVE-2020-1078](https://insights.sbomify.com/CVE-2020-1078/): Windows Installer Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-10779](https://insights.sbomify.com/CVE-2020-10779/): Missing authorization in CloudForms (medium 6.5)
- [CVE-2020-10778](https://insights.sbomify.com/CVE-2020-10778/): Business logic in CloudForms (medium 6.0)
- [CVE-2020-10777](https://insights.sbomify.com/CVE-2020-10777/): Cross-site scripting in CloudForms (medium 5.4)
- [CVE-2020-10776](https://insights.sbomify.com/CVE-2020-10776/): Cross-site Scripting in keycloak (medium 4.8)
- [CVE-2020-10775](https://insights.sbomify.com/CVE-2020-10775/): Open redirect in ovirt-engine (medium 5.3)
- [CVE-2020-10774](https://insights.sbomify.com/CVE-2020-10774/): Information disclosure in kernel (medium 5.5)
- [CVE-2020-10773](https://insights.sbomify.com/CVE-2020-10773/): Information disclosure in kernel (medium 4.4)
- [CVE-2020-10772](https://insights.sbomify.com/CVE-2020-10772/): Denial of service in unbound (high 7.5)
- [CVE-2020-10771](https://insights.sbomify.com/CVE-2020-10771/): Cross-site request forgery in Infinispan (high 7.1)
- [CVE-2020-10770](https://insights.sbomify.com/CVE-2020-10770/): Keycloak vulnerable to Server-Side Request Forgery (medium 5.3)
- [CVE-2020-1077](https://insights.sbomify.com/CVE-2020-1077/): Windows Runtime Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-10769](https://insights.sbomify.com/CVE-2020-10769/): Memory corruption in Kernel (medium 5.5)
- [CVE-2020-10768](https://insights.sbomify.com/CVE-2020-10768/): Information disclosure in kernel (medium 5.5)
- [CVE-2020-10767](https://insights.sbomify.com/CVE-2020-10767/): Information disclosure in kernel (medium 5.5)
- [CVE-2020-10766](https://insights.sbomify.com/CVE-2020-10766/): Security feature bypass in kernel (medium 5.5)
- [CVE-2020-10763](https://insights.sbomify.com/CVE-2020-10763/): Heketi logs sensitive information (medium 5.5)
- [CVE-2020-10762](https://insights.sbomify.com/CVE-2020-10762/): Information disclosure in gluster-block (medium 5.5)
- [CVE-2020-10761](https://insights.sbomify.com/CVE-2020-10761/): Denial of service in QEMU: (medium 5.0)
- [CVE-2020-10760](https://insights.sbomify.com/CVE-2020-10760/): Use after free in Samba (medium 6.5)
- [CVE-2020-1076](https://insights.sbomify.com/CVE-2020-1076/): Windows Denial of Service Vulnerability (medium 5.5)
- [CVE-2020-10759](https://insights.sbomify.com/CVE-2020-10759/): Security feature bypass in fwupd (medium 6.0)
- [CVE-2020-10758](https://insights.sbomify.com/CVE-2020-10758/): Allocation of Resources Without Limits or Throttling in Keycloak (high 7.5)
- [CVE-2020-10757](https://insights.sbomify.com/CVE-2020-10757/): Memory corruption in Kernel (high 7.8)
- [CVE-2020-10756](https://insights.sbomify.com/CVE-2020-10756/): Memory corruption in Slirp (medium 6.5)
- [CVE-2020-10755](https://insights.sbomify.com/CVE-2020-10755/): Openstack cinder Improper handling of ScaleIO backend credentials (medium 6.5)
- [CVE-2020-10754](https://insights.sbomify.com/CVE-2020-10754/): Auth bypass in NetworkManager (medium 4.3)
- [CVE-2020-10753](https://insights.sbomify.com/CVE-2020-10753/): Other in Red Hat Ceph Storage (medium 5.4)
- [CVE-2020-10752](https://insights.sbomify.com/CVE-2020-10752/): Information disclosure in openshift/openshift-apiserver (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/196/