# Vulnerabilities published in 2020


- [CVE-2020-9480](https://insights.sbomify.com/CVE-2020-9480/): Improper Authentication in Apache Spark (critical 9.8)
- [CVE-2020-9479](https://insights.sbomify.com/CVE-2020-9479/): unzip directory traversal (medium 5.5)
- [CVE-2020-9478](https://insights.sbomify.com/CVE-2020-9478/): Command injection in n/a (high 8.8)
- [CVE-2020-9477](https://insights.sbomify.com/CVE-2020-9477/): Information disclosure in n/a (critical 9.8)
- [CVE-2020-9476](https://insights.sbomify.com/CVE-2020-9476/): Information disclosure in n/a (high 7.5)
- [CVE-2020-9475](https://insights.sbomify.com/CVE-2020-9475/): Race condition in n/a (high 7.0)
- [CVE-2020-9474](https://insights.sbomify.com/CVE-2020-9474/): File upload in n/a (high 8.8)
- [CVE-2020-9473](https://insights.sbomify.com/CVE-2020-9473/): Auth bypass in n/a (medium 6.6)
- [CVE-2020-9472](https://insights.sbomify.com/CVE-2020-9472/): Unrestricted Upload of File with Dangerous Type in Umbraco CMS (medium 6.5)
- [CVE-2020-9471](https://insights.sbomify.com/CVE-2020-9471/): Umbraco CMS Authenticated File Upload (high 8.8)
- [CVE-2020-9470](https://insights.sbomify.com/CVE-2020-9470/): Information disclosure in n/a (high 7.8)
- [CVE-2020-9468](https://insights.sbomify.com/CVE-2020-9468/): Missing authorization in n/a (medium 4.3)
- [CVE-2020-9467](https://insights.sbomify.com/CVE-2020-9467/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2020-9466](https://insights.sbomify.com/CVE-2020-9466/): Other in n/a (medium 6.1)
- [CVE-2020-9465](https://insights.sbomify.com/CVE-2020-9465/): SQL injection in n/a (critical 9.8)
- [CVE-2020-9464](https://insights.sbomify.com/CVE-2020-9464/): Denial of service in n/a (high 7.5)
- [CVE-2020-9463](https://insights.sbomify.com/CVE-2020-9463/): Command injection in n/a (high 8.8)
- [CVE-2020-9462](https://insights.sbomify.com/CVE-2020-9462/): Information disclosure in n/a (medium 4.3)
- [CVE-2020-9461](https://insights.sbomify.com/CVE-2020-9461/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2020-9460](https://insights.sbomify.com/CVE-2020-9460/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2020-9459](https://insights.sbomify.com/CVE-2020-9459/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2020-9458](https://insights.sbomify.com/CVE-2020-9458/): Missing authorization in n/a (high 8.8)
- [CVE-2020-9457](https://insights.sbomify.com/CVE-2020-9457/): Privilege escalation in n/a (high 8.8)
- [CVE-2020-9456](https://insights.sbomify.com/CVE-2020-9456/): Privilege escalation in n/a (high 8.8)
- [CVE-2020-9455](https://insights.sbomify.com/CVE-2020-9455/): Missing authorization in n/a (medium 4.3)
- [CVE-2020-9454](https://insights.sbomify.com/CVE-2020-9454/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2020-9453](https://insights.sbomify.com/CVE-2020-9453/): Null dereference in n/a (medium 5.5)
- [CVE-2020-9452](https://insights.sbomify.com/CVE-2020-9452/): Privilege escalation in n/a (high 7.8)
- [CVE-2020-9451](https://insights.sbomify.com/CVE-2020-9451/): Denial of service in n/a (medium 5.5)
- [CVE-2020-9450](https://insights.sbomify.com/CVE-2020-9450/): Missing authorization in n/a (high 7.8)
- [CVE-2020-9449](https://insights.sbomify.com/CVE-2020-9449/): Weak cryptography in n/a (high 8.8)
- [CVE-2020-9447](https://insights.sbomify.com/CVE-2020-9447/): Cross-site Scripting in GwtUpload (medium 6.1)
- [CVE-2020-9445](https://insights.sbomify.com/CVE-2020-9445/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2020-9444](https://insights.sbomify.com/CVE-2020-9444/): Other in n/a (medium 6.1)
