# Vulnerabilities published in 2020


- [CVE-2020-3993](https://insights.sbomify.com/CVE-2020-3993/): Security feature bypass in VMware NSX-T (medium 5.9)
- [CVE-2020-3992](https://insights.sbomify.com/CVE-2020-3992/): VMware ESXi OpenSLP Use-After-Free (critical 9.8, exploited in the wild)
- [CVE-2020-3991](https://insights.sbomify.com/CVE-2020-3991/): Other in VMware Horizon Client for Windows (high 7.1)
- [CVE-2020-3990](https://insights.sbomify.com/CVE-2020-3990/): Integer overflow in VMware Workstation and Horizon Client for Windows (medium 6.5)
- [CVE-2020-3989](https://insights.sbomify.com/CVE-2020-3989/): Memory corruption in VMware Workstation and Horizon Client for Windows (low 3.3)
- [CVE-2020-3988](https://insights.sbomify.com/CVE-2020-3988/): Memory corruption in VMware Workstation and Horizon Client for Windows (medium 6.1)
- [CVE-2020-3987](https://insights.sbomify.com/CVE-2020-3987/): Memory corruption in VMware Workstation and Horizon Client for Windows (medium 6.1)
- [CVE-2020-3986](https://insights.sbomify.com/CVE-2020-3986/): Memory corruption in VMware Workstation and Horizon Client for Windows (medium 6.1)
- [CVE-2020-3985](https://insights.sbomify.com/CVE-2020-3985/): Privilege escalation in VMware SD-WAN Orchestrator (high 8.8)
- [CVE-2020-3984](https://insights.sbomify.com/CVE-2020-3984/): SQL injection in VMware SD-WAN Orchestrator (medium 6.5)
- [CVE-2020-3982](https://insights.sbomify.com/CVE-2020-3982/): Race condition in VMware ESXi, Workstation, Fusion (high 7.7)
- [CVE-2020-3981](https://insights.sbomify.com/CVE-2020-3981/): Race condition in VMware ESXi, Workstation, Fusion (medium 5.8)
- [CVE-2020-3980](https://insights.sbomify.com/CVE-2020-3980/): Privilege escalation in VMware Fusion (medium 6.7)
- [CVE-2020-3979](https://insights.sbomify.com/CVE-2020-3979/): Other in VMware InstallBuilder (high 7.8)
- [CVE-2020-3977](https://insights.sbomify.com/CVE-2020-3977/): Auth bypass in VMware Horizon DaaS (medium 6.5)
- [CVE-2020-3976](https://insights.sbomify.com/CVE-2020-3976/): Denial of service in ESXi, vCenter Server, and Cloud Foundation (medium 5.3)
- [CVE-2020-3975](https://insights.sbomify.com/CVE-2020-3975/): Cross-site scripting in VMware App Volumes (medium 5.4)
- [CVE-2020-3974](https://insights.sbomify.com/CVE-2020-3974/): Privilege escalation in VMware Fusion, VMware Remote Console for Mac and Horizon Client for Mac (high 7.8)
- [CVE-2020-3973](https://insights.sbomify.com/CVE-2020-3973/): SQL injection in VMware SD-WAN by VeloCloud (high 8.8)
- [CVE-2020-3972](https://insights.sbomify.com/CVE-2020-3972/): Denial of service in VMware Tools for macOS (low 3.3)
- [CVE-2020-3971](https://insights.sbomify.com/CVE-2020-3971/): Memory corruption in Fusion (medium 5.5)
- [CVE-2020-3970](https://insights.sbomify.com/CVE-2020-3970/): Memory corruption in Fusion (low 3.8)
- [CVE-2020-3969](https://insights.sbomify.com/CVE-2020-3969/): Memory corruption in Fusion (high 7.8)
- [CVE-2020-3968](https://insights.sbomify.com/CVE-2020-3968/): Memory corruption in Fusion (high 8.2)
- [CVE-2020-3967](https://insights.sbomify.com/CVE-2020-3967/): Memory corruption in Fusion (high 7.5)
- [CVE-2020-3966](https://insights.sbomify.com/CVE-2020-3966/): Race condition in Fusion (high 7.5)
- [CVE-2020-3965](https://insights.sbomify.com/CVE-2020-3965/): Information disclosure in Fusion (medium 5.5)
- [CVE-2020-3964](https://insights.sbomify.com/CVE-2020-3964/): Information disclosure in Fusion (medium 4.7)
- [CVE-2020-3963](https://insights.sbomify.com/CVE-2020-3963/): Use after free in Fusion (medium 5.5)
- [CVE-2020-3962](https://insights.sbomify.com/CVE-2020-3962/): Use after free in Fusion (high 8.2)
- [CVE-2020-3961](https://insights.sbomify.com/CVE-2020-3961/): Privilege escalation in VMware Horizon Client for Windows (high 7.8)
- [CVE-2020-3960](https://insights.sbomify.com/CVE-2020-3960/): Memory corruption in VMware ESXi, Workstation, and Fusion (high 8.4)
