# Vulnerabilities published in 2020


- [CVE-2020-1055](https://insights.sbomify.com/CVE-2020-1055/): Microsoft Active Directory Federation Services Cross-Site Scripting Vulnerability (medium 5.5)
- [CVE-2020-10549](https://insights.sbomify.com/CVE-2020-10549/): SQL injection in rconfig:rconfig (critical 9.8)
- [CVE-2020-10548](https://insights.sbomify.com/CVE-2020-10548/): SQL injection in rconfig:rconfig (critical 9.8)
- [CVE-2020-10547](https://insights.sbomify.com/CVE-2020-10547/): SQL injection in rconfig:rconfig (critical 9.8)
- [CVE-2020-10546](https://insights.sbomify.com/CVE-2020-10546/): SQL injection in rconfig:rconfig (critical 9.8)
- [CVE-2020-10544](https://insights.sbomify.com/CVE-2020-10544/): Cross-site Scripting in PrimeFaces (medium 6.1)
- [CVE-2020-10543](https://insights.sbomify.com/CVE-2020-10543/): Integer overflow in fedoraproject:fedora (high 8.2)
- [CVE-2020-10541](https://insights.sbomify.com/CVE-2020-10541/): Code injection in zohocorp:manageengine opmanager (critical 9.8)
- [CVE-2020-10540](https://insights.sbomify.com/CVE-2020-10540/): Cross-site request forgery in untis:webuntis (high 8.8)
- [CVE-2020-1054](https://insights.sbomify.com/CVE-2020-1054/): Microsoft Win32k Privilege Escalation (high 7.0, exploited in the wild)
- [CVE-2020-10539](https://insights.sbomify.com/CVE-2020-10539/): Hardcoded credentials in epikur:epikur (critical 9.8)
- [CVE-2020-10538](https://insights.sbomify.com/CVE-2020-10538/): Weak cryptography in epikur:epikur (medium 5.5)
- [CVE-2020-10537](https://insights.sbomify.com/CVE-2020-10537/): Hardcoded credentials in epikur:epikur (high 7.8)
- [CVE-2020-10535](https://insights.sbomify.com/CVE-2020-10535/): Security feature bypass in gitlab:gitlab (medium 5.3)
- [CVE-2020-10534](https://insights.sbomify.com/CVE-2020-10534/): Privilege escalation in mediawiki:mediawiki (critical 9.8)
- [CVE-2020-10532](https://insights.sbomify.com/CVE-2020-10532/): Information disclosure in watchguard:ad helper firmware (high 7.5)
- [CVE-2020-10531](https://insights.sbomify.com/CVE-2020-10531/): Integer overflow in canonical:ubuntu linux (high 8.8)
- [CVE-2020-1053](https://insights.sbomify.com/CVE-2020-1053/): DirectX Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-1052](https://insights.sbomify.com/CVE-2020-1052/): Windows Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-10519](https://insights.sbomify.com/CVE-2020-10519/): Unsafe configuration options in GitHub Pages leading to remote code execution on GitHub Enterprise Server (high 8.8)
- [CVE-2020-10518](https://insights.sbomify.com/CVE-2020-10518/): Unsafe configuration options in GitHub Pages leading to remote code execution on GitHub Enterprise Server (high 8.8)
- [CVE-2020-10517](https://insights.sbomify.com/CVE-2020-10517/): Improper access control in GitHub Enterprise Server leading to the enumeration of private repository names (medium 4.3)
- [CVE-2020-10516](https://insights.sbomify.com/CVE-2020-10516/): Improper access control in GitHub Enterprise Server leading to privilege escalation of organization member (critical 9.8)
- [CVE-2020-10515](https://insights.sbomify.com/CVE-2020-10515/): Privilege escalation in starface:unified communication \& collaboration client (critical 9.8)
- [CVE-2020-10514](https://insights.sbomify.com/CVE-2020-10514/): iCatch DVR - Command Injection (high 8.8)
- [CVE-2020-10513](https://insights.sbomify.com/CVE-2020-10513/): iCatch DVR - Broken Access Control (high 8.8)
- [CVE-2020-10512](https://insights.sbomify.com/CVE-2020-10512/): HGiga C&Cmail - SQL Injection (high 8.8)
- [CVE-2020-10511](https://insights.sbomify.com/CVE-2020-10511/): HGiga C&Cmail - Broken Access Control (critical 9.8)
- [CVE-2020-10510](https://insights.sbomify.com/CVE-2020-10510/): Sunnet eHRD - Broken Access Control (high 8.1)
- [CVE-2020-1051](https://insights.sbomify.com/CVE-2020-1051/): Jet Database Engine Remote Code Execution Vulnerability (high 7.8)
- [CVE-2020-10509](https://insights.sbomify.com/CVE-2020-10509/): Sunnet eHRD - Cross-Site Scripting (medium 6.1)
