# Vulnerabilities published in 2020 - [CVE-2020-6919](https://insights.sbomify.com/CVE-2020-6919/): Other in HP Support Assistant (high 7.8) - [CVE-2020-6918](https://insights.sbomify.com/CVE-2020-6918/): Other in HP Support Assistant (high 7.8) - [CVE-2020-6917](https://insights.sbomify.com/CVE-2020-6917/): Other in HP Support Assistant (high 7.8) - [CVE-2020-6882](https://insights.sbomify.com/CVE-2020-6882/): Hardcoded credentials in (high 7.5) - [CVE-2020-6881](https://insights.sbomify.com/CVE-2020-6881/): Denial of service in (high 7.5) - [CVE-2020-6880](https://insights.sbomify.com/CVE-2020-6880/): SQL injection in ZXV10 W908 (critical 9.8) - [CVE-2020-6879](https://insights.sbomify.com/CVE-2020-6879/): Other in ZXHN F670L (low 3.5) - [CVE-2020-6877](https://insights.sbomify.com/CVE-2020-6877/): Information disclosure in ZXA10 eODN (high 8.8) - [CVE-2020-6876](https://insights.sbomify.com/CVE-2020-6876/): Cross-site scripting in eVDC (medium 5.4) - [CVE-2020-6875](https://insights.sbomify.com/CVE-2020-6875/): Auth bypass in (critical 9.8) - [CVE-2020-6874](https://insights.sbomify.com/CVE-2020-6874/): Weak cryptography in (critical 9.1) - [CVE-2020-6873](https://insights.sbomify.com/CVE-2020-6873/): Denial of service in (medium 5.3) - [CVE-2020-6872](https://insights.sbomify.com/CVE-2020-6872/): Cross-site scripting in (medium 6.1) - [CVE-2020-6871](https://insights.sbomify.com/CVE-2020-6871/): Auth bypass in (critical 9.8) - [CVE-2020-6870](https://insights.sbomify.com/CVE-2020-6870/): Other in NetNumenU31R20 (high 8.0) - [CVE-2020-6869](https://insights.sbomify.com/CVE-2020-6869/): Information disclosure in (high 8.1) - [CVE-2020-6868](https://insights.sbomify.com/CVE-2020-6868/): Other in ZTE F680 (medium 6.5) - [CVE-2020-6867](https://insights.sbomify.com/CVE-2020-6867/): Denial of service in ZENIC ONE R22b (medium 5.5) - [CVE-2020-6866](https://insights.sbomify.com/CVE-2020-6866/): Denial of service in ZXCTN 6500 (medium 4.9) - [CVE-2020-6865](https://insights.sbomify.com/CVE-2020-6865/): Information disclosure in OSCP (medium 6.5) - [CVE-2020-6864](https://insights.sbomify.com/CVE-2020-6864/): Information disclosure in E8820V3 (medium 6.5) - [CVE-2020-6863](https://insights.sbomify.com/CVE-2020-6863/): Missing authorization in E8820V3 (medium 6.5) - [CVE-2020-6862](https://insights.sbomify.com/CVE-2020-6862/): Auth bypass in F6x2W (medium 5.3) - [CVE-2020-6861](https://insights.sbomify.com/CVE-2020-6861/): Weak cryptography in ledger:monero (medium 5.5) - [CVE-2020-6860](https://insights.sbomify.com/CVE-2020-6860/): Memory corruption in fedoraproject:fedora (high 8.8) - [CVE-2020-6859](https://insights.sbomify.com/CVE-2020-6859/): Missing authorization in ultimatemember:ultimate member (medium 5.3) - [CVE-2020-6858](https://insights.sbomify.com/CVE-2020-6858/): HTTP Response Splitting in Styx (medium 6.5) - [CVE-2020-6857](https://insights.sbomify.com/CVE-2020-6857/): Hardcoded credentials in taskautomation:carbonftp (medium 5.5) - [CVE-2020-6856](https://insights.sbomify.com/CVE-2020-6856/): XML external entity in sos-berlin:jobscheduler (medium 6.5) - [CVE-2020-6855](https://insights.sbomify.com/CVE-2020-6855/): Denial of service in sos-berlin:jobscheduler (medium 6.5) - [CVE-2020-6854](https://insights.sbomify.com/CVE-2020-6854/): Cross-site Scripting in SOS JobScheduler (medium 5.4) - [CVE-2020-6852](https://insights.sbomify.com/CVE-2020-6852/): Auth bypass in cacagoo:tv-288zd-2mp firmware (critical 9.8) - [CVE-2020-6851](https://insights.sbomify.com/CVE-2020-6851/): Memory corruption in debian:debian linux (high 7.5) - [CVE-2020-6850](https://insights.sbomify.com/CVE-2020-6850/): Cross-site scripting in miniorange:saml sp single sign on (medium 6.1) - [CVE-2020-6849](https://insights.sbomify.com/CVE-2020-6849/): Cross-site request forgery in hutchhouse:marketo forms and tracking (high 8.8) - [CVE-2020-6848](https://insights.sbomify.com/CVE-2020-6848/): Cross-site