# Vulnerabilities published in 2020


- [CVE-2020-7466](https://insights.sbomify.com/CVE-2020-7466/): Memory corruption in MPD: FreeBSD PPP daemon (high 7.5)
- [CVE-2020-7465](https://insights.sbomify.com/CVE-2020-7465/): Memory corruption in MPD: FreeBSD PPP daemon (critical 9.8)
- [CVE-2020-7464](https://insights.sbomify.com/CVE-2020-7464/): Security feature bypass in FreeBSD (medium 5.3)
- [CVE-2020-7463](https://insights.sbomify.com/CVE-2020-7463/): Use after free in FreeBSD (medium 5.5)
- [CVE-2020-7462](https://insights.sbomify.com/CVE-2020-7462/): Use after free in FreeBSD (medium 5.5)
- [CVE-2020-7461](https://insights.sbomify.com/CVE-2020-7461/): Memory corruption in FreeBSD (high 7.3)
- [CVE-2020-7460](https://insights.sbomify.com/CVE-2020-7460/): Race condition in FreeBSD (high 7.0)
- [CVE-2020-7459](https://insights.sbomify.com/CVE-2020-7459/): Memory corruption in FreeBSD (medium 6.8)
- [CVE-2020-7458](https://insights.sbomify.com/CVE-2020-7458/): Memory corruption in FreeBSD (critical 9.8)
- [CVE-2020-7457](https://insights.sbomify.com/CVE-2020-7457/): Use after free in FreeBSD (high 8.1)
- [CVE-2020-7456](https://insights.sbomify.com/CVE-2020-7456/): Memory corruption in FreeBSD (medium 6.8)
- [CVE-2020-7455](https://insights.sbomify.com/CVE-2020-7455/): Information disclosure in FreeBSD (medium 5.5)
- [CVE-2020-7454](https://insights.sbomify.com/CVE-2020-7454/): Memory corruption in FreeBSD (critical 9.8)
- [CVE-2020-7453](https://insights.sbomify.com/CVE-2020-7453/): Information disclosure in FreeBSD (medium 6.0)
- [CVE-2020-7452](https://insights.sbomify.com/CVE-2020-7452/): Memory corruption in FreeBSD (critical 9.1)
- [CVE-2020-7451](https://insights.sbomify.com/CVE-2020-7451/): Information disclosure in FreeBSD (medium 5.3)
- [CVE-2020-7450](https://insights.sbomify.com/CVE-2020-7450/): Memory corruption in FreeBSD (critical 9.8)
- [CVE-2020-7390](https://insights.sbomify.com/CVE-2020-7390/): Sage X3 Syracuse Persistent XSS in Edit User page (medium 4.6)
- [CVE-2020-7389](https://insights.sbomify.com/CVE-2020-7389/): Sage X3 Syracuse Missing Authentication for Critical Function in Developer Environment (medium 5.5)
- [CVE-2020-7388](https://insights.sbomify.com/CVE-2020-7388/): Sage X3 AdxAdmin Unauthenticated Command Execution Bypass by Spoofing (critical 10.0)
- [CVE-2020-7387](https://insights.sbomify.com/CVE-2020-7387/): Sage X3 AdxAdmin Exposure of Sensitive Information to an Unauthorized Actor (medium 5.3)
- [CVE-2020-7385](https://insights.sbomify.com/CVE-2020-7385/): Metasploit Framework 'drb_remote_codeexec' code execution (high 8.1)
- [CVE-2020-7384](https://insights.sbomify.com/CVE-2020-7384/): Client-Side Command Injection in Rapid7 Metasploit (high 7.0)
- [CVE-2020-7383](https://insights.sbomify.com/CVE-2020-7383/): SQL Injection in Rapid7 Nexpose (medium 6.5)
- [CVE-2020-7382](https://insights.sbomify.com/CVE-2020-7382/): Unquoted Path in Rapid7 Nexpose Installer (medium 6.8)
- [CVE-2020-7381](https://insights.sbomify.com/CVE-2020-7381/): Code Injection in Rapid7 Nexpose Installer (medium 5.8)
- [CVE-2020-7378](https://insights.sbomify.com/CVE-2020-7378/): CRIXP OpenCRX Unverified Password Change (critical 9.1)
