# Vulnerabilities published in 2020


- [CVE-2020-35825](https://insights.sbomify.com/CVE-2020-35825/): Cross-site scripting in netgear:d7800 firmware (medium 6.1)
- [CVE-2020-35824](https://insights.sbomify.com/CVE-2020-35824/): Cross-site scripting in netgear:d7800 firmware (medium 6.1)
- [CVE-2020-35823](https://insights.sbomify.com/CVE-2020-35823/): Cross-site scripting in netgear:d7800 firmware (medium 6.1)
- [CVE-2020-35822](https://insights.sbomify.com/CVE-2020-35822/): Cross-site scripting in netgear:d7800 firmware (medium 6.1)
- [CVE-2020-35821](https://insights.sbomify.com/CVE-2020-35821/): Cross-site scripting in netgear:d7800 firmware (medium 6.1)
- [CVE-2020-35820](https://insights.sbomify.com/CVE-2020-35820/): Cross-site scripting in netgear:d7800 firmware (medium 6.1)
- [CVE-2020-3582](https://insights.sbomify.com/CVE-2020-3582/): Cross-site scripting in Cisco Adaptive Security Appliance (ASA) Software (medium 6.1)
- [CVE-2020-35819](https://insights.sbomify.com/CVE-2020-35819/): Cross-site scripting in netgear:d7800 firmware (medium 6.1)
- [CVE-2020-35818](https://insights.sbomify.com/CVE-2020-35818/): Cross-site scripting in netgear:d7800 firmware (medium 6.1)
- [CVE-2020-35817](https://insights.sbomify.com/CVE-2020-35817/): Cross-site scripting in netgear:d7800 firmware (medium 6.1)
- [CVE-2020-35816](https://insights.sbomify.com/CVE-2020-35816/): Cross-site scripting in netgear:d7800 firmware (medium 6.1)
- [CVE-2020-35815](https://insights.sbomify.com/CVE-2020-35815/): Cross-site scripting in netgear:d7800 firmware (medium 6.1)
- [CVE-2020-35814](https://insights.sbomify.com/CVE-2020-35814/): Cross-site scripting in netgear:d7800 firmware (medium 6.1)
- [CVE-2020-35813](https://insights.sbomify.com/CVE-2020-35813/): Cross-site scripting in netgear:d7800 firmware (medium 6.1)
- [CVE-2020-35812](https://insights.sbomify.com/CVE-2020-35812/): Cross-site scripting in netgear:d7800 firmware (medium 6.1)
- [CVE-2020-35811](https://insights.sbomify.com/CVE-2020-35811/): Cross-site scripting in netgear:d7800 firmware (medium 6.1)
- [CVE-2020-35810](https://insights.sbomify.com/CVE-2020-35810/): Cross-site scripting in netgear:d7800 firmware (medium 6.1)
- [CVE-2020-3581](https://insights.sbomify.com/CVE-2020-3581/): Cross-site scripting in Cisco Adaptive Security Appliance (ASA) Software (medium 6.1)
- [CVE-2020-35809](https://insights.sbomify.com/CVE-2020-35809/): Cross-site scripting in netgear:d7800 firmware (medium 6.1)
- [CVE-2020-35808](https://insights.sbomify.com/CVE-2020-35808/): Cross-site scripting in netgear:d6100 firmware (medium 4.8)
- [CVE-2020-35807](https://insights.sbomify.com/CVE-2020-35807/): Cross-site scripting in netgear:d7800 firmware (medium 6.0)
- [CVE-2020-35806](https://insights.sbomify.com/CVE-2020-35806/): Cross-site scripting in netgear:d7800 firmware (medium 6.0)
- [CVE-2020-35805](https://insights.sbomify.com/CVE-2020-35805/): Cross-site scripting in netgear:d7800 firmware (medium 6.1)
- [CVE-2020-35804](https://insights.sbomify.com/CVE-2020-35804/): Information disclosure in netgear:d7800 firmware (high 7.6)
- [CVE-2020-35803](https://insights.sbomify.com/CVE-2020-35803/): Information disclosure in netgear:ac2100 firmware (medium 4.4)
- [CVE-2020-35802](https://insights.sbomify.com/CVE-2020-35802/): Information disclosure in netgear:cbr40 firmware (high 7.5)
