# Vulnerabilities published in 2020


- [CVE-2020-8955](https://insights.sbomify.com/CVE-2020-8955/): Memory corruption in n/a (critical 9.8)
- [CVE-2020-8954](https://insights.sbomify.com/CVE-2020-8954/): Other in n/a (medium 5.4)
- [CVE-2020-8953](https://insights.sbomify.com/CVE-2020-8953/): Auth bypass in n/a (critical 9.8)
- [CVE-2020-8952](https://insights.sbomify.com/CVE-2020-8952/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2020-8951](https://insights.sbomify.com/CVE-2020-8951/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2020-8950](https://insights.sbomify.com/CVE-2020-8950/): Path traversal in n/a (high 7.8)
- [CVE-2020-8949](https://insights.sbomify.com/CVE-2020-8949/): Command injection in n/a (high 8.8)
- [CVE-2020-8948](https://insights.sbomify.com/CVE-2020-8948/): Path traversal in n/a (high 7.8)
- [CVE-2020-8947](https://insights.sbomify.com/CVE-2020-8947/): Command injection in n/a (high 7.2)
- [CVE-2020-8946](https://insights.sbomify.com/CVE-2020-8946/): Command injection in n/a (high 8.8)
- [CVE-2020-8945](https://insights.sbomify.com/CVE-2020-8945/): GPGME Go wrapper contains Use After Free (high 7.5)
- [CVE-2020-8944](https://insights.sbomify.com/CVE-2020-8944/): Unchecked buffer overrun in ecall_restore (medium 5.3)
- [CVE-2020-8943](https://insights.sbomify.com/CVE-2020-8943/): Unchecked buffer overrun in enc_untrusted_recvfrom (medium 5.3)
- [CVE-2020-8942](https://insights.sbomify.com/CVE-2020-8942/): Unchecked buffer overrun in enc_untrusted_read (medium 5.3)
- [CVE-2020-8941](https://insights.sbomify.com/CVE-2020-8941/): Unchecked buffer overrun in enc_untrusted_inet_pton (medium 5.3)
- [CVE-2020-8940](https://insights.sbomify.com/CVE-2020-8940/): Unchecked buffer overrun in enc_untrusted_recvmsg (medium 5.3)
- [CVE-2020-8939](https://insights.sbomify.com/CVE-2020-8939/): Out of Bounds read in Asylo (medium 5.3)
- [CVE-2020-8938](https://insights.sbomify.com/CVE-2020-8938/): Arbitrary enclave memory location write from untrusted environment (medium 5.3)
- [CVE-2020-8937](https://insights.sbomify.com/CVE-2020-8937/): Arbitrary enclave memory location write from untrusted environment (medium 5.3)
- [CVE-2020-8936](https://insights.sbomify.com/CVE-2020-8936/): Arbitrary enclave memory overwrite vulnerability in ECall ecall_restore (medium 5.3)
- [CVE-2020-8935](https://insights.sbomify.com/CVE-2020-8935/): Memory corruption in Asylo (medium 5.3)
- [CVE-2020-8934](https://insights.sbomify.com/CVE-2020-8934/): Site Kit by Google plugin for WordPress (medium 4.3)
- [CVE-2020-8933](https://insights.sbomify.com/CVE-2020-8933/): Priviged Escalation in Google Cloud Platform's Guest-OSLogin (critical 9.3)
- [CVE-2020-8929](https://insights.sbomify.com/CVE-2020-8929/): Ciphertext integrity weakness in Tink (medium 5.3)
- [CVE-2020-8927](https://insights.sbomify.com/CVE-2020-8927/): Buffer overflow in Brotli library (medium 5.3)
- [CVE-2020-8923](https://insights.sbomify.com/CVE-2020-8923/): XSS in Dart (medium 5.4)
- [CVE-2020-8920](https://insights.sbomify.com/CVE-2020-8920/): Overoptimization leads to private information leak in Gerrit (low 3.5)
- [CVE-2020-8919](https://insights.sbomify.com/CVE-2020-8919/): Information leakage in Gerrit (low 3.5)
- [CVE-2020-8918](https://insights.sbomify.com/CVE-2020-8918/): TPM 1.2 key authorization values are vulnerable to a TPM transport eavesdropper (medium 6.3)
- [CVE-2020-8916](https://insights.sbomify.com/CVE-2020-8916/): Memory leak in wpanctl can lead to DoS (medium 5.0)
- [CVE-2020-8913](https://insights.sbomify.com/CVE-2020-8913/): Local arbitrary code execution in splitinstall in Android's Play Core (high 8.8)
- [CVE-2020-8912](https://insights.sbomify.com/CVE-2020-8912/): In-band key negotiation issue in AWS S3 Crypto SDK for GoLang (low 2.5)
