# Vulnerabilities published in 2020


- [CVE-2020-6771](https://insights.sbomify.com/CVE-2020-6771/): Uncontrolled Search Path Element in Bosch IP Helper (high 7.8)
- [CVE-2020-6770](https://insights.sbomify.com/CVE-2020-6770/): Deserialization of Untrusted Data in Bosch BVMS Mobile Video Service (critical 10.0)
- [CVE-2020-6769](https://insights.sbomify.com/CVE-2020-6769/): Missing Authentication for Critical Function in Bosch Video Streaming Gateway (critical 10.0)
- [CVE-2020-6768](https://insights.sbomify.com/CVE-2020-6768/): Path Traversal in Bosch Video Management System (BVMS) (high 8.6)
- [CVE-2020-6767](https://insights.sbomify.com/CVE-2020-6767/): Path Traversal in Bosch Video Management System (BVMS) (high 7.7)
- [CVE-2020-6765](https://insights.sbomify.com/CVE-2020-6765/): Command injection in dlink:dsl-gs225 firmware (high 7.2)
- [CVE-2020-6760](https://insights.sbomify.com/CVE-2020-6760/): Command injection in schmid-telecom:zi 620 v400 firmware (critical 9.8)
- [CVE-2020-6758](https://insights.sbomify.com/CVE-2020-6758/): Cross-site scripting in rasilient:pixelstor 5000 firmware (medium 5.4)
- [CVE-2020-6757](https://insights.sbomify.com/CVE-2020-6757/): Command injection in rasilient:pixelstor 5000 firmware (high 7.4)
- [CVE-2020-6756](https://insights.sbomify.com/CVE-2020-6756/): Command injection in rasilient:pixelstor 5000 firmware (critical 9.8)
- [CVE-2020-6754](https://insights.sbomify.com/CVE-2020-6754/): Path traversal in dotcms:dotcms (critical 9.8)
- [CVE-2020-6753](https://insights.sbomify.com/CVE-2020-6753/): Cross-site scripting in auth0:login by auth0 (medium 6.1)
- [CVE-2020-6752](https://insights.sbomify.com/CVE-2020-6752/): Missing authorization in openmicroscopy:omero (low 3.8)
- [CVE-2020-6750](https://insights.sbomify.com/CVE-2020-6750/): Security feature bypass in fedoraproject:fedora (medium 5.9)
- [CVE-2020-6656](https://insights.sbomify.com/CVE-2020-6656/): File parsing Type Confusion Remote code execution vulerability (medium 5.8)
- [CVE-2020-6655](https://insights.sbomify.com/CVE-2020-6655/): File parsing Out-Of-Bounds read remote code execution (medium 5.8)
- [CVE-2020-6654](https://insights.sbomify.com/CVE-2020-6654/): DLL Hijacking (high 7.8)
- [CVE-2020-6653](https://insights.sbomify.com/CVE-2020-6653/): Sensitive date stored in logcat file (low 3.8)
- [CVE-2020-6652](https://insights.sbomify.com/CVE-2020-6652/): Incorrect privilege assignment allowing non-admin users to upload config files (high 7.8)
- [CVE-2020-6651](https://insights.sbomify.com/CVE-2020-6651/): Command injection via specially crafted file name during config file upload (high 8.8)
- [CVE-2020-6650](https://insights.sbomify.com/CVE-2020-6650/): Arbitrary code execution through “Update Manager” Class (high 8.3)
- [CVE-2020-6649](https://insights.sbomify.com/CVE-2020-6649/): Auth bypass in Fortinet FortiIsolator (critical 9.8)
- [CVE-2020-6648](https://insights.sbomify.com/CVE-2020-6648/): Information disclosure in FortiGate and FortiProxy (medium 5.3)
- [CVE-2020-6647](https://insights.sbomify.com/CVE-2020-6647/): Cross-site scripting in Fortinet FortiADC (medium 5.4)
- [CVE-2020-6646](https://insights.sbomify.com/CVE-2020-6646/): Cross-site scripting in Fortinet FortiWeb (medium 5.4)
- [CVE-2020-6644](https://insights.sbomify.com/CVE-2020-6644/): Auth bypass in Fortinet FortiDeceptor (high 8.1)
- [CVE-2020-6643](https://insights.sbomify.com/CVE-2020-6643/): Cross-site scripting in Fortinet FortiIsolator (medium 5.4)
- [CVE-2020-6641](https://insights.sbomify.com/CVE-2020-6641/): Missing authorization in Fortinet FortiPresence (medium 4.3)
- [CVE-2020-6640](https://insights.sbomify.com/CVE-2020-6640/): Cross-site scripting in Fortinet FortiAnalyzer (medium 5.4)
- [CVE-2020-6638](https://insights.sbomify.com/CVE-2020-6638/): Grin Insufficient Validation (high 7.5)