- [CVE-2020-7377](https://insights.sbomify.com/CVE-2020-7377/): Rapid7 Metasploit Framework Relative Path Traversal in telpho10_credential_dump module (high 8.1)
- [CVE-2020-7376](https://insights.sbomify.com/CVE-2020-7376/): Rapid7 Metasploit Framework Relative Path Traversal in enum_osx module (high 7.1)
- [CVE-2020-7374](https://insights.sbomify.com/CVE-2020-7374/): Documalis Free PDF Editor / Free PDF Scanner Stack Based Buffer Overflow (medium 5.3)
- [CVE-2020-7373](https://insights.sbomify.com/CVE-2020-7373/): Code injection in vbulletin:vbulletin (critical 9.8)
- [CVE-2020-7371](https://insights.sbomify.com/CVE-2020-7371/): Raise IT Solutions RITS Browser Address Bar Spooofing (medium 4.3)
- [CVE-2020-7370](https://insights.sbomify.com/CVE-2020-7370/): Danyil Vasilenko Bolt Browser Address Bar Spooofing (medium 4.3)
- [CVE-2020-7369](https://insights.sbomify.com/CVE-2020-7369/): Yandex Browser Address Bar Spooofing (medium 4.3)
- [CVE-2020-7364](https://insights.sbomify.com/CVE-2020-7364/): UCWeb UC Browser Address Bar Spooofing (medium 4.3)
- [CVE-2020-7363](https://insights.sbomify.com/CVE-2020-7363/): UCWeb UC Browser Address Bar Spooofing (medium 4.3)
- [CVE-2020-7361](https://insights.sbomify.com/CVE-2020-7361/): ZenTao Pro Command Injection (critical 9.6)
- [CVE-2020-7360](https://insights.sbomify.com/CVE-2020-7360/): Philips SmartControl DLL Hijacking (high 7.4)
- [CVE-2020-7358](https://insights.sbomify.com/CVE-2020-7358/): Code Injection in Rapid7 AppSpider Pro Installer (medium 5.8)
- [CVE-2020-7357](https://insights.sbomify.com/CVE-2020-7357/): Cayin CMS Command Injection (critical 9.6)
- [CVE-2020-7356](https://insights.sbomify.com/CVE-2020-7356/): Cayin xPost SQL Injection (critical 10.0)
- [CVE-2020-7355](https://insights.sbomify.com/CVE-2020-7355/): Rapid7 Metasploit Pro Stored XSS in 'notes' field (medium 6.1)
- [CVE-2020-7354](https://insights.sbomify.com/CVE-2020-7354/): Rapid7 Metasploit Pro Stored XSS in 'host' field (medium 6.1)
- [CVE-2020-7352](https://insights.sbomify.com/CVE-2020-7352/): GOG Galaxy GalaxyClientService Privilege Escalation (high 8.4)
- [CVE-2020-7351](https://insights.sbomify.com/CVE-2020-7351/): Fonality Trixbox CE Post-Authentication Command Injection (high 7.3)
- [CVE-2020-7350](https://insights.sbomify.com/CVE-2020-7350/): Metasploit Framework Plugin Libnotify Command Injection (medium 6.1)
- [CVE-2020-7346](https://insights.sbomify.com/CVE-2020-7346/): Privilege escalation in McAfee DLP Endpoint for Windows (high 7.8)
- [CVE-2020-7343](https://insights.sbomify.com/CVE-2020-7343/): Improper Authorization vulnerability in MA (medium 5.5)
- [CVE-2020-7339](https://insights.sbomify.com/CVE-2020-7339/): Database Security(DBS)-Use of a Broken or Risky Cryptographic Algorithm (medium 6.3)
- [CVE-2020-7337](https://insights.sbomify.com/CVE-2020-7337/): Incorrect Permission Assignment for Critical Resource (medium 6.5)
- [CVE-2020-7336](https://insights.sbomify.com/CVE-2020-7336/): Network Security Management (NSM) - Cross Site Request Forgery vulnerability (medium 6.6)
- [CVE-2020-7335](https://insights.sbomify.com/CVE-2020-7335/): Privilege Escalation vulnerability in McAfee Total Protection (MTP) (high 7.5)
