# Vulnerabilities published in 2020


- [CVE-2020-10751](https://insights.sbomify.com/CVE-2020-10751/): Security feature bypass in kernel (medium 6.1)
- [CVE-2020-10750](https://insights.sbomify.com/CVE-2020-10750/): Information Exposure in jaeger (high 7.1)
- [CVE-2020-1075](https://insights.sbomify.com/CVE-2020-1075/): Windows Subsystem for Linux Information Disclosure Vulnerability (medium 5.5)
- [CVE-2020-10749](https://insights.sbomify.com/CVE-2020-10749/): containernetworking/plugins vulnerable to MitM attacks (medium 6.0)
- [CVE-2020-10748](https://insights.sbomify.com/CVE-2020-10748/): Cross-site Scripting in Keycloak (medium 6.1)
- [CVE-2020-10746](https://insights.sbomify.com/CVE-2020-10746/): Missing authorization in Infinispan (medium 6.1)
- [CVE-2020-10745](https://insights.sbomify.com/CVE-2020-10745/): Denial of service in Samba (high 7.5)
- [CVE-2020-10744](https://insights.sbomify.com/CVE-2020-10744/): Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible (medium 5.0)
- [CVE-2020-10743](https://insights.sbomify.com/CVE-2020-10743/): Other in Kibana (medium 4.3)
- [CVE-2020-10742](https://insights.sbomify.com/CVE-2020-10742/): Memory corruption in Kernel (medium 6.0)
- [CVE-2020-10740](https://insights.sbomify.com/CVE-2020-10740/): Wildfly Unsafe Deserialization Vulnerability (medium 6.6)
- [CVE-2020-1074](https://insights.sbomify.com/CVE-2020-1074/): Jet Database Engine Remote Code Execution Vulnerability (high 7.8)
- [CVE-2020-10739](https://insights.sbomify.com/CVE-2020-10739/): Null dereference in istio/envoy (high 7.5)
- [CVE-2020-10738](https://insights.sbomify.com/CVE-2020-10738/): Moodle vulnerable to RCE (high 7.5)
- [CVE-2020-10737](https://insights.sbomify.com/CVE-2020-10737/): Race condition in oddjob (medium 6.3)
- [CVE-2020-10736](https://insights.sbomify.com/CVE-2020-10736/): Missing authorization in ceph (high 8.0)
- [CVE-2020-10735](https://insights.sbomify.com/CVE-2020-10735/): Denial of service in python (medium 6.2)
- [CVE-2020-10734](https://insights.sbomify.com/CVE-2020-10734/): OIDC Logout redirect in keycloak (low 3.3)
- [CVE-2020-10733](https://insights.sbomify.com/CVE-2020-10733/): Privilege escalation in PostgreSQL (high 7.3)
- [CVE-2020-10732](https://insights.sbomify.com/CVE-2020-10732/): Information disclosure in kernel (low 3.3)
- [CVE-2020-10731](https://insights.sbomify.com/CVE-2020-10731/): Misconfiguration in nova libvirt container provided by the Red Hat OpenStack Platform (critical 9.9)
- [CVE-2020-10730](https://insights.sbomify.com/CVE-2020-10730/): Null dereference in Samba (medium 6.5)
- [CVE-2020-1073](https://insights.sbomify.com/CVE-2020-1073/): ChakraCore RCE Vulnerability (high 8.1)
- [CVE-2020-10729](https://insights.sbomify.com/CVE-2020-10729/): Insufficiently random values in Ansible (medium 5.5)
- [CVE-2020-10728](https://insights.sbomify.com/CVE-2020-10728/): Privilege escalation in automationbroker/apb (high 7.8)
- [CVE-2020-10727](https://insights.sbomify.com/CVE-2020-10727/): ActiveMQ Artemis has Insufficiently Protected Credentials (medium 5.5)
- [CVE-2020-10726](https://insights.sbomify.com/CVE-2020-10726/): Denial of service in dpdk (medium 6.0)
- [CVE-2020-10725](https://insights.sbomify.com/CVE-2020-10725/): Null dereference in dpdk (high 7.7)
- [CVE-2020-10724](https://insights.sbomify.com/CVE-2020-10724/): Memory corruption in dpdk (medium 5.1)
- [CVE-2020-10723](https://insights.sbomify.com/CVE-2020-10723/): Integer overflow in dpdk (medium 5.1)
- [CVE-2020-10722](https://insights.sbomify.com/CVE-2020-10722/): Integer overflow in dpdk (medium 5.1)
- [CVE-2020-10721](https://insights.sbomify.com/CVE-2020-10721/): fabric8-maven-plugin: insecure way to construct Yaml Object leading to remote code execution (high 7.8)
- [CVE-2020-10720](https://insights.sbomify.com/CVE-2020-10720/): Use after free in Kernel (medium 5.5)
- [CVE-2020-1072](https://insights.sbomify.com/CVE-2020-1072/): Windows Kernel Information Disclosure Vulnerability (medium 5.5)
- [CVE-2020-10719](https://insights.sbomify.com/CVE-2020-10719/): HTTP Request Smuggling in Undertow (medium 6.5)
