# Vulnerabilities published in 2020


- [CVE-2020-5621](https://insights.sbomify.com/CVE-2020-5621/): Cross-site request forgery in Multiple NETGEAR switching hubs (medium 4.3)
- [CVE-2020-5620](https://insights.sbomify.com/CVE-2020-5620/): Cross-site scripting in Exment (medium 5.4)
- [CVE-2020-5619](https://insights.sbomify.com/CVE-2020-5619/): Cross-site scripting in Exment (medium 5.4)
- [CVE-2020-5617](https://insights.sbomify.com/CVE-2020-5617/): Privilege escalation in SKYSEA Client View (high 7.8)
- [CVE-2020-5616](https://insights.sbomify.com/CVE-2020-5616/): Auth bypass in [Calendar01], [Calendar02], [PKOBO-News01], [PKOBO-vote01], [Telop01], [Gallery01], [CalendarForm01], and [Link01] (critical 9.8)
- [CVE-2020-5615](https://insights.sbomify.com/CVE-2020-5615/): Cross-site request forgery in [Calendar01] and [Calendar02] (high 8.8)
- [CVE-2020-5614](https://insights.sbomify.com/CVE-2020-5614/): Path traversal in KonaWiki (medium 5.3)
- [CVE-2020-5613](https://insights.sbomify.com/CVE-2020-5613/): Cross-site scripting in KonaWiki (medium 6.1)
- [CVE-2020-5612](https://insights.sbomify.com/CVE-2020-5612/): Cross-site scripting in KonaWiki (medium 6.1)
- [CVE-2020-5611](https://insights.sbomify.com/CVE-2020-5611/): Cross-site request forgery in Social Sharing Plugin (high 8.8)
- [CVE-2020-5610](https://insights.sbomify.com/CVE-2020-5610/): Memory corruption in Global TechStream (GTS) for TOYOTA dealers (high 7.8)
- [CVE-2020-5609](https://insights.sbomify.com/CVE-2020-5609/): Path traversal in CAMS for HIS (critical 9.8)
- [CVE-2020-5608](https://insights.sbomify.com/CVE-2020-5608/): Auth bypass in CAMS for HIS (critical 9.8)
- [CVE-2020-5607](https://insights.sbomify.com/CVE-2020-5607/): Open redirect in SHIRASAGI (medium 6.1)
- [CVE-2020-5606](https://insights.sbomify.com/CVE-2020-5606/): Cross-site scripting in WHR-G54S (medium 6.1)
- [CVE-2020-5605](https://insights.sbomify.com/CVE-2020-5605/): Path traversal in WHR-G54S (medium 4.3)
- [CVE-2020-5604](https://insights.sbomify.com/CVE-2020-5604/): Code injection in Android App 'Mercari' (Japan version) (high 8.1)
- [CVE-2020-5603](https://insights.sbomify.com/CVE-2020-5603/): Denial of service in Mitsubishi Electoric FA Engineering Software (high 7.5)
- [CVE-2020-5602](https://insights.sbomify.com/CVE-2020-5602/): XML external entity in Mitsubishi Electoric FA Engineering Software (high 7.5)
- [CVE-2020-5601](https://insights.sbomify.com/CVE-2020-5601/): Command injection in Chrome Extension for e-Tax Reception System (high 8.8)
- [CVE-2020-5600](https://insights.sbomify.com/CVE-2020-5600/): Denial of service in GOT2000 series GT27, GT25, and GT23 (high 7.5)
- [CVE-2020-5599](https://insights.sbomify.com/CVE-2020-5599/): Command injection in GOT2000 series GT27, GT25, and GT23 (critical 9.8)
- [CVE-2020-5598](https://insights.sbomify.com/CVE-2020-5598/): Missing authorization in GOT2000 series GT27, GT25, and GT23 (high 7.5)
- [CVE-2020-5597](https://insights.sbomify.com/CVE-2020-5597/): Null dereference in GOT2000 series GT27, GT25, and GT23 (high 7.5)
