# Vulnerabilities published in 2020


- [CVE-2020-7905](https://insights.sbomify.com/CVE-2020-7905/): Misconfiguration in jetbrains:intellij idea (high 7.5)
- [CVE-2020-7904](https://insights.sbomify.com/CVE-2020-7904/): Weak cryptography in jetbrains:intellij idea (high 7.4)
- [CVE-2020-7883](https://insights.sbomify.com/CVE-2020-7883/): Code injection in Printchaser (critical 9.8)
- [CVE-2020-7882](https://insights.sbomify.com/CVE-2020-7882/): anySign directory traversal vulnerability (high 7.5)
- [CVE-2020-7881](https://insights.sbomify.com/CVE-2020-7881/): AfreecaTV streamer service stack-based buffer overflow (high 7.5)
- [CVE-2020-7880](https://insights.sbomify.com/CVE-2020-7880/): douzone NeoRS remote support program ActiveX vulnerability (high 7.5)
- [CVE-2020-7879](https://insights.sbomify.com/CVE-2020-7879/): ipTIME C200 IP Camera command injection vulnerability (high 8.8)
- [CVE-2020-7878](https://insights.sbomify.com/CVE-2020-7878/): Security feature bypass in VideoOffice (critical 9.8)
- [CVE-2020-7877](https://insights.sbomify.com/CVE-2020-7877/): ZOOK solution(remote administration tool) buffer overflow vulnerability (high 8.0)
- [CVE-2020-7875](https://insights.sbomify.com/CVE-2020-7875/): RAONWIZ DEXT5 Upload ActiveX remote file execution vulnerability (high 7.5)
- [CVE-2020-7874](https://insights.sbomify.com/CVE-2020-7874/): NEXACRO14 Runtime arbitrary file download and execution vulnerability (high 8.8)
- [CVE-2020-7873](https://insights.sbomify.com/CVE-2020-7873/): Security feature bypass in K-System WellComm (high 8.8)
- [CVE-2020-7872](https://insights.sbomify.com/CVE-2020-7872/): Integer overflow in DaviewIndy (high 7.8)
- [CVE-2020-7871](https://insights.sbomify.com/CVE-2020-7871/): Command injection in Helpcom (high 7.5)
- [CVE-2020-7870](https://insights.sbomify.com/CVE-2020-7870/): Memory corruption in ezPDF Editor (medium 6.4)
- [CVE-2020-7869](https://insights.sbomify.com/CVE-2020-7869/): Missing authorization in ZOOK (critical 9.0)
- [CVE-2020-7868](https://insights.sbomify.com/CVE-2020-7868/): Helpu remote code execution vulnerability (critical 9.6)
- [CVE-2020-7867](https://insights.sbomify.com/CVE-2020-7867/): Helpu arbitrary file creation vulnerability (high 8.0)
- [CVE-2020-7866](https://insights.sbomify.com/CVE-2020-7866/): Tobesoft XPLATFORM Arbitrary Command Execution Vulnerability (high 8.8)
- [CVE-2020-7865](https://insights.sbomify.com/CVE-2020-7865/): Inoguard ExECM CoreB2B solution remote code execution vulnerability (high 8.8)
- [CVE-2020-7864](https://insights.sbomify.com/CVE-2020-7864/): Raonwiz DEXT5 Editor File upload and Execution vulnerability (high 7.8)
- [CVE-2020-7863](https://insights.sbomify.com/CVE-2020-7863/): Raonwiz RAON K Upload Arbitrary Command Execution Vulnerability (high 8.8)
- [CVE-2020-7862](https://insights.sbomify.com/CVE-2020-7862/): HelpU Overflow Vulnerability (high 7.0)
- [CVE-2020-7861](https://insights.sbomify.com/CVE-2020-7861/): AnySupport directory traversing vulnerability (high 8.4)