- [CVE-2020-10718](https://insights.sbomify.com/CVE-2020-10718/): Security feature bypass in Wildfly (high 7.5)
- [CVE-2020-10717](https://insights.sbomify.com/CVE-2020-10717/): Denial of service in QEMU (low 3.3)
- [CVE-2020-10716](https://insights.sbomify.com/CVE-2020-10716/): Missing authorization in rubygem-foreman ansible (medium 6.5)
- [CVE-2020-10715](https://insights.sbomify.com/CVE-2020-10715/): Other in openshift/console (medium 4.3)
- [CVE-2020-10714](https://insights.sbomify.com/CVE-2020-10714/): Session Fixation in WildFly Elytron (high 7.5)
- [CVE-2020-10713](https://insights.sbomify.com/CVE-2020-10713/): Memory corruption in Grub (high 8.2)
- [CVE-2020-10712](https://insights.sbomify.com/CVE-2020-10712/): Information Disclosure in OpenShift Container Platform (high 7.0)
- [CVE-2020-10711](https://insights.sbomify.com/CVE-2020-10711/): Null dereference in Kernel (medium 5.9)
- [CVE-2020-10710](https://insights.sbomify.com/CVE-2020-10710/): Information disclosure in foreman-installer (medium 4.4)
- [CVE-2020-1071](https://insights.sbomify.com/CVE-2020-1071/): Windows Remote Access Common Dialog Elevation of Privilege Vulnerability (medium 6.8)
- [CVE-2020-10709](https://insights.sbomify.com/CVE-2020-10709/): Auth bypass in Tower (high 7.1)
- [CVE-2020-10706](https://insights.sbomify.com/CVE-2020-10706/): Information disclosure in openshift/openshift-apiserver (medium 6.3)
- [CVE-2020-10705](https://insights.sbomify.com/CVE-2020-10705/): Allocation of Resources Without Limits or Throttling in Undertow (high 7.5)
- [CVE-2020-10704](https://insights.sbomify.com/CVE-2020-10704/): Denial of service in samba (high 7.5)
- [CVE-2020-10703](https://insights.sbomify.com/CVE-2020-10703/): Null dereference in libvirt (medium 6.5)
- [CVE-2020-10702](https://insights.sbomify.com/CVE-2020-10702/): Weak cryptography in qemu (medium 5.5)
- [CVE-2020-10701](https://insights.sbomify.com/CVE-2020-10701/): Missing authorization in libvirt (medium 6.5)
- [CVE-2020-10700](https://insights.sbomify.com/CVE-2020-10700/): Use after free in samba (medium 5.3)
- [CVE-2020-1070](https://insights.sbomify.com/CVE-2020-1070/): Windows Print Spooler Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-10699](https://insights.sbomify.com/CVE-2020-10699/): Misconfiguration in targetcli (high 7.8)
- [CVE-2020-10698](https://insights.sbomify.com/CVE-2020-10698/): Information disclosure in Tower (low 3.3)
- [CVE-2020-10697](https://insights.sbomify.com/CVE-2020-10697/): Missing authorization in Tower (medium 4.4)
- [CVE-2020-10696](https://insights.sbomify.com/CVE-2020-10696/): Path Traversal in Buildah (high 8.8)
- [CVE-2020-10695](https://insights.sbomify.com/CVE-2020-10695/): Privilege escalation in containers/redhat-sso-7 (high 7.8)
- [CVE-2020-10693](https://insights.sbomify.com/CVE-2020-10693/): Improper Input Validation in Hibernate Validator (medium 5.3)
- [CVE-2020-10691](https://insights.sbomify.com/CVE-2020-10691/): Path Traversal in Ansible (medium 5.2)
- [CVE-2020-10690](https://insights.sbomify.com/CVE-2020-10690/): Use after free in kernel (medium 6.5)
- [CVE-2020-1069](https://insights.sbomify.com/CVE-2020-1069/): Microsoft SharePoint Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2020-10689](https://insights.sbomify.com/CVE-2020-10689/): Missing Authorization in Eclipse Che (medium 6.4)
- [CVE-2020-10688](https://insights.sbomify.com/CVE-2020-10688/): Cross-site scripting in RESTEasy (medium 6.1)
- [CVE-2020-10687](https://insights.sbomify.com/CVE-2020-10687/): HTTP Request Smuggling in Undertow (medium 4.8)
- [CVE-2020-10686](https://insights.sbomify.com/CVE-2020-10686/): Keycloak users may be able to remove MFA from other users' devices (medium 4.1)
- [CVE-2020-10685](https://insights.sbomify.com/CVE-2020-10685/): Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible (medium 5.0)
- [CVE-2020-10684](https://insights.sbomify.com/CVE-2020-10684/): Code Injection, Race Condition, and Execution with Unnecessary Privileges in Ansible (high 7.9)
- [CVE-2020-10683](https://insights.sbomify.com/CVE-2020-10683/): dom4j allows External Entities by default which might enable XXE attacks (critical 9.8)
