# Vulnerabilities published in 2020


- [CVE-2020-9601](https://insights.sbomify.com/CVE-2020-9601/): Information disclosure in Adobe Acrobat and Reader (high 7.5)
- [CVE-2020-9600](https://insights.sbomify.com/CVE-2020-9600/): Information disclosure in Adobe Acrobat and Reader (high 7.5)
- [CVE-2020-9599](https://insights.sbomify.com/CVE-2020-9599/): Information disclosure in Adobe Acrobat and Reader (high 7.5)
- [CVE-2020-9598](https://insights.sbomify.com/CVE-2020-9598/): Information disclosure in Adobe Acrobat and Reader (medium 5.5)
- [CVE-2020-9597](https://insights.sbomify.com/CVE-2020-9597/): Memory corruption in Adobe Acrobat and Reader (high 8.8)
- [CVE-2020-9596](https://insights.sbomify.com/CVE-2020-9596/): Security feature bypass in Adobe Acrobat and Reader (high 7.8)
- [CVE-2020-9595](https://insights.sbomify.com/CVE-2020-9595/): Information disclosure in Adobe Acrobat and Reader (medium 5.5)
- [CVE-2020-9594](https://insights.sbomify.com/CVE-2020-9594/): Memory corruption in Adobe Acrobat and Reader (high 7.8)
- [CVE-2020-9593](https://insights.sbomify.com/CVE-2020-9593/): Information disclosure in Adobe Acrobat and Reader (medium 5.5)
- [CVE-2020-9592](https://insights.sbomify.com/CVE-2020-9592/): Security feature bypass in Adobe Acrobat and Reader (high 7.8)
- [CVE-2020-9591](https://insights.sbomify.com/CVE-2020-9591/): Magento defense-in-depth security mitigation vulnerability (high 7.5)
- [CVE-2020-9590](https://insights.sbomify.com/CVE-2020-9590/): Memory corruption in Adobe DNG Software Development Kit (SDK) (high 7.8)
- [CVE-2020-9589](https://insights.sbomify.com/CVE-2020-9589/): Memory corruption in Adobe DNG Software Development Kit (SDK) (high 7.8)
- [CVE-2020-9588](https://insights.sbomify.com/CVE-2020-9588/): Magento Signature verification bypass (high 7.2)
- [CVE-2020-9587](https://insights.sbomify.com/CVE-2020-9587/): Magento authorization bypass vulnerability (high 7.5)
- [CVE-2020-9586](https://insights.sbomify.com/CVE-2020-9586/): Memory corruption in Adobe Character Animator (high 7.8)
- [CVE-2020-9585](https://insights.sbomify.com/CVE-2020-9585/): Magento Defense-in-depth security mitigation vulnerability (critical 9.8)
- [CVE-2020-9584](https://insights.sbomify.com/CVE-2020-9584/): Magento Stored cross-site scripting (medium 5.4)
- [CVE-2020-9583](https://insights.sbomify.com/CVE-2020-9583/): Magento command injection vulnerability (critical 9.8)
- [CVE-2020-9582](https://insights.sbomify.com/CVE-2020-9582/): Magento command injection vulnerability (critical 9.8)
- [CVE-2020-9581](https://insights.sbomify.com/CVE-2020-9581/): Magento stored cross-site scripting vulnerability (medium 6.1)
- [CVE-2020-9580](https://insights.sbomify.com/CVE-2020-9580/): Magento Security mitigation bypass vulnerability (critical 9.8)
- [CVE-2020-9579](https://insights.sbomify.com/CVE-2020-9579/): Magento Security mitigation bypass vulnerability (critical 9.8)
- [CVE-2020-9578](https://insights.sbomify.com/CVE-2020-9578/): Magento command injection vulnerability (critical 9.8)
- [CVE-2020-9577](https://insights.sbomify.com/CVE-2020-9577/): Magento stored cross-site scripting vulnerability (medium 6.1)
