# Vulnerabilities published in 2020


- [CVE-2020-9367](https://insights.sbomify.com/CVE-2020-9367/): Privilege escalation in n/a (high 7.8)
- [CVE-2020-9366](https://insights.sbomify.com/CVE-2020-9366/): Memory corruption in n/a (critical 9.8)
- [CVE-2020-9365](https://insights.sbomify.com/CVE-2020-9365/): Memory corruption in n/a (high 7.5)
- [CVE-2020-9364](https://insights.sbomify.com/CVE-2020-9364/): Path traversal in n/a (medium 5.3)
- [CVE-2020-9363](https://insights.sbomify.com/CVE-2020-9363/): Security feature bypass in n/a (high 7.8)
- [CVE-2020-9362](https://insights.sbomify.com/CVE-2020-9362/): Security feature bypass in n/a (high 7.8)
- [CVE-2020-9361](https://insights.sbomify.com/CVE-2020-9361/): Denial of service in n/a (medium 5.5)
- [CVE-2020-9359](https://insights.sbomify.com/CVE-2020-9359/): Code injection in n/a (medium 5.3)
- [CVE-2020-9355](https://insights.sbomify.com/CVE-2020-9355/): Privilege escalation in n/a (critical 9.8)
- [CVE-2020-9354](https://insights.sbomify.com/CVE-2020-9354/): Path traversal in n/a (high 7.5)
- [CVE-2020-9353](https://insights.sbomify.com/CVE-2020-9353/): Path traversal in n/a (high 7.5)
- [CVE-2020-9352](https://insights.sbomify.com/CVE-2020-9352/): XML external entity in n/a (critical 9.8)
- [CVE-2020-9351](https://insights.sbomify.com/CVE-2020-9351/): Information disclosure in n/a (medium 5.3)
- [CVE-2020-9350](https://insights.sbomify.com/CVE-2020-9350/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2020-9349](https://insights.sbomify.com/CVE-2020-9349/): Auth bypass in n/a (high 7.5)
- [CVE-2020-9347](https://insights.sbomify.com/CVE-2020-9347/): Other in n/a (critical 9.8)
- [CVE-2020-9346](https://insights.sbomify.com/CVE-2020-9346/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2020-9345](https://insights.sbomify.com/CVE-2020-9345/): Denial of service in n/a (medium 6.5)
- [CVE-2020-9344](https://insights.sbomify.com/CVE-2020-9344/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2020-9343](https://insights.sbomify.com/CVE-2020-9343/): Denial of service in n/a (medium 6.5)
- [CVE-2020-9342](https://insights.sbomify.com/CVE-2020-9342/): Security feature bypass in n/a (medium 5.5)
- [CVE-2020-9341](https://insights.sbomify.com/CVE-2020-9341/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2020-9340](https://insights.sbomify.com/CVE-2020-9340/): SQL injection in n/a (high 7.2)
- [CVE-2020-9339](https://insights.sbomify.com/CVE-2020-9339/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2020-9338](https://insights.sbomify.com/CVE-2020-9338/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2020-9337](https://insights.sbomify.com/CVE-2020-9337/): Information disclosure in n/a (medium 6.5)
- [CVE-2020-9336](https://insights.sbomify.com/CVE-2020-9336/): fauzantrif eLection 2.0 has XSS via the Admin Dashboard -> Settings -> Election -> "message if election is closed" field. (medium 5.4)
- [CVE-2020-9335](https://insights.sbomify.com/CVE-2020-9335/): Cross-site scripting in n/a (medium 4.8)
- [CVE-2020-9334](https://insights.sbomify.com/CVE-2020-9334/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2020-9332](https://insights.sbomify.com/CVE-2020-9332/): Privilege escalation in n/a (high 7.8)
- [CVE-2020-9331](https://insights.sbomify.com/CVE-2020-9331/): Privilege escalation in n/a (high 7.8)
- [CVE-2020-9330](https://insights.sbomify.com/CVE-2020-9330/): Missing authorization in n/a (high 8.8)
- [CVE-2020-9329](https://insights.sbomify.com/CVE-2020-9329/): Race condition in n/a (medium 5.9)
- [CVE-2020-9327](https://insights.sbomify.com/CVE-2020-9327/): Null dereference in n/a (high 7.5)
