# Vulnerabilities published in 2020


- [CVE-2020-3774](https://insights.sbomify.com/CVE-2020-3774/): Memory corruption in Adobe Photoshop (high 8.8)
- [CVE-2020-3773](https://insights.sbomify.com/CVE-2020-3773/): Memory corruption in Adobe Photoshop (high 8.8)
- [CVE-2020-3772](https://insights.sbomify.com/CVE-2020-3772/): Memory corruption in Adobe Photoshop (high 8.8)
- [CVE-2020-3771](https://insights.sbomify.com/CVE-2020-3771/): Memory corruption in Adobe Photoshop (medium 4.3)
- [CVE-2020-3770](https://insights.sbomify.com/CVE-2020-3770/): Memory corruption in Adobe Photoshop (high 8.8)
- [CVE-2020-3769](https://insights.sbomify.com/CVE-2020-3769/): Server-side request forgery in Adobe Experience Manager (high 7.5)
- [CVE-2020-3768](https://insights.sbomify.com/CVE-2020-3768/): Privilege escalation in ColdFusion (high 7.8)
- [CVE-2020-3767](https://insights.sbomify.com/CVE-2020-3767/): Denial of service in ColdFusion (medium 6.5)
- [CVE-2020-3766](https://insights.sbomify.com/CVE-2020-3766/): Misconfiguration in Adobe Genuine Integrity Service (high 7.8)
- [CVE-2020-3765](https://insights.sbomify.com/CVE-2020-3765/): Memory corruption in Adobe After Effects (critical 9.8)
- [CVE-2020-3764](https://insights.sbomify.com/CVE-2020-3764/): Memory corruption in Adobe Media Encoder (high 7.8)
- [CVE-2020-3763](https://insights.sbomify.com/CVE-2020-3763/): Privilege escalation in Adobe Acrobat and Reader (critical 9.8)
- [CVE-2020-3762](https://insights.sbomify.com/CVE-2020-3762/): Privilege escalation in Adobe Acrobat and Reader (critical 9.8)
- [CVE-2020-3761](https://insights.sbomify.com/CVE-2020-3761/): Path traversal in ColdFusion (high 7.5)
- [CVE-2020-3760](https://insights.sbomify.com/CVE-2020-3760/): Command injection in Adobe Digital Editions (critical 9.8)
- [CVE-2020-3759](https://insights.sbomify.com/CVE-2020-3759/): Memory corruption in Adobe Digital Editions (high 7.5)
- [CVE-2020-3758](https://insights.sbomify.com/CVE-2020-3758/): Magento stored cross-site scripting vulnerability (medium 6.1)
- [CVE-2020-3757](https://insights.sbomify.com/CVE-2020-3757/): Memory corruption in Adobe Flash Player (high 8.8)
- [CVE-2020-3756](https://insights.sbomify.com/CVE-2020-3756/): Denial of service in Adobe Acrobat and Reader (high 7.5)
- [CVE-2020-3755](https://insights.sbomify.com/CVE-2020-3755/): Memory corruption in Adobe Acrobat and Reader (high 7.5)
- [CVE-2020-3754](https://insights.sbomify.com/CVE-2020-3754/): Memory corruption in Adobe Acrobat and Reader (critical 9.8)
- [CVE-2020-3753](https://insights.sbomify.com/CVE-2020-3753/): Denial of service in Adobe Acrobat and Reader (high 7.5)
- [CVE-2020-3752](https://insights.sbomify.com/CVE-2020-3752/): Memory corruption in Adobe Acrobat and Reader (critical 9.8)
- [CVE-2020-3751](https://insights.sbomify.com/CVE-2020-3751/): Use after free in Adobe Acrobat and Reader (critical 9.8)
- [CVE-2020-3750](https://insights.sbomify.com/CVE-2020-3750/): Use after free in Adobe Acrobat and Reader (critical 9.8)
- [CVE-2020-3749](https://insights.sbomify.com/CVE-2020-3749/): Use after free in Adobe Acrobat and Reader (critical 9.8)
- [CVE-2020-3748](https://insights.sbomify.com/CVE-2020-3748/): Use after free in Adobe Acrobat and Reader (high 7.8)
