# Vulnerabilities published in 2020


- [CVE-2020-10649](https://insights.sbomify.com/CVE-2020-10649/): Code injection in asus:device activation (high 7.8)
- [CVE-2020-10648](https://insights.sbomify.com/CVE-2020-10648/): Security feature bypass in denx:u-boot (high 7.8)
- [CVE-2020-10646](https://insights.sbomify.com/CVE-2020-10646/): Memory corruption in Fuji Electric V-Server Lite all versions prior to 4.0.9.0 (high 7.8)
- [CVE-2020-10644](https://insights.sbomify.com/CVE-2020-10644/): Deserialization in Ignition 8 Gateway (high 7.5)
- [CVE-2020-10643](https://insights.sbomify.com/CVE-2020-10643/): OSIsoft PI System (medium 6.5)
- [CVE-2020-10642](https://insights.sbomify.com/CVE-2020-10642/): Privilege escalation in Rockwell Automation RSLinx Classic versions 4.1.00 and prior (high 7.8)
- [CVE-2020-10641](https://insights.sbomify.com/CVE-2020-10641/): Missing authorization in Ignition 8 Gateway (high 7.5)
- [CVE-2020-10640](https://insights.sbomify.com/CVE-2020-10640/): ICSA-20-140-02 Emerson OpenEnterprise (critical 10.0)
- [CVE-2020-1064](https://insights.sbomify.com/CVE-2020-1064/): MSHTML Engine Remote Code Execution Vulnerability (high 7.5)
- [CVE-2020-10639](https://insights.sbomify.com/CVE-2020-10639/): Memory corruption in Eaton HMiSoft VU3 (HMIVU3 runtime not impacted) (high 7.8)
- [CVE-2020-10638](https://insights.sbomify.com/CVE-2020-10638/): Memory corruption in Advantech WebAccess Node (critical 9.8)
- [CVE-2020-10637](https://insights.sbomify.com/CVE-2020-10637/): Memory corruption in Eaton HMiSoft VU3 (HMIVU3 runtime not impacted) (medium 5.5)
- [CVE-2020-10636](https://insights.sbomify.com/CVE-2020-10636/): ICSA-20-140-02 Emerson OpenEnterprise (medium 6.5)
- [CVE-2020-10635](https://insights.sbomify.com/CVE-2020-10635/): ICSA-20-098-05 KUKA.Sim Pro Improper Enforcement of Message Integrity During Transmission in a Communication Channel (medium 4.3)
- [CVE-2020-10634](https://insights.sbomify.com/CVE-2020-10634/): Path traversal in SAE IT-systems FW-50 Remote Telemetry Unit (RTU) (critical 9.1)
- [CVE-2020-10633](https://insights.sbomify.com/CVE-2020-10633/): Cross-site scripting in eWON Flexy and Cosy (medium 6.1)
- [CVE-2020-10632](https://insights.sbomify.com/CVE-2020-10632/): ICSA-20-140-02 Emerson OpenEnterprise (high 8.8)
- [CVE-2020-10631](https://insights.sbomify.com/CVE-2020-10631/): Path traversal in WebAccess/NMS (critical 9.8)
- [CVE-2020-10630](https://insights.sbomify.com/CVE-2020-10630/): Cross-site scripting in SAE IT-systems FW-50 Remote Telemetry Unit (RTU) (medium 6.1)
- [CVE-2020-1063](https://insights.sbomify.com/CVE-2020-1063/): Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability (medium 5.4)
- [CVE-2020-10629](https://insights.sbomify.com/CVE-2020-10629/): XML external entity in WebAccess/NMS (high 7.5)
- [CVE-2020-10628](https://insights.sbomify.com/CVE-2020-10628/): Information disclosure in ControlEdge PLC (high 7.5)
- [CVE-2020-10627](https://insights.sbomify.com/CVE-2020-10627/): Auth bypass in Omnipod Insulin Management System (high 7.3)
- [CVE-2020-10626](https://insights.sbomify.com/CVE-2020-10626/): Other in Fazecast jSerialComm, Version 2.2.2 and prior (high 7.8)