- [CVE-2020-8911](https://insights.sbomify.com/CVE-2020-8911/): CBC padding oracle in AWS S3 Crypto SDK for GoLang (medium 5.6)
- [CVE-2020-8910](https://insights.sbomify.com/CVE-2020-8910/): Auth Bypass in Google's Closure-Library (medium 6.5)
- [CVE-2020-8908](https://insights.sbomify.com/CVE-2020-8908/): Temp directory permission issue in Guava (low 3.3)
- [CVE-2020-8907](https://insights.sbomify.com/CVE-2020-8907/): Priviged Escalation in Google Cloud Platform's Guest-OSLogin (critical 9.3)
- [CVE-2020-8905](https://insights.sbomify.com/CVE-2020-8905/): Confidential Information Disclosure vulnerability in Asylo (low 2.8)
- [CVE-2020-8904](https://insights.sbomify.com/CVE-2020-8904/): Arbitrary trusted memory overwrite vulnerability in Asylo (medium 6.4)
- [CVE-2020-8903](https://insights.sbomify.com/CVE-2020-8903/): Priviged Escalation in Google Cloud Platform's Guest-OSLogin (high 7.3)
- [CVE-2020-8902](https://insights.sbomify.com/CVE-2020-8902/): SSRF in Rendertron (low 3.5)
- [CVE-2020-8899](https://insights.sbomify.com/CVE-2020-8899/): Memory corruption in Quram library when decoding qmg can lead to RCE (critical 10.0)
- [CVE-2020-8897](https://insights.sbomify.com/CVE-2020-8897/): Robustness weakness in AWS KMS and Encryption SDKs (medium 4.8)
- [CVE-2020-8896](https://insights.sbomify.com/CVE-2020-8896/): Buffer Overflow in Google Earth Pro (medium 4.2)
- [CVE-2020-8895](https://insights.sbomify.com/CVE-2020-8895/): DLL Hijacking in Google Earth Pro Windows installer (high 7.8)
- [CVE-2020-8894](https://insights.sbomify.com/CVE-2020-8894/): Missing authorization in n/a (medium 6.5)
- [CVE-2020-8893](https://insights.sbomify.com/CVE-2020-8893/): Cross-site scripting in n/a (high 7.5)
- [CVE-2020-8892](https://insights.sbomify.com/CVE-2020-8892/): Security feature bypass in n/a (high 8.1)
- [CVE-2020-8891](https://insights.sbomify.com/CVE-2020-8891/): Security feature bypass in n/a (medium 5.9)
- [CVE-2020-8890](https://insights.sbomify.com/CVE-2020-8890/): Race condition in n/a (medium 5.9)
- [CVE-2020-8889](https://insights.sbomify.com/CVE-2020-8889/): Auth bypass in n/a (high 7.5)
- [CVE-2020-8887](https://insights.sbomify.com/CVE-2020-8887/): SQL injection in n/a (high 7.5)
- [CVE-2020-8884](https://insights.sbomify.com/CVE-2020-8884/): Deserialization in n/a (high 8.8)
- [CVE-2020-8883](https://insights.sbomify.com/CVE-2020-8883/): Information disclosure in Studio Photo (low 3.3)
- [CVE-2020-8882](https://insights.sbomify.com/CVE-2020-8882/): Null dereference in Studio Photo (high 7.8)
- [CVE-2020-8881](https://insights.sbomify.com/CVE-2020-8881/): Use after free in Studio Photo (high 7.8)
- [CVE-2020-8880](https://insights.sbomify.com/CVE-2020-8880/): Memory corruption in Studio Photo (high 7.8)
- [CVE-2020-8879](https://insights.sbomify.com/CVE-2020-8879/): Information disclosure in Studio Photo (low 3.3)
- [CVE-2020-8878](https://insights.sbomify.com/CVE-2020-8878/): Memory corruption in Studio Photo (high 7.8)
- [CVE-2020-8877](https://insights.sbomify.com/CVE-2020-8877/): Information disclosure in Studio Photo (low 3.3)
- [CVE-2020-8876](https://insights.sbomify.com/CVE-2020-8876/): Information disclosure in Desktop (medium 6.5)
- [CVE-2020-8875](https://insights.sbomify.com/CVE-2020-8875/): Memory corruption in Desktop (high 8.8)
- [CVE-2020-8874](https://insights.sbomify.com/CVE-2020-8874/): Integer overflow in Desktop (high 7.5)
- [CVE-2020-8873](https://insights.sbomify.com/CVE-2020-8873/): Race condition in Desktop (high 8.2)
- [CVE-2020-8872](https://insights.sbomify.com/CVE-2020-8872/): Information disclosure in Desktop (medium 6.0)
- [CVE-2020-8871](https://insights.sbomify.com/CVE-2020-8871/): Memory corruption in Desktop (high 8.2)
- [CVE-2020-8870](https://insights.sbomify.com/CVE-2020-8870/): Memory corruption in Studio Photo (high 7.8)