scripting in axper:vision ii firmware (medium 6.1) - [CVE-2020-6847](https://insights.sbomify.com/CVE-2020-6847/): Cross-site scripting in opentrade project:opentrade (high 7.6) - [CVE-2020-6845](https://insights.sbomify.com/CVE-2020-6845/): Cross-site scripting in topmanage:olk webstore (medium 6.1) - [CVE-2020-6844](https://insights.sbomify.com/CVE-2020-6844/): Cross-site request forgery in topmanage:olk webstore (high 8.8) - [CVE-2020-6843](https://insights.sbomify.com/CVE-2020-6843/): Cross-site scripting in zohocorp:manageengine servicedesk plus (medium 4.8) - [CVE-2020-6842](https://insights.sbomify.com/CVE-2020-6842/): Command injection in dlink:dch-m225 firmware (high 7.2) - [CVE-2020-6841](https://insights.sbomify.com/CVE-2020-6841/): Command injection in dlink:dch-m225 firmware (critical 9.8) - [CVE-2020-6840](https://insights.sbomify.com/CVE-2020-6840/): Use after free in mruby:mruby (critical 9.8) - [CVE-2020-6839](https://insights.sbomify.com/CVE-2020-6839/): Memory corruption in mruby:mruby (critical 9.8) - [CVE-2020-6838](https://insights.sbomify.com/CVE-2020-6838/): Use after free in mruby:mruby (critical 9.8) - [CVE-2020-6836](https://insights.sbomify.com/CVE-2020-6836/): Command Injection in hot-formula-parser (critical 9.8) - [CVE-2020-6835](https://insights.sbomify.com/CVE-2020-6835/): Memory corruption in bftpd project:bftpd (critical 9.8) - [CVE-2020-6833](https://insights.sbomify.com/CVE-2020-6833/): Security feature bypass in gitlab:gitlab (high 7.5) - [CVE-2020-6832](https://insights.sbomify.com/CVE-2020-6832/): Missing authorization in gitlab:gitlab (medium 5.3) - [CVE-2020-6831](https://insights.sbomify.com/CVE-2020-6831/): Memory corruption in Firefox (critical 9.8) - [CVE-2020-6830](https://insights.sbomify.com/CVE-2020-6830/): Information disclosure in Firefox for iOS (high 7.5) - [CVE-2020-6829](https://insights.sbomify.com/CVE-2020-6829/): Weak cryptography in Firefox (medium 5.3) - [CVE-2020-6828](https://insights.sbomify.com/CVE-2020-6828/): Path traversal in Firefox ESR (high 7.5) - [CVE-2020-6827](https://insights.sbomify.com/CVE-2020-6827/): Other in Firefox ESR (medium 4.7) - [CVE-2020-6826](https://insights.sbomify.com/CVE-2020-6826/): Memory corruption in Firefox (critical 9.8) - [CVE-2020-6825](https://insights.sbomify.com/CVE-2020-6825/): Memory corruption in Firefox (critical 9.8) - [CVE-2020-6824](https://insights.sbomify.com/CVE-2020-6824/): Weak cryptography in Firefox (low 2.8) - [CVE-2020-6823](https://insights.sbomify.com/CVE-2020-6823/): Missing authorization in Firefox (critical 9.8) - [CVE-2020-6822](https://insights.sbomify.com/CVE-2020-6822/): Memory corruption in Firefox (high 8.8) - [CVE-2020-6821](https://insights.sbomify.com/CVE-2020-6821/): Information disclosure in Firefox (high 7.5) - [CVE-2020-6820](https://insights.sbomify.com/CVE-2020-6820/): Mozilla Firefox And Thunderbird Use-After-Free (high 8.1, exploited in the wild) - [CVE-2020-6819](https://insights.sbomify.com/CVE-2020-6819/): Mozilla Firefox And Thunderbird Use-After-Free (high 8.1, exploited in the wild) - [CVE-2020-6817](https://insights.sbomify.com/CVE-2020-6817/): regular expression denial-of-service (ReDoS) in Bleach (high 7.5) - [CVE-2020-6816](https://insights.sbomify.com/CVE-2020-6816/): Bleach vulnerable to mutation XSS via whitelisted math or svg and raw tag (medium 6.1) - [CVE-2020-6815](https://insights.sbomify.com/CVE-2020-6815/): Memory corruption in Firefox (critical 9.8) - [CVE-2020-6814](https://insights.sbomify.com/CVE-2020-6814/): Memory corruption in Firefox (critical 9.8) - [CVE-2020-6813](https://insights.sbomify.com/CVE-2020-6813/): Security feature bypass in Firefox (medium 5.3) - [CVE-2020-6812](https://insights.sbomify.com/CVE-2020-6812/): Information disclosure in Firefox (medium 5.3) - [CVE-2020-6811](https://insights.sbomify.com/CVE-2020-6811/): Command injection in Firefox (high 