# Vulnerabilities published in 2020


- [CVE-2020-8718](https://insights.sbomify.com/CVE-2020-8718/): Memory corruption in Intel(R) Server Boards, Server Systems and Compute Modules Advisory (high 8.8)
- [CVE-2020-8717](https://insights.sbomify.com/CVE-2020-8717/): Denial of service in Intel(R) Server Boards, Server Systems and Compute Modules Advisory (medium 5.5)
- [CVE-2020-8716](https://insights.sbomify.com/CVE-2020-8716/): Missing authorization in Intel(R) Server Boards, Server Systems and Compute Modules Advisory (medium 5.5)
- [CVE-2020-8715](https://insights.sbomify.com/CVE-2020-8715/): Null dereference in Intel(R) Server Boards, Server Systems and Compute Modules Advisory (medium 5.5)
- [CVE-2020-8714](https://insights.sbomify.com/CVE-2020-8714/): Auth bypass in Intel(R) Server Boards, Server Systems and Compute Modules Advisory (high 7.8)
- [CVE-2020-8713](https://insights.sbomify.com/CVE-2020-8713/): Auth bypass in Intel(R) Server Boards, Server Systems and Compute Modules Advisory (high 8.8)
- [CVE-2020-8712](https://insights.sbomify.com/CVE-2020-8712/): Memory corruption in Intel(R) Server Boards, Server Systems and Compute Modules Advisory (high 7.8)
- [CVE-2020-8711](https://insights.sbomify.com/CVE-2020-8711/): Privilege escalation in Intel(R) Server Boards, Server Systems and Compute Modules Advisory (medium 6.7)
- [CVE-2020-8710](https://insights.sbomify.com/CVE-2020-8710/): Memory corruption in Intel(R) Server Boards, Server Systems and Compute Modules Advisory (medium 6.7)
- [CVE-2020-8709](https://insights.sbomify.com/CVE-2020-8709/): Auth bypass in Intel(R) Server Boards, Server Systems and Compute Modules Advisory (high 8.8)
- [CVE-2020-8708](https://insights.sbomify.com/CVE-2020-8708/): Auth bypass in Intel(R) Server Boards, Server Systems and Compute Modules Advisory (high 8.8)
- [CVE-2020-8707](https://insights.sbomify.com/CVE-2020-8707/): Memory corruption in Intel(R) Server Boards, Server Systems and Compute Modules Advisory (high 8.8)
- [CVE-2020-8706](https://insights.sbomify.com/CVE-2020-8706/): Memory corruption in Intel(R) Server Boards, Server Systems and Compute Modules Advisory (high 8.8)
- [CVE-2020-8705](https://insights.sbomify.com/CVE-2020-8705/): Misconfiguration in Intel(R) Boot Guard, Intel(R) CSME, Intel(R) TXE, Intel(R) SPS (medium 6.8)
- [CVE-2020-8704](https://insights.sbomify.com/CVE-2020-8704/): Race condition in a subsystem in the Intel(R) LMS versions before 2039.1.0.0 may allow a privileged user to potentially enable escalation of (medium 6.4)
- [CVE-2020-8703](https://insights.sbomify.com/CVE-2020-8703/): Privilege escalation in Intel(R) CSME versions (medium 6.7)
- [CVE-2020-8702](https://insights.sbomify.com/CVE-2020-8702/): Privilege escalation in Intel(R) Processor Diagnostic Tool (high 7.3)
- [CVE-2020-8701](https://insights.sbomify.com/CVE-2020-8701/): Privilege escalation in Intel(R) SSD Toolbox versions (medium 6.7)
- [CVE-2020-8700](https://insights.sbomify.com/CVE-2020-8700/): Privilege escalation in Intel(R) Processors (medium 6.7)
- [CVE-2020-8698](https://insights.sbomify.com/CVE-2020-8698/): Information disclosure in Intel(R) Processors (medium 5.5)
- [CVE-2020-8696](https://insights.sbomify.com/CVE-2020-8696/): Information disclosure in Intel(R) Processors (medium 5.5)