- [CVE-2020-3747](https://insights.sbomify.com/CVE-2020-3747/): Memory corruption in Adobe Acrobat and Reader (high 7.5)
- [CVE-2020-3746](https://insights.sbomify.com/CVE-2020-3746/): Use after free in Adobe Acrobat and Reader (critical 9.8)
- [CVE-2020-3745](https://insights.sbomify.com/CVE-2020-3745/): Use after free in Adobe Acrobat and Reader (critical 9.8)
- [CVE-2020-3744](https://insights.sbomify.com/CVE-2020-3744/): Memory corruption in Adobe Acrobat and Reader (high 7.5)
- [CVE-2020-3743](https://insights.sbomify.com/CVE-2020-3743/): Use after free in Adobe Acrobat and Reader (critical 9.8)
- [CVE-2020-3742](https://insights.sbomify.com/CVE-2020-3742/): Memory corruption in Adobe Acrobat and Reader (critical 9.8)
- [CVE-2020-3741](https://insights.sbomify.com/CVE-2020-3741/): Denial of service in Adobe Experience Manager (high 7.5)
- [CVE-2020-3740](https://insights.sbomify.com/CVE-2020-3740/): Memory corruption in Adobe Framemaker (critical 9.8)
- [CVE-2020-3739](https://insights.sbomify.com/CVE-2020-3739/): Memory corruption in Adobe Framemaker (high 8.8)
- [CVE-2020-3738](https://insights.sbomify.com/CVE-2020-3738/): Memory corruption in Adobe Framemaker (high 8.8)
- [CVE-2020-3737](https://insights.sbomify.com/CVE-2020-3737/): Memory corruption in Adobe Framemaker (high 8.8)
- [CVE-2020-3736](https://insights.sbomify.com/CVE-2020-3736/): Memory corruption in Adobe Framemaker (high 8.8)
- [CVE-2020-3735](https://insights.sbomify.com/CVE-2020-3735/): Memory corruption in Adobe Framemaker (high 8.8)
- [CVE-2020-3734](https://insights.sbomify.com/CVE-2020-3734/): Memory corruption in Adobe Framemaker (high 8.8)
- [CVE-2020-3733](https://insights.sbomify.com/CVE-2020-3733/): Memory corruption in Adobe Framemaker (high 8.8)
- [CVE-2020-3732](https://insights.sbomify.com/CVE-2020-3732/): Memory corruption in Adobe Framemaker (high 8.8)
- [CVE-2020-3731](https://insights.sbomify.com/CVE-2020-3731/): Memory corruption in Adobe Framemaker (high 8.8)
- [CVE-2020-3730](https://insights.sbomify.com/CVE-2020-3730/): Memory corruption in Adobe Framemaker (high 8.8)
- [CVE-2020-3729](https://insights.sbomify.com/CVE-2020-3729/): Memory corruption in Adobe Framemaker (high 8.8)
- [CVE-2020-37289](https://insights.sbomify.com/CVE-2020-37289/): Vyper before 0.3.1 Improper Input Validation of uint8 Interface Return Values (medium 6.3)
- [CVE-2020-37288](https://insights.sbomify.com/CVE-2020-37288/): Vyper 0.1.0b10 before 0.2.3 Invalid Jump Destination via Return in Nested Loops (medium 6.3)
- [CVE-2020-37287](https://insights.sbomify.com/CVE-2020-37287/): Vyper before 0.2.6 Call Stack Corruption via Complex Type Function Arguments (high 8.2)
- [CVE-2020-37286](https://insights.sbomify.com/CVE-2020-37286/): Vyper 0.1.0b4 before 0.3.0 Memory Corruption via Nested Internal Function Calls (high 8.3)
- [CVE-2020-37284](https://insights.sbomify.com/CVE-2020-37284/): Sickbeard build-507 Reflected XSS via testNaming pattern Parameter (medium 5.1)
- [CVE-2020-37282](https://insights.sbomify.com/CVE-2020-37282/): office-converter through 1.0.2 OS Command Injection via fileName in generatePdf (critical 9.3)
- [CVE-2020-37281](https://insights.sbomify.com/CVE-2020-37281/): Gravitee API Management through 4.12.22 Default JWT Secret Authentication Bypass (critical 9.2)