- [CVE-2020-3959](https://insights.sbomify.com/CVE-2020-3959/): Denial of service in VMware ESXi (low 3.3)
- [CVE-2020-3958](https://insights.sbomify.com/CVE-2020-3958/): Denial of service in VMware ESXi (medium 5.5)
- [CVE-2020-3957](https://insights.sbomify.com/CVE-2020-3957/): Race condition in VMware Fusion (high 7.0)
- [CVE-2020-3956](https://insights.sbomify.com/CVE-2020-3956/): Code injection in VMware Cloud Director (high 8.8)
- [CVE-2020-3955](https://insights.sbomify.com/CVE-2020-3955/): Cross-site scripting in ESXi (critical 9.3)
- [CVE-2020-3954](https://insights.sbomify.com/CVE-2020-3954/): Open redirect in VMware vRealize Log Insight (medium 6.1)
- [CVE-2020-3953](https://insights.sbomify.com/CVE-2020-3953/): Cross-site scripting in VMware vRealize Log Insight (medium 4.8)
- [CVE-2020-3952](https://insights.sbomify.com/CVE-2020-3952/): VMware vCenter Server Information Disclosure (critical 9.8, exploited in the wild)
- [CVE-2020-3951](https://insights.sbomify.com/CVE-2020-3951/): Memory corruption in VMware Workstation and Horizon Client for Windows (low 3.8)
- [CVE-2020-3950](https://insights.sbomify.com/CVE-2020-3950/): VMware Multiple Products Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2020-3948](https://insights.sbomify.com/CVE-2020-3948/): Privilege escalation in Fusion (high 7.8)
- [CVE-2020-3947](https://insights.sbomify.com/CVE-2020-3947/): Use after free in Fusion (high 8.8)
- [CVE-2020-3946](https://insights.sbomify.com/CVE-2020-3946/): Denial of service in InstallBuilder (high 7.5)
- [CVE-2020-3945](https://insights.sbomify.com/CVE-2020-3945/): Information disclosure in vRealize Operations for Horizon Adapter (high 7.5)
- [CVE-2020-3944](https://insights.sbomify.com/CVE-2020-3944/): Auth bypass in vRealize Operations for Horizon Adapter (high 8.6)
- [CVE-2020-3943](https://insights.sbomify.com/CVE-2020-3943/): Misconfiguration in vRealize Operations for Horizon Adapter (critical 9.8)
- [CVE-2020-3941](https://insights.sbomify.com/CVE-2020-3941/): Race condition in VMware Tools for Windows (VMware Tools) (high 7.0)
- [CVE-2020-3940](https://insights.sbomify.com/CVE-2020-3940/): Weak cryptography in Workspace ONE SDK (medium 5.9)
- [CVE-2020-3939](https://insights.sbomify.com/CVE-2020-3939/): SysJust Syuan-Gu-Da-Shih -Cross-Site Scripting(XSS) (medium 6.1)
- [CVE-2020-3938](https://insights.sbomify.com/CVE-2020-3938/): SysJust Syuan-Gu-Da-Shih -Request-Forgery (critical 9.8)
- [CVE-2020-3937](https://insights.sbomify.com/CVE-2020-3937/): SysJust Syuan-Gu-Da-Shih-SQL injection (high 8.1)
- [CVE-2020-3936](https://insights.sbomify.com/CVE-2020-3936/): Unisoon UltraLog Express - SQL Injection (critical 10.0)
- [CVE-2020-3935](https://insights.sbomify.com/CVE-2020-3935/): TAIWAN SECOM CO., LTD. – Sensitivity Information Exposure (high 7.5)
- [CVE-2020-3934](https://insights.sbomify.com/CVE-2020-3934/): TAIWAN SECOM CO., LTD. - Pre-auth SQL Injection (critical 9.8)
- [CVE-2020-3933](https://insights.sbomify.com/CVE-2020-3933/): TAIWAN SECOM CO., LTD. - User Account Enumeration (medium 5.3)
- [CVE-2020-3932](https://insights.sbomify.com/CVE-2020-3932/): Draytek VigorAP910C - Information Leakage (high 7.5)
- [CVE-2020-3931](https://insights.sbomify.com/CVE-2020-3931/): GeoVision Door Access Control Device - Buffer overflow vulnerability (critical 9.8)
- [CVE-2020-3930](https://insights.sbomify.com/CVE-2020-3930/): GeoVision Door Access Control Device - Information disclosure vulnerability (medium 4.0)
- [CVE-2020-3929](https://insights.sbomify.com/CVE-2020-3929/): GeoVision Door Access Control Device - Shared cryptographic keys (medium 5.9)
- [CVE-2020-3928](https://insights.sbomify.com/CVE-2020-3928/): GeoVision Door Access Control Device - Hardcoded privileged password (medium 6.2)
- [CVE-2020-3927](https://insights.sbomify.com/CVE-2020-3927/): ServiSign Windows Versions- Arbitrary File Deletion (high 8.3)
- [CVE-2020-3926](https://insights.sbomify.com/CVE-2020-3926/): ServiSign Windows Versions- Arbitrary File Access (medium 6.1)