- [CVE-2020-7334](https://insights.sbomify.com/CVE-2020-7334/): Improper privilege assignment vulnerability in the installer component of MACC (high 7.7)
- [CVE-2020-7333](https://insights.sbomify.com/CVE-2020-7333/): Cross-site Scripting (XSS) in firewall ePO extension of McAfee Endpoint Security (ENS) (medium 4.8)
- [CVE-2020-7332](https://insights.sbomify.com/CVE-2020-7332/): Cross-Site Request Forgery (CSRF) in firewall ePO extension of McAfee Endpoint Security (ENS) (high 7.0)
- [CVE-2020-7331](https://insights.sbomify.com/CVE-2020-7331/): Unquoted service executable path in McAfee Endpoint Security (ENS) (high 7.8)
- [CVE-2020-7330](https://insights.sbomify.com/CVE-2020-7330/): Privilege Escalation vulnerability in McAfee Total Protection (MTP) trial (high 7.5)
- [CVE-2020-7329](https://insights.sbomify.com/CVE-2020-7329/): Server-Side Request Forgery (SSRF) in MVISION Endpoint ePO extension (high 7.2)
- [CVE-2020-7328](https://insights.sbomify.com/CVE-2020-7328/): Server-Side Request Forgery (SSRF) in MVISION Endpoint ePO extension (high 7.2)
- [CVE-2020-7327](https://insights.sbomify.com/CVE-2020-7327/): McAfee MVEDR - Improperly implemented security check (medium 6.0)
- [CVE-2020-7326](https://insights.sbomify.com/CVE-2020-7326/): McAfee MAR - Improperly implemented security check (medium 6.0)
- [CVE-2020-7325](https://insights.sbomify.com/CVE-2020-7325/): Privilege Escalation vulnerability in MVISION Endpoint (medium 5.5)
- [CVE-2020-7324](https://insights.sbomify.com/CVE-2020-7324/): Improper Access Control vulnerability in MVISION Endpoint (medium 6.1)
- [CVE-2020-7323](https://insights.sbomify.com/CVE-2020-7323/): Authentication Protection Bypass vulnerability in ENS for Windows (medium 6.9)
- [CVE-2020-7322](https://insights.sbomify.com/CVE-2020-7322/): Exposure of Sensitive Information in ENS for Windows (medium 4.7)
- [CVE-2020-7320](https://insights.sbomify.com/CVE-2020-7320/): Protection Mechanism Failure in ENS for Windows (medium 6.7)
- [CVE-2020-7319](https://insights.sbomify.com/CVE-2020-7319/): Improper Access Control Vulnerability in ENS for Windows (high 8.8)
- [CVE-2020-7318](https://insights.sbomify.com/CVE-2020-7318/): ePolicy Orchistrator (ePO) - Cross-Site Scripting vulnerability (medium 4.6)
- [CVE-2020-7317](https://insights.sbomify.com/CVE-2020-7317/): ePolicy Orchistrator (ePO) - Cross-Site Scripting vulnerability (medium 4.6)
- [CVE-2020-7316](https://insights.sbomify.com/CVE-2020-7316/): File and Removable Media Protection update fixes one vulnerability (medium 6.6)
- [CVE-2020-7315](https://insights.sbomify.com/CVE-2020-7315/): DLL Injection vulnerability in MA for Windows (medium 6.0)
- [CVE-2020-7314](https://insights.sbomify.com/CVE-2020-7314/): Privilege Escalation vulnerability in McAfee DXL for Mac (high 8.2)
- [CVE-2020-7312](https://insights.sbomify.com/CVE-2020-7312/): DLL Search Order Hijacking in MA for Windows (high 7.8)
- [CVE-2020-7311](https://insights.sbomify.com/CVE-2020-7311/): Privilege Escalation vulnerability in MA for Windows (high 7.8)
- [CVE-2020-7310](https://insights.sbomify.com/CVE-2020-7310/): Privilege Escalation vulnerability in McAfee Total Protection (MTP) trial installer (medium 6.9)