- [CVE-2020-37280](https://insights.sbomify.com/CVE-2020-37280/): cbor-sync through 1.0.4 Memory Exhaustion via Unchecked CBOR Array Lengths (high 8.7)
- [CVE-2020-3728](https://insights.sbomify.com/CVE-2020-3728/): Memory corruption in Adobe Framemaker (high 8.8)
- [CVE-2020-37279](https://insights.sbomify.com/CVE-2020-37279/): easy-pdf-merge 0.1.0 through 0.2.6 OS Command Injection via merge function (critical 9.2)
- [CVE-2020-37278](https://insights.sbomify.com/CVE-2020-37278/): Weaver e-Bridge Unauthenticated Arbitrary File Read via saveYZJFile (high 8.7)
- [CVE-2020-37277](https://insights.sbomify.com/CVE-2020-37277/): PocketMine-MP before 3.15.4 Denial of Service via InventoryTransaction (high 7.1)
- [CVE-2020-3727](https://insights.sbomify.com/CVE-2020-3727/): Memory corruption in Adobe Framemaker (high 8.8)
- [CVE-2020-37268](https://insights.sbomify.com/CVE-2020-37268/): Coq and Rocq Prover Print Assumptions Omits Unsafe Universe Checking Inlined Through Parameter Inline (medium 6.8)
- [CVE-2020-37267](https://insights.sbomify.com/CVE-2020-37267/): Renovate 19.180.0 before 23.25.1 Token Leakage via Logs (high 8.7)
- [CVE-2020-3726](https://insights.sbomify.com/CVE-2020-3726/): Memory corruption in Adobe Framemaker (high 8.8)
- [CVE-2020-37256](https://insights.sbomify.com/CVE-2020-37256/): Grav - Cross-Site Scripting in Admin Plugin Page Editor (medium 5.1)
- [CVE-2020-37255](https://insights.sbomify.com/CVE-2020-37255/): WordPress Time Capsule Plugin 1.21.16 Authentication Bypass (high 8.7)
- [CVE-2020-37254](https://insights.sbomify.com/CVE-2020-37254/): Wondershare PDFelement 5.2.9 Privilege Escalation via Unquoted Service Path (high 8.5)
- [CVE-2020-37253](https://insights.sbomify.com/CVE-2020-37253/): Winstep 18.06.0096 Unquoted Service Path Privilege Escalation (high 8.5)
- [CVE-2020-37252](https://insights.sbomify.com/CVE-2020-37252/): Realtek Audio Service 1.0.0.55 Unquoted Service Path Privilege Escalation (high 8.5)
- [CVE-2020-37251](https://insights.sbomify.com/CVE-2020-37251/): RealTimes Desktop Service 18.1.4 Unquoted Service Path Privilege Escalation (high 8.5)
- [CVE-2020-37250](https://insights.sbomify.com/CVE-2020-37250/): TFTP Broadband 4.3.0.1465 Unquoted Service Path Privilege Escalation (high 8.5)
- [CVE-2020-3725](https://insights.sbomify.com/CVE-2020-3725/): Memory corruption in Adobe Framemaker (high 8.8)
- [CVE-2020-37248](https://insights.sbomify.com/CVE-2020-37248/): Security feature bypass in OfflineIMAP (medium 6.5)
- [CVE-2020-37247](https://insights.sbomify.com/CVE-2020-37247/): Kite 4.2.0.1 U1 Unquoted Service Path Privilege Escalation (high 8.5)
- [CVE-2020-37246](https://insights.sbomify.com/CVE-2020-37246/): WordPress Plugin Supsystic Backup 2.3.9 Local File Inclusion (medium 6.9)
- [CVE-2020-37245](https://insights.sbomify.com/CVE-2020-37245/): WordPress Plugin Supsystic Digital Publications 1.6.9 Path Traversal XSS (high 8.7)
- [CVE-2020-37244](https://insights.sbomify.com/CVE-2020-37244/): WordPress Plugin Supsystic Membership 1.4.7 SQL Injection via sidx (high 8.8)
- [CVE-2020-37243](https://insights.sbomify.com/CVE-2020-37243/): WordPress Plugin Supsystic Pricing Table 1.8.7 SQL Injection XSS (high 8.8)
- [CVE-2020-37242](https://insights.sbomify.com/CVE-2020-37242/): WordPress Plugin Supsystic Ultimate Maps 1.1.12 SQL Injection via sidx (high 8.8)