- [CVE-2020-5596](https://insights.sbomify.com/CVE-2020-5596/): Other in GOT2000 series GT27, GT25, and GT23 (high 7.5)
- [CVE-2020-5595](https://insights.sbomify.com/CVE-2020-5595/): Memory corruption in GOT2000 series GT27, GT25, and GT23 (critical 9.8)
- [CVE-2020-5594](https://insights.sbomify.com/CVE-2020-5594/): Information disclosure in MELSEC iQ-R, iQ-F, Q, L, and FX series CPU modules (critical 9.8)
- [CVE-2020-5593](https://insights.sbomify.com/CVE-2020-5593/): Code injection in Zenphoto (high 8.8)
- [CVE-2020-5592](https://insights.sbomify.com/CVE-2020-5592/): Cross-site scripting in Zenphoto (medium 6.1)
- [CVE-2020-5591](https://insights.sbomify.com/CVE-2020-5591/): Denial of service in XACK DNS (high 7.5)
- [CVE-2020-5590](https://insights.sbomify.com/CVE-2020-5590/): EC-CUBE Directory traversal vulnerability (high 8.1)
- [CVE-2020-5589](https://insights.sbomify.com/CVE-2020-5589/): Auth bypass in Sony wireless headphones WF-1000X, WF-SP700N, WH-1000XM2, WH-1000XM3, WH-CH700N, WH-H900N, WH-XB700, WH-XB900N, WI-1000X, WI-C600N, WI-SP600N (high 8.8)
- [CVE-2020-5588](https://insights.sbomify.com/CVE-2020-5588/): Path traversal in Cybozu Garoon (medium 4.9)
- [CVE-2020-5587](https://insights.sbomify.com/CVE-2020-5587/): Information disclosure in Cybozu Garoon (medium 6.5)
- [CVE-2020-5586](https://insights.sbomify.com/CVE-2020-5586/): Cross-site scripting in Cybozu Garoon (medium 4.8)
- [CVE-2020-5585](https://insights.sbomify.com/CVE-2020-5585/): Cross-site scripting in Cybozu Garoon (medium 4.8)
- [CVE-2020-5584](https://insights.sbomify.com/CVE-2020-5584/): Information disclosure in Cybozu Garoon (high 7.5)
- [CVE-2020-5583](https://insights.sbomify.com/CVE-2020-5583/): Missing authorization in Cybozu Garoon (medium 6.5)
- [CVE-2020-5582](https://insights.sbomify.com/CVE-2020-5582/): Missing authorization in Cybozu Garoon (medium 4.3)
- [CVE-2020-5581](https://insights.sbomify.com/CVE-2020-5581/): Path traversal in Cybozu Garoon (medium 6.5)
- [CVE-2020-5580](https://insights.sbomify.com/CVE-2020-5580/): Missing authorization in Cybozu Garoon (high 8.1)
- [CVE-2020-5579](https://insights.sbomify.com/CVE-2020-5579/): SQL injection in Paid Memberships (high 7.2)
- [CVE-2020-5577](https://insights.sbomify.com/CVE-2020-5577/): File upload in Movable Type (high 8.8)
- [CVE-2020-5576](https://insights.sbomify.com/CVE-2020-5576/): Cross-site request forgery in Movable Type (high 8.8)
- [CVE-2020-5575](https://insights.sbomify.com/CVE-2020-5575/): Cross-site scripting in Movable Type (medium 6.1)
- [CVE-2020-5574](https://insights.sbomify.com/CVE-2020-5574/): Cross-site scripting in Movable Type (medium 5.3)
- [CVE-2020-5573](https://insights.sbomify.com/CVE-2020-5573/): Information disclosure in Android App 'kintone mobile for Android' (medium 4.6)
- [CVE-2020-5572](https://insights.sbomify.com/CVE-2020-5572/): Information disclosure in Android App 'Mailwise for Android' (medium 4.6)
- [CVE-2020-5571](https://insights.sbomify.com/CVE-2020-5571/): Information disclosure in SHARP AQUOS series (high 7.5)
