# Vulnerabilities published in 2020


- [CVE-2020-9076](https://insights.sbomify.com/CVE-2020-9076/): Auth bypass in HUAWEI P30;HUAWEI P30 Pro;Tony-AL00B (medium 6.8)
- [CVE-2020-9075](https://insights.sbomify.com/CVE-2020-9075/): Path traversal in Secospace USG6300;USG6300E (medium 6.5)
- [CVE-2020-9074](https://insights.sbomify.com/CVE-2020-9074/): Denial of service in HONOR 20 (medium 5.3)
- [CVE-2020-9073](https://insights.sbomify.com/CVE-2020-9073/): Auth bypass in P20 (low 2.4)
- [CVE-2020-9072](https://insights.sbomify.com/CVE-2020-9072/): Privilege escalation in OSD (medium 6.7)
- [CVE-2020-9071](https://insights.sbomify.com/CVE-2020-9071/): Memory corruption in AR120-S;AR1200;AR1200-S;AR150;AR150-S;AR160;AR200;AR200-S;AR2200;AR2200-S;AR3200;AR3600;AR510;NetEngine16EX;SRG1300;SRG2300;SRG3300 (medium 6.5)
- [CVE-2020-9070](https://insights.sbomify.com/CVE-2020-9070/): Auth bypass in Taurus-AL00B (medium 5.5)
- [CVE-2020-9069](https://insights.sbomify.com/CVE-2020-9069/): Information disclosure in Anne-AL00 (medium 6.5)
- [CVE-2020-9068](https://insights.sbomify.com/CVE-2020-9068/): Auth bypass in AR3200 (critical 9.8)
- [CVE-2020-9067](https://insights.sbomify.com/CVE-2020-9067/): Memory corruption in SmartAX EA5800 (high 8.0)
- [CVE-2020-9066](https://insights.sbomify.com/CVE-2020-9066/): Auth bypass in OxfordP-AN10B (high 7.8)
- [CVE-2020-9065](https://insights.sbomify.com/CVE-2020-9065/): Use after free in Taurus-AL00B (medium 5.5)
- [CVE-2020-9064](https://insights.sbomify.com/CVE-2020-9064/): Auth bypass in Honor V30 (medium 5.5)
- [CVE-2020-9063](https://insights.sbomify.com/CVE-2020-9063/): Memory corruption in SelfServ ATM (high 7.6)
- [CVE-2020-9062](https://insights.sbomify.com/CVE-2020-9062/): Missing authorization in ProCash 2100xe USB ATM (medium 5.3)
- [CVE-2020-9061](https://insights.sbomify.com/CVE-2020-9061/): Denial of service in 500 series (medium 6.5)
- [CVE-2020-9060](https://insights.sbomify.com/CVE-2020-9060/): Denial of service in 500 series (medium 6.5)
- [CVE-2020-9059](https://insights.sbomify.com/CVE-2020-9059/): Denial of service in 500 series (medium 6.5)
- [CVE-2020-9058](https://insights.sbomify.com/CVE-2020-9058/): Weak cryptography in 500 series (high 8.1)
- [CVE-2020-9057](https://insights.sbomify.com/CVE-2020-9057/): Weak cryptography in 100 series (high 8.8)
- [CVE-2020-9056](https://insights.sbomify.com/CVE-2020-9056/): Periscope BuySpeed version 14.5 is vulnerable to stored cross-site scripting (low 3.9)
- [CVE-2020-9055](https://insights.sbomify.com/CVE-2020-9055/): Cross-site scripting in LYNX Customer Service Portal (low 3.9)
- [CVE-2020-9054](https://insights.sbomify.com/CVE-2020-9054/): Zyxel Multiple NAS Devices OS Command Injection (critical 9.8, exploited in the wild)
- [CVE-2020-9050](https://insights.sbomify.com/CVE-2020-9050/): Path traversal in Metasys Reporting Engine (MRE) Web Services versions 2.0 and 2.1 (high 7.5)
- [CVE-2020-9049](https://insights.sbomify.com/CVE-2020-9049/): victor Web Client and C•CURE Web Client JSON Web Token (JWT) Vulnerability (high 7.1)
- [CVE-2020-9048](https://insights.sbomify.com/CVE-2020-9048/): victor Web Client - Arbitrary File Deletion Vulnerability (high 7.1)
- [CVE-2020-9047](https://insights.sbomify.com/CVE-2020-9047/): exacqVision Software - Improper Verification of Cryptographic Signature (medium 6.8)
- [CVE-2020-9046](https://insights.sbomify.com/CVE-2020-9046/): Kantech EntraPass Security Management Software - System Permissions Vulnerability (high 8.8)
- [CVE-2020-9045](https://insights.sbomify.com/CVE-2020-9045/): Information disclosure in American Dynamics victor Video Management System v5.2 (critical 9.9)
- [CVE-2020-9044](https://insights.sbomify.com/CVE-2020-9044/): Metasys Improper Restriction of XML External Entity Reference (high 7.5)
