# Vulnerabilities published in 2020 - [CVE-2020-5761](https://insights.sbomify.com/CVE-2020-5761/): Denial of service in Grandstream HT800 Series (high 7.5) - [CVE-2020-5760](https://insights.sbomify.com/CVE-2020-5760/): Command injection in Grandstream HT800 Series (high 7.8) - [CVE-2020-5759](https://insights.sbomify.com/CVE-2020-5759/): Command injection in Grandstream UCM6200 Series (critical 9.8) - [CVE-2020-5758](https://insights.sbomify.com/CVE-2020-5758/): Command injection in Grandstream UCM6200 Series (high 8.8) - [CVE-2020-5757](https://insights.sbomify.com/CVE-2020-5757/): Command injection in Grandstream UCM6200 Series (critical 9.8) - [CVE-2020-5756](https://insights.sbomify.com/CVE-2020-5756/): Command injection in Grandstream GWN7000 (high 8.8) - [CVE-2020-5755](https://insights.sbomify.com/CVE-2020-5755/): Privilege escalation in Webroot SecureAnywhere (high 7.8) - [CVE-2020-5754](https://insights.sbomify.com/CVE-2020-5754/): Memory corruption in Webroot SecureAnywhere (critical 9.1) - [CVE-2020-5753](https://insights.sbomify.com/CVE-2020-5753/): Information disclosure in Signal Private Messenger (medium 5.3) - [CVE-2020-5752](https://insights.sbomify.com/CVE-2020-5752/): Path traversal in Druva inSync Windows Client (high 7.8) - [CVE-2020-5751](https://insights.sbomify.com/CVE-2020-5751/): Cross-site scripting in TCExam (medium 5.4) - [CVE-2020-5750](https://insights.sbomify.com/CVE-2020-5750/): Cross-site scripting in TCExam (medium 6.1) - [CVE-2020-5749](https://insights.sbomify.com/CVE-2020-5749/): Cross-site scripting in TCExam (medium 5.4) - [CVE-2020-5748](https://insights.sbomify.com/CVE-2020-5748/): Cross-site scripting in TCExam (medium 6.1) - [CVE-2020-5747](https://insights.sbomify.com/CVE-2020-5747/): Cross-site scripting in TCExam (medium 5.4) - [CVE-2020-5746](https://insights.sbomify.com/CVE-2020-5746/): Cross-site scripting in TCExam (medium 5.4) - [CVE-2020-5745](https://insights.sbomify.com/CVE-2020-5745/): Cross-site request forgery in TCExam (high 7.4) - [CVE-2020-5744](https://insights.sbomify.com/CVE-2020-5744/): Path traversal in TCExam (medium 4.9) - [CVE-2020-5743](https://insights.sbomify.com/CVE-2020-5743/): Missing authorization in TCExam (medium 4.3) - [CVE-2020-5742](https://insights.sbomify.com/CVE-2020-5742/): Cross-site request forgery in Plex Media Server (high 8.8) - [CVE-2020-5741](https://insights.sbomify.com/CVE-2020-5741/): Plex Media Server Remote Code Execution (high 7.2, exploited in the wild) - [CVE-2020-5740](https://insights.sbomify.com/CVE-2020-5740/): Code injection in Plex Media Server (Windows) (high 7.8) - [CVE-2020-5739](https://insights.sbomify.com/CVE-2020-5739/): Code injection in Grandstream GXP1600 Series (high 8.8) - [CVE-2020-5738](https://insights.sbomify.com/CVE-2020-5738/): Command injection in Grandstream GXP1600 Series (high 8.8) - [CVE-2020-5737](https://insights.sbomify.com/CVE-2020-5737/): Cross-site scripting in Tenable.Sc (medium 5.4) - [CVE-2020-5736](https://insights.sbomify.com/CVE-2020-5736/): Null dereference in Amcrest (medium 6.5) - [CVE-2020-5735](https://insights.sbomify.com/CVE-2020-5735/): Amcrest Cameras and NVR Stack-based Buffer Overflow (high 8.8, exploited in the wild) - [CVE-2020-5734](https://insights.sbomify.com/CVE-2020-5734/): Memory corruption in SolarWinds Dameware (high 7.5) - [CVE-2020-5733](https://insights.sbomify.com/CVE-2020-5733/): Open redirect in OpenMRS (medium 6.1) - [CVE-2020-5732](https://insights.sbomify.com/CVE-2020-5732/): Auth bypass in OpenMRS (medium 6.1) - [CVE-2020-5731](https://insights.sbomify.com/CVE-2020-5731/): Cross-site scripting in OpenMRS (medium 6.1) - [CVE-2020-5730](https://insights.sbomify.com/CVE-2020-5730/): Cross-site scripting in OpenMRS (medium 6.1) - [CVE-2020-5729](https://insights.sbomify.com/CVE-2020-5729/): Cross-site scripting in OpenMRS (medium 6.1) - [CVE-2020-5728](https://insights.sbomify.com/CVE-2020-5728/): Cross-site scripting in OpenMRS (medium 6.1) - [CVE-2020-5727](https://insights.sbomify.com/CVE-2020-5727/): Auth