- [CVE-2020-9443](https://insights.sbomify.com/CVE-2020-9443/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2020-9442](https://insights.sbomify.com/CVE-2020-9442/): Privilege escalation in n/a (high 7.8)
- [CVE-2020-9440](https://insights.sbomify.com/CVE-2020-9440/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2020-9439](https://insights.sbomify.com/CVE-2020-9439/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2020-9438](https://insights.sbomify.com/CVE-2020-9438/): Security feature bypass in n/a (medium 5.9)
- [CVE-2020-9437](https://insights.sbomify.com/CVE-2020-9437/): Cross-site scripting in n/a (medium 4.8)
- [CVE-2020-9436](https://insights.sbomify.com/CVE-2020-9436/): Command injection in n/a (high 8.8)
- [CVE-2020-9435](https://insights.sbomify.com/CVE-2020-9435/): Hardcoded credentials in n/a (high 7.5)
- [CVE-2020-9434](https://insights.sbomify.com/CVE-2020-9434/): Security feature bypass in n/a (critical 9.1)
- [CVE-2020-9433](https://insights.sbomify.com/CVE-2020-9433/): Security feature bypass in n/a (critical 9.1)
- [CVE-2020-9432](https://insights.sbomify.com/CVE-2020-9432/): Security feature bypass in n/a (critical 9.1)
- [CVE-2020-9431](https://insights.sbomify.com/CVE-2020-9431/): Memory corruption in n/a (high 7.5)
- [CVE-2020-9430](https://insights.sbomify.com/CVE-2020-9430/): Denial of service in n/a (high 7.5)
- [CVE-2020-9429](https://insights.sbomify.com/CVE-2020-9429/): Null dereference in n/a (high 7.5)
- [CVE-2020-9428](https://insights.sbomify.com/CVE-2020-9428/): Denial of service in n/a (high 7.5)
- [CVE-2020-9427](https://insights.sbomify.com/CVE-2020-9427/): OX Guard 2.10.3 and earlier allows SSRF. (medium 5.0)
- [CVE-2020-9426](https://insights.sbomify.com/CVE-2020-9426/): OX Guard 2.10.3 and earlier allows XSS. (medium 6.1)
- [CVE-2020-9425](https://insights.sbomify.com/CVE-2020-9425/): Information disclosure in n/a (high 7.5)
- [CVE-2020-9423](https://insights.sbomify.com/CVE-2020-9423/): File upload in n/a (critical 9.8)
- [CVE-2020-9420](https://insights.sbomify.com/CVE-2020-9420/): Information disclosure in n/a (medium 6.5)
- [CVE-2020-9419](https://insights.sbomify.com/CVE-2020-9419/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2020-9418](https://insights.sbomify.com/CVE-2020-9418/): Privilege escalation in n/a (high 7.8)
- [CVE-2020-9417](https://insights.sbomify.com/CVE-2020-9417/): TIBCO Foresight SQL Injection (high 7.6)
- [CVE-2020-9416](https://insights.sbomify.com/CVE-2020-9416/): TIBCO Spotfire Stored Cross Site Scripting Vulnerability (high 8.2)
- [CVE-2020-9415](https://insights.sbomify.com/CVE-2020-9415/): TIBCO Data Virtualization (medium 5.3)
- [CVE-2020-9414](https://insights.sbomify.com/CVE-2020-9414/): TIBCO Managed File Transfer reflected XSS vulerability (high 8.8)
- [CVE-2020-9413](https://insights.sbomify.com/CVE-2020-9413/): TIBCO Managed File Transfer reflected XSS vulerability (medium 6.3)
- [CVE-2020-9412](https://insights.sbomify.com/CVE-2020-9412/): TIBCO Managed File Transfer Platform Server for IBM i Arbitrary Command Execution (critical 10.0)
- [CVE-2020-9411](https://insights.sbomify.com/CVE-2020-9411/): TIBCO Managed File Transfer Platform Server for IBM i Authentication Bypass (critical 10.0)
- [CVE-2020-9410](https://insights.sbomify.com/CVE-2020-9410/): TIBCO JasperReports Library (high 7.3)
- [CVE-2020-9409](https://insights.sbomify.com/CVE-2020-9409/): TIBCO JasperReports Server Fails To Enforce Access Restrictions (critical 9.8)
- [CVE-2020-9408](https://insights.sbomify.com/CVE-2020-9408/): TIBCO Spotfire Server Script Trust Problem Exposes Remote Code Execution Vulnerability (critical 9.9)
