# Vulnerabilities published in 2020 - [CVE-2020-5871](https://insights.sbomify.com/CVE-2020-5871/): Denial of service in BIG-IP (high 7.5) - [CVE-2020-5870](https://insights.sbomify.com/CVE-2020-5870/): Auth bypass in BIG-IQ (high 8.1) - [CVE-2020-5869](https://insights.sbomify.com/CVE-2020-5869/): Weak cryptography in BIG-IQ (critical 9.1) - [CVE-2020-5868](https://insights.sbomify.com/CVE-2020-5868/): Command injection in BIG-IQ (critical 9.8) - [CVE-2020-5867](https://insights.sbomify.com/CVE-2020-5867/): Supply chain in NGINX Controller (high 8.1) - [CVE-2020-5866](https://insights.sbomify.com/CVE-2020-5866/): Information disclosure in NGINX Controller (medium 5.5) - [CVE-2020-5865](https://insights.sbomify.com/CVE-2020-5865/): Weak cryptography in NGINX Controller (medium 4.8) - [CVE-2020-5864](https://insights.sbomify.com/CVE-2020-5864/): Security feature bypass in NGINX Controller (high 7.4) - [CVE-2020-5863](https://insights.sbomify.com/CVE-2020-5863/): Missing authorization in NGINX Controller (high 8.6) - [CVE-2020-5862](https://insights.sbomify.com/CVE-2020-5862/): Denial of service in BIG-IP (high 7.5) - [CVE-2020-5861](https://insights.sbomify.com/CVE-2020-5861/): Memory corruption in BIG-IP (high 7.5) - [CVE-2020-5860](https://insights.sbomify.com/CVE-2020-5860/): Weak cryptography in BIG-IP, BIG-IQ (high 8.1) - [CVE-2020-5859](https://insights.sbomify.com/CVE-2020-5859/): Denial of service in BIG-IP (high 7.5) - [CVE-2020-5858](https://insights.sbomify.com/CVE-2020-5858/): Command injection in BIG-IP, BIG-IQ (high 7.8) - [CVE-2020-5857](https://insights.sbomify.com/CVE-2020-5857/): Denial of service in BIG-IP (high 7.5) - [CVE-2020-5856](https://insights.sbomify.com/CVE-2020-5856/): Denial of service in BIG-IP (high 7.5) - [CVE-2020-5855](https://insights.sbomify.com/CVE-2020-5855/): Auth bypass in Edge Client for Windows (medium 4.3) - [CVE-2020-5854](https://insights.sbomify.com/CVE-2020-5854/): Denial of service in BIG-IP (medium 5.9) - [CVE-2020-5853](https://insights.sbomify.com/CVE-2020-5853/): Cross-site scripting in BIG-IP APM (medium 5.4) - [CVE-2020-5852](https://insights.sbomify.com/CVE-2020-5852/): Denial of service in BIG-IP (high 7.5) - [CVE-2020-5851](https://insights.sbomify.com/CVE-2020-5851/): Security feature bypass in BIG-IP (medium 4.6) - [CVE-2020-5849](https://insights.sbomify.com/CVE-2020-5849/): Unraid Authentication Bypass (high 7.5, exploited in the wild) - [CVE-2020-5847](https://insights.sbomify.com/CVE-2020-5847/): Unraid Remote Code Execution (critical 9.8, exploited in the wild) - [CVE-2020-5846](https://insights.sbomify.com/CVE-2020-5846/): File upload in ahsay:cloud backup suite (high 8.8) - [CVE-2020-5844](https://insights.sbomify.com/CVE-2020-5844/): File upload in artica:pandora fms (high 7.2) - [CVE-2020-5843](https://insights.sbomify.com/CVE-2020-5843/): Cross-site scripting in codologic:codoforum (medium 4.8) - [CVE-2020-5842](https://insights.sbomify.com/CVE-2020-5842/): Cross-site scripting in codologic:codoforum (medium 6.1) - [CVE-2020-5841](https://insights.sbomify.com/CVE-2020-5841/): SQL injection in opservices:opmon (critical 9.8) - [CVE-2020-5840](https://insights.sbomify.com/CVE-2020-5840/): HashBrown CMS Directory Traversal (high 7.5) - [CVE-2020-5839](https://insights.sbomify.com/CVE-2020-5839/): Information disclosure in Symantec Endpoint Detection And Response (high 7.5) - [CVE-2020-5838](https://insights.sbomify.com/CVE-2020-5838/): Cross-site scripting in IT Analytics (medium 4.8) - [CVE-2020-5837](https://insights.sbomify.com/CVE-2020-5837/): Privilege escalation in Symantec Endpoint Protection (high 7.8) - [CVE-2020-5836](https://insights.sbomify.com/CVE-2020-5836/): Missing authorization in Symantec Endpoint Protection (high 7.8) - [CVE-2020-5835](https://insights.sbomify.com/CVE-2020-5835/): Race condition in Symantec Endpoint Protection Manager (high 7.0) - [CVE-2020-5834](https://insights.sbomify.com/CVE-2020-5834/): Path traversal in Symantec Endpoint Protection Manager (medium 5.3) - [CVE-2020-5833](https://insights.sbomify.com/CVE-2020-5833/): Memory corruption in Symantec Endpoint Protection Manager (low 3.3) - [CVE-2020-5832](https://insights.sbomify.com/CVE-2020-5832/): Privilege escalation in Data Center Security Manager Component (high 7.8) - [CVE-2020-5831](https://insights.sbomify.com/CVE-2020-5831/): Memory corruption in Symantec Endpoint Protection Manager (SEPM) (low 3.3) - [CVE-2020-5830](https://insights.sbomify.com/CVE-2020-5830/): Memory corruption in Symantec Endpoint Protection Manager (SEPM) (low 3.3) - [CVE-2020-5829](https://insights.sbomify.com/CVE-2020-5829/): Memory corruption in Symantec Endpoint Protection Manager (SEPM) (low 3.3) - [CVE-2020-5828](https://insights.sbomify.com/CVE-2020-5828/): Memory corruption in Symantec Endpoint Protection Manager (SEPM) (low 3.3) - [CVE-2020-5827](https://insights.sbomify.com/CVE-2020-5827/): Memory corruption in Symantec Endpoint Protection Manager (SEPM) (low 3.3) - [CVE-2020-5826](https://insights.sbomify.com/CVE-2020-5826/): Memory corruption in Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE) (medium 5.5) - [CVE-2020-5825](https://insights.sbomify.com/CVE-2020-5825/): Other in Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE) (medium 5.5) - [CVE-2020-5824](https://insights.sbomify.com/CVE-2020-5824/): Denial of service in Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE) (medium 5.5) - [CVE-2020-5823](https://insights.sbomify.com/CVE-2020-5823/): Privilege escalation in Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE) (high 7.8) - [CVE-2020-5822](https://insights.sbomify.com/CVE-2020-5822/): Privilege escalation in Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE) (high 7.8) - [CVE-2020-5821](https://insights.sbomify.com/CVE-2020-5821/): Code injection in Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE) (high 7.8) - [CVE-2020-5820](https://insights.sbomify.com/CVE-2020-5820/): Privilege escalation in Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE) (high 7.8) - [CVE-2020-5812](https://insights.sbomify.com/CVE-2020-5812/): Security feature bypass in Tenable Nessus AMI (medium 5.9) - [CVE-2020-5811](https://insights.sbomify.com/CVE-2020-5811/): Authenticated