- [CVE-2020-9326](https://insights.sbomify.com/CVE-2020-9326/): Denial of service in n/a (high 7.5)
- [CVE-2020-9325](https://insights.sbomify.com/CVE-2020-9325/): Path traversal in n/a (high 7.5)
- [CVE-2020-9324](https://insights.sbomify.com/CVE-2020-9324/): Information disclosure in n/a (high 7.5)
- [CVE-2020-9323](https://insights.sbomify.com/CVE-2020-9323/): Path traversal in n/a (medium 5.3)
- [CVE-2020-9322](https://insights.sbomify.com/CVE-2020-9322/): Cross-site scripting in n/a (high 8.8)
- [CVE-2020-9321](https://insights.sbomify.com/CVE-2020-9321/): Traefik has an Improper Certificate Handling issue (high 7.5)
- [CVE-2020-9320](https://insights.sbomify.com/CVE-2020-9320/): File upload in n/a (medium 5.5)
- [CVE-2020-9318](https://insights.sbomify.com/CVE-2020-9318/): SQL injection in n/a (high 7.2)
- [CVE-2020-9315](https://insights.sbomify.com/CVE-2020-9315/): Missing authorization in n/a (high 7.5)
- [CVE-2020-9314](https://insights.sbomify.com/CVE-2020-9314/): Cross-site scripting in n/a (medium 4.8)
- [CVE-2020-9311](https://insights.sbomify.com/CVE-2020-9311/): Silverstripe CMS XSS Vulnerability (medium 5.4)
- [CVE-2020-9309](https://insights.sbomify.com/CVE-2020-9309/): Silverstripe CMS malicious file upload enables script execution (high 8.8)
- [CVE-2020-9308](https://insights.sbomify.com/CVE-2020-9308/): Memory corruption in n/a (high 8.8)
- [CVE-2020-9307](https://insights.sbomify.com/CVE-2020-9307/): Denial of service in n/a (medium 6.5)
- [CVE-2020-9306](https://insights.sbomify.com/CVE-2020-9306/): Hardcoded credentials in n/a (high 8.8)
- [CVE-2020-9301](https://insights.sbomify.com/CVE-2020-9301/): Code injection in Netflix Spinnaker (high 8.8)
- [CVE-2020-9300](https://insights.sbomify.com/CVE-2020-9300/): Missing authorization in Netflix Dispatch (medium 6.5)
- [CVE-2020-9299](https://insights.sbomify.com/CVE-2020-9299/): Cross-site scripting in Netflix Dispatch (medium 5.4)
- [CVE-2020-9298](https://insights.sbomify.com/CVE-2020-9298/): Server-Side Request Forgery in Spinnaker Orca (high 7.5)
- [CVE-2020-9297](https://insights.sbomify.com/CVE-2020-9297/): Code injection in Netflix Titus (critical 9.8)
- [CVE-2020-9296](https://insights.sbomify.com/CVE-2020-9296/): Expression Language Injection in Netflix Conductor (critical 9.8)
- [CVE-2020-9295](https://insights.sbomify.com/CVE-2020-9295/): Security feature bypass in FortiClientWindows (medium 4.7)
- [CVE-2020-9294](https://insights.sbomify.com/CVE-2020-9294/): Auth bypass in FortiMail (critical 9.8)
- [CVE-2020-9292](https://insights.sbomify.com/CVE-2020-9292/): Privilege escalation in Fortinet FortiSIEMWindowsAgent (critical 9.8)
- [CVE-2020-9291](https://insights.sbomify.com/CVE-2020-9291/): Privilege escalation in Fortinet FortiClient for Windows (medium 6.3)
- [CVE-2020-9290](https://insights.sbomify.com/CVE-2020-9290/): Other in FortiClientWindows (high 7.1)
- [CVE-2020-9289](https://insights.sbomify.com/CVE-2020-9289/): Hardcoded credentials in Fortinet FortiManager (high 7.5)
- [CVE-2020-9288](https://insights.sbomify.com/CVE-2020-9288/): Cross-site scripting in Fortinet FortiWLC (medium 5.4)
- [CVE-2020-9287](https://insights.sbomify.com/CVE-2020-9287/): Path traversal in FortiClientEMS (high 7.5)
- [CVE-2020-9286](https://insights.sbomify.com/CVE-2020-9286/): Missing authorization in FortiADC (medium 6.5)
- [CVE-2020-9285](https://insights.sbomify.com/CVE-2020-9285/): Other in n/a (medium 6.8)
- [CVE-2020-9283](https://insights.sbomify.com/CVE-2020-9283/): Improper Verification of Cryptographic Signature in golang.org/x/crypto (high 7.5)
- [CVE-2020-9282](https://insights.sbomify.com/CVE-2020-9282/): Information disclosure in n/a (medium 6.5)