- [CVE-2020-7860](https://insights.sbomify.com/CVE-2020-7860/): Integer overflow in UnEGG (high 7.8)
- [CVE-2020-7858](https://insights.sbomify.com/CVE-2020-7858/): AquaNPlayer directory traversing vulnerability (medium 6.8)
- [CVE-2020-7857](https://insights.sbomify.com/CVE-2020-7857/): Code injection in XPlatform (high 7.5)
- [CVE-2020-7856](https://insights.sbomify.com/CVE-2020-7856/): Auth bypass in Helpcom (high 7.5)
- [CVE-2020-7853](https://insights.sbomify.com/CVE-2020-7853/): TOBESOFT XPLATFORM Out-of-Bounds Read/Write Vulnerabilities (medium 5.5)
- [CVE-2020-7852](https://insights.sbomify.com/CVE-2020-7852/): DaviewIndy Heap Overflow Vulnerabilities (high 7.8)
- [CVE-2020-7851](https://insights.sbomify.com/CVE-2020-7851/): Innorix File Transfer Solution File Download and Execution Vulnerability (high 7.8)
- [CVE-2020-7850](https://insights.sbomify.com/CVE-2020-7850/): Douzone ActiveX File Download and Execution Vulnerability (high 7.8)
- [CVE-2020-7849](https://insights.sbomify.com/CVE-2020-7849/): UPRISM CURIX arbitrary code execution vulnerability (high 8.0)
- [CVE-2020-7848](https://insights.sbomify.com/CVE-2020-7848/): Command injection in ipTIME C200 IP Camera (high 8.0)
- [CVE-2020-7847](https://insights.sbomify.com/CVE-2020-7847/): File upload in ipTIME NAS (high 7.4)
- [CVE-2020-7846](https://insights.sbomify.com/CVE-2020-7846/): Hardcoded credentials in Helpcom (high 8.0)
- [CVE-2020-7845](https://insights.sbomify.com/CVE-2020-7845/): Jiransecurity Spamsniper Stack-based Buffer Overflow Vulnerability (high 8.1)
- [CVE-2020-7842](https://insights.sbomify.com/CVE-2020-7842/): D'live AP command injection vulnerability (medium 6.4)
- [CVE-2020-7841](https://insights.sbomify.com/CVE-2020-7841/): TOBESOFT XPLATFORM arbitrary hta file execution vulnerability (high 8.8)
- [CVE-2020-7839](https://insights.sbomify.com/CVE-2020-7839/): MarkAny MaEPSBroker Command Injection Vulnerability (high 8.8)
- [CVE-2020-7838](https://insights.sbomify.com/CVE-2020-7838/): Code injection in STOVE Client (high 8.8)
- [CVE-2020-7837](https://insights.sbomify.com/CVE-2020-7837/): Memory corruption in ML Report (high 7.5)
- [CVE-2020-7836](https://insights.sbomify.com/CVE-2020-7836/): Memory corruption in WSActiveBridgeES (high 7.8)
- [CVE-2020-7832](https://insights.sbomify.com/CVE-2020-7832/): RAONWIZ DEXT5 Upload remote code execution vulnerability (high 8.8)
- [CVE-2020-7831](https://insights.sbomify.com/CVE-2020-7831/): Path traversal in Ebiz4u CViewer Object AxECM.dll (high 8.8)
- [CVE-2020-7830](https://insights.sbomify.com/CVE-2020-7830/): Path traversal in RAON KUpload (high 7.8)
- [CVE-2020-7829](https://insights.sbomify.com/CVE-2020-7829/): DaviewIndy Heap-based Buffer Overflow Vulnerability (high 7.8)
- [CVE-2020-7828](https://insights.sbomify.com/CVE-2020-7828/): DaviewIndy Heap-based Buffer Overflow Vulnerability (high 7.8)
- [CVE-2020-7827](https://insights.sbomify.com/CVE-2020-7827/): DaviewIndy Use-After-Free Vulnerability (high 7.8)