- [CVE-2020-3925](https://insights.sbomify.com/CVE-2020-3925/): ServiSign Windows Versions- Remote Code Execution via LoadLibrary (high 8.3)
- [CVE-2020-3924](https://insights.sbomify.com/CVE-2020-3924/): TONNET DVR – Firmware Injection (medium 6.4)
- [CVE-2020-3923](https://insights.sbomify.com/CVE-2020-3923/): TONNET DVR – Broken Access Control (high 8.1)
- [CVE-2020-3922](https://insights.sbomify.com/CVE-2020-3922/): ArmorX LisoMail - SQL Injection (critical 9.8)
- [CVE-2020-3921](https://insights.sbomify.com/CVE-2020-3921/): Unisoon UltraLog Express - Sensitive Data Exposure (high 8.6)
- [CVE-2020-3920](https://insights.sbomify.com/CVE-2020-3920/): Unisoon UltraLog Express - Broken Authentication (high 8.1)
- [CVE-2020-3919](https://insights.sbomify.com/CVE-2020-3919/): Memory corruption in iOS (high 7.8)
- [CVE-2020-3918](https://insights.sbomify.com/CVE-2020-3918/): Security feature bypass in iOS (medium 5.5)
- [CVE-2020-3917](https://insights.sbomify.com/CVE-2020-3917/): Security feature bypass in iOS (medium 5.5)
- [CVE-2020-3916](https://insights.sbomify.com/CVE-2020-3916/): Information disclosure in iOS (medium 5.3)
- [CVE-2020-3915](https://insights.sbomify.com/CVE-2020-3915/): Path traversal in macOS (high 7.8)
- [CVE-2020-3914](https://insights.sbomify.com/CVE-2020-3914/): Information disclosure in iOS (medium 5.5)
- [CVE-2020-3913](https://insights.sbomify.com/CVE-2020-3913/): Privilege escalation in iOS (high 7.8)
- [CVE-2020-3912](https://insights.sbomify.com/CVE-2020-3912/): Memory corruption in macOS (high 7.1)
- [CVE-2020-3911](https://insights.sbomify.com/CVE-2020-3911/): Memory corruption in iCloud for Windows (critical 9.8)
- [CVE-2020-3910](https://insights.sbomify.com/CVE-2020-3910/): Memory corruption in iCloud for Windows (critical 9.8)
- [CVE-2020-3909](https://insights.sbomify.com/CVE-2020-3909/): Memory corruption in iCloud for Windows (critical 9.8)
- [CVE-2020-3908](https://insights.sbomify.com/CVE-2020-3908/): Memory corruption in macOS (high 7.1)
- [CVE-2020-3907](https://insights.sbomify.com/CVE-2020-3907/): Memory corruption in macOS (high 7.1)
- [CVE-2020-3906](https://insights.sbomify.com/CVE-2020-3906/): Security feature bypass in macOS (high 7.8)
- [CVE-2020-3905](https://insights.sbomify.com/CVE-2020-3905/): Memory corruption in macOS (high 7.8)
- [CVE-2020-3904](https://insights.sbomify.com/CVE-2020-3904/): Memory corruption in macOS (high 7.8)
- [CVE-2020-3903](https://insights.sbomify.com/CVE-2020-3903/): Memory corruption in macOS (high 7.8)
- [CVE-2020-3902](https://insights.sbomify.com/CVE-2020-3902/): Cross-site scripting in Safari (medium 6.1)
- [CVE-2020-3901](https://insights.sbomify.com/CVE-2020-3901/): Memory corruption in Safari (high 8.8)
- [CVE-2020-3900](https://insights.sbomify.com/CVE-2020-3900/): Memory corruption in Safari (high 8.8)
- [CVE-2020-3899](https://insights.sbomify.com/CVE-2020-3899/): Memory corruption in Safari (high 8.8)
- [CVE-2020-3898](https://insights.sbomify.com/CVE-2020-3898/): Memory corruption in macOS (high 7.8)
- [CVE-2020-3897](https://insights.sbomify.com/CVE-2020-3897/): Memory corruption in Safari (high 8.8)
- [CVE-2020-3896](https://insights.sbomify.com/CVE-2020-3896/): Other in macOS (medium 5.5)
- [CVE-2020-3895](https://insights.sbomify.com/CVE-2020-3895/): Memory corruption in Safari (high 8.8)
- [CVE-2020-3894](https://insights.sbomify.com/CVE-2020-3894/): Race condition in Safari (low 3.1)
- [CVE-2020-3893](https://insights.sbomify.com/CVE-2020-3893/): Memory corruption in macOS (high 7.8)
- [CVE-2020-3892](https://insights.sbomify.com/CVE-2020-3892/): Memory corruption in macOS (high 7.8)
- [CVE-2020-3891](https://insights.sbomify.com/CVE-2020-3891/): Business logic in iOS (low 2.4)
- [CVE-2020-3890](https://insights.sbomify.com/CVE-2020-3890/): Information disclosure in iOS (medium 5.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/65/