- [CVE-2020-9576](https://insights.sbomify.com/CVE-2020-9576/): Magento command injection vulnerability (critical 9.8)
- [CVE-2020-9575](https://insights.sbomify.com/CVE-2020-9575/): Memory corruption in Adobe Illustrator (high 7.8)
- [CVE-2020-9574](https://insights.sbomify.com/CVE-2020-9574/): Memory corruption in Adobe Illustrator (high 7.8)
- [CVE-2020-9573](https://insights.sbomify.com/CVE-2020-9573/): Memory corruption in Adobe Illustrator (high 7.8)
- [CVE-2020-9572](https://insights.sbomify.com/CVE-2020-9572/): Memory corruption in Adobe Illustrator (high 7.8)
- [CVE-2020-9571](https://insights.sbomify.com/CVE-2020-9571/): Memory corruption in Adobe Illustrator (high 7.8)
- [CVE-2020-9570](https://insights.sbomify.com/CVE-2020-9570/): Memory corruption in Adobe Illustrator (high 7.8)
- [CVE-2020-9569](https://insights.sbomify.com/CVE-2020-9569/): Memory corruption in Adobe Bridge (high 7.8)
- [CVE-2020-9568](https://insights.sbomify.com/CVE-2020-9568/): Memory corruption in Adobe Bridge (high 7.8)
- [CVE-2020-9567](https://insights.sbomify.com/CVE-2020-9567/): Use after free in Adobe Bridge (high 7.8)
- [CVE-2020-9566](https://insights.sbomify.com/CVE-2020-9566/): Use after free in Adobe Bridge (high 7.8)
- [CVE-2020-9565](https://insights.sbomify.com/CVE-2020-9565/): Memory corruption in Adobe Bridge (high 7.8)
- [CVE-2020-9564](https://insights.sbomify.com/CVE-2020-9564/): Memory corruption in Adobe Bridge (high 7.8)
- [CVE-2020-9563](https://insights.sbomify.com/CVE-2020-9563/): Memory corruption in Adobe Bridge (high 7.8)
- [CVE-2020-9562](https://insights.sbomify.com/CVE-2020-9562/): Memory corruption in Adobe Bridge (high 7.8)
- [CVE-2020-9561](https://insights.sbomify.com/CVE-2020-9561/): Memory corruption in Adobe Bridge (high 7.8)
- [CVE-2020-9560](https://insights.sbomify.com/CVE-2020-9560/): Memory corruption in Adobe Bridge (high 7.8)
- [CVE-2020-9559](https://insights.sbomify.com/CVE-2020-9559/): Memory corruption in Adobe Bridge (high 7.8)
- [CVE-2020-9558](https://insights.sbomify.com/CVE-2020-9558/): Information disclosure in Adobe Bridge (low 3.3)
- [CVE-2020-9557](https://insights.sbomify.com/CVE-2020-9557/): Information disclosure in Adobe Bridge (medium 5.5)
- [CVE-2020-9556](https://insights.sbomify.com/CVE-2020-9556/): Memory corruption in Adobe Bridge (high 7.8)
- [CVE-2020-9555](https://insights.sbomify.com/CVE-2020-9555/): Memory corruption in Adobe Bridge (high 7.8)
- [CVE-2020-9554](https://insights.sbomify.com/CVE-2020-9554/): Memory corruption in Adobe Bridge (high 7.8)
- [CVE-2020-9553](https://insights.sbomify.com/CVE-2020-9553/): Information disclosure in Adobe Bridge (low 3.3)
- [CVE-2020-9552](https://insights.sbomify.com/CVE-2020-9552/): Memory corruption in Adobe Bridge (high 7.8)
- [CVE-2020-9551](https://insights.sbomify.com/CVE-2020-9551/): Memory corruption in Adobe Bridge (high 7.8)
- [CVE-2020-9550](https://insights.sbomify.com/CVE-2020-9550/): Other in n/a (critical 9.8)
- [CVE-2020-9549](https://insights.sbomify.com/CVE-2020-9549/): Memory corruption in n/a (high 7.8)
