# Vulnerabilities published in 2020


- [CVE-2020-8832](https://insights.sbomify.com/CVE-2020-8832/): Ubuntu 18.04 Linux kernel i915 incomplete fix for CVE-2019-14615 (medium 5.5)
- [CVE-2020-8831](https://insights.sbomify.com/CVE-2020-8831/): World writable root owned lock file created in user controllable location (medium 6.5)
- [CVE-2020-8830](https://insights.sbomify.com/CVE-2020-8830/): Server-side request forgery in n/a (high 8.8)
- [CVE-2020-8829](https://insights.sbomify.com/CVE-2020-8829/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2020-8828](https://insights.sbomify.com/CVE-2020-8828/): Argo CD Insecure default administrative password (high 8.8)
- [CVE-2020-8827](https://insights.sbomify.com/CVE-2020-8827/): Improper Restriction of Excessive Authentication Attempts in Argo API (high 7.5)
- [CVE-2020-8826](https://insights.sbomify.com/CVE-2020-8826/): Security feature bypass in n/a (high 7.5)
- [CVE-2020-8825](https://insights.sbomify.com/CVE-2020-8825/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2020-8824](https://insights.sbomify.com/CVE-2020-8824/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2020-8823](https://insights.sbomify.com/CVE-2020-8823/): Cross-site scripting in SocksJS-node (medium 6.1)
- [CVE-2020-8822](https://insights.sbomify.com/CVE-2020-8822/): Cross-site scripting in n/a (medium 4.8)
- [CVE-2020-8821](https://insights.sbomify.com/CVE-2020-8821/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2020-8820](https://insights.sbomify.com/CVE-2020-8820/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2020-8819](https://insights.sbomify.com/CVE-2020-8819/): CardGate Payments plugin for WooCommerce does not validate request origin (high 8.1)
- [CVE-2020-8818](https://insights.sbomify.com/CVE-2020-8818/): Origin Validation Error in Magento 2 (high 8.1)
- [CVE-2020-8817](https://insights.sbomify.com/CVE-2020-8817/): Missing authorization in n/a (high 8.1)
- [CVE-2020-8816](https://insights.sbomify.com/CVE-2020-8816/): Pi-Hole AdminLTE Remote Code Execution (critical 9.1, exploited in the wild)
- [CVE-2020-8815](https://insights.sbomify.com/CVE-2020-8815/): Denial of service in n/a (high 7.5)
- [CVE-2020-8813](https://insights.sbomify.com/CVE-2020-8813/): Command injection in n/a (high 8.8)
- [CVE-2020-8812](https://insights.sbomify.com/CVE-2020-8812/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2020-8811](https://insights.sbomify.com/CVE-2020-8811/): Missing authorization in n/a (medium 4.3)
- [CVE-2020-8810](https://insights.sbomify.com/CVE-2020-8810/): Path traversal in n/a (high 8.1)
- [CVE-2020-8809](https://insights.sbomify.com/CVE-2020-8809/): Supply chain in n/a (high 8.1)
- [CVE-2020-8808](https://insights.sbomify.com/CVE-2020-8808/): Privilege escalation in n/a (high 7.8)
- [CVE-2020-8807](https://insights.sbomify.com/CVE-2020-8807/): Information disclosure in n/a (medium 5.3)
- [CVE-2020-8806](https://insights.sbomify.com/CVE-2020-8806/): Business logic in n/a (high 7.5)
- [CVE-2020-8804](https://insights.sbomify.com/CVE-2020-8804/): SQL injection in n/a (medium 6.5)
- [CVE-2020-8803](https://insights.sbomify.com/CVE-2020-8803/): Path traversal in n/a (critical 9.8)
- [CVE-2020-8802](https://insights.sbomify.com/CVE-2020-8802/): SQL injection in n/a (critical 9.8)
- [CVE-2020-8801](https://insights.sbomify.com/CVE-2020-8801/): Deserialization in n/a (high 7.2)
- [CVE-2020-8800](https://insights.sbomify.com/CVE-2020-8800/): Deserialization in n/a (high 8.8)
- [CVE-2020-8799](https://insights.sbomify.com/CVE-2020-8799/): Cross-site scripting in n/a (medium 4.8)
- [CVE-2020-8798](https://insights.sbomify.com/CVE-2020-8798/): Missing authorization in n/a (medium 5.5)
- [CVE-2020-8797](https://insights.sbomify.com/CVE-2020-8797/): Command injection in n/a (medium 6.7)
- [CVE-2020-8796](https://insights.sbomify.com/CVE-2020-8796/): Code injection in n/a (critical 9.8)
- [CVE-2020-8795](https://insights.sbomify.com/CVE-2020-8795/): Missing authorization in n/a (high 7.5)
- [CVE-2020-8794](https://insights.sbomify.com/CVE-2020-8794/): Memory corruption in n/a (critical 9.8)