- [CVE-2020-5570](https://insights.sbomify.com/CVE-2020-5570/): Cross-site scripting in Sales Force Assistant (medium 5.4)
- [CVE-2020-5569](https://insights.sbomify.com/CVE-2020-5569/): Privilege escalation in HDD Password tool (for Windows) (high 8.4)
- [CVE-2020-5568](https://insights.sbomify.com/CVE-2020-5568/): Cross-site scripting in Cybozu Garoon (medium 6.1)
- [CVE-2020-5567](https://insights.sbomify.com/CVE-2020-5567/): Auth bypass in Cybozu Garoon (high 7.5)
- [CVE-2020-5566](https://insights.sbomify.com/CVE-2020-5566/): Missing authorization in Cybozu Garoon (medium 4.3)
- [CVE-2020-5565](https://insights.sbomify.com/CVE-2020-5565/): Other in Cybozu Garoon (medium 4.3)
- [CVE-2020-5564](https://insights.sbomify.com/CVE-2020-5564/): Cross-site scripting in Cybozu Garoon (medium 6.1)
- [CVE-2020-5563](https://insights.sbomify.com/CVE-2020-5563/): Auth bypass in Cybozu Garoon (medium 5.3)
- [CVE-2020-5562](https://insights.sbomify.com/CVE-2020-5562/): Server-side request forgery in Cybozu Garoon (medium 4.9)
- [CVE-2020-5561](https://insights.sbomify.com/CVE-2020-5561/): Command injection in Keijiban Tsumiki (critical 9.8)
- [CVE-2020-5560](https://insights.sbomify.com/CVE-2020-5560/): Command injection in WL-Enq (critical 9.8)
- [CVE-2020-5559](https://insights.sbomify.com/CVE-2020-5559/): Cross-site scripting in WL-Enq (medium 6.1)
- [CVE-2020-5558](https://insights.sbomify.com/CVE-2020-5558/): Code injection in CuteNews (high 8.8)
- [CVE-2020-5557](https://insights.sbomify.com/CVE-2020-5557/): Cross-site scripting in CuteNews (medium 6.1)
- [CVE-2020-5556](https://insights.sbomify.com/CVE-2020-5556/): Command injection in Shihonkanri Plus GOOUT (critical 9.8)
- [CVE-2020-5555](https://insights.sbomify.com/CVE-2020-5555/): Other in Shihonkanri Plus GOOUT (critical 9.1)
- [CVE-2020-5554](https://insights.sbomify.com/CVE-2020-5554/): Path traversal in Shihonkanri Plus GOOUT (critical 9.1)
- [CVE-2020-5553](https://insights.sbomify.com/CVE-2020-5553/): Code injection in mailform (critical 9.8)
- [CVE-2020-5552](https://insights.sbomify.com/CVE-2020-5552/): Cross-site scripting in mailform (medium 6.1)
- [CVE-2020-5551](https://insights.sbomify.com/CVE-2020-5551/): Missing authorization in DCU (Display Control Unit) (high 8.8)
- [CVE-2020-5550](https://insights.sbomify.com/CVE-2020-5550/): Auth bypass in EasyBlocks IPv6 (high 8.1)
- [CVE-2020-5549](https://insights.sbomify.com/CVE-2020-5549/): Cross-site request forgery in EasyBlocks IPv6 (high 8.8)
- [CVE-2020-5548](https://insights.sbomify.com/CVE-2020-5548/): Denial of service in Yamaha network devices (high 7.5)
- [CVE-2020-5547](https://insights.sbomify.com/CVE-2020-5547/): Denial of service in Mitsubishi Electric MELQIC IU1 series (critical 9.8)
- [CVE-2020-5546](https://insights.sbomify.com/CVE-2020-5546/): Command injection in Mitsubishi Electric MELQIC IU1 series (high 8.8)
- [CVE-2020-5545](https://insights.sbomify.com/CVE-2020-5545/): Security feature bypass in Mitsubishi Electric MELQIC IU1 series (critical 9.8)
- [CVE-2020-5544](https://insights.sbomify.com/CVE-2020-5544/): Null dereference in Mitsubishi Electric MELQIC IU1 series (critical 9.8)