bypass in SimpliSafe SS3 (medium 4.6) - [CVE-2020-5726](https://insights.sbomify.com/CVE-2020-5726/): SQL injection in Grandstream UCM6200 series (high 7.5) - [CVE-2020-5725](https://insights.sbomify.com/CVE-2020-5725/): SQL injection in Grandstream UCM6200 series (medium 5.9) - [CVE-2020-5724](https://insights.sbomify.com/CVE-2020-5724/): SQL injection in Grandstream UCM6200 series (high 7.5) - [CVE-2020-5723](https://insights.sbomify.com/CVE-2020-5723/): Information disclosure in Grandstream UCM6200 series (critical 9.8) - [CVE-2020-5722](https://insights.sbomify.com/CVE-2020-5722/): Grandstream Networks UCM6200 Series SQL Injection (critical 9.8, exploited in the wild) - [CVE-2020-5721](https://insights.sbomify.com/CVE-2020-5721/): Information disclosure in MikroTik WinBox (medium 5.5) - [CVE-2020-5720](https://insights.sbomify.com/CVE-2020-5720/): Path traversal in MikroTik WinBox (medium 5.9) - [CVE-2020-5686](https://insights.sbomify.com/CVE-2020-5686/): Auth bypass in UNIVERGE SV9500/SV8500 series (high 7.5) - [CVE-2020-5685](https://insights.sbomify.com/CVE-2020-5685/): Command injection in UNIVERGE SV9500/SV8500 series (critical 9.8) - [CVE-2020-5684](https://insights.sbomify.com/CVE-2020-5684/): Security feature bypass in Management software for NEC Storage disk array system (medium 4.8) - [CVE-2020-5683](https://insights.sbomify.com/CVE-2020-5683/): Path traversal in GROWI (high 7.5) - [CVE-2020-5682](https://insights.sbomify.com/CVE-2020-5682/): Denial of service in GROWI (high 7.5) - [CVE-2020-5681](https://insights.sbomify.com/CVE-2020-5681/): Other in EpsonNet SetupManager and Offirio SynergyWare PrintDirector (high 7.8) - [CVE-2020-5680](https://insights.sbomify.com/CVE-2020-5680/): EC-CUBE Improper input validation vulnerability (high 7.5) - [CVE-2020-5679](https://insights.sbomify.com/CVE-2020-5679/): EC-CUBE Improper Restriction of Rendered UI Layers or Frames (medium 6.1) - [CVE-2020-5678](https://insights.sbomify.com/CVE-2020-5678/): Cross-site scripting in GROWI (medium 6.1) - [CVE-2020-5677](https://insights.sbomify.com/CVE-2020-5677/): Cross-site scripting in GROWI (medium 6.1) - [CVE-2020-5676](https://insights.sbomify.com/CVE-2020-5676/): Information disclosure in GROWI (high 7.5) - [CVE-2020-5675](https://insights.sbomify.com/CVE-2020-5675/): Memory corruption in GT21 model of GOT2000 series, GS21 model of GOT SIMPLE series, and Tension Controller LE7-40GU-L series (high 7.5) - [CVE-2020-5674](https://insights.sbomify.com/CVE-2020-5674/): Other in the installers of multiple SEIKO EPSON products (high 7.8) - [CVE-2020-5669](https://insights.sbomify.com/CVE-2020-5669/): Cross-site scripting in Movable Type (medium 5.4) - [CVE-2020-5668](https://insights.sbomify.com/CVE-2020-5668/): Denial of service in MELSEC iQ-R (high 7.5) - [CVE-2020-5667](https://insights.sbomify.com/CVE-2020-5667/): Hardcoded credentials in Studyplus App (medium 5.5) - [CVE-2020-5666](https://insights.sbomify.com/CVE-2020-5666/): Denial of service in MELSEC iQ-R Series CPU Modules (high 7.5) - [CVE-2020-5665](https://insights.sbomify.com/CVE-2020-5665/): Denial of service in MELSEC iQ-F series FX5U(C) CPU unit (high 7.4) - [CVE-2020-5664](https://insights.sbomify.com/CVE-2020-5664/): Deserialization in XooNIps (critical 9.8) - [CVE-2020-5663](https://insights.sbomify.com/CVE-2020-5663/): Cross-site scripting in XooNIps (medium 5.4) - [CVE-2020-5662](https://insights.sbomify.com/CVE-2020-5662/): Cross-site scripting in XooNIps (medium 5.4) - [CVE-2020-5659](https://insights.sbomify.com/CVE-2020-5659/): SQL injection in XooNIps (high 8.8) - [CVE-2020-5658](https://insights.sbomify.com/CVE-2020-5658/): Denial of service in MELSEC iQ-R series (high 7.5) - [CVE-2020-5657](https://insights.sbomify.com/CVE-2020-5657/): Command injection in MELSEC iQ-R series (medium 6.5) - [CVE-2020-5656](https://insights.sbomify.com/CVE-2020-5656/): Missing authorization in MELSEC iQ-R series (critical 9.8) - [CVE-2020-5655](https://insights.sbomify.com/CVE-2020-5655/): Null