8.8) - [CVE-2020-6810](https://insights.sbomify.com/CVE-2020-6810/): Security feature bypass in Firefox (medium 4.3) - [CVE-2020-6809](https://insights.sbomify.com/CVE-2020-6809/): Information disclosure in Firefox (high 7.5) - [CVE-2020-6808](https://insights.sbomify.com/CVE-2020-6808/): Security feature bypass in Firefox (medium 6.5) - [CVE-2020-6807](https://insights.sbomify.com/CVE-2020-6807/): Use after free in Firefox (high 8.8) - [CVE-2020-6806](https://insights.sbomify.com/CVE-2020-6806/): Memory corruption in Firefox (high 8.8) - [CVE-2020-6805](https://insights.sbomify.com/CVE-2020-6805/): Use after free in Firefox (high 8.8) - [CVE-2020-6804](https://insights.sbomify.com/CVE-2020-6804/): XSS in Mozilla WebThings Gateway (high 8.8) - [CVE-2020-6803](https://insights.sbomify.com/CVE-2020-6803/): Open redirect in Mozilla WebThings Gateway (medium 5.4) - [CVE-2020-6802](https://insights.sbomify.com/CVE-2020-6802/): XSS in Bleach when noscript and raw tag whitelisted (medium 6.1) - [CVE-2020-6801](https://insights.sbomify.com/CVE-2020-6801/): Memory corruption in Firefox (high 8.8) - [CVE-2020-6800](https://insights.sbomify.com/CVE-2020-6800/): Memory corruption in Firefox (high 8.8) - [CVE-2020-6799](https://insights.sbomify.com/CVE-2020-6799/): Command injection in Firefox (high 8.8) - [CVE-2020-6798](https://insights.sbomify.com/CVE-2020-6798/): Cross-site scripting in Firefox (medium 6.1) - [CVE-2020-6797](https://insights.sbomify.com/CVE-2020-6797/): Code injection in Firefox (medium 4.3) - [CVE-2020-6796](https://insights.sbomify.com/CVE-2020-6796/): Memory corruption in Firefox (high 8.8) - [CVE-2020-6795](https://insights.sbomify.com/CVE-2020-6795/): Null dereference in Thunderbird (medium 6.5) - [CVE-2020-6794](https://insights.sbomify.com/CVE-2020-6794/): Information disclosure in Thunderbird (medium 6.5) - [CVE-2020-6793](https://insights.sbomify.com/CVE-2020-6793/): Information disclosure in Thunderbird (medium 6.5) - [CVE-2020-6792](https://insights.sbomify.com/CVE-2020-6792/): Information disclosure in Thunderbird (medium 4.3) - [CVE-2020-6790](https://insights.sbomify.com/CVE-2020-6790/): Uncontrolled Search Path Element in Bosch Video Streaming Gateway Installer (high 7.8) - [CVE-2020-6789](https://insights.sbomify.com/CVE-2020-6789/): Uncontrolled Search Path Element in Bosch Monitor Wall Installer (high 7.8) - [CVE-2020-6788](https://insights.sbomify.com/CVE-2020-6788/): Uncontrolled Search Path Element in Bosch Configuration Manager Installer (high 7.8) - [CVE-2020-6787](https://insights.sbomify.com/CVE-2020-6787/): Uncontrolled Search Path Element in Bosch Video Client installer (high 7.8) - [CVE-2020-6786](https://insights.sbomify.com/CVE-2020-6786/): Uncontrolled Search Path Element in Bosch Video Recording Manager Installer (high 7.8) - [CVE-2020-6785](https://insights.sbomify.com/CVE-2020-6785/): Uncontrolled Search Path Element in Bosch BVMS and BVMS Viewer (high 7.8) - [CVE-2020-6781](https://insights.sbomify.com/CVE-2020-6781/): Improper Certificate Validation in Bosch Smart Home System App for iOS (medium 6.8) - [CVE-2020-6780](https://insights.sbomify.com/CVE-2020-6780/): Password Hash With Insufficient Computational Effort in the Database of Bosch FSM-2500 Server and Bosch FSM-5000 Server (medium 4.4) - [CVE-2020-6779](https://insights.sbomify.com/CVE-2020-6779/): Hard-coded Credentials in the Database of Bosch FSM-2500 Server and Bosch FSM-5000 Server (critical 10.0) - [CVE-2020-6777](https://insights.sbomify.com/CVE-2020-6777/): Stored XSS in Bosch PRAESIDEO and Bosch PRAESENSA Management Interface (medium 4.8) - [CVE-2020-6776](https://insights.sbomify.com/CVE-2020-6776/): CSRF in Bosch PRAESIDEO and Bosch PRAESENSA Management Interface (high 8.8) - [CVE-2020-6774](https://insights.sbomify.com/CVE-2020-6774/): Kiosk Mode Breakout in Bosch Recording Station (critical 9.3) --- From sbomify Insights: https://insights.sbomify.com/years/2020/page/44/