- [CVE-2020-8695](https://insights.sbomify.com/CVE-2020-8695/): Information disclosure in Intel(R) Processors (medium 5.5)
- [CVE-2020-8694](https://insights.sbomify.com/CVE-2020-8694/): Information disclosure in Intel(R) Processors (medium 5.5)
- [CVE-2020-8693](https://insights.sbomify.com/CVE-2020-8693/): Privilege escalation in Intel(R) Ethernet 700 Series Controllers (medium 6.7)
- [CVE-2020-8692](https://insights.sbomify.com/CVE-2020-8692/): Privilege escalation in Intel(R) Ethernet 700 Series Controllers (medium 6.7)
- [CVE-2020-8691](https://insights.sbomify.com/CVE-2020-8691/): Privilege escalation in Intel(R) Ethernet 700 Series Controllers (medium 6.7)
- [CVE-2020-8690](https://insights.sbomify.com/CVE-2020-8690/): Privilege escalation in Intel(R) Ethernet 700 Series Controllers (medium 6.7)
- [CVE-2020-8689](https://insights.sbomify.com/CVE-2020-8689/): Denial of service in Intel(R) Wireless for Open Source Advisory (medium 6.5)
- [CVE-2020-8688](https://insights.sbomify.com/CVE-2020-8688/): Denial of service in Intel(R) RAID Web Console 3 for Windows* Advisory (high 7.5)
- [CVE-2020-8687](https://insights.sbomify.com/CVE-2020-8687/): Privilege escalation in Intel(R) RSTe Software RAID Driver for the Intel(R) Server Board M10JNP2SB Advisory (high 7.8)
- [CVE-2020-8685](https://insights.sbomify.com/CVE-2020-8685/): Auth bypass in Intel (R) LED Manager for NUC Advisory (medium 4.4)
- [CVE-2020-8684](https://insights.sbomify.com/CVE-2020-8684/): Privilege escalation in Intel(R) PAC with Arria(R) 10 GX FPGA Advisory (medium 6.7)
- [CVE-2020-8683](https://insights.sbomify.com/CVE-2020-8683/): Denial of service in Intel(R) Graphics Drivers Advisory (medium 5.5)
- [CVE-2020-8682](https://insights.sbomify.com/CVE-2020-8682/): Denial of service in Intel(R) Graphics Drivers Advisory (medium 5.5)
- [CVE-2020-8681](https://insights.sbomify.com/CVE-2020-8681/): Memory corruption in Intel(R) Graphics Drivers Advisory (high 7.8)
- [CVE-2020-8680](https://insights.sbomify.com/CVE-2020-8680/): Race condition in Intel(R) Graphics Drivers Advisory (high 7.0)
- [CVE-2020-8679](https://insights.sbomify.com/CVE-2020-8679/): Memory corruption in Intel(R) Graphics Drivers Advisory (medium 5.5)
- [CVE-2020-8678](https://insights.sbomify.com/CVE-2020-8678/): Privilege escalation in Intel(R) Graphics Drivers (high 7.8)
- [CVE-2020-8677](https://insights.sbomify.com/CVE-2020-8677/): Denial of service in versions (medium 4.4)
- [CVE-2020-8676](https://insights.sbomify.com/CVE-2020-8676/): Privilege escalation in versions (medium 6.7)
- [CVE-2020-8675](https://insights.sbomify.com/CVE-2020-8675/): Privilege escalation in Intel(R)Innovation Engine Advisory (medium 6.8)
- [CVE-2020-8674](https://insights.sbomify.com/CVE-2020-8674/): Information disclosure in Intel(R) AMT and Intel(R) ISM (medium 5.3)
- [CVE-2020-8672](https://insights.sbomify.com/CVE-2020-8672/): Memory corruption in Intel BIOS Advisory (high 7.8)
- [CVE-2020-8671](https://insights.sbomify.com/CVE-2020-8671/): Information disclosure in Intel BIOS (medium 5.5)
- [CVE-2020-8670](https://insights.sbomify.com/CVE-2020-8670/): Race condition in Intel(R) Processors (medium 6.4)
- [CVE-2020-8669](https://insights.sbomify.com/CVE-2020-8669/): Information disclosure in Intel(R) Data Center Manager Console (medium 6.5)
