# Vulnerabilities published in 2020


- [CVE-2020-8462](https://insights.sbomify.com/CVE-2020-8462/): Cross-site scripting in Trend Micro InterScan Web Security Virtual Appliance (medium 4.8)
- [CVE-2020-8461](https://insights.sbomify.com/CVE-2020-8461/): Cross-site request forgery in Trend Micro InterScan Web Security Virtual Appliance (high 8.8)
- [CVE-2020-8450](https://insights.sbomify.com/CVE-2020-8450/): Memory corruption in n/a (high 7.3)
- [CVE-2020-8449](https://insights.sbomify.com/CVE-2020-8449/): Security feature bypass in n/a (high 7.5)
- [CVE-2020-8448](https://insights.sbomify.com/CVE-2020-8448/): Null dereference in n/a (medium 5.5)
- [CVE-2020-8447](https://insights.sbomify.com/CVE-2020-8447/): Use after free in n/a (critical 9.8)
- [CVE-2020-8446](https://insights.sbomify.com/CVE-2020-8446/): Path traversal in n/a (medium 5.5)
- [CVE-2020-8445](https://insights.sbomify.com/CVE-2020-8445/): Other in n/a (critical 9.8)
- [CVE-2020-8444](https://insights.sbomify.com/CVE-2020-8444/): Use after free in n/a (critical 9.8)
- [CVE-2020-8443](https://insights.sbomify.com/CVE-2020-8443/): Memory corruption in n/a (critical 9.8)
- [CVE-2020-8442](https://insights.sbomify.com/CVE-2020-8442/): Memory corruption in n/a (high 8.8)
- [CVE-2020-8441](https://insights.sbomify.com/CVE-2020-8441/): Deserialization of Untrusted Data in JYaml (critical 9.8)
- [CVE-2020-8440](https://insights.sbomify.com/CVE-2020-8440/): File upload in n/a (critical 9.8)
- [CVE-2020-8439](https://insights.sbomify.com/CVE-2020-8439/): Missing authorization in n/a (medium 6.5)
- [CVE-2020-8438](https://insights.sbomify.com/CVE-2020-8438/): Command injection in n/a (high 7.2)
- [CVE-2020-8437](https://insights.sbomify.com/CVE-2020-8437/): Null dereference in n/a (high 7.5)
- [CVE-2020-8436](https://insights.sbomify.com/CVE-2020-8436/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2020-8435](https://insights.sbomify.com/CVE-2020-8435/): SQL injection in n/a (high 8.1)
- [CVE-2020-8434](https://insights.sbomify.com/CVE-2020-8434/): Hardcoded credentials in n/a (critical 9.8)
- [CVE-2020-8432](https://insights.sbomify.com/CVE-2020-8432/): Use after free in n/a (critical 9.8)
- [CVE-2020-8430](https://insights.sbomify.com/CVE-2020-8430/): Open redirect in n/a (medium 6.1)
- [CVE-2020-8429](https://insights.sbomify.com/CVE-2020-8429/): Command injection in n/a (high 8.8)
- [CVE-2020-8428](https://insights.sbomify.com/CVE-2020-8428/): Use after free in n/a (high 7.1)
- [CVE-2020-8427](https://insights.sbomify.com/CVE-2020-8427/): SQL injection in n/a (critical 9.8)
- [CVE-2020-8426](https://insights.sbomify.com/CVE-2020-8426/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2020-8425](https://insights.sbomify.com/CVE-2020-8425/): Cross-site request forgery in n/a (medium 6.5)
- [CVE-2020-8424](https://insights.sbomify.com/CVE-2020-8424/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2020-8423](https://insights.sbomify.com/CVE-2020-8423/): Memory corruption in n/a (high 7.2)
- [CVE-2020-8422](https://insights.sbomify.com/CVE-2020-8422/): Information disclosure in n/a (medium 4.3)
- [CVE-2020-8421](https://insights.sbomify.com/CVE-2020-8421/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2020-8420](https://insights.sbomify.com/CVE-2020-8420/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2020-8419](https://insights.sbomify.com/CVE-2020-8419/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2020-8417](https://insights.sbomify.com/CVE-2020-8417/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2020-8416](https://insights.sbomify.com/CVE-2020-8416/): Denial of service in n/a (high 7.5)
- [CVE-2020-8357](https://insights.sbomify.com/CVE-2020-8357/): Path traversal in PCManager (medium 5.5)
- [CVE-2020-8356](https://insights.sbomify.com/CVE-2020-8356/): Information disclosure in XClarity Orchestrator (medium 4.9)