- [CVE-2020-10682](https://insights.sbomify.com/CVE-2020-10682/): File upload in cmsmadesimple:cms made simple (high 7.8)
- [CVE-2020-10681](https://insights.sbomify.com/CVE-2020-10681/): Cross-site scripting in cmsmadesimple:cms made simple (medium 5.4)
- [CVE-2020-1068](https://insights.sbomify.com/CVE-2020-1068/): Microsoft Windows Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-10678](https://insights.sbomify.com/CVE-2020-10678/): Privilege escalation in octopus:octopus deploy (high 8.8)
- [CVE-2020-10676](https://insights.sbomify.com/CVE-2020-10676/): Rancher users retain access after moving namespaces into projects they don't have access to (high 8.8)
- [CVE-2020-10675](https://insights.sbomify.com/CVE-2020-10675/): Infinite Loop in jsonparser (high 7.5)
- [CVE-2020-10674](https://insights.sbomify.com/CVE-2020-10674/): Command injection in perlspeak project:perlspeak (critical 9.8)
- [CVE-2020-10673](https://insights.sbomify.com/CVE-2020-10673/): jackson-databind mishandles the interaction between serialization gadgets and typing (high 8.8)
- [CVE-2020-10672](https://insights.sbomify.com/CVE-2020-10672/): jackson-databind mishandles the interaction between serialization gadgets and typing (high 8.8)
- [CVE-2020-10671](https://insights.sbomify.com/CVE-2020-10671/): Cross-site request forgery in canon:oce colorwave 500 firmware (high 8.8)
- [CVE-2020-10670](https://insights.sbomify.com/CVE-2020-10670/): Cross-site scripting in canon:oce colorwave 500 firmware (medium 6.1)
- [CVE-2020-1067](https://insights.sbomify.com/CVE-2020-1067/): Windows Remote Code Execution Vulnerability (high 7.8)
- [CVE-2020-10669](https://insights.sbomify.com/CVE-2020-10669/): Auth bypass in canon:oce colorwave 500 firmware (high 7.5)
- [CVE-2020-10668](https://insights.sbomify.com/CVE-2020-10668/): Cross-site scripting in canon:oce colorwave 500 firmware (medium 6.1)
- [CVE-2020-10667](https://insights.sbomify.com/CVE-2020-10667/): Cross-site scripting in canon:oce colorwave 500 firmware (medium 6.1)
- [CVE-2020-10666](https://insights.sbomify.com/CVE-2020-10666/): Command injection in sangoma:restapps (critical 9.8)
- [CVE-2020-10665](https://insights.sbomify.com/CVE-2020-10665/): Privilege escalation in docker:desktop (medium 6.7)
- [CVE-2020-10664](https://insights.sbomify.com/CVE-2020-10664/): Null dereference in windriver:vxworks (high 7.5)
- [CVE-2020-10663](https://insights.sbomify.com/CVE-2020-10663/): Unsafe object creation in json RubyGem (high 7.5)
- [CVE-2020-10661](https://insights.sbomify.com/CVE-2020-10661/): HashiCorp Vault Improper Privilege Management (critical 9.1)
- [CVE-2020-10660](https://insights.sbomify.com/CVE-2020-10660/): HashiCorp Vault Improper Privilege Management (medium 5.3)
- [CVE-2020-1066](https://insights.sbomify.com/CVE-2020-1066/): .NET Framework Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-10659](https://insights.sbomify.com/CVE-2020-10659/): Security feature bypass in entrustdatacard:entelligence security provider (medium 4.3)
- [CVE-2020-10658](https://insights.sbomify.com/CVE-2020-10658/): Deserialization in proofpoint:insider threat management server (critical 9.8)
- [CVE-2020-10657](https://insights.sbomify.com/CVE-2020-10657/): Deserialization in proofpoint:insider threat management server (high 7.2)
- [CVE-2020-10656](https://insights.sbomify.com/CVE-2020-10656/): Deserialization in proofpoint:insider threat management server (critical 9.8)
- [CVE-2020-10655](https://insights.sbomify.com/CVE-2020-10655/): Deserialization in proofpoint:insider threat management server (critical 9.8)
- [CVE-2020-10654](https://insights.sbomify.com/CVE-2020-10654/): Memory corruption in pingidentity:pingid ssh integration (critical 9.8)
- [CVE-2020-10650](https://insights.sbomify.com/CVE-2020-10650/): jackson-databind vulnerable to unsafe deserialization (high 8.1)
- [CVE-2020-1065](https://insights.sbomify.com/CVE-2020-1065/): Scripting Engine Memory Corruption Vulnerability (medium 4.2)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/197/