- [CVE-2020-8664](https://insights.sbomify.com/CVE-2020-8664/): Auth bypass in n/a (medium 5.3)
- [CVE-2020-8663](https://insights.sbomify.com/CVE-2020-8663/): Denial of service in n/a (high 7.5)
- [CVE-2020-8661](https://insights.sbomify.com/CVE-2020-8661/): Denial of service in n/a (high 7.5)
- [CVE-2020-8660](https://insights.sbomify.com/CVE-2020-8660/): CNCF Envoy through 1.13.0 TLS inspector bypass. (medium 5.3)
- [CVE-2020-8659](https://insights.sbomify.com/CVE-2020-8659/): CNCF Envoy through 1.13.0 may consume excessive amounts of memory when proxying HTTP/1.1 requests or responses with many small (i.e. (high 7.5)
- [CVE-2020-8658](https://insights.sbomify.com/CVE-2020-8658/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2020-8657](https://insights.sbomify.com/CVE-2020-8657/): EyesOfNetwork Use of Hard-Coded Credentials (critical 9.8, exploited in the wild)
- [CVE-2020-8656](https://insights.sbomify.com/CVE-2020-8656/): SQL injection in n/a (critical 9.8)
- [CVE-2020-8655](https://insights.sbomify.com/CVE-2020-8655/): EyesOfNetwork Improper Privilege Management (high 7.8, exploited in the wild)
- [CVE-2020-8654](https://insights.sbomify.com/CVE-2020-8654/): Command injection in n/a (high 8.8)
- [CVE-2020-8649](https://insights.sbomify.com/CVE-2020-8649/): Use after free in n/a (medium 5.9)
- [CVE-2020-8648](https://insights.sbomify.com/CVE-2020-8648/): Use after free in n/a (high 7.1)
- [CVE-2020-8647](https://insights.sbomify.com/CVE-2020-8647/): Use after free in n/a (medium 6.1)
- [CVE-2020-8645](https://insights.sbomify.com/CVE-2020-8645/): SQL injection in n/a (critical 9.8)
- [CVE-2020-8644](https://insights.sbomify.com/CVE-2020-8644/): PlaySMS Server-Side Template Injection (critical 9.8, exploited in the wild)
- [CVE-2020-8641](https://insights.sbomify.com/CVE-2020-8641/): Path traversal in n/a (high 8.8)
- [CVE-2020-8639](https://insights.sbomify.com/CVE-2020-8639/): File upload in n/a (high 8.8)
- [CVE-2020-8638](https://insights.sbomify.com/CVE-2020-8638/): SQL injection in n/a (critical 9.8)
- [CVE-2020-8637](https://insights.sbomify.com/CVE-2020-8637/): SQL injection in n/a (critical 9.8)
- [CVE-2020-8636](https://insights.sbomify.com/CVE-2020-8636/): Auth bypass in n/a (critical 9.8)
- [CVE-2020-8635](https://insights.sbomify.com/CVE-2020-8635/): Misconfiguration in n/a (high 7.8)
- [CVE-2020-8634](https://insights.sbomify.com/CVE-2020-8634/): Privilege escalation in n/a (high 7.8)
- [CVE-2020-8633](https://insights.sbomify.com/CVE-2020-8633/): Missing authorization in n/a (medium 5.3)
- [CVE-2020-8632](https://insights.sbomify.com/CVE-2020-8632/): Weak cryptography in n/a (medium 5.5)
- [CVE-2020-8631](https://insights.sbomify.com/CVE-2020-8631/): Weak cryptography in n/a (medium 5.5)
- [CVE-2020-8625](https://insights.sbomify.com/CVE-2020-8625/): A vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attack (high 8.1)
- [CVE-2020-8624](https://insights.sbomify.com/CVE-2020-8624/): update-policy rules of type "subdomain" are enforced incorrectly (medium 4.3)
- [CVE-2020-8623](https://insights.sbomify.com/CVE-2020-8623/): A flaw in native PKCS#11 code can lead to a remotely triggerable assertion failure in pk11.c (high 7.5)
- [CVE-2020-8622](https://insights.sbomify.com/CVE-2020-8622/): A truncated TSIG response can lead to an assertion failure (medium 6.5)