- [CVE-2020-5543](https://insights.sbomify.com/CVE-2020-5543/): Other in Mitsubishi Electric MELQIC IU1 series (critical 9.8)
- [CVE-2020-5542](https://insights.sbomify.com/CVE-2020-5542/): Memory corruption in Mitsubishi Electric MELQIC IU1 series (critical 9.8)
- [CVE-2020-5541](https://insights.sbomify.com/CVE-2020-5541/): Open redirect in CyberMail (medium 6.1)
- [CVE-2020-5540](https://insights.sbomify.com/CVE-2020-5540/): Cross-site scripting in CyberMail (medium 6.1)
- [CVE-2020-5539](https://insights.sbomify.com/CVE-2020-5539/): Auth bypass in GRANDIT (medium 6.5)
- [CVE-2020-5538](https://insights.sbomify.com/CVE-2020-5538/): Privilege escalation in PALLET CONTROL (high 7.8)
- [CVE-2020-5537](https://insights.sbomify.com/CVE-2020-5537/): Other in Cybozu Desktop for Windows (critical 9.8)
- [CVE-2020-5536](https://insights.sbomify.com/CVE-2020-5536/): Auth bypass in OpenBlocks IoT VX2 (high 8.8)
- [CVE-2020-5535](https://insights.sbomify.com/CVE-2020-5535/): Command injection in OpenBlocks IoT VX2 (high 8.8)
- [CVE-2020-5534](https://insights.sbomify.com/CVE-2020-5534/): Command injection in Aterm WG2600HS (high 8.0)
- [CVE-2020-5533](https://insights.sbomify.com/CVE-2020-5533/): Cross-site scripting in Aterm WG2600HS (medium 6.1)
- [CVE-2020-5532](https://insights.sbomify.com/CVE-2020-5532/): Auth bypass in ilbo App (medium 4.3)
- [CVE-2020-5531](https://insights.sbomify.com/CVE-2020-5531/): Other in Mitsubishi Electric MELSEC C Controller Module and MELIPC Series MI5000 (critical 9.8)
- [CVE-2020-5530](https://insights.sbomify.com/CVE-2020-5530/): Cross-site request forgery in Easy Property Listings (high 8.8)
- [CVE-2020-5529](https://insights.sbomify.com/CVE-2020-5529/): Code execution vulnerability in HtmlUnit (high 8.1)
- [CVE-2020-5528](https://insights.sbomify.com/CVE-2020-5528/): Cross-site scripting in Movable Type series (medium 6.1)
- [CVE-2020-5527](https://insights.sbomify.com/CVE-2020-5527/): Denial of service in MELSOFT transmission port (UDP/IP) of multiple Mitsubishi Electric MELSEC series (high 7.5)
- [CVE-2020-5526](https://insights.sbomify.com/CVE-2020-5526/): Security feature bypass in AWMS Mobile App (medium 5.9)
- [CVE-2020-5525](https://insights.sbomify.com/CVE-2020-5525/): Command injection in Aterm series (high 8.0)
- [CVE-2020-5524](https://insights.sbomify.com/CVE-2020-5524/): Command injection in Aterm series (high 8.8)
- [CVE-2020-5523](https://insights.sbomify.com/CVE-2020-5523/): Security feature bypass in 'MyPallete' and some of the Android banking applications that use 'MyPallete' (high 7.4)
- [CVE-2020-5522](https://insights.sbomify.com/CVE-2020-5522/): Security feature bypass in kantan netprint App for Android (high 7.4)
- [CVE-2020-5521](https://insights.sbomify.com/CVE-2020-5521/): Security feature bypass in kantan netprint App for iOS (high 7.4)
- [CVE-2020-5520](https://insights.sbomify.com/CVE-2020-5520/): Security feature bypass in netprint App for iOS (high 7.4)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/54/