- [CVE-2020-6637](https://insights.sbomify.com/CVE-2020-6637/): SQL injection in os4ed:opensis (critical 9.8)
- [CVE-2020-6632](https://insights.sbomify.com/CVE-2020-6632/): Cross-site scripting in prestashop:prestashop (medium 6.1)
- [CVE-2020-6631](https://insights.sbomify.com/CVE-2020-6631/): Null dereference in gpac:gpac (medium 5.5)
- [CVE-2020-6630](https://insights.sbomify.com/CVE-2020-6630/): Null dereference in gpac:gpac (medium 5.5)
- [CVE-2020-6629](https://insights.sbomify.com/CVE-2020-6629/): Null dereference in libming:libming (medium 6.5)
- [CVE-2020-6628](https://insights.sbomify.com/CVE-2020-6628/): Memory corruption in libming:libming (high 8.8)
- [CVE-2020-6627](https://insights.sbomify.com/CVE-2020-6627/): Command injection in seagate:stcg2000300 firmware (critical 9.8)
- [CVE-2020-6625](https://insights.sbomify.com/CVE-2020-6625/): Memory corruption in jhead project:jhead (high 7.1)
- [CVE-2020-6624](https://insights.sbomify.com/CVE-2020-6624/): Memory corruption in jhead project:jhead (high 7.1)
- [CVE-2020-6623](https://insights.sbomify.com/CVE-2020-6623/): Denial of service in nothings:stb truetype.h (high 8.8)
- [CVE-2020-6622](https://insights.sbomify.com/CVE-2020-6622/): Memory corruption in nothings:stb truetype.h (high 8.8)
- [CVE-2020-6621](https://insights.sbomify.com/CVE-2020-6621/): Memory corruption in nothings:stb truetype.h (high 8.8)
- [CVE-2020-6620](https://insights.sbomify.com/CVE-2020-6620/): Memory corruption in nothings:stb truetype.h (high 8.8)
- [CVE-2020-6619](https://insights.sbomify.com/CVE-2020-6619/): Denial of service in nothings:stb truetype.h (high 8.8)
- [CVE-2020-6618](https://insights.sbomify.com/CVE-2020-6618/): Memory corruption in nothings:stb truetype.h (high 8.8)
- [CVE-2020-6617](https://insights.sbomify.com/CVE-2020-6617/): Denial of service in nothings:stb truetype.h (high 8.8)
- [CVE-2020-6616](https://insights.sbomify.com/CVE-2020-6616/): Weak cryptography in apple:ipados (medium 6.5)
- [CVE-2020-6615](https://insights.sbomify.com/CVE-2020-6615/): Null dereference in gnu:libredwg (medium 6.5)
- [CVE-2020-6614](https://insights.sbomify.com/CVE-2020-6614/): Memory corruption in gnu:libredwg (high 8.1)
- [CVE-2020-6613](https://insights.sbomify.com/CVE-2020-6613/): Memory corruption in gnu:libredwg (high 8.1)
- [CVE-2020-6612](https://insights.sbomify.com/CVE-2020-6612/): Memory corruption in gnu:libredwg (high 8.1)
- [CVE-2020-6611](https://insights.sbomify.com/CVE-2020-6611/): Null dereference in gnu:libredwg (medium 6.5)
- [CVE-2020-6610](https://insights.sbomify.com/CVE-2020-6610/): Denial of service in gnu:libredwg (medium 6.5)
- [CVE-2020-6609](https://insights.sbomify.com/CVE-2020-6609/): Memory corruption in gnu:libredwg (high 8.8)
- [CVE-2020-6590](https://insights.sbomify.com/CVE-2020-6590/): XML external entity in Forcepoint Web Security Content Gateway (high 7.5)
- [CVE-2020-6586](https://insights.sbomify.com/CVE-2020-6586/): Cross-site scripting in nagios:nagios (medium 5.4)
- [CVE-2020-6585](https://insights.sbomify.com/CVE-2020-6585/): Nagios Log Server 2.1.3 has CSRF. (high 8.8)
- [CVE-2020-6584](https://insights.sbomify.com/CVE-2020-6584/): Privilege escalation in nagios:nagios (medium 6.5)
- [CVE-2020-6583](https://insights.sbomify.com/CVE-2020-6583/): Cross-site scripting in bigprof:online invoicing system (medium 6.1)
- [CVE-2020-6582](https://insights.sbomify.com/CVE-2020-6582/): Memory corruption in fedoraproject:fedora (high 7.5)
- [CVE-2020-6581](https://insights.sbomify.com/CVE-2020-6581/): Command injection in fedoraproject:fedora (high 7.3)
- [CVE-2020-6579](https://insights.sbomify.com/CVE-2020-6579/): Cross-site scripting in mailbeez:mailbeez (medium 6.1)
- [CVE-2020-6578](https://insights.sbomify.com/CVE-2020-6578/): Reflected XSS in Zen Cart before 1.5.7a (medium 6.1)