- [CVE-2020-10625](https://insights.sbomify.com/CVE-2020-10625/): Auth bypass in WebAccess/NMS (critical 9.8)
- [CVE-2020-10624](https://insights.sbomify.com/CVE-2020-10624/): Information disclosure in ControlEdge PLC (high 7.5)
- [CVE-2020-10623](https://insights.sbomify.com/CVE-2020-10623/): SQL injection in WebAccess/NMS (medium 6.5)
- [CVE-2020-10622](https://insights.sbomify.com/CVE-2020-10622/): Other in LCDS LAquis SCADA Versions 4.3.1 and prior (high 7.8)
- [CVE-2020-10621](https://insights.sbomify.com/CVE-2020-10621/): File upload in WebAccess/NMS (critical 9.8)
- [CVE-2020-10620](https://insights.sbomify.com/CVE-2020-10620/): Missing authorization in Opto 22 SoftPAC Project (critical 9.8)
- [CVE-2020-1062](https://insights.sbomify.com/CVE-2020-1062/): Internet Explorer Memory Corruption Vulnerability (high 7.5)
- [CVE-2020-10619](https://insights.sbomify.com/CVE-2020-10619/): Path traversal in WebAccess/NMS (critical 9.1)
- [CVE-2020-10618](https://insights.sbomify.com/CVE-2020-10618/): Information disclosure in LCDS LAquis SCADA Versions 4.3.1 and prior (medium 5.5)
- [CVE-2020-10617](https://insights.sbomify.com/CVE-2020-10617/): SQL injection in WebAccess/NMS (high 7.5)
- [CVE-2020-10616](https://insights.sbomify.com/CVE-2020-10616/): Other in Opto 22 SoftPAC Project (high 8.8)
- [CVE-2020-10615](https://insights.sbomify.com/CVE-2020-10615/): Memory corruption in Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 (high 7.5)
- [CVE-2020-10614](https://insights.sbomify.com/CVE-2020-10614/): Cross-site scripting in OSIsoft PI System multiple products and versions (medium 4.8)
- [CVE-2020-10613](https://insights.sbomify.com/CVE-2020-10613/): Memory corruption in Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 (high 7.5)
- [CVE-2020-10612](https://insights.sbomify.com/CVE-2020-10612/): Missing authorization in Opto 22 SoftPAC Project (critical 9.1)
- [CVE-2020-10611](https://insights.sbomify.com/CVE-2020-10611/): Memory corruption in Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 (critical 9.8)
- [CVE-2020-10610](https://insights.sbomify.com/CVE-2020-10610/): Privilege escalation in OSIsoft PI System multiple products and versions (high 7.8)
- [CVE-2020-1061](https://insights.sbomify.com/CVE-2020-1061/): Microsoft Script Runtime Remote Code Execution Vulnerability (high 7.5)
- [CVE-2020-10609](https://insights.sbomify.com/CVE-2020-10609/): Information disclosure in CIM 500 (high 7.5)
- [CVE-2020-10608](https://insights.sbomify.com/CVE-2020-10608/): Security feature bypass in OSIsoft PI System multiple products and versions (high 7.8)
- [CVE-2020-10607](https://insights.sbomify.com/CVE-2020-10607/): Memory corruption in Advantech WebAccess (high 8.8)
- [CVE-2020-10606](https://insights.sbomify.com/CVE-2020-10606/): Misconfiguration in OSIsoft PI System multiple products and versions (high 7.8)
- [CVE-2020-10605](https://insights.sbomify.com/CVE-2020-10605/): Missing authorization in CIM 500 (high 7.5)
- [CVE-2020-10604](https://insights.sbomify.com/CVE-2020-10604/): Denial of service in OSIsoft PI System multiple products and versions (high 7.5)
- [CVE-2020-10603](https://insights.sbomify.com/CVE-2020-10603/): Command injection in WebAccess/NMS (high 8.8)