- [CVE-2020-8793](https://insights.sbomify.com/CVE-2020-8793/): Path traversal in n/a (medium 4.7)
- [CVE-2020-8792](https://insights.sbomify.com/CVE-2020-8792/): Information disclosure in n/a (medium 5.3)
- [CVE-2020-8791](https://insights.sbomify.com/CVE-2020-8791/): Missing authorization in n/a (medium 6.5)
- [CVE-2020-8790](https://insights.sbomify.com/CVE-2020-8790/): Auth bypass in n/a (critical 9.8)
- [CVE-2020-8789](https://insights.sbomify.com/CVE-2020-8789/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2020-8788](https://insights.sbomify.com/CVE-2020-8788/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2020-8787](https://insights.sbomify.com/CVE-2020-8787/): Other in n/a (high 7.5)
- [CVE-2020-8786](https://insights.sbomify.com/CVE-2020-8786/): SQL injection in n/a (critical 9.8)
- [CVE-2020-8785](https://insights.sbomify.com/CVE-2020-8785/): SQL injection in n/a (critical 9.8)
- [CVE-2020-8784](https://insights.sbomify.com/CVE-2020-8784/): SQL injection in n/a (critical 9.8)
- [CVE-2020-8783](https://insights.sbomify.com/CVE-2020-8783/): SQL injection in n/a (critical 9.8)
- [CVE-2020-8782](https://insights.sbomify.com/CVE-2020-8782/): ALEOS LAN-Side RPC Service Remote Code Execution (high 7.5)
- [CVE-2020-8781](https://insights.sbomify.com/CVE-2020-8781/): Privilege escalation in n/a (high 7.8)
- [CVE-2020-8778](https://insights.sbomify.com/CVE-2020-8778/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2020-8777](https://insights.sbomify.com/CVE-2020-8777/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2020-8776](https://insights.sbomify.com/CVE-2020-8776/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2020-8775](https://insights.sbomify.com/CVE-2020-8775/): Cross-site scripting in n/a (high 8.9)
- [CVE-2020-8774](https://insights.sbomify.com/CVE-2020-8774/): Cross-site scripting in n/a (high 8.8)
- [CVE-2020-8773](https://insights.sbomify.com/CVE-2020-8773/): Cross-site scripting in n/a (high 8.9)
- [CVE-2020-8772](https://insights.sbomify.com/CVE-2020-8772/): Missing authorization in n/a (critical 9.8)
- [CVE-2020-8771](https://insights.sbomify.com/CVE-2020-8771/): Auth bypass in n/a (critical 9.8)
- [CVE-2020-8768](https://insights.sbomify.com/CVE-2020-8768/): Missing authorization in n/a (critical 9.4)
- [CVE-2020-8767](https://insights.sbomify.com/CVE-2020-8767/): Denial of service in Intel(R) 50GbE IP Core for Intel(R) Quartus Prime (medium 5.5)
- [CVE-2020-8766](https://insights.sbomify.com/CVE-2020-8766/): Denial of service in Intel(R) SGX DCAP software (medium 6.5)
- [CVE-2020-8765](https://insights.sbomify.com/CVE-2020-8765/): Privilege escalation in Intel(R) RealSense(TM) DCM (medium 6.7)
- [CVE-2020-8764](https://insights.sbomify.com/CVE-2020-8764/): Privilege escalation in Intel(R) Processors (medium 6.7)
- [CVE-2020-8763](https://insights.sbomify.com/CVE-2020-8763/): Privilege escalation in Intel(R) RealSense(TM) D400 Series Advisory (high 7.8)
- [CVE-2020-8761](https://insights.sbomify.com/CVE-2020-8761/): Weak cryptography in Intel(R) CSME (medium 4.6)
- [CVE-2020-8760](https://insights.sbomify.com/CVE-2020-8760/): Integer overflow in Intel(R) AMT (high 7.8)
- [CVE-2020-8759](https://insights.sbomify.com/CVE-2020-8759/): Privilege escalation in Intel(R) SSD DCT Advisory (medium 6.7)
- [CVE-2020-8758](https://insights.sbomify.com/CVE-2020-8758/): Memory corruption in Intel(R) AMT and Intel(R) ISM (critical 9.8)
- [CVE-2020-8757](https://insights.sbomify.com/CVE-2020-8757/): Memory corruption in Intel(R) AMT (medium 6.7)
- [CVE-2020-8756](https://insights.sbomify.com/CVE-2020-8756/): Privilege escalation in Intel(R) CSME (medium 6.7)
- [CVE-2020-8755](https://insights.sbomify.com/CVE-2020-8755/): Race condition in Intel(R) CSME, Intel(R) SPS (medium 6.4)
- [CVE-2020-8754](https://insights.sbomify.com/CVE-2020-8754/): Information disclosure in Intel(R) AMT, Intel(R) ISM (high 7.5)
- [CVE-2020-8753](https://insights.sbomify.com/CVE-2020-8753/): Information disclosure in Intel(R) AMT, Intel(R) ISM versions (high 7.5)