- [CVE-2020-10508](https://insights.sbomify.com/CVE-2020-10508/): Sunnet eHRD - Sensitive Data Exposure (high 7.5)
- [CVE-2020-10507](https://insights.sbomify.com/CVE-2020-10507/): ALLE INFORMATION CO., LTD. School Manage System - Security Misconfiguration (critical 9.8)
- [CVE-2020-10506](https://insights.sbomify.com/CVE-2020-10506/): ALLE INFORMATION CO., LTD. School Manage System - Path Traversal (high 7.5)
- [CVE-2020-10505](https://insights.sbomify.com/CVE-2020-10505/): ALLE INFORMATION CO., LTD. School Manage System - SQL Injection (critical 9.8)
- [CVE-2020-10504](https://insights.sbomify.com/CVE-2020-10504/): Cross-site request forgery in chadhaajay:phpkb (medium 4.3)
- [CVE-2020-10503](https://insights.sbomify.com/CVE-2020-10503/): Cross-site request forgery in chadhaajay:phpkb (medium 4.3)
- [CVE-2020-10502](https://insights.sbomify.com/CVE-2020-10502/): Cross-site request forgery in chadhaajay:phpkb (medium 4.3)
- [CVE-2020-10501](https://insights.sbomify.com/CVE-2020-10501/): Cross-site request forgery in chadhaajay:phpkb (medium 6.5)
- [CVE-2020-10500](https://insights.sbomify.com/CVE-2020-10500/): Cross-site request forgery in chadhaajay:phpkb (medium 4.3)
- [CVE-2020-1050](https://insights.sbomify.com/CVE-2020-1050/): Cross-site scripting in Dynamics 365 Server, version 9.0 (on-premises) (medium 6.1)
- [CVE-2020-10499](https://insights.sbomify.com/CVE-2020-10499/): Cross-site request forgery in chadhaajay:phpkb (medium 4.3)
- [CVE-2020-10498](https://insights.sbomify.com/CVE-2020-10498/): Cross-site request forgery in chadhaajay:phpkb (medium 6.5)
- [CVE-2020-10497](https://insights.sbomify.com/CVE-2020-10497/): Cross-site request forgery in chadhaajay:phpkb (medium 6.5)
- [CVE-2020-10496](https://insights.sbomify.com/CVE-2020-10496/): Cross-site request forgery in chadhaajay:phpkb (medium 4.3)
- [CVE-2020-10495](https://insights.sbomify.com/CVE-2020-10495/): Cross-site request forgery in chadhaajay:phpkb (medium 4.3)
- [CVE-2020-10494](https://insights.sbomify.com/CVE-2020-10494/): Cross-site request forgery in chadhaajay:phpkb (medium 4.3)
- [CVE-2020-10493](https://insights.sbomify.com/CVE-2020-10493/): Cross-site request forgery in chadhaajay:phpkb (medium 4.3)
- [CVE-2020-10492](https://insights.sbomify.com/CVE-2020-10492/): Cross-site request forgery in chadhaajay:phpkb (medium 4.3)
- [CVE-2020-10491](https://insights.sbomify.com/CVE-2020-10491/): Cross-site request forgery in chadhaajay:phpkb (medium 4.3)
- [CVE-2020-10490](https://insights.sbomify.com/CVE-2020-10490/): Cross-site request forgery in chadhaajay:phpkb (medium 4.3)
- [CVE-2020-1049](https://insights.sbomify.com/CVE-2020-1049/): Cross-site scripting in Dynamics 365 Server, version 9.0 (on-premises) (medium 5.4)
- [CVE-2020-10489](https://insights.sbomify.com/CVE-2020-10489/): Cross-site request forgery in chadhaajay:phpkb (medium 4.3)
- [CVE-2020-10488](https://insights.sbomify.com/CVE-2020-10488/): Cross-site request forgery in chadhaajay:phpkb (medium 4.3)
- [CVE-2020-10487](https://insights.sbomify.com/CVE-2020-10487/): Cross-site request forgery in chadhaajay:phpkb (medium 4.3)
- [CVE-2020-10486](https://insights.sbomify.com/CVE-2020-10486/): Cross-site request forgery in chadhaajay:phpkb (medium 4.3)
- [CVE-2020-10485](https://insights.sbomify.com/CVE-2020-10485/): Cross-site request forgery in chadhaajay:phpkb (medium 4.3)
- [CVE-2020-10484](https://insights.sbomify.com/CVE-2020-10484/): Cross-site request forgery in chadhaajay:phpkb (medium 4.3)
- [CVE-2020-10483](https://insights.sbomify.com/CVE-2020-10483/): Cross-site request forgery in chadhaajay:phpkb (medium 4.3)
- [CVE-2020-10482](https://insights.sbomify.com/CVE-2020-10482/): Cross-site request forgery in chadhaajay:phpkb (medium 4.3)
- [CVE-2020-10481](https://insights.sbomify.com/CVE-2020-10481/): Cross-site request forgery in chadhaajay:phpkb (medium 4.3)
- [CVE-2020-10480](https://insights.sbomify.com/CVE-2020-10480/): Cross-site request forgery in chadhaajay:phpkb (medium 4.3)