- [CVE-2020-8355](https://insights.sbomify.com/CVE-2020-8355/): Information disclosure in XClarity Administrator (medium 4.9)
- [CVE-2020-8354](https://insights.sbomify.com/CVE-2020-8354/): Race condition in BIOS (medium 6.4)
- [CVE-2020-8353](https://insights.sbomify.com/CVE-2020-8353/): Misconfiguration in Desktop and Workstation systems (medium 6.7)
- [CVE-2020-8352](https://insights.sbomify.com/CVE-2020-8352/): Security feature bypass in BIOS (low 2.4)
- [CVE-2020-8351](https://insights.sbomify.com/CVE-2020-8351/): Privilege escalation in PCManager (high 7.8)
- [CVE-2020-8350](https://insights.sbomify.com/CVE-2020-8350/): Auth bypass in ThinkPad Stack WIreless Router firmware (high 8.8)
- [CVE-2020-8349](https://insights.sbomify.com/CVE-2020-8349/): Code injection in Cloud Networking Operating System (CNOS) (critical 9.8)
- [CVE-2020-8348](https://insights.sbomify.com/CVE-2020-8348/): Cross-site scripting in Enterprise Network Disk (medium 6.1)
- [CVE-2020-8347](https://insights.sbomify.com/CVE-2020-8347/): Cross-site scripting in Enterprise Network Disk (medium 6.1)
- [CVE-2020-8346](https://insights.sbomify.com/CVE-2020-8346/): Path traversal in System Interface Foundation (medium 5.5)
- [CVE-2020-8345](https://insights.sbomify.com/CVE-2020-8345/): Privilege escalation in Vantage HardwareScan Plugin (high 7.3)
- [CVE-2020-8342](https://insights.sbomify.com/CVE-2020-8342/): Race condition in System Update (high 7.3)
- [CVE-2020-8341](https://insights.sbomify.com/CVE-2020-8341/): Security feature bypass in ThinkPad (low 2.4)
- [CVE-2020-8340](https://insights.sbomify.com/CVE-2020-8340/): Cross-site scripting in System x IMM2 firmware (medium 6.3)
- [CVE-2020-8339](https://insights.sbomify.com/CVE-2020-8339/): Cross-site scripting in BladeCenter AMM firmware (medium 4.3)
- [CVE-2020-8338](https://insights.sbomify.com/CVE-2020-8338/): Path traversal in Diagnostics (high 7.8)
- [CVE-2020-8337](https://insights.sbomify.com/CVE-2020-8337/): Other in Synaptics Smart Audio UWP App (medium 6.7)
- [CVE-2020-8336](https://insights.sbomify.com/CVE-2020-8336/): Security feature bypass in BIOS (medium 6.4)
- [CVE-2020-8335](https://insights.sbomify.com/CVE-2020-8335/): Security feature bypass in ThinkPad A285 BIOS (medium 6.1)
- [CVE-2020-8334](https://insights.sbomify.com/CVE-2020-8334/): Security feature bypass in BIOS (medium 6.1)
- [CVE-2020-8333](https://insights.sbomify.com/CVE-2020-8333/): Code injection in BIOS (medium 6.4)
- [CVE-2020-8332](https://insights.sbomify.com/CVE-2020-8332/): Race condition in System x (medium 6.4)
- [CVE-2020-8330](https://insights.sbomify.com/CVE-2020-8330/): Denial of service in Printer LJ4010DN (medium 5.3)
- [CVE-2020-8329](https://insights.sbomify.com/CVE-2020-8329/): Denial of service in Printer LJ4010DN (medium 5.3)
- [CVE-2020-8327](https://insights.sbomify.com/CVE-2020-8327/): Privilege escalation in Vantage (high 7.3)
- [CVE-2020-8326](https://insights.sbomify.com/CVE-2020-8326/): Privilege escalation in Drivers Management (high 7.3)
- [CVE-2020-8324](https://insights.sbomify.com/CVE-2020-8324/): Security feature bypass in LenovoAppScenarioPluginSystem for Lenovo System Interface Foundation (medium 5.0)
- [CVE-2020-8323](https://insights.sbomify.com/CVE-2020-8323/): Code injection in BIOS (medium 6.4)
- [CVE-2020-8322](https://insights.sbomify.com/CVE-2020-8322/): Code injection in BIOS (medium 6.4)
- [CVE-2020-8321](https://insights.sbomify.com/CVE-2020-8321/): Code injection in BIOS (medium 6.4)
- [CVE-2020-8320](https://insights.sbomify.com/CVE-2020-8320/): Privilege escalation in BIOS (medium 6.4)
- [CVE-2020-8319](https://insights.sbomify.com/CVE-2020-8319/): Privilege escalation in Lenovo System Interface Foundation (high 7.3)
- [CVE-2020-8318](https://insights.sbomify.com/CVE-2020-8318/): Privilege escalation in LenovoSystemUpdatePlugin for Lenovo System Interface Foundation (high 7.3)