dereference in MELSEC iQ-R series (high 7.5) - [CVE-2020-5654](https://insights.sbomify.com/CVE-2020-5654/): Auth bypass in MELSEC iQ-R series (high 7.5) - [CVE-2020-5653](https://insights.sbomify.com/CVE-2020-5653/): Memory corruption in MELSEC iQ-R series (critical 9.8) - [CVE-2020-5652](https://insights.sbomify.com/CVE-2020-5652/): Denial of service in MELSEC iQ-R, Q and L series (high 7.5) - [CVE-2020-5651](https://insights.sbomify.com/CVE-2020-5651/): SQL injection in Simple Download Monitor (high 8.8) - [CVE-2020-5650](https://insights.sbomify.com/CVE-2020-5650/): Cross-site scripting in Simple Download Monitor (medium 6.1) - [CVE-2020-5649](https://insights.sbomify.com/CVE-2020-5649/): Denial of service in GT14 Model of GOT 1000 series (high 7.5) - [CVE-2020-5648](https://insights.sbomify.com/CVE-2020-5648/): Command injection in GT14 Model of GOT 1000 series (critical 9.8) - [CVE-2020-5647](https://insights.sbomify.com/CVE-2020-5647/): Missing authorization in GT14 Model of GOT 1000 series (critical 9.8) - [CVE-2020-5646](https://insights.sbomify.com/CVE-2020-5646/): Null dereference in GT14 Model of GOT 1000 series (high 7.5) - [CVE-2020-5645](https://insights.sbomify.com/CVE-2020-5645/): Auth bypass in GT14 Model of GOT 1000 series (high 7.5) - [CVE-2020-5644](https://insights.sbomify.com/CVE-2020-5644/): Memory corruption in GT14 Model of GOT 1000 series (critical 9.8) - [CVE-2020-5643](https://insights.sbomify.com/CVE-2020-5643/): Other in Cybozu Garoon (medium 6.5) - [CVE-2020-5642](https://insights.sbomify.com/CVE-2020-5642/): Cross-site request forgery in Live Chat - Live support (high 8.8) - [CVE-2020-5641](https://insights.sbomify.com/CVE-2020-5641/): Cross-site request forgery in GS108Ev3 (medium 6.5) - [CVE-2020-5640](https://insights.sbomify.com/CVE-2020-5640/): Path traversal in OneThird CMS (critical 9.8) - [CVE-2020-5639](https://insights.sbomify.com/CVE-2020-5639/): Path traversal in FileZen (critical 9.8) - [CVE-2020-5638](https://insights.sbomify.com/CVE-2020-5638/): Cross-site scripting in desknet's NEO (medium 6.1) - [CVE-2020-5637](https://insights.sbomify.com/CVE-2020-5637/): Security feature bypass in Aterm SA3500G (medium 6.8) - [CVE-2020-5636](https://insights.sbomify.com/CVE-2020-5636/): Command injection in Aterm SA3500G (medium 6.8) - [CVE-2020-5635](https://insights.sbomify.com/CVE-2020-5635/): Command injection in Aterm SA3500G (high 8.8) - [CVE-2020-5634](https://insights.sbomify.com/CVE-2020-5634/): Command injection in ELECOM LAN routers (high 8.8) - [CVE-2020-5633](https://insights.sbomify.com/CVE-2020-5633/): Auth bypass in Multiple NEC products where Baseboard Management Controller (BMC) firmware Rev1.09 and earlier is applied (critical 9.8) - [CVE-2020-5632](https://insights.sbomify.com/CVE-2020-5632/): Privilege escalation in InfoCage SiteShell series (high 7.8) - [CVE-2020-5631](https://insights.sbomify.com/CVE-2020-5631/): Cross-site scripting in CMONOS.JP (medium 6.1) - [CVE-2020-5629](https://insights.sbomify.com/CVE-2020-5629/): Open redirect in UNIQLO App for Android (medium 6.5) - [CVE-2020-5628](https://insights.sbomify.com/CVE-2020-5628/): Open redirect in UNIQLO App for Android (medium 6.5) - [CVE-2020-5627](https://insights.sbomify.com/CVE-2020-5627/): Open redirect in Yodobashi App for Android (medium 6.1) - [CVE-2020-5626](https://insights.sbomify.com/CVE-2020-5626/): Command injection in Logstorage and ELC Analytics (high 8.8) - [CVE-2020-5625](https://insights.sbomify.com/CVE-2020-5625/): Cross-site scripting in XooNIps (medium 6.1) - [CVE-2020-5624](https://insights.sbomify.com/CVE-2020-5624/): SQL injection in XooNIps (critical 9.8) - [CVE-2020-5623](https://insights.sbomify.com/CVE-2020-5623/): Open redirect in NITORI App for Android and NITORI App for iOS (medium 6.1) - [CVE-2020-5622](https://insights.sbomify.com/CVE-2020-5622/): Denial of service in Shadankun Server Security Type (excluding normal blocking method types) (high 7.5) --- From sbomify Insights: https://insights.sbomify.com/years/2020/page/53/