- [CVE-2020-10602](https://insights.sbomify.com/CVE-2020-10602/): Race condition in OSIsoft PI System multiple products and versions (medium 5.3)
- [CVE-2020-10601](https://insights.sbomify.com/CVE-2020-10601/): Weak cryptography in VBASE Editor (high 7.8)
- [CVE-2020-10600](https://insights.sbomify.com/CVE-2020-10600/): OSIsoft PI System (medium 5.9)
- [CVE-2020-1060](https://insights.sbomify.com/CVE-2020-1060/): VBScript Remote Code Execution Vulnerability (high 7.5)
- [CVE-2020-10599](https://insights.sbomify.com/CVE-2020-10599/): Memory corruption in VBASE Editor (critical 9.8)
- [CVE-2020-10598](https://insights.sbomify.com/CVE-2020-10598/): Security feature bypass in Pyxis Anesthesia (PAS) ES System (medium 6.1)
- [CVE-2020-10597](https://insights.sbomify.com/CVE-2020-10597/): Memory corruption in Delta Industrial Automation DOPSoft (high 7.1)
- [CVE-2020-10596](https://insights.sbomify.com/CVE-2020-10596/): Cross-site Scripting in OpenCart (medium 5.4)
- [CVE-2020-10595](https://insights.sbomify.com/CVE-2020-10595/): Memory corruption in debian:debian linux (critical 9.8)
- [CVE-2020-10594](https://insights.sbomify.com/CVE-2020-10594/): Django Rest Framework jwt allows obtaining new token from notionally invalidated token (critical 9.1)
- [CVE-2020-10593](https://insights.sbomify.com/CVE-2020-10593/): Denial of service in opensuse:backports sle (high 7.5)
- [CVE-2020-10592](https://insights.sbomify.com/CVE-2020-10592/): Denial of service in opensuse:backports (high 7.5)
- [CVE-2020-10591](https://insights.sbomify.com/CVE-2020-10591/): Exposure of Sensitive Information to an Unauthorized Actor in Concord (high 7.5)
- [CVE-2020-10590](https://insights.sbomify.com/CVE-2020-10590/): Information disclosure in replicated:replicated classic (high 7.5)
- [CVE-2020-1059](https://insights.sbomify.com/CVE-2020-1059/): Microsoft Edge Spoofing Vulnerability (medium 4.3)
- [CVE-2020-10589](https://insights.sbomify.com/CVE-2020-10589/): Privilege escalation in v2rayl project:v2rayl (high 7.8)
- [CVE-2020-10588](https://insights.sbomify.com/CVE-2020-10588/): Privilege escalation in v2rayl project:v2rayl (high 7.8)
- [CVE-2020-10587](https://insights.sbomify.com/CVE-2020-10587/): Privilege escalation in antixlinux:antix linux (high 7.8)
- [CVE-2020-10584](https://insights.sbomify.com/CVE-2020-10584/): Path traversal in invigo:automatic device management (high 7.5)
- [CVE-2020-10583](https://insights.sbomify.com/CVE-2020-10583/): Command injection in invigo:automatic device management (high 8.8)
- [CVE-2020-10582](https://insights.sbomify.com/CVE-2020-10582/): SQL injection in invigo:automatic device management (critical 9.8)
- [CVE-2020-10581](https://insights.sbomify.com/CVE-2020-10581/): Auth bypass in invigo:automatic device management (high 7.5)
- [CVE-2020-10580](https://insights.sbomify.com/CVE-2020-10580/): Command injection in invigo:automatic device management (high 8.8)
- [CVE-2020-1058](https://insights.sbomify.com/CVE-2020-1058/): VBScript Remote Code Execution Vulnerability (high 7.5)
- [CVE-2020-10579](https://insights.sbomify.com/CVE-2020-10579/): Path traversal in invigo:automatic device management (high 7.5)