- [CVE-2020-8317](https://insights.sbomify.com/CVE-2020-8317/): Path traversal in Drivers Management (high 7.3)
- [CVE-2020-8316](https://insights.sbomify.com/CVE-2020-8316/): Information disclosure in Vantage (medium 4.4)
- [CVE-2020-8315](https://insights.sbomify.com/CVE-2020-8315/): Other in n/a (medium 5.5)
- [CVE-2020-8300](https://insights.sbomify.com/CVE-2020-8300/): Auth bypass in Citrix ADC, Citrix Gateway (medium 6.5)
- [CVE-2020-8299](https://insights.sbomify.com/CVE-2020-8299/): Denial of service in Citrix ADC, Citrix Gateway, Citrix SD-WAN WANOP Edition (medium 6.5)
- [CVE-2020-8298](https://insights.sbomify.com/CVE-2020-8298/): Command injection in fs-path (critical 9.8)
- [CVE-2020-8297](https://insights.sbomify.com/CVE-2020-8297/): Missing authorization in Nextcloud Deck (medium 4.3)
- [CVE-2020-8296](https://insights.sbomify.com/CVE-2020-8296/): Information disclosure in Nextcloud Server (medium 6.7)
- [CVE-2020-8295](https://insights.sbomify.com/CVE-2020-8295/): Denial of service in Nextcloud Server (high 7.5)
- [CVE-2020-8294](https://insights.sbomify.com/CVE-2020-8294/): Cross-site scripting in Nextcloud Server (medium 5.4)
- [CVE-2020-8293](https://insights.sbomify.com/CVE-2020-8293/): Denial of service in Nextcloud Server (medium 6.5)
- [CVE-2020-8292](https://insights.sbomify.com/CVE-2020-8292/): Cross-site scripting in Rocket.Chat server (medium 5.4)
- [CVE-2020-8291](https://insights.sbomify.com/CVE-2020-8291/): Cross-site scripting in Rocket.Chat server (medium 6.1)
- [CVE-2020-8290](https://insights.sbomify.com/CVE-2020-8290/): Privilege escalation in Backblaze (high 7.8)
- [CVE-2020-8289](https://insights.sbomify.com/CVE-2020-8289/): Security feature bypass in Backblaze (high 7.8)
- [CVE-2020-8288](https://insights.sbomify.com/CVE-2020-8288/): Cross-site scripting in Rocket.Chat server (medium 5.4)
- [CVE-2020-8287](https://insights.sbomify.com/CVE-2020-8287/): Node.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 allow two copies of a header field in an HTTP request (for example, two Transfer-E (medium 6.5)
- [CVE-2020-8286](https://insights.sbomify.com/CVE-2020-8286/): Security feature bypass in https://github.com/curl/curl (high 7.5)
- [CVE-2020-8285](https://insights.sbomify.com/CVE-2020-8285/): Denial of service in https://github.com/curl/curl (high 7.5)
- [CVE-2020-8284](https://insights.sbomify.com/CVE-2020-8284/): Server-side request forgery in https://github.com/curl/curl (low 3.7)
- [CVE-2020-8283](https://insights.sbomify.com/CVE-2020-8283/): Privilege escalation in Citrix Virtual Apps and Desktops (high 8.8)
- [CVE-2020-8282](https://insights.sbomify.com/CVE-2020-8282/): Cross-site request forgery in EdgePower (high 8.8)
- [CVE-2020-8281](https://insights.sbomify.com/CVE-2020-8281/): Cross-site scripting in Nextcloud Contacts (medium 5.4)
- [CVE-2020-8280](https://insights.sbomify.com/CVE-2020-8280/): Cross-site scripting in Nextcloud Contacts (medium 5.4)
- [CVE-2020-8279](https://insights.sbomify.com/CVE-2020-8279/): Security feature bypass in Nextcloud Social (high 7.4)
- [CVE-2020-8278](https://insights.sbomify.com/CVE-2020-8278/): Missing authorization in Nextcloud Social (medium 5.3)
- [CVE-2020-8277](https://insights.sbomify.com/CVE-2020-8277/): Uncontrolled Resource Consumption in node (high 7.5)
- [CVE-2020-8276](https://insights.sbomify.com/CVE-2020-8276/): Information disclosure in https://github.com/brave/brave-core (medium 5.5)
- [CVE-2020-8275](https://insights.sbomify.com/CVE-2020-8275/): Missing authorization in Citrix Secure Mail for Android (medium 4.3)
- [CVE-2020-8274](https://insights.sbomify.com/CVE-2020-8274/): Code injection in Citrix Secure Mail for Android (medium 6.5)
- [CVE-2020-8273](https://insights.sbomify.com/CVE-2020-8273/): Command injection in Citrix SD-WAN Center (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/32/