- [CVE-2020-9043](https://insights.sbomify.com/CVE-2020-9043/): Information disclosure in n/a (high 8.8)
- [CVE-2020-9042](https://insights.sbomify.com/CVE-2020-9042/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2020-9041](https://insights.sbomify.com/CVE-2020-9041/): Denial of service in n/a (high 7.5)
- [CVE-2020-9040](https://insights.sbomify.com/CVE-2020-9040/): Couchbase Server Java SDK before 2.7.1.1 allows a potential attacker to forge an SSL certificate and pose as the intended peer. (high 7.5)
- [CVE-2020-9039](https://insights.sbomify.com/CVE-2020-9039/): Missing authorization in n/a (critical 9.8)
- [CVE-2020-9038](https://insights.sbomify.com/CVE-2020-9038/): Cross-site Scripting in Joplin (medium 5.4)
- [CVE-2020-9036](https://insights.sbomify.com/CVE-2020-9036/): Jeedom through 4.0.38 allows XSS. (medium 6.1)
- [CVE-2020-9034](https://insights.sbomify.com/CVE-2020-9034/): Auth bypass in n/a (high 7.5)
- [CVE-2020-9033](https://insights.sbomify.com/CVE-2020-9033/): Path traversal in n/a (medium 6.5)
- [CVE-2020-9032](https://insights.sbomify.com/CVE-2020-9032/): Path traversal in n/a (medium 6.5)
- [CVE-2020-9031](https://insights.sbomify.com/CVE-2020-9031/): Path traversal in n/a (medium 6.5)
- [CVE-2020-9030](https://insights.sbomify.com/CVE-2020-9030/): Path traversal in n/a (medium 6.5)
- [CVE-2020-9029](https://insights.sbomify.com/CVE-2020-9029/): Path traversal in n/a (medium 6.5)
- [CVE-2020-9028](https://insights.sbomify.com/CVE-2020-9028/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2020-9027](https://insights.sbomify.com/CVE-2020-9027/): Command injection in n/a (critical 9.8)
- [CVE-2020-9026](https://insights.sbomify.com/CVE-2020-9026/): Command injection in n/a (critical 9.8)
- [CVE-2020-9025](https://insights.sbomify.com/CVE-2020-9025/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2020-9024](https://insights.sbomify.com/CVE-2020-9024/): Misconfiguration in n/a (critical 9.8)
- [CVE-2020-9023](https://insights.sbomify.com/CVE-2020-9023/): Hardcoded credentials in n/a (critical 9.8)
- [CVE-2020-9022](https://insights.sbomify.com/CVE-2020-9022/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2020-9021](https://insights.sbomify.com/CVE-2020-9021/): Command injection in n/a (critical 9.8)
- [CVE-2020-9020](https://insights.sbomify.com/CVE-2020-9020/): Command injection in n/a (critical 9.8)
- [CVE-2020-9019](https://insights.sbomify.com/CVE-2020-9019/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2020-9018](https://insights.sbomify.com/CVE-2020-9018/): Cross-site request forgery in n/a (medium 5.3)
- [CVE-2020-9017](https://insights.sbomify.com/CVE-2020-9017/): Other in n/a (high 8.0)
- [CVE-2020-9016](https://insights.sbomify.com/CVE-2020-9016/): Dolibarr ERP and CRM contain XSS Vulnerability (medium 5.4)
- [CVE-2020-9015](https://insights.sbomify.com/CVE-2020-9015/): Security feature bypass in n/a (critical 9.8)
- [CVE-2020-9014](https://insights.sbomify.com/CVE-2020-9014/): Denial of service in n/a (medium 5.5)
- [CVE-2020-9013](https://insights.sbomify.com/CVE-2020-9013/): Security feature bypass in n/a (medium 4.3)
- [CVE-2020-9012](https://insights.sbomify.com/CVE-2020-9012/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2020-9009](https://insights.sbomify.com/CVE-2020-9009/): Missing authorization in n/a (low 3.7)
- [CVE-2020-9008](https://insights.sbomify.com/CVE-2020-9008/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2020-9007](https://insights.sbomify.com/CVE-2020-9007/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2020-9006](https://insights.sbomify.com/CVE-2020-9006/): SQL injection in n/a (critical 9.8)
- [CVE-2020-9005](https://insights.sbomify.com/CVE-2020-9005/): Memory corruption in n/a (high 7.8)
