# Vulnerabilities published in 2020


- [CVE-2020-10445](https://insights.sbomify.com/CVE-2020-10445/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10444](https://insights.sbomify.com/CVE-2020-10444/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10443](https://insights.sbomify.com/CVE-2020-10443/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10442](https://insights.sbomify.com/CVE-2020-10442/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10441](https://insights.sbomify.com/CVE-2020-10441/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10440](https://insights.sbomify.com/CVE-2020-10440/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-1044](https://insights.sbomify.com/CVE-2020-1044/): SQL Server Reporting Services Security Feature Bypass Vulnerability (medium 4.3)
- [CVE-2020-10439](https://insights.sbomify.com/CVE-2020-10439/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10438](https://insights.sbomify.com/CVE-2020-10438/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10437](https://insights.sbomify.com/CVE-2020-10437/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10436](https://insights.sbomify.com/CVE-2020-10436/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10435](https://insights.sbomify.com/CVE-2020-10435/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10434](https://insights.sbomify.com/CVE-2020-10434/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10433](https://insights.sbomify.com/CVE-2020-10433/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10432](https://insights.sbomify.com/CVE-2020-10432/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10431](https://insights.sbomify.com/CVE-2020-10431/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10430](https://insights.sbomify.com/CVE-2020-10430/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-1043](https://insights.sbomify.com/CVE-2020-1043/): Code injection in Windows Server (critical 9.0)
- [CVE-2020-10429](https://insights.sbomify.com/CVE-2020-10429/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10428](https://insights.sbomify.com/CVE-2020-10428/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10427](https://insights.sbomify.com/CVE-2020-10427/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10426](https://insights.sbomify.com/CVE-2020-10426/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10425](https://insights.sbomify.com/CVE-2020-10425/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10424](https://insights.sbomify.com/CVE-2020-10424/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10423](https://insights.sbomify.com/CVE-2020-10423/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10422](https://insights.sbomify.com/CVE-2020-10422/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10421](https://insights.sbomify.com/CVE-2020-10421/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10420](https://insights.sbomify.com/CVE-2020-10420/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-1042](https://insights.sbomify.com/CVE-2020-1042/): Code injection in Windows Server (critical 9.0)
- [CVE-2020-10419](https://insights.sbomify.com/CVE-2020-10419/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10418](https://insights.sbomify.com/CVE-2020-10418/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10417](https://insights.sbomify.com/CVE-2020-10417/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10416](https://insights.sbomify.com/CVE-2020-10416/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10415](https://insights.sbomify.com/CVE-2020-10415/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10414](https://insights.sbomify.com/CVE-2020-10414/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10413](https://insights.sbomify.com/CVE-2020-10413/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10412](https://insights.sbomify.com/CVE-2020-10412/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10411](https://insights.sbomify.com/CVE-2020-10411/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10410](https://insights.sbomify.com/CVE-2020-10410/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-1041](https://insights.sbomify.com/CVE-2020-1041/): Code injection in Windows Server (critical 9.0)
- [CVE-2020-10409](https://insights.sbomify.com/CVE-2020-10409/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10408](https://insights.sbomify.com/CVE-2020-10408/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10407](https://insights.sbomify.com/CVE-2020-10407/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10406](https://insights.sbomify.com/CVE-2020-10406/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10405](https://insights.sbomify.com/CVE-2020-10405/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10404](https://insights.sbomify.com/CVE-2020-10404/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10403](https://insights.sbomify.com/CVE-2020-10403/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10402](https://insights.sbomify.com/CVE-2020-10402/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10401](https://insights.sbomify.com/CVE-2020-10401/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10400](https://insights.sbomify.com/CVE-2020-10400/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-1040](https://insights.sbomify.com/CVE-2020-1040/): Microsoft Hyper-V RemoteFX vGPU Remote Code Execution (critical 9.0, exploited in the wild)