- [CVE-2020-37241](https://insights.sbomify.com/CVE-2020-37241/): bloofoxCMS 0.5.2.1 Cross-Site Request Forgery via user add (medium 6.9)
- [CVE-2020-37240](https://insights.sbomify.com/CVE-2020-37240/): Queue Management System 4.0.0 Stored XSS via Add User (medium 5.1)
- [CVE-2020-3724](https://insights.sbomify.com/CVE-2020-3724/): Memory corruption in Adobe Framemaker (high 8.8)
- [CVE-2020-37239](https://insights.sbomify.com/CVE-2020-37239/): libbabl 0.1.62 Broken Double Free Detection Memory Safety (critical 9.3)
- [CVE-2020-37238](https://insights.sbomify.com/CVE-2020-37238/): CMS Made Simple 2.2.15 Stored XSS via SVG File Upload (medium 5.1)
- [CVE-2020-37237](https://insights.sbomify.com/CVE-2020-37237/): Composr CMS 10.0.34 Persistent Cross-Site Scripting via banners (medium 5.1)
- [CVE-2020-37236](https://insights.sbomify.com/CVE-2020-37236/): NewsLister Authenticated Persistent Cross-Site Scripting via Admin Panel (medium 5.1)
- [CVE-2020-37235](https://insights.sbomify.com/CVE-2020-37235/): WordPress Theme Wibar 1.1.8 Stored Cross-Site Scripting via Brand Component (medium 5.1)
- [CVE-2020-37234](https://insights.sbomify.com/CVE-2020-37234/): Internet Download Manager 6.38.12 Scheduler Buffer Overflow (medium 6.9)
- [CVE-2020-37233](https://insights.sbomify.com/CVE-2020-37233/): WordPress Plugin Buddypress 6.2.0 Persistent Cross-Site Scripting (medium 5.1)
- [CVE-2020-37232](https://insights.sbomify.com/CVE-2020-37232/): Advanced System Care Service 13.0.0.157 Unquoted Service Path Privilege Escalation (high 8.5)
- [CVE-2020-37231](https://insights.sbomify.com/CVE-2020-37231/): Privacy Drive 3.17.0 Unquoted Service Path Privilege Escalation (high 8.5)
- [CVE-2020-37230](https://insights.sbomify.com/CVE-2020-37230/): Syncplify.me Server! 5.0.37 Unquoted Service Path Privilege Escalation (high 8.5)
- [CVE-2020-3723](https://insights.sbomify.com/CVE-2020-3723/): Memory corruption in Adobe Framemaker (high 8.8)
- [CVE-2020-37229](https://insights.sbomify.com/CVE-2020-37229/): OKI sPSV Port Manager 1.0.41 Unquoted Service Path Privilege Escalation (high 8.5)
- [CVE-2020-37228](https://insights.sbomify.com/CVE-2020-37228/): iDS6 DSSPro Digital Signage System 6.2 CAPTCHA Security Bypass (critical 9.3)
- [CVE-2020-37227](https://insights.sbomify.com/CVE-2020-37227/): WordPress Plugin HS Brand Logo Slider 2.1 Unrestricted File Upload (high 8.7)
- [CVE-2020-37226](https://insights.sbomify.com/CVE-2020-37226/): Joomla J2 JOBS 1.3.0 Authenticated SQL Injection via sortby (high 7.1)
- [CVE-2020-37225](https://insights.sbomify.com/CVE-2020-37225/): Powie's WHOIS Domain Check 0.9.31 Persistent Cross-Site Scripting (medium 5.1)
- [CVE-2020-37224](https://insights.sbomify.com/CVE-2020-37224/): Joomla J2 JOBS 1.3.0 Authenticated SQL Injection via sortby (high 7.1)
- [CVE-2020-37223](https://insights.sbomify.com/CVE-2020-37223/): IObit Uninstaller 9.5.0.15 Unquoted Service Path Privilege Escalation (high 8.5)
- [CVE-2020-37222](https://insights.sbomify.com/CVE-2020-37222/): Kuicms Php EE 2.0 Persistent Cross-Site Scripting via bbs reply (medium 5.1)
- [CVE-2020-37221](https://insights.sbomify.com/CVE-2020-37221/): Atomic Alarm Clock 6.3 Stack Overflow via SEH Unicode (high 8.6)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/67/