- [CVE-2020-7309](https://insights.sbomify.com/CVE-2020-7309/): Cross Site Scripting vulnerability in ePO extension of MACC (low 3.9)
- [CVE-2020-7308](https://insights.sbomify.com/CVE-2020-7308/): Transmission of data in clear text by McAfee ENS (medium 4.8)
- [CVE-2020-7307](https://insights.sbomify.com/CVE-2020-7307/): DLP for Mac - Unprotected Storage of Credentials (medium 5.2)
- [CVE-2020-7306](https://insights.sbomify.com/CVE-2020-7306/): DLP for Mac - Unprotected Storage of Credentials (medium 5.2)
- [CVE-2020-7305](https://insights.sbomify.com/CVE-2020-7305/): DLP ePO extension - Privilege escalation (medium 6.7)
- [CVE-2020-7304](https://insights.sbomify.com/CVE-2020-7304/): DLP ePO extension - Cross-site request forgery (high 7.6)
- [CVE-2020-7303](https://insights.sbomify.com/CVE-2020-7303/): DLP ePO extension - Cross-site scripting (medium 4.1)
- [CVE-2020-7302](https://insights.sbomify.com/CVE-2020-7302/): DLP ePO extension - Unrestricted Upload of File with Dangerous Type (medium 5.4)
- [CVE-2020-7301](https://insights.sbomify.com/CVE-2020-7301/): DLP ePO extension - Cross site scripting (medium 4.1)
- [CVE-2020-7300](https://insights.sbomify.com/CVE-2020-7300/): DLP ePO extension - Improper Authorization (medium 4.6)
- [CVE-2020-7299](https://insights.sbomify.com/CVE-2020-7299/): Sensitive Data Exposure vulnerability in McAfee True Key Windows Client (medium 5.0)
- [CVE-2020-7298](https://insights.sbomify.com/CVE-2020-7298/): Total Protection (MTP) - Unexpected behavior violation (high 7.5)
- [CVE-2020-7297](https://insights.sbomify.com/CVE-2020-7297/): Web Gateway (MWG) - Privilege Escalation vulnerability (medium 5.7)
- [CVE-2020-7296](https://insights.sbomify.com/CVE-2020-7296/): Web Gateway (MWG) - Privilege Escalation vulnerability (medium 5.7)
- [CVE-2020-7295](https://insights.sbomify.com/CVE-2020-7295/): Web Gateway (MWG) - Privilege Escalation vulnerability (low 3.5)
- [CVE-2020-7294](https://insights.sbomify.com/CVE-2020-7294/): Web Gateway (MWG) - Privilege Escalation vulnerability (medium 4.6)
- [CVE-2020-7293](https://insights.sbomify.com/CVE-2020-7293/): Web Gateway (MWG) - Privilege Escalation vulnerability (critical 9.0)
- [CVE-2020-7292](https://insights.sbomify.com/CVE-2020-7292/): Web Gateway (MWG) - Inappropriate Encoding for output context (medium 4.3)
- [CVE-2020-7291](https://insights.sbomify.com/CVE-2020-7291/): Privilege Escalation vulnerability MAR for Mac (high 7.8)
- [CVE-2020-7290](https://insights.sbomify.com/CVE-2020-7290/): Privilege Escalation vulnerability in MAR for Linux (high 7.8)
- [CVE-2020-7289](https://insights.sbomify.com/CVE-2020-7289/): Privilege Escalation vulnerability in MAR for Windows (high 7.8)
- [CVE-2020-7288](https://insights.sbomify.com/CVE-2020-7288/): Privilege Escalation vulnerability in EDR for Mac (high 7.8)
- [CVE-2020-7287](https://insights.sbomify.com/CVE-2020-7287/): Privilege Escalation vulnerability in EDR for Linux (high 7.8)
- [CVE-2020-7286](https://insights.sbomify.com/CVE-2020-7286/): Privilege Escalation vulnerability in EDR for Windows (high 7.8)
- [CVE-2020-7285](https://insights.sbomify.com/CVE-2020-7285/): Privilege Escalation vulnerability in MVISION Endpoint (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/40/