- [CVE-2020-10399](https://insights.sbomify.com/CVE-2020-10399/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10398](https://insights.sbomify.com/CVE-2020-10398/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10397](https://insights.sbomify.com/CVE-2020-10397/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10396](https://insights.sbomify.com/CVE-2020-10396/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10395](https://insights.sbomify.com/CVE-2020-10395/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10394](https://insights.sbomify.com/CVE-2020-10394/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10393](https://insights.sbomify.com/CVE-2020-10393/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10392](https://insights.sbomify.com/CVE-2020-10392/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10391](https://insights.sbomify.com/CVE-2020-10391/): Cross-site scripting in chadhaajay:phpkb (medium 4.8)
- [CVE-2020-10390](https://insights.sbomify.com/CVE-2020-10390/): Command injection in chadhaajay:phpkb (high 7.2)
- [CVE-2020-1039](https://insights.sbomify.com/CVE-2020-1039/): Jet Database Engine Remote Code Execution Vulnerability (high 7.8)
- [CVE-2020-10389](https://insights.sbomify.com/CVE-2020-10389/): Code injection in chadhaajay:phpkb (high 7.2)
- [CVE-2020-10388](https://insights.sbomify.com/CVE-2020-10388/): Cross-site scripting in chadhaajay:phpkb (medium 5.4)
- [CVE-2020-10387](https://insights.sbomify.com/CVE-2020-10387/): Path traversal in chadhaajay:phpkb (medium 4.9)
- [CVE-2020-10386](https://insights.sbomify.com/CVE-2020-10386/): File upload in chadhaajay:phpkb (high 7.2)
- [CVE-2020-10385](https://insights.sbomify.com/CVE-2020-10385/): Cross-site scripting in wpforms:contact form (medium 5.4)
- [CVE-2020-10384](https://insights.sbomify.com/CVE-2020-10384/): Privilege escalation in mbconnectline:mbconnect24 (high 7.8)
- [CVE-2020-10383](https://insights.sbomify.com/CVE-2020-10383/): Code injection in mbconnectline:mbconnect24 (critical 9.8)
- [CVE-2020-10382](https://insights.sbomify.com/CVE-2020-10382/): Code injection in mbconnectline:mbconnect24 (high 8.8)
- [CVE-2020-10381](https://insights.sbomify.com/CVE-2020-10381/): SQL injection in mbconnectline:mbconnect24 (medium 5.3)
- [CVE-2020-10380](https://insights.sbomify.com/CVE-2020-10380/): SQL injection in r-consortium:rmysql (critical 9.8)
- [CVE-2020-1038](https://insights.sbomify.com/CVE-2020-1038/): Windows Routing Utilities Denial of Service (medium 5.5)
- [CVE-2020-10379](https://insights.sbomify.com/CVE-2020-10379/): Buffer overflow in Pillow (high 7.8)
- [CVE-2020-10378](https://insights.sbomify.com/CVE-2020-10378/): Out-of-bounds read in Pillow (medium 5.5)
- [CVE-2020-10377](https://insights.sbomify.com/CVE-2020-10377/): Weak cryptography in mitel:mivoice connect client (critical 9.8)
- [CVE-2020-10376](https://insights.sbomify.com/CVE-2020-10376/): Information disclosure in technicolor:tc7337net firmware (critical 9.8)
- [CVE-2020-10375](https://insights.sbomify.com/CVE-2020-10375/): Weak cryptography in newmediacompany:smarty (medium 5.5)
- [CVE-2020-10374](https://insights.sbomify.com/CVE-2020-10374/): Command injection in paessler:prtg network monitor (critical 9.8)
- [CVE-2020-10372](https://insights.sbomify.com/CVE-2020-10372/): Cross-site scripting in ramp:altimeter (medium 5.4)
- [CVE-2020-10370](https://insights.sbomify.com/CVE-2020-10370/): Certain Cypress (and Broadcom) Wireless Combo chips such as CYW43455, when a 2021-01-26 Bluetooth firmware update is not present, allow a Bl (high 8.8)
- [CVE-2020-1037](https://insights.sbomify.com/CVE-2020-1037/): Chakra Scripting Engine Memory Corruption Vulnerability (medium 4.2)
- [CVE-2020-10369](https://insights.sbomify.com/CVE-2020-10369/): Certain Cypress (and Broadcom) Wireless Combo chips, when a January 2021 firmware update is not present, allow inferences about memory conte (medium 5.5)
- [CVE-2020-10368](https://insights.sbomify.com/CVE-2020-10368/): Certain Cypress (and Broadcom) Wireless Combo chips, when a January 2021 firmware update is not present, allow memory read access via a "Spectra" attack. (low 3.5)
- [CVE-2020-10367](https://insights.sbomify.com/CVE-2020-10367/): Certain Cypress (and Broadcom) Wireless Combo chips, when a January 2021 firmware update is not present, allow memory access via a "Spectra" attack. (medium 5.5)
- [CVE-2020-10366](https://insights.sbomify.com/CVE-2020-10366/): Path traversal in logicaldoc:logicaldoc (high 7.5)
- [CVE-2020-10365](https://insights.sbomify.com/CVE-2020-10365/): SQL injection in logicaldoc:logicaldoc (medium 6.5)
- [CVE-2020-10364](https://insights.sbomify.com/CVE-2020-10364/): Denial of service in mikrotik:routeros (high 7.5)
- [CVE-2020-1036](https://insights.sbomify.com/CVE-2020-1036/): Code injection in Windows Server (critical 9.0)
- [CVE-2020-1035](https://insights.sbomify.com/CVE-2020-1035/): VBScript Remote Code Execution Vulnerability (high 7.5)
- [CVE-2020-1034](https://insights.sbomify.com/CVE-2020-1034/): Windows Kernel Elevation of Privilege Vulnerability (medium 6.8)
- [CVE-2020-1033](https://insights.sbomify.com/CVE-2020-1033/): Windows Kernel Information Disclosure Vulnerability (medium 4.0)
- [CVE-2020-1032](https://insights.sbomify.com/CVE-2020-1032/): Code injection in Windows Server (critical 9.0)
- [CVE-2020-1031](https://insights.sbomify.com/CVE-2020-1031/): Windows DHCP Server Information Disclosure Vulnerability (high 7.5)
- [CVE-2020-1030](https://insights.sbomify.com/CVE-2020-1030/): Windows Print Spooler Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-10292](https://insights.sbomify.com/CVE-2020-10292/): Service DoS through arbitrary pointer dereferencing on KUKA simulator (high 8.2)
- [CVE-2020-10291](https://insights.sbomify.com/CVE-2020-10291/): RVD#3336: System information disclosure without authentication on KUKA simulators (high 7.5)
- [CVE-2020-10290](https://insights.sbomify.com/CVE-2020-10290/): RVD#1495: Universal Robots URCaps execute with unbounded privileges (medium 6.8)
- [CVE-2020-1029](https://insights.sbomify.com/CVE-2020-1029/): Privilege escalation in Windows (high 7.8)
- [CVE-2020-10289](https://insights.sbomify.com/CVE-2020-10289/): RVD#2401: Use of unsafe yaml load, ./src/actionlib/tools/library.py:132 (high 8.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/200/