- [CVE-2020-10578](https://insights.sbomify.com/CVE-2020-10578/): Path traversal in q-cms:qcms (high 7.5)
- [CVE-2020-10577](https://insights.sbomify.com/CVE-2020-10577/): Race condition in meetecho:janus (medium 4.8)
- [CVE-2020-10576](https://insights.sbomify.com/CVE-2020-10576/): Race condition in meetecho:janus (medium 5.9)
- [CVE-2020-10575](https://insights.sbomify.com/CVE-2020-10575/): Race condition in meetecho:janus (medium 4.2)
- [CVE-2020-10574](https://insights.sbomify.com/CVE-2020-10574/): Other in meetecho:janus (critical 9.8)
- [CVE-2020-10573](https://insights.sbomify.com/CVE-2020-10573/): Race condition in meetecho:janus (high 7.5)
- [CVE-2020-10571](https://insights.sbomify.com/CVE-2020-10571/): Potential buffer overflow in psd-tools (critical 9.8)
- [CVE-2020-10570](https://insights.sbomify.com/CVE-2020-10570/): Security feature bypass in telegram:telegram (medium 6.1)
- [CVE-2020-1057](https://insights.sbomify.com/CVE-2020-1057/): Scripting Engine Memory Corruption Vulnerability (medium 4.2)
- [CVE-2020-10569](https://insights.sbomify.com/CVE-2020-10569/): File upload in sysaid:on-premise (critical 9.8)
- [CVE-2020-10568](https://insights.sbomify.com/CVE-2020-10568/): Cross-site request forgery in onthegosystems:sitepress-multilingual-cms (high 8.8)
- [CVE-2020-10567](https://insights.sbomify.com/CVE-2020-10567/): File upload in tecrail:responsive filemanager (critical 9.8)
- [CVE-2020-10566](https://insights.sbomify.com/CVE-2020-10566/): Memory corruption in freebsd:freebsd (high 7.8)
- [CVE-2020-10565](https://insights.sbomify.com/CVE-2020-10565/): Memory corruption in freebsd:freebsd (high 7.8)
- [CVE-2020-10564](https://insights.sbomify.com/CVE-2020-10564/): Path traversal in iptanus:wordpress file upload (critical 9.8)
- [CVE-2020-10563](https://insights.sbomify.com/CVE-2020-10563/): SQL injection in devome:grr (critical 9.8)
- [CVE-2020-10562](https://insights.sbomify.com/CVE-2020-10562/): File upload in devome:grr (high 7.2)
- [CVE-2020-10561](https://insights.sbomify.com/CVE-2020-10561/): Command injection in mi:mijia inkjet printer firmware (critical 9.8)
- [CVE-2020-10560](https://insights.sbomify.com/CVE-2020-10560/): Weak cryptography in opensource-socialnetwork:open source social network (medium 5.9)
- [CVE-2020-1056](https://insights.sbomify.com/CVE-2020-1056/): Microsoft Edge Elevation of Privilege Vulnerability (medium 5.4)
- [CVE-2020-10558](https://insights.sbomify.com/CVE-2020-10558/): Denial of service in tesla:model 3 web interface (medium 6.5)
- [CVE-2020-10557](https://insights.sbomify.com/CVE-2020-10557/): File upload in atutor:acontent (high 8.8)
- [CVE-2020-10554](https://insights.sbomify.com/CVE-2020-10554/): Weak cryptography in psyprax:psyprax (high 7.5)
- [CVE-2020-10553](https://insights.sbomify.com/CVE-2020-10553/): Misconfiguration in psyprax:psyprax (medium 5.5)
- [CVE-2020-10552](https://insights.sbomify.com/CVE-2020-10552/): Hardcoded credentials in psyprax:psyprax (high 8.1)
- [CVE-2020-10551](https://insights.sbomify.com/CVE-2020-10551/): Misconfiguration in tencent:qqbrowser (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/198/