- [CVE-2020-35801](https://insights.sbomify.com/CVE-2020-35801/): Misconfiguration in netgear:gs116e firmware (high 8.3)
- [CVE-2020-35800](https://insights.sbomify.com/CVE-2020-35800/): Misconfiguration in netgear:ac2100 firmware (critical 9.4)
- [CVE-2020-3580](https://insights.sbomify.com/CVE-2020-3580/): Cisco ASA and FTD Cross-Site Scripting (XSS) (medium 6.1, exploited in the wild)
- [CVE-2020-35799](https://insights.sbomify.com/CVE-2020-35799/): Memory corruption in netgear:d3600 firmware (high 8.8)
- [CVE-2020-35798](https://insights.sbomify.com/CVE-2020-35798/): Command injection in netgear:r6400v2 firmware (critical 9.3)
- [CVE-2020-35797](https://insights.sbomify.com/CVE-2020-35797/): Command injection in netgear:nms300 firmware (critical 9.8)
- [CVE-2020-35796](https://insights.sbomify.com/CVE-2020-35796/): Memory corruption in netgear:cbr40 firmware (high 8.8)
- [CVE-2020-35795](https://insights.sbomify.com/CVE-2020-35795/): Memory corruption in netgear:ac2100 firmware (critical 9.8)
- [CVE-2020-35794](https://insights.sbomify.com/CVE-2020-35794/): Command injection in netgear:rbk752 firmware (high 8.4)
- [CVE-2020-35793](https://insights.sbomify.com/CVE-2020-35793/): Command injection in netgear:d7800 firmware (medium 6.1)
- [CVE-2020-35792](https://insights.sbomify.com/CVE-2020-35792/): Command injection in netgear:r7500 firmware (high 8.3)
- [CVE-2020-35791](https://insights.sbomify.com/CVE-2020-35791/): Command injection in netgear:r7800 firmware (medium 6.4)
- [CVE-2020-35790](https://insights.sbomify.com/CVE-2020-35790/): Command injection in netgear:d7800 firmware (medium 6.4)
- [CVE-2020-3579](https://insights.sbomify.com/CVE-2020-3579/): Cisco SD-WAN vManage Software Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2020-35789](https://insights.sbomify.com/CVE-2020-35789/): Command injection in netgear:nms300 firmware (high 8.8)
- [CVE-2020-35788](https://insights.sbomify.com/CVE-2020-35788/): Memory corruption in netgear:wac104 firmware (high 7.6)
- [CVE-2020-35787](https://insights.sbomify.com/CVE-2020-35787/): Memory corruption in netgear:d3600 firmware (high 8.0)
- [CVE-2020-35786](https://insights.sbomify.com/CVE-2020-35786/): Memory corruption in netgear:r7800 firmware (medium 4.5)
- [CVE-2020-35785](https://insights.sbomify.com/CVE-2020-35785/): Auth bypass in netgear:dgn2200 firmware (high 8.3)
- [CVE-2020-35784](https://insights.sbomify.com/CVE-2020-35784/): Missing authorization in netgear:gs116e firmware (medium 6.2)
- [CVE-2020-35783](https://insights.sbomify.com/CVE-2020-35783/): Missing authorization in netgear:gs116e firmware (medium 6.5)
- [CVE-2020-35782](https://insights.sbomify.com/CVE-2020-35782/): Missing authorization in netgear:gs116e firmware (high 8.1)
- [CVE-2020-35781](https://insights.sbomify.com/CVE-2020-35781/): Denial of service in netgear:nms300 firmware (high 8.3)
- [CVE-2020-35780](https://insights.sbomify.com/CVE-2020-35780/): Denial of service in netgear:nms300 firmware (high 7.1)
- [CVE-2020-3578](https://insights.sbomify.com/CVE-2020-3578/): Security feature bypass in Cisco Adaptive Security Appliance (ASA) Software (medium 5.3)
- [CVE-2020-35779](https://insights.sbomify.com/CVE-2020-35779/): Denial of service in netgear:nms300 firmware (high 7.5)
- [CVE-2020-35778](https://insights.sbomify.com/CVE-2020-35778/): Cross-site request forgery in netgear:gs716t firmware (medium 4.3)