- [CVE-2020-8621](https://insights.sbomify.com/CVE-2020-8621/): Attempting QNAME minimization after forwarding can lead to an assertion failure in resolver.c (high 7.5)
- [CVE-2020-8620](https://insights.sbomify.com/CVE-2020-8620/): Denial of service in BIND9 (high 7.5)
- [CVE-2020-8619](https://insights.sbomify.com/CVE-2020-8619/): A buffer boundary check assertion in rdataset.c can fail incorrectly during zone transfer (medium 4.9)
- [CVE-2020-8618](https://insights.sbomify.com/CVE-2020-8618/): A buffer boundary check assertion in rdataset.c can fail incorrectly during zone transfer (medium 4.9)
- [CVE-2020-8617](https://insights.sbomify.com/CVE-2020-8617/): A logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.c (high 7.5)
- [CVE-2020-8616](https://insights.sbomify.com/CVE-2020-8616/): BIND does not sufficiently limit the number of fetches performed when processing referrals (high 8.6)
- [CVE-2020-8615](https://insights.sbomify.com/CVE-2020-8615/): Cross-site request forgery in n/a (medium 6.5)
- [CVE-2020-8614](https://insights.sbomify.com/CVE-2020-8614/): Command injection in n/a (critical 9.8)
- [CVE-2020-8612](https://insights.sbomify.com/CVE-2020-8612/): Cross-site scripting in n/a (critical 9.0)
- [CVE-2020-8611](https://insights.sbomify.com/CVE-2020-8611/): SQL injection in n/a (high 8.8)
- [CVE-2020-8608](https://insights.sbomify.com/CVE-2020-8608/): Memory corruption in n/a (medium 5.6)
- [CVE-2020-8607](https://insights.sbomify.com/CVE-2020-8607/): Privilege escalation in Trend Micro Anti-Threat Toolkit (ATTK) (medium 6.7)
- [CVE-2020-8606](https://insights.sbomify.com/CVE-2020-8606/): Auth bypass in Trend Micro InterScan Web Security Virtual Appliance (critical 9.8)
- [CVE-2020-8605](https://insights.sbomify.com/CVE-2020-8605/): Command injection in Trend Micro InterScan Web Security Virtual Appliance (high 8.8)
- [CVE-2020-8604](https://insights.sbomify.com/CVE-2020-8604/): Path traversal in Trend Micro InterScan Web Security Virtual Appliance (high 7.5)
- [CVE-2020-8603](https://insights.sbomify.com/CVE-2020-8603/): Cross-site scripting in Trend Micro InterScan Web Security Virtual Appliance (medium 6.1)
- [CVE-2020-8602](https://insights.sbomify.com/CVE-2020-8602/): Security feature bypass in Trend Micro Deep Security (high 7.2)
- [CVE-2020-8601](https://insights.sbomify.com/CVE-2020-8601/): Other in Trend Micro Vulnerability Protection (high 7.8)
- [CVE-2020-8600](https://insights.sbomify.com/CVE-2020-8600/): Path traversal in Trend Micro Worry-Free Business Security (WFBS) (critical 9.8)
- [CVE-2020-8599](https://insights.sbomify.com/CVE-2020-8599/): Trend Micro Apex One and OfficeScan Authentication Bypass (critical 9.8, exploited in the wild)
- [CVE-2020-8598](https://insights.sbomify.com/CVE-2020-8598/): Auth bypass in Trend Micro OfficeScan, Trend Micro Apex One, Trend Micro Worry-Free Business Security (WFBS) (critical 9.8)
- [CVE-2020-8597](https://insights.sbomify.com/CVE-2020-8597/): Memory corruption in n/a (critical 9.8)
- [CVE-2020-8596](https://insights.sbomify.com/CVE-2020-8596/): SQL injection in n/a (high 7.5)
- [CVE-2020-8595](https://insights.sbomify.com/CVE-2020-8595/): Auth bypass in n/a (high 7.3)
- [CVE-2020-8594](https://insights.sbomify.com/CVE-2020-8594/): Cross-site scripting in n/a (medium 5.4)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/30/