- [CVE-2020-9548](https://insights.sbomify.com/CVE-2020-9548/): jackson-databind mishandles the interaction between serialization gadgets and typing (critical 9.8)
- [CVE-2020-9547](https://insights.sbomify.com/CVE-2020-9547/): jackson-databind mishandles the interaction between serialization gadgets and typing (critical 9.8)
- [CVE-2020-9546](https://insights.sbomify.com/CVE-2020-9546/): jackson-databind mishandles the interaction between serialization gadgets and typing (critical 9.8)
- [CVE-2020-9545](https://insights.sbomify.com/CVE-2020-9545/): Null dereference in n/a (high 7.5)
- [CVE-2020-9544](https://insights.sbomify.com/CVE-2020-9544/): Missing authorization in n/a (high 7.5)
- [CVE-2020-9543](https://insights.sbomify.com/CVE-2020-9543/): OpenStack Manila Unprivileged users can retrieve, use and manipulate share networks (high 8.3)
- [CVE-2020-9540](https://insights.sbomify.com/CVE-2020-9540/): Privilege escalation in n/a (high 7.8)
- [CVE-2020-9535](https://insights.sbomify.com/CVE-2020-9535/): Memory corruption in n/a (high 8.8)
- [CVE-2020-9534](https://insights.sbomify.com/CVE-2020-9534/): Memory corruption in n/a (high 8.8)
- [CVE-2020-9531](https://insights.sbomify.com/CVE-2020-9531/): Code injection in n/a (high 7.3)
- [CVE-2020-9530](https://insights.sbomify.com/CVE-2020-9530/): Information disclosure in n/a (medium 6.5)
- [CVE-2020-9529](https://insights.sbomify.com/CVE-2020-9529/): Privilege escalation in n/a (critical 9.8)
- [CVE-2020-9528](https://insights.sbomify.com/CVE-2020-9528/): Weak cryptography in n/a (high 7.5)
- [CVE-2020-9527](https://insights.sbomify.com/CVE-2020-9527/): Memory corruption in n/a (critical 9.8)
- [CVE-2020-9526](https://insights.sbomify.com/CVE-2020-9526/): Information disclosure in n/a (medium 5.9)
- [CVE-2020-9525](https://insights.sbomify.com/CVE-2020-9525/): Auth bypass in n/a (high 8.1)
- [CVE-2020-9524](https://insights.sbomify.com/CVE-2020-9524/): Cross-site scripting in Enterprise Server and Enterprise developer. (medium 5.4)
- [CVE-2020-9523](https://insights.sbomify.com/CVE-2020-9523/): Information disclosure in Enterprise developer and server. (high 8.8)
- [CVE-2020-9522](https://insights.sbomify.com/CVE-2020-9522/): Cross-site scripting in ArcSight Enterprise Security Manager (ESM). (medium 6.1)
- [CVE-2020-9521](https://insights.sbomify.com/CVE-2020-9521/): SQL injection in Micro Focus - Service Manager Automation (SMA) (high 8.8)
- [CVE-2020-9520](https://insights.sbomify.com/CVE-2020-9520/): Cross-site scripting in Micro Focus Vibe. (medium 5.4)
- [CVE-2020-9519](https://insights.sbomify.com/CVE-2020-9519/): Information disclosure in Service Manager (Server). (medium 5.3)
- [CVE-2020-9518](https://insights.sbomify.com/CVE-2020-9518/): Information disclosure in Service Manager (Web Tier). (medium 5.3)
- [CVE-2020-9517](https://insights.sbomify.com/CVE-2020-9517/): Cross-site scripting in Service Manager (medium 5.4)
- [CVE-2020-9514](https://insights.sbomify.com/CVE-2020-9514/): Missing authorization in n/a (medium 6.5)