- [CVE-2020-9004](https://insights.sbomify.com/CVE-2020-9004/): Auth bypass in n/a (high 8.8)
- [CVE-2020-9003](https://insights.sbomify.com/CVE-2020-9003/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2020-9002](https://insights.sbomify.com/CVE-2020-9002/): Privilege escalation in n/a (critical 9.6)
- [CVE-2020-9000](https://insights.sbomify.com/CVE-2020-9000/): Denial of service in n/a (high 7.5)
- [CVE-2020-8997](https://insights.sbomify.com/CVE-2020-8997/): Memory corruption in n/a (high 8.8)
- [CVE-2020-8996](https://insights.sbomify.com/CVE-2020-8996/): Path traversal in n/a (medium 4.3)
- [CVE-2020-8995](https://insights.sbomify.com/CVE-2020-8995/): Hardcoded credentials in n/a (critical 9.8)
- [CVE-2020-8994](https://insights.sbomify.com/CVE-2020-8994/): Auth bypass in n/a (medium 6.8)
- [CVE-2020-8992](https://insights.sbomify.com/CVE-2020-8992/): Denial of service in n/a (medium 5.5)
- [CVE-2020-8991](https://insights.sbomify.com/CVE-2020-8991/): Denial of service in n/a (low 2.3)
- [CVE-2020-8990](https://insights.sbomify.com/CVE-2020-8990/): Auth bypass in n/a (critical 9.1)
- [CVE-2020-8989](https://insights.sbomify.com/CVE-2020-8989/): Information disclosure in n/a (medium 5.3)
- [CVE-2020-8988](https://insights.sbomify.com/CVE-2020-8988/): Weak cryptography in n/a (medium 5.9)
- [CVE-2020-8987](https://insights.sbomify.com/CVE-2020-8987/): Security feature bypass in n/a (high 7.4)
- [CVE-2020-8986](https://insights.sbomify.com/CVE-2020-8986/): Auth bypass in n/a (critical 9.8)
- [CVE-2020-8985](https://insights.sbomify.com/CVE-2020-8985/): Cross-site scripting in n/a (high 8.8)
- [CVE-2020-8984](https://insights.sbomify.com/CVE-2020-8984/): Security feature bypass in n/a (high 7.5)
- [CVE-2020-8983](https://insights.sbomify.com/CVE-2020-8983/): Path traversal in n/a (high 7.5)
- [CVE-2020-8982](https://insights.sbomify.com/CVE-2020-8982/): Path traversal in n/a (high 7.5)
- [CVE-2020-8981](https://insights.sbomify.com/CVE-2020-8981/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2020-8976](https://insights.sbomify.com/CVE-2020-8976/): ZGR TPS200 Cross-Site Request Forgery (CSRF) (critical 9.6)
- [CVE-2020-8975](https://insights.sbomify.com/CVE-2020-8975/): ZGR TPS200 NG Information Exposure (high 7.5)
- [CVE-2020-8974](https://insights.sbomify.com/CVE-2020-8974/): ZGR TPS200 NG Missing Reference to Active Allocated Resource (critical 10.0)
- [CVE-2020-8973](https://insights.sbomify.com/CVE-2020-8973/): ZGR TPS200 NG Improper access control (critical 9.3)
- [CVE-2020-8968](https://insights.sbomify.com/CVE-2020-8968/): Parallels Remote Application Server credentials management errors (high 7.1)
- [CVE-2020-8967](https://insights.sbomify.com/CVE-2020-8967/): GESIO SQL injection vulnerability (critical 10.0)
- [CVE-2020-8966](https://insights.sbomify.com/CVE-2020-8966/): Cross Site Scripting (XSS) flaws found in Tiki-Wiki CMS software (medium 6.5)
- [CVE-2020-8964](https://insights.sbomify.com/CVE-2020-8964/): Hardcoded credentials in n/a (critical 9.8)
- [CVE-2020-8963](https://insights.sbomify.com/CVE-2020-8963/): Command injection in n/a (critical 9.8)
- [CVE-2020-8962](https://insights.sbomify.com/CVE-2020-8962/): Memory corruption in n/a (critical 9.8)
- [CVE-2020-8961](https://insights.sbomify.com/CVE-2020-8961/): Security feature bypass in n/a (critical 9.8)
- [CVE-2020-8960](https://insights.sbomify.com/CVE-2020-8960/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2020-8959](https://insights.sbomify.com/CVE-2020-8959/): Other in n/a (high 7.8)
- [CVE-2020-8958](https://insights.sbomify.com/CVE-2020-8958/): Command injection in n/a (high 7.2)
- [CVE-2020-8956](https://insights.sbomify.com/CVE-2020-8956/): Information disclosure in n/a (low 3.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/27/