- [CVE-2020-6577](https://insights.sbomify.com/CVE-2020-6577/): SQL injection in it-recht-kanzlei:it-recht-kanzlei (critical 9.8)
- [CVE-2020-6576](https://insights.sbomify.com/CVE-2020-6576/): Use after free in Chrome (high 8.8)
- [CVE-2020-6575](https://insights.sbomify.com/CVE-2020-6575/): Race condition in Chrome (high 8.3)
- [CVE-2020-6574](https://insights.sbomify.com/CVE-2020-6574/): Privilege escalation in Chrome (high 7.8)
- [CVE-2020-6573](https://insights.sbomify.com/CVE-2020-6573/): Use after free in Chrome (critical 9.6)
- [CVE-2020-6572](https://insights.sbomify.com/CVE-2020-6572/): Google Chrome Media Use-After-Free (high 8.8, exploited in the wild)
- [CVE-2020-6571](https://insights.sbomify.com/CVE-2020-6571/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2020-6570](https://insights.sbomify.com/CVE-2020-6570/): Information disclosure in Chrome (medium 4.3)
- [CVE-2020-6569](https://insights.sbomify.com/CVE-2020-6569/): Integer overflow in Chrome (medium 6.3)
- [CVE-2020-6568](https://insights.sbomify.com/CVE-2020-6568/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2020-6567](https://insights.sbomify.com/CVE-2020-6567/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2020-6566](https://insights.sbomify.com/CVE-2020-6566/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2020-6565](https://insights.sbomify.com/CVE-2020-6565/): Other in Chrome (medium 6.5)
- [CVE-2020-6564](https://insights.sbomify.com/CVE-2020-6564/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2020-6563](https://insights.sbomify.com/CVE-2020-6563/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2020-6562](https://insights.sbomify.com/CVE-2020-6562/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2020-6561](https://insights.sbomify.com/CVE-2020-6561/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2020-6560](https://insights.sbomify.com/CVE-2020-6560/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2020-6559](https://insights.sbomify.com/CVE-2020-6559/): Use after free in Chrome (high 8.8)
- [CVE-2020-6558](https://insights.sbomify.com/CVE-2020-6558/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2020-6557](https://insights.sbomify.com/CVE-2020-6557/): Other in Chrome (medium 6.5)
- [CVE-2020-6556](https://insights.sbomify.com/CVE-2020-6556/): Memory corruption in Chrome (high 8.8)
- [CVE-2020-6555](https://insights.sbomify.com/CVE-2020-6555/): Memory corruption in Chrome (high 7.6)
- [CVE-2020-6554](https://insights.sbomify.com/CVE-2020-6554/): Use after free in Chrome (high 8.6)
- [CVE-2020-6553](https://insights.sbomify.com/CVE-2020-6553/): Use after free in Chrome (high 8.8)
- [CVE-2020-6552](https://insights.sbomify.com/CVE-2020-6552/): Use after free in Chrome (high 8.8)
- [CVE-2020-6551](https://insights.sbomify.com/CVE-2020-6551/): Use after free in Chrome (high 8.8)
- [CVE-2020-6550](https://insights.sbomify.com/CVE-2020-6550/): Use after free in Chrome (high 8.8)
- [CVE-2020-6549](https://insights.sbomify.com/CVE-2020-6549/): Use after free in Chrome (high 8.8)
- [CVE-2020-6548](https://insights.sbomify.com/CVE-2020-6548/): Memory corruption in Chrome (high 8.8)
- [CVE-2020-6547](https://insights.sbomify.com/CVE-2020-6547/): Information disclosure in Chrome (medium 6.5)
- [CVE-2020-6546](https://insights.sbomify.com/CVE-2020-6546/): Privilege escalation in Chrome (high 7.8)
- [CVE-2020-6545](https://insights.sbomify.com/CVE-2020-6545/): Use after free in Chrome (high 8.8)
- [CVE-2020-6544](https://insights.sbomify.com/CVE-2020-6544/): Use after free in Chrome (high 8.8)
- [CVE-2020-6543](https://insights.sbomify.com/CVE-2020-6543/): Use after free in Chrome (high 8.8)
- [CVE-2020-6542](https://insights.sbomify.com/CVE-2020-6542/): Use after free in Chrome (high 8.8)
- [CVE-2020-6541](https://insights.sbomify.com/CVE-2020-6541/): Use after free in Chrome (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/45/