- [CVE-2020-9502](https://insights.sbomify.com/CVE-2020-9502/): Auth bypass in IPC-HX2XXX Series,IPC-HXXX5X4X Series,IPC-HX5842H,IPC-HX7842H,NVR 5x Series,NVR 4x Series,SD6AL Series,SD5A Series,SD1A Series,PTZ1A Series,SD50/52C Series,IPC-HFW1431S (critical 9.8)
- [CVE-2020-9501](https://insights.sbomify.com/CVE-2020-9501/): Information disclosure in Web P2P control,P2P plartform server,client tools (medium 5.5)
- [CVE-2020-9500](https://insights.sbomify.com/CVE-2020-9500/): Denial of service in IPC-HX2XXX Series,IPC-HXXX5X4X Series,IPC-HX5842H,IPC-HX7842H,NVR 5x Series,NVR 4x Series,SD6AL Series,SD5A Series,SD1A Series,PTZ1A Series,SD50/52C Series (medium 4.9)
- [CVE-2020-9499](https://insights.sbomify.com/CVE-2020-9499/): Memory corruption in IPC-HX2XXX Series,IPC-HXXX5X4X Series,IPC-HX5842H,IPC-HX7842H,NVR 5x Series,NVR 4x Series,SD6AL Series,SD5A Series,SD1A Series,PTZ1A Series,SD50/52C Series (high 7.2)
- [CVE-2020-9498](https://insights.sbomify.com/CVE-2020-9498/): Memory corruption in Apache Guacamole (medium 6.7)
- [CVE-2020-9497](https://insights.sbomify.com/CVE-2020-9497/): Information disclosure in Apache Guacamole (medium 4.4)
- [CVE-2020-9496](https://insights.sbomify.com/CVE-2020-9496/): Deserialization in Apache OFBiz (medium 6.1)
- [CVE-2020-9495](https://insights.sbomify.com/CVE-2020-9495/): Injection in Apache Archiva (medium 5.3)
- [CVE-2020-9494](https://insights.sbomify.com/CVE-2020-9494/): Denial of service in Apache Traffic Server (high 7.5)
- [CVE-2020-9493](https://insights.sbomify.com/CVE-2020-9493/): Java deserialization in Chainsaw (critical 9.8)
- [CVE-2020-9492](https://insights.sbomify.com/CVE-2020-9492/): Improper Privilege Management in Apache Hadoop (high 8.8)
- [CVE-2020-9491](https://insights.sbomify.com/CVE-2020-9491/): Inadequate Encryption Strength in Apache NiFi (high 7.5)
- [CVE-2020-9490](https://insights.sbomify.com/CVE-2020-9490/): Denial of service in Apache HTTP Server (high 7.5)
- [CVE-2020-9489](https://insights.sbomify.com/CVE-2020-9489/): Missing Release of Memory after Effective Lifetime in Apache Tika (medium 5.5)
- [CVE-2020-9488](https://insights.sbomify.com/CVE-2020-9488/): Improper validation of certificate with host mismatch in Apache Log4j SMTP appender (low 3.7)
- [CVE-2020-9487](https://insights.sbomify.com/CVE-2020-9487/): Missing Authentication for Critical Function in Apache NiFi (high 7.5)
- [CVE-2020-9486](https://insights.sbomify.com/CVE-2020-9486/): Insertion of Sensitive Information into Log File in Apache NiFi Stateless (high 7.5)
- [CVE-2020-9485](https://insights.sbomify.com/CVE-2020-9485/): Stored XSS in Apache Airflow (medium 6.1)
- [CVE-2020-9484](https://insights.sbomify.com/CVE-2020-9484/): Potential remote code execution in Apache Tomcat (high 7.0)
- [CVE-2020-9483](https://insights.sbomify.com/CVE-2020-9483/): SQL injection in Apache SkyWalking (high 7.5)
- [CVE-2020-9482](https://insights.sbomify.com/CVE-2020-9482/): Insufficient Session Expiration in Apache NiFi Registry (medium 6.5)
- [CVE-2020-9481](https://insights.sbomify.com/CVE-2020-9481/): Denial of service in ATS (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/23/