- [CVE-2020-9281](https://insights.sbomify.com/CVE-2020-9281/): CKEditor 4.0 vulnerability in the HTML Data Processor (medium 6.1)
- [CVE-2020-9280](https://insights.sbomify.com/CVE-2020-9280/): SilverStripe Folders migrated from 3.x may be unsafe to upload to (high 7.5)
- [CVE-2020-9279](https://insights.sbomify.com/CVE-2020-9279/): Hardcoded credentials in n/a (critical 9.8)
- [CVE-2020-9278](https://insights.sbomify.com/CVE-2020-9278/): Missing authorization in n/a (critical 9.1)
- [CVE-2020-9277](https://insights.sbomify.com/CVE-2020-9277/): Auth bypass in n/a (critical 9.8)
- [CVE-2020-9276](https://insights.sbomify.com/CVE-2020-9276/): Memory corruption in n/a (high 8.8)
- [CVE-2020-9275](https://insights.sbomify.com/CVE-2020-9275/): Information disclosure in n/a (critical 9.8)
- [CVE-2020-9274](https://insights.sbomify.com/CVE-2020-9274/): Null dereference in n/a (high 7.5)
- [CVE-2020-9273](https://insights.sbomify.com/CVE-2020-9273/): Use after free in n/a (high 8.8)
- [CVE-2020-9272](https://insights.sbomify.com/CVE-2020-9272/): Information disclosure in n/a (high 7.5)
- [CVE-2020-9271](https://insights.sbomify.com/CVE-2020-9271/): Cross-site request forgery in n/a (medium 6.5)
- [CVE-2020-9270](https://insights.sbomify.com/CVE-2020-9270/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2020-9269](https://insights.sbomify.com/CVE-2020-9269/): SQL injection in n/a (high 7.2)
- [CVE-2020-9268](https://insights.sbomify.com/CVE-2020-9268/): SQL injection in n/a (high 7.5)
- [CVE-2020-9267](https://insights.sbomify.com/CVE-2020-9267/): Cross-site request forgery in n/a (medium 6.5)
- [CVE-2020-9266](https://insights.sbomify.com/CVE-2020-9266/): Cross-site request forgery in n/a (medium 6.5)
- [CVE-2020-9265](https://insights.sbomify.com/CVE-2020-9265/): SQL injection in n/a (critical 9.3)
- [CVE-2020-9264](https://insights.sbomify.com/CVE-2020-9264/): Security feature bypass in n/a (medium 5.5)
- [CVE-2020-9263](https://insights.sbomify.com/CVE-2020-9263/): Use after free in HUAWEI Mate 30;HUAWEI P30 (high 7.8)
- [CVE-2020-9262](https://insights.sbomify.com/CVE-2020-9262/): Use after free in HUAWEI Mate 30 (high 7.8)
- [CVE-2020-9261](https://insights.sbomify.com/CVE-2020-9261/): Memory corruption in HUAWEI Mate 30 (high 7.8)
- [CVE-2020-9260](https://insights.sbomify.com/CVE-2020-9260/): Information disclosure in HUAWEI P30;HUAWEI P30 Pro (medium 6.5)
- [CVE-2020-9259](https://insights.sbomify.com/CVE-2020-9259/): Auth bypass in Honor V30 (medium 6.5)
- [CVE-2020-9258](https://insights.sbomify.com/CVE-2020-9258/): Information disclosure in HUAWEI P30 (medium 5.5)
- [CVE-2020-9257](https://insights.sbomify.com/CVE-2020-9257/): Memory corruption in HUAWEI P30 Pro (high 8.8)
- [CVE-2020-9256](https://insights.sbomify.com/CVE-2020-9256/): Missing authorization in Mate 30 Pro (medium 6.5)
- [CVE-2020-9255](https://insights.sbomify.com/CVE-2020-9255/): Denial of service in Honor 10 (medium 5.5)
- [CVE-2020-9254](https://insights.sbomify.com/CVE-2020-9254/): Business logic in HUAWEI P30 Pro (high 7.8)
- [CVE-2020-9253](https://insights.sbomify.com/CVE-2020-9253/): Memory corruption in Lion-AL00C (medium 6.3)
- [CVE-2020-9252](https://insights.sbomify.com/CVE-2020-9252/): Path traversal in HUAWEI Mate 20 (low 2.3)
- [CVE-2020-9251](https://insights.sbomify.com/CVE-2020-9251/): Missing authorization in HUAWEI Mate 20 (low 2.4)
- [CVE-2020-9250](https://insights.sbomify.com/CVE-2020-9250/): Auth bypass in HUAWEI Mate 20 Pro (low 3.3)
- [CVE-2020-9249](https://insights.sbomify.com/CVE-2020-9249/): Denial of service in HUAWEI P30 (medium 6.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/25/