- [CVE-2020-1048](https://insights.sbomify.com/CVE-2020-1048/): Windows Print Spooler Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-10479](https://insights.sbomify.com/CVE-2020-10479/): Cross-site request forgery in chadhaajay:phpkb (medium 4.3)
- [CVE-2020-10478](https://insights.sbomify.com/CVE-2020-10478/): Cross-site request forgery in chadhaajay:phpkb (high 8.8)
- [CVE-2020-10477](https://insights.sbomify.com/CVE-2020-10477/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10476](https://insights.sbomify.com/CVE-2020-10476/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10475](https://insights.sbomify.com/CVE-2020-10475/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10474](https://insights.sbomify.com/CVE-2020-10474/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10473](https://insights.sbomify.com/CVE-2020-10473/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10472](https://insights.sbomify.com/CVE-2020-10472/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10471](https://insights.sbomify.com/CVE-2020-10471/): Cross-site scripting in chadhasoftware:phpkb (medium 4.8)
- [CVE-2020-10470](https://insights.sbomify.com/CVE-2020-10470/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-1047](https://insights.sbomify.com/CVE-2020-1047/): Windows Hyper-V Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-10469](https://insights.sbomify.com/CVE-2020-10469/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10468](https://insights.sbomify.com/CVE-2020-10468/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10467](https://insights.sbomify.com/CVE-2020-10467/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10466](https://insights.sbomify.com/CVE-2020-10466/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10465](https://insights.sbomify.com/CVE-2020-10465/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10464](https://insights.sbomify.com/CVE-2020-10464/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10463](https://insights.sbomify.com/CVE-2020-10463/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10462](https://insights.sbomify.com/CVE-2020-10462/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10461](https://insights.sbomify.com/CVE-2020-10461/): Cross-site scripting in chadhaajay:phpkb (medium 6.1)
- [CVE-2020-10460](https://insights.sbomify.com/CVE-2020-10460/): Code injection in chadhaajay:phpkb (medium 4.9)
- [CVE-2020-1046](https://insights.sbomify.com/CVE-2020-1046/): .NET Framework Remote Code Execution Vulnerability (high 7.8)
- [CVE-2020-10459](https://insights.sbomify.com/CVE-2020-10459/): Path traversal in chadhaajay:phpkb (low 2.7)
- [CVE-2020-10458](https://insights.sbomify.com/CVE-2020-10458/): Path traversal in chadhaajay:phpkb (medium 6.5)
- [CVE-2020-10457](https://insights.sbomify.com/CVE-2020-10457/): Path traversal in chadhaajay:phpkb (low 2.7)
- [CVE-2020-10456](https://insights.sbomify.com/CVE-2020-10456/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10455](https://insights.sbomify.com/CVE-2020-10455/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10454](https://insights.sbomify.com/CVE-2020-10454/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10453](https://insights.sbomify.com/CVE-2020-10453/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10452](https://insights.sbomify.com/CVE-2020-10452/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10451](https://insights.sbomify.com/CVE-2020-10451/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10450](https://insights.sbomify.com/CVE-2020-10450/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-1045](https://insights.sbomify.com/CVE-2020-1045/): Microsoft ASP.NET Core Security Feature Bypass Vulnerability (high 7.5)
- [CVE-2020-10449](https://insights.sbomify.com/CVE-2020-10449/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10448](https://insights.sbomify.com/CVE-2020-10448/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10447](https://insights.sbomify.com/CVE-2020-10447/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10446](https://insights.sbomify.com/CVE-2020-10446/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/199/