- [CVE-2020-7826](https://insights.sbomify.com/CVE-2020-7826/): Code injection in EyeSurfer BflyInstallerX.ocx (high 8.8)
- [CVE-2020-7825](https://insights.sbomify.com/CVE-2020-7825/): Command injection in MiPlatform 320, 320U, 330, 330U (high 8.8)
- [CVE-2020-7824](https://insights.sbomify.com/CVE-2020-7824/): Ericssonlg iPECS Privilege Escalation Vulnerability (medium 6.5)
- [CVE-2020-7823](https://insights.sbomify.com/CVE-2020-7823/): DaviewIndy Multiple Vulnerabilities (high 7.8)
- [CVE-2020-7822](https://insights.sbomify.com/CVE-2020-7822/): DaviewIndy Multiple Vulnerabilities (high 7.8)
- [CVE-2020-7821](https://insights.sbomify.com/CVE-2020-7821/): Tobesoft NEXACRO14/17 ExCommonApiV13 Arbitrary Code Execution Vulnerability (high 7.8)
- [CVE-2020-7820](https://insights.sbomify.com/CVE-2020-7820/): Tobesoft NEXACRO14/17 ExCommonApiV13 Arbitrary Code Execution Vulnerability (high 7.8)
- [CVE-2020-7819](https://insights.sbomify.com/CVE-2020-7819/): nTracker USB Enterprise SQL-Injection vulnerability (critical 9.3)
- [CVE-2020-7818](https://insights.sbomify.com/CVE-2020-7818/): DaviewIndy Heap Overflow Vulnerability (high 7.8)
- [CVE-2020-7817](https://insights.sbomify.com/CVE-2020-7817/): Supply chain in MyBrowserPlus (medium 5.5)
- [CVE-2020-7816](https://insights.sbomify.com/CVE-2020-7816/): Memory corruption in DaView Indy, DaVA+, DaOffice (high 7.0)
- [CVE-2020-7815](https://insights.sbomify.com/CVE-2020-7815/): Other in XPLATFORM (high 7.8)
- [CVE-2020-7814](https://insights.sbomify.com/CVE-2020-7814/): File upload in RAON KUpload (high 7.8)
- [CVE-2020-7813](https://insights.sbomify.com/CVE-2020-7813/): Kaoni ezHTTPTrans Active-X File Download and Execution Vulnerability (high 7.8)
- [CVE-2020-7812](https://insights.sbomify.com/CVE-2020-7812/): Kaoni ezHTTPTrans Active-X File Download and Execution Vulnerability (high 7.8)
- [CVE-2020-7811](https://insights.sbomify.com/CVE-2020-7811/): Samsung Update Local Privilege Escalation Vulnerability (medium 6.2)
- [CVE-2020-7810](https://insights.sbomify.com/CVE-2020-7810/): HandySoft ActiveX File Download and Execution Vulnerability (high 8.8)
- [CVE-2020-7809](https://insights.sbomify.com/CVE-2020-7809/): Estsoft ALSong DOM-Based XSS Vulnerability (medium 4.4)
- [CVE-2020-7808](https://insights.sbomify.com/CVE-2020-7808/): RAONWIZ Inc K Upload, arguments modiffication via missing support for integrity check vulnerability (high 8.7)
- [CVE-2020-7807](https://insights.sbomify.com/CVE-2020-7807/): DLL Hijacking Vulnerabilities During Installation of LG Electronics Software (medium 5.6)
- [CVE-2020-7806](https://insights.sbomify.com/CVE-2020-7806/): Tobesoft Xplatform ActiveX File Download Vulnerability (high 7.8)
- [CVE-2020-7805](https://insights.sbomify.com/CVE-2020-7805/): Command injection in KT Slim egg IML500 (critical 9.8)
- [CVE-2020-7804](https://insights.sbomify.com/CVE-2020-7804/): Command injection in HandySoft Groupware(HShell.dll) for for Windows 7, 8, 10 (medium 6.4)