- [CVE-2020-8752](https://insights.sbomify.com/CVE-2020-8752/): Memory corruption in Intel(R) AMT, Intel(R) ISM versions (critical 9.8)
- [CVE-2020-8751](https://insights.sbomify.com/CVE-2020-8751/): Information disclosure in Intel(R) CSME, Intel(R) TXE (medium 4.6)
- [CVE-2020-8750](https://insights.sbomify.com/CVE-2020-8750/): Use after free in Intel(R) TXE (high 7.8)
- [CVE-2020-8749](https://insights.sbomify.com/CVE-2020-8749/): Information disclosure in Intel(R) AMT (high 8.8)
- [CVE-2020-8747](https://insights.sbomify.com/CVE-2020-8747/): Information disclosure in Intel(R) AMT (critical 9.1)
- [CVE-2020-8746](https://insights.sbomify.com/CVE-2020-8746/): Integer overflow in Intel(R) AMT (medium 6.5)
- [CVE-2020-8745](https://insights.sbomify.com/CVE-2020-8745/): Privilege escalation in Intel(R) CSME, Intel(R) TXE (medium 6.8)
- [CVE-2020-8744](https://insights.sbomify.com/CVE-2020-8744/): Privilege escalation in Intel(R) CSME versions, Intel(R) TXE, Intel(R) SPS (high 7.8)
- [CVE-2020-8743](https://insights.sbomify.com/CVE-2020-8743/): Privilege escalation in Intel(R) Mailbox Interface driver Advisory (high 7.8)
- [CVE-2020-8742](https://insights.sbomify.com/CVE-2020-8742/): Privilege escalation in Intel(R) NUCs Advisory (medium 6.7)
- [CVE-2020-8741](https://insights.sbomify.com/CVE-2020-8741/): Privilege escalation in Intel(R) Thunderbolt(TM) (high 7.8)
- [CVE-2020-8740](https://insights.sbomify.com/CVE-2020-8740/): Memory corruption in Intel BIOS platform sample code for some Intel(R) Processors (medium 6.7)
- [CVE-2020-8739](https://insights.sbomify.com/CVE-2020-8739/): Privilege escalation in Intel BIOS platform sample code for some Intel(R) Processors (high 7.8)
- [CVE-2020-8738](https://insights.sbomify.com/CVE-2020-8738/): Privilege escalation in Intel BIOS platform sample code for some Intel(R) Processors (medium 6.7)
- [CVE-2020-8737](https://insights.sbomify.com/CVE-2020-8737/): Memory corruption in Intel(R) Stratix(R) 10 FPGA firmware provided with the Intel(R) Quartus(R) Prime Pro software (medium 6.8)
- [CVE-2020-8736](https://insights.sbomify.com/CVE-2020-8736/): Privilege escalation in Intel(R) Computing Improvement Program Advisory (high 7.8)
- [CVE-2020-8734](https://insights.sbomify.com/CVE-2020-8734/): Privilege escalation in Intel® Server Board M10JNP2SB Advisory (medium 6.7)
- [CVE-2020-8733](https://insights.sbomify.com/CVE-2020-8733/): Privilege escalation in Intel(R) Server Board M10JNP2SB Advisory (medium 6.7)
- [CVE-2020-8732](https://insights.sbomify.com/CVE-2020-8732/): Memory corruption in Intel(R) Server Boards, Server Systems and Compute Modules Advisory (high 8.8)
- [CVE-2020-8731](https://insights.sbomify.com/CVE-2020-8731/): Privilege escalation in Intel(R) Server Boards, Server Systems and Compute Modules Advisory (high 8.8)
- [CVE-2020-8730](https://insights.sbomify.com/CVE-2020-8730/): Memory corruption in Intel(R) Server Boards, Server Systems and Compute Modules Advisory (high 8.8)
- [CVE-2020-8729](https://insights.sbomify.com/CVE-2020-8729/): Memory corruption in Intel(R) Server Boards, Server Systems and Compute Modules Advisory (high 7.8)
- [CVE-2020-8723](https://insights.sbomify.com/CVE-2020-8723/): Cross-site scripting in Intel(R) Server Boards, Server Systems and Compute Modules Advisory (medium 6.3)
- [CVE-2020-8722](https://insights.sbomify.com/CVE-2020-8722/): Memory corruption in Intel(R) Server Boards, Server Systems and Compute Modules Advisory (high 8.2)
- [CVE-2020-8721](https://insights.sbomify.com/CVE-2020-8721/): Privilege escalation in Intel(R) Server Boards, Server Systems and Compute Modules Advisory (high 8.2)
- [CVE-2020-8720](https://insights.sbomify.com/CVE-2020-8720/): Memory corruption in Intel(R) Server Boards, Server Systems and Compute Modules Advisory (medium 5.5)
- [CVE-2020-8719](https://insights.sbomify.com/CVE-2020-8719/): Memory corruption in Intel(R) Server Boards, Server Systems and Compute Modules Advisory (high 8.2)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/29/