- [CVE-2020-8869](https://insights.sbomify.com/CVE-2020-8869/): Memory corruption in Studio Photo (high 7.8)
- [CVE-2020-8868](https://insights.sbomify.com/CVE-2020-8868/): Hardcoded credentials in Foglight Evolve (critical 9.8)
- [CVE-2020-8867](https://insights.sbomify.com/CVE-2020-8867/): Insufficient Session Expiration and TOCTOU Race Condition in OPC FOundation UA .Net Standard (medium 5.3)
- [CVE-2020-8866](https://insights.sbomify.com/CVE-2020-8866/): File upload in Groupware Webmail Edition (medium 4.3)
- [CVE-2020-8865](https://insights.sbomify.com/CVE-2020-8865/): Path traversal in Groupware Webmail Edition (medium 6.3)
- [CVE-2020-8864](https://insights.sbomify.com/CVE-2020-8864/): Auth bypass in Multiple Routers (high 8.8)
- [CVE-2020-8863](https://insights.sbomify.com/CVE-2020-8863/): Auth bypass in Multiple Routers (high 8.8)
- [CVE-2020-8862](https://insights.sbomify.com/CVE-2020-8862/): Auth bypass in DAP-2610 (high 8.8)
- [CVE-2020-8861](https://insights.sbomify.com/CVE-2020-8861/): Auth bypass in DAP-1330 (high 8.8)
- [CVE-2020-8860](https://insights.sbomify.com/CVE-2020-8860/): Memory corruption in Galaxy S10 (high 7.1)
- [CVE-2020-8859](https://insights.sbomify.com/CVE-2020-8859/): Null dereference in Electronic Logbook (medium 5.3)
- [CVE-2020-8858](https://insights.sbomify.com/CVE-2020-8858/): Command injection in MGate 5105-MB-EIP (high 8.8)
- [CVE-2020-8857](https://insights.sbomify.com/CVE-2020-8857/): Use after free in Reader (high 7.8)
- [CVE-2020-8856](https://insights.sbomify.com/CVE-2020-8856/): Use after free in PhantomPDF (high 7.8)
- [CVE-2020-8855](https://insights.sbomify.com/CVE-2020-8855/): Use after free in PhantomPDF (high 7.8)
- [CVE-2020-8854](https://insights.sbomify.com/CVE-2020-8854/): Memory corruption in PhantomPDF (high 7.8)
- [CVE-2020-8853](https://insights.sbomify.com/CVE-2020-8853/): Memory corruption in PhantomPDF (high 7.8)
- [CVE-2020-8852](https://insights.sbomify.com/CVE-2020-8852/): Information disclosure in Reader (low 3.3)
- [CVE-2020-8851](https://insights.sbomify.com/CVE-2020-8851/): Memory corruption in Reader (high 7.8)
- [CVE-2020-8850](https://insights.sbomify.com/CVE-2020-8850/): Memory corruption in Reader (high 7.8)
- [CVE-2020-8849](https://insights.sbomify.com/CVE-2020-8849/): Memory corruption in Reader (high 7.8)
- [CVE-2020-8848](https://insights.sbomify.com/CVE-2020-8848/): Memory corruption in Reader (high 7.8)
- [CVE-2020-8847](https://insights.sbomify.com/CVE-2020-8847/): Memory corruption in Reader (high 7.8)
- [CVE-2020-8846](https://insights.sbomify.com/CVE-2020-8846/): Use after free in PhantomPDF (high 7.8)
- [CVE-2020-8845](https://insights.sbomify.com/CVE-2020-8845/): Use after free in PhantomPDF (high 7.8)
- [CVE-2020-8844](https://insights.sbomify.com/CVE-2020-8844/): Integer overflow in Reader (high 7.8)
- [CVE-2020-8843](https://insights.sbomify.com/CVE-2020-8843/): Security feature bypass in n/a (high 7.4)
- [CVE-2020-8841](https://insights.sbomify.com/CVE-2020-8841/): SQL injection in n/a (high 8.8)
- [CVE-2020-8840](https://insights.sbomify.com/CVE-2020-8840/): Deserialization of Untrusted Data in jackson-databind (critical 9.8)
- [CVE-2020-8839](https://insights.sbomify.com/CVE-2020-8839/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2020-8838](https://insights.sbomify.com/CVE-2020-8838/): Code injection in n/a (medium 6.4)
- [CVE-2020-8835](https://insights.sbomify.com/CVE-2020-8835/): Linux kernel bpf verifier vulnerability (high 7.8)
- [CVE-2020-8834](https://insights.sbomify.com/CVE-2020-8834/): Linux kernel KVM Power8 conflicting use of HSTATE_HOST_R1 (medium 6.5)
- [CVE-2020-8833](https://insights.sbomify.com/CVE-2020-8833/): Apport race condition in crash report permissions (medium 5.6)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/28/