- [CVE-2020-7803](https://insights.sbomify.com/CVE-2020-7803/): Zoneplayer ActiveX File Download Vulnerability (high 7.8)
- [CVE-2020-7802](https://insights.sbomify.com/CVE-2020-7802/): Misconfiguration in s3india:husky rtu 6049-e70 firmware (medium 5.3)
- [CVE-2020-7801](https://insights.sbomify.com/CVE-2020-7801/): Information disclosure in mysyngeryss:husky rtu 6049-e70 firmware (medium 5.3)
- [CVE-2020-7800](https://insights.sbomify.com/CVE-2020-7800/): Denial of service in mysyngeryss:husky rtu 6049-e70 firmware (high 8.2)
- [CVE-2020-7799](https://insights.sbomify.com/CVE-2020-7799/): Code injection in fusionauth:fusionauth (high 7.2)
- [CVE-2020-7796](https://insights.sbomify.com/CVE-2020-7796/): Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (critical 9.8, exploited in the wild)
- [CVE-2020-7795](https://insights.sbomify.com/CVE-2020-7795/): Command Injection (high 7.3)
- [CVE-2020-7794](https://insights.sbomify.com/CVE-2020-7794/): Command Injection (critical 9.8)
- [CVE-2020-7793](https://insights.sbomify.com/CVE-2020-7793/): Regular Expression Denial of Service (ReDoS) (high 7.5)
- [CVE-2020-7792](https://insights.sbomify.com/CVE-2020-7792/): Prototype Pollution (high 7.5)
- [CVE-2020-7791](https://insights.sbomify.com/CVE-2020-7791/): Denial of Service (DoS) (high 7.5)
- [CVE-2020-7790](https://insights.sbomify.com/CVE-2020-7790/): Arbitrary File Read (medium 5.3)
- [CVE-2020-7789](https://insights.sbomify.com/CVE-2020-7789/): Command Injection (medium 5.6)
- [CVE-2020-7788](https://insights.sbomify.com/CVE-2020-7788/): Prototype Pollution (high 7.3)
- [CVE-2020-7787](https://insights.sbomify.com/CVE-2020-7787/): Improper Authentication (high 8.2)
- [CVE-2020-7786](https://insights.sbomify.com/CVE-2020-7786/): Command Injection (critical 9.8)
- [CVE-2020-7785](https://insights.sbomify.com/CVE-2020-7785/): Command Injection (critical 9.8)
- [CVE-2020-7784](https://insights.sbomify.com/CVE-2020-7784/): command_injection (critical 9.8)
- [CVE-2020-7782](https://insights.sbomify.com/CVE-2020-7782/): Command Injection (critical 9.8)
- [CVE-2020-7781](https://insights.sbomify.com/CVE-2020-7781/): Command Injection (critical 9.8)
- [CVE-2020-7780](https://insights.sbomify.com/CVE-2020-7780/): Cross-site Request Forgery (CSRF) (medium 6.3)
- [CVE-2020-7779](https://insights.sbomify.com/CVE-2020-7779/): Regular Expression Denial of Service (ReDoS) (medium 5.3)
- [CVE-2020-7778](https://insights.sbomify.com/CVE-2020-7778/): Prototype Pollution (high 7.3)
- [CVE-2020-7777](https://insights.sbomify.com/CVE-2020-7777/): Arbitrary Code Execution (high 7.2)
- [CVE-2020-7776](https://insights.sbomify.com/CVE-2020-7776/): Cross-site Scripting (XSS) (high 7.1)
- [CVE-2020-7775](https://insights.sbomify.com/CVE-2020-7775/): Command Injection (critical 9.8)
- [CVE-2020-7774](https://insights.sbomify.com/CVE-2020-7774/): Prototype Pollution (high 7.3)
- [CVE-2020-7773](https://insights.sbomify.com/CVE-2020-7773/): Cross-site Scripting (XSS) (medium 6.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/36/