- [CVE-2020-35777](https://insights.sbomify.com/CVE-2020-35777/): Command injection in netgear:dgn2200v1 firmware (high 8.4)
- [CVE-2020-35776](https://insights.sbomify.com/CVE-2020-35776/): Memory corruption in digium:asterisk (medium 6.5)
- [CVE-2020-35775](https://insights.sbomify.com/CVE-2020-35775/): Other in citsmart:citsmart (critical 9.8)
- [CVE-2020-35774](https://insights.sbomify.com/CVE-2020-35774/): TwitterServer Cross-site Scripting via /histograms endpoint (medium 5.4)
- [CVE-2020-35773](https://insights.sbomify.com/CVE-2020-35773/): Cross-site request forgery in freehtmldesigns:site offline (high 8.8)
- [CVE-2020-3577](https://insights.sbomify.com/CVE-2020-3577/): Cisco Firepower Threat Defense Software Inline Pair/Passive Mode Denial of Service Vulnerability (high 7.4)
- [CVE-2020-35769](https://insights.sbomify.com/CVE-2020-35769/): Other in webmin:webmin (critical 9.8)
- [CVE-2020-35766](https://insights.sbomify.com/CVE-2020-35766/): Privilege escalation in opendkim:opendkim (high 7.8)
- [CVE-2020-35765](https://insights.sbomify.com/CVE-2020-35765/): SQL injection in zohocorp:manageengine applications manager (high 8.8)
- [CVE-2020-35762](https://insights.sbomify.com/CVE-2020-35762/): Path traversal in bloofox:bloofoxcms (low 2.7)
- [CVE-2020-35761](https://insights.sbomify.com/CVE-2020-35761/): Cross-site scripting in bloofox:bloofoxcms (medium 5.4)
- [CVE-2020-35760](https://insights.sbomify.com/CVE-2020-35760/): File upload in bloofox:bloofoxcms (critical 9.8)
- [CVE-2020-35759](https://insights.sbomify.com/CVE-2020-35759/): Cross-site request forgery in bloofox:bloofoxcms (medium 6.5)
- [CVE-2020-35758](https://insights.sbomify.com/CVE-2020-35758/): Auth bypass in librewireless:ls9 firmware (critical 9.8)
- [CVE-2020-35757](https://insights.sbomify.com/CVE-2020-35757/): Auth bypass in librewireless:ls9 firmware (critical 9.8)
- [CVE-2020-35756](https://insights.sbomify.com/CVE-2020-35756/): Missing authorization in librewireless:ls9 firmware (high 7.5)
- [CVE-2020-35755](https://insights.sbomify.com/CVE-2020-35755/): Missing authorization in librewireless:ls9 firmware (high 7.5)
- [CVE-2020-35754](https://insights.sbomify.com/CVE-2020-35754/): Code injection in opensolution:quick.cart (high 7.2)
- [CVE-2020-35753](https://insights.sbomify.com/CVE-2020-35753/): Cross-site scripting in persis:human resource management portal (medium 6.1)
- [CVE-2020-35752](https://insights.sbomify.com/CVE-2020-35752/): Cross-site scripting in janobe:baby care system (medium 5.4)
- [CVE-2020-35749](https://insights.sbomify.com/CVE-2020-35749/): Path traversal in presstigers:simple board job (high 7.7)
- [CVE-2020-35748](https://insights.sbomify.com/CVE-2020-35748/): Cross-site scripting in foliovision:fv flowplayer video player (medium 5.4)
- [CVE-2020-35745](https://insights.sbomify.com/CVE-2020-35745/): Missing authorization in phpgurukul:hospital management system (high 8.8)
- [CVE-2020-35743](https://insights.sbomify.com/CVE-2020-35743/): HGiga MailSherlock - SQL Injection -3 (high 7.0)
- [CVE-2020-35742](https://insights.sbomify.com/CVE-2020-35742/): HGiga MailSherlock - SQL Injection -1 (high 7.0)
- [CVE-2020-35741](https://insights.sbomify.com/CVE-2020-35741/): HGiga MailSherlock - XSS -2 (high 7.0)
- [CVE-2020-35740](https://insights.sbomify.com/CVE-2020-35740/): HGiga MailSherlock - XSS -1 (high 7.0)
- [CVE-2020-3574](https://insights.sbomify.com/CVE-2