path traversal in Umbraco CMS (medium 6.5) - [CVE-2020-5810](https://insights.sbomify.com/CVE-2020-5810/): Cross-site scripting in Umbraco CMS (medium 5.4) - [CVE-2020-5809](https://insights.sbomify.com/CVE-2020-5809/): Umbraco CMS vulnerable to stored XSS (medium 5.4) - [CVE-2020-5808](https://insights.sbomify.com/CVE-2020-5808/): Security feature bypass in Tenable.sc (high 7.5) - [CVE-2020-5807](https://insights.sbomify.com/CVE-2020-5807/): Denial of service in Rockwell FactoryTalk Diagnostics (high 7.5) - [CVE-2020-5806](https://insights.sbomify.com/CVE-2020-5806/): Denial of service in Rockwell FactoryTalk Linx (medium 5.5) - [CVE-2020-5805](https://insights.sbomify.com/CVE-2020-5805/): Information disclosure in Marvell QConvergeConsole GUI (high 8.8) - [CVE-2020-5804](https://insights.sbomify.com/CVE-2020-5804/): Path traversal in Marvell QConvergeConsole GUI (high 8.1) - [CVE-2020-5803](https://insights.sbomify.com/CVE-2020-5803/): Path traversal in Marvell QConvergeConsole GUI (high 8.1) - [CVE-2020-5802](https://insights.sbomify.com/CVE-2020-5802/): Denial of service in Rockwell FactoryTalk Linx (high 7.5) - [CVE-2020-5801](https://insights.sbomify.com/CVE-2020-5801/): Denial of service in Rockwell FactoryTalk Linx (high 7.5) - [CVE-2020-5800](https://insights.sbomify.com/CVE-2020-5800/): Auth bypass in Eat Spray Love (critical 9.8) - [CVE-2020-5799](https://insights.sbomify.com/CVE-2020-5799/): Hardcoded credentials in Eat Spray Love (critical 9.8) - [CVE-2020-5798](https://insights.sbomify.com/CVE-2020-5798/): Privilege escalation in Druva inSync macOS Client Installers for v6.8.0 and prior (high 7.8) - [CVE-2020-5797](https://insights.sbomify.com/CVE-2020-5797/): Path traversal in TP-Link Archer C9 A1 (medium 6.1) - [CVE-2020-5796](https://insights.sbomify.com/CVE-2020-5796/): Privilege escalation in Nagios XI (high 7.8) - [CVE-2020-5795](https://insights.sbomify.com/CVE-2020-5795/): Code injection in TP-Link Archer A7 v5 (medium 6.2) - [CVE-2020-5794](https://insights.sbomify.com/CVE-2020-5794/): Privilege escalation in Nessus Network Monitor (high 7.8) - [CVE-2020-5793](https://insights.sbomify.com/CVE-2020-5793/): Privilege escalation in Tenable Nessus for Windows and Tenable Nessus Agent for Windows (high 7.8) - [CVE-2020-5792](https://insights.sbomify.com/CVE-2020-5792/): Command injection in Nagios XI (high 7.2) - [CVE-2020-5791](https://insights.sbomify.com/CVE-2020-5791/): Command injection in Nagios XI (high 7.2) - [CVE-2020-5790](https://insights.sbomify.com/CVE-2020-5790/): Cross-site request forgery in Nagios XI (medium 6.5) - [CVE-2020-5789](https://insights.sbomify.com/CVE-2020-5789/): Path traversal in Teltonika Gateway TRB245 (medium 6.5) - [CVE-2020-5788](https://insights.sbomify.com/CVE-2020-5788/): Path traversal in Teltonika Gateway TRB245 (medium 6.5) - [CVE-2020-5787](https://insights.sbomify.com/CVE-2020-5787/): Path traversal in Teltonika Gateway TRB245 (medium 6.5) - [CVE-2020-5786](https://insights.sbomify.com/CVE-2020-5786/): Cross-site request forgery in Teltonika Gateway TRB245 (high 8.8) - [CVE-2020-5785](https://insights.sbomify.com/CVE-2020-5785/): Cross-site