- [CVE-2020-9407](https://insights.sbomify.com/CVE-2020-9407/): Information disclosure in n/a (low 3.1)
- [CVE-2020-9406](https://insights.sbomify.com/CVE-2020-9406/): Code injection in n/a (critical 9.0)
- [CVE-2020-9405](https://insights.sbomify.com/CVE-2020-9405/): Cross-site scripting in n/a (medium 5.8)
- [CVE-2020-9404](https://insights.sbomify.com/CVE-2020-9404/): Hardcoded credentials in n/a (high 7.1)
- [CVE-2020-9403](https://insights.sbomify.com/CVE-2020-9403/): Hardcoded credentials in n/a (medium 5.5)
- [CVE-2020-9402](https://insights.sbomify.com/CVE-2020-9402/): SQL injection in Django (high 8.8)
- [CVE-2020-9399](https://insights.sbomify.com/CVE-2020-9399/): Security feature bypass in n/a (medium 5.5)
- [CVE-2020-9398](https://insights.sbomify.com/CVE-2020-9398/): SQL injection in n/a (critical 9.8)
- [CVE-2020-9395](https://insights.sbomify.com/CVE-2020-9395/): Memory corruption in n/a (high 8.0)
- [CVE-2020-9394](https://insights.sbomify.com/CVE-2020-9394/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2020-9393](https://insights.sbomify.com/CVE-2020-9393/): Cross-site scripting in n/a (high 7.2)
- [CVE-2020-9392](https://insights.sbomify.com/CVE-2020-9392/): Missing authorization in n/a (high 7.3)
- [CVE-2020-9391](https://insights.sbomify.com/CVE-2020-9391/): Memory corruption in n/a (medium 5.5)
- [CVE-2020-9390](https://insights.sbomify.com/CVE-2020-9390/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2020-9389](https://insights.sbomify.com/CVE-2020-9389/): Information disclosure in n/a (low 3.7)
- [CVE-2020-9388](https://insights.sbomify.com/CVE-2020-9388/): Cross-site request forgery in n/a (medium 6.5)
- [CVE-2020-9387](https://insights.sbomify.com/CVE-2020-9387/): Information disclosure in n/a (medium 4.3)
- [CVE-2020-9386](https://insights.sbomify.com/CVE-2020-9386/): Information disclosure in n/a (medium 4.3)
- [CVE-2020-9385](https://insights.sbomify.com/CVE-2020-9385/): Null dereference in n/a (high 7.5)
- [CVE-2020-9384](https://insights.sbomify.com/CVE-2020-9384/): Auth bypass in n/a (high 8.8)
- [CVE-2020-9383](https://insights.sbomify.com/CVE-2020-9383/): Memory corruption in n/a (high 7.1)
- [CVE-2020-9382](https://insights.sbomify.com/CVE-2020-9382/): Code injection in n/a (medium 5.4)
- [CVE-2020-9381](https://insights.sbomify.com/CVE-2020-9381/): Code injection in n/a (high 7.5)
- [CVE-2020-9380](https://insights.sbomify.com/CVE-2020-9380/): File upload in n/a (critical 9.8)
- [CVE-2020-9379](https://insights.sbomify.com/CVE-2020-9379/): Information disclosure in n/a (medium 6.5)
- [CVE-2020-9377](https://insights.sbomify.com/CVE-2020-9377/): D-Link DIR-610 Devices Remote Command Execution (high 8.8, exploited in the wild)
- [CVE-2020-9376](https://insights.sbomify.com/CVE-2020-9376/): Information disclosure in n/a (high 7.5)
- [CVE-2020-9375](https://insights.sbomify.com/CVE-2020-9375/): Denial of service in n/a (high 7.5)
- [CVE-2020-9374](https://insights.sbomify.com/CVE-2020-9374/): Command injection in n/a (critical 9.8)
- [CVE-2020-9372](https://insights.sbomify.com/CVE-2020-9372/): Code injection in n/a (high 7.8)
- [CVE-2020-9371](https://insights.sbomify.com/CVE-2020-9371/): Cross-site scripting in n/a (medium 4.8)
- [CVE-2020-9370](https://insights.sbomify.com/CVE-2020-9370/): Auth bypass in n/a (critical 9.1)
- [CVE-2020-9369](https://insights.sbomify.com/CVE-2020-9369/): Denial of service in n/a (high 7.5)
- [CVE-2020-9368](https://insights.sbomify.com/CVE-2020-9368/): Path traversal in n/a (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/24/