scripting in Teltonika Gateway TRB245 (medium 6.1) - [CVE-2020-5784](https://insights.sbomify.com/CVE-2020-5784/): Server-side request forgery in Teltonika Gateway TRB245 (medium 6.5) - [CVE-2020-5783](https://insights.sbomify.com/CVE-2020-5783/): Cross-site request forgery in IgniteNet HeliOS GLinq (medium 5.4) - [CVE-2020-5782](https://insights.sbomify.com/CVE-2020-5782/): Denial of service in IgniteNet HeliOS GLinq (medium 6.5) - [CVE-2020-5781](https://insights.sbomify.com/CVE-2020-5781/): Cross-site scripting in IgniteNet HeliOS GLinq (medium 4.3) - [CVE-2020-5780](https://insights.sbomify.com/CVE-2020-5780/): Auth bypass in Icegram Email Subscribers & Newsletters Plugin for WordPress (medium 5.3) - [CVE-2020-5779](https://insights.sbomify.com/CVE-2020-5779/): Memory corruption in Trading Technologies Messaging (high 7.5) - [CVE-2020-5778](https://insights.sbomify.com/CVE-2020-5778/): Memory corruption in Trading Technologies Messaging (high 7.5) - [CVE-2020-5777](https://insights.sbomify.com/CVE-2020-5777/): Authentication bypass in MAGMI (critical 9.8) - [CVE-2020-5776](https://insights.sbomify.com/CVE-2020-5776/): Cross-Site Request Forgery in MAGMI (high 8.8) - [CVE-2020-5775](https://insights.sbomify.com/CVE-2020-5775/): Server-side request forgery in Instructure Canvas Learning Management System (LMS) (medium 5.8) - [CVE-2020-5774](https://insights.sbomify.com/CVE-2020-5774/): Auth bypass in Tenable Nessus (high 7.1) - [CVE-2020-5773](https://insights.sbomify.com/CVE-2020-5773/): Privilege escalation in Teltonika Gateway TRB245 (high 8.8) - [CVE-2020-5772](https://insights.sbomify.com/CVE-2020-5772/): Privilege escalation in Teltonika Gateway TRB245 (high 7.5) - [CVE-2020-5771](https://insights.sbomify.com/CVE-2020-5771/): Privilege escalation in Teltonika Gateway TRB245 (high 7.5) - [CVE-2020-5770](https://insights.sbomify.com/CVE-2020-5770/): Cross-site request forgery in Teltonika Gateway TRB245 (high 8.8) - [CVE-2020-5769](https://insights.sbomify.com/CVE-2020-5769/): Cross-site scripting in Teltonika Gateway TRB245 (medium 5.4) - [CVE-2020-5768](https://insights.sbomify.com/CVE-2020-5768/): SQL injection in Icegram Email Subscribers & Newsletters Plugin for WordPress (medium 4.9) - [CVE-2020-5767](https://insights.sbomify.com/CVE-2020-5767/): Cross-site request forgery in Icegram Email Subscribers & Newsletters Plugin for WordPress (medium 6.5) - [CVE-2020-5766](https://insights.sbomify.com/CVE-2020-5766/): SQL injection in SRS Simple Hits Counter Plugin for WordPress (high 7.5) - [CVE-2020-5765](https://insights.sbomify.com/CVE-2020-5765/): Cross-site scripting in Tenable Nessus (medium 5.4) - [CVE-2020-5764](https://insights.sbomify.com/CVE-2020-5764/): Path traversal in MX Player Android App (high 8.8) - [CVE-2020-5763](https://insights.sbomify.com/CVE-2020-5763/): Hardcoded credentials in Grandstream HT800 Series (high 8.8) - [CVE-2020-5762](https://insights.sbomify.com/CVE-2020-5762/): Null dereference in Grandstream HT800 Series (high 7.5) --- From sbomify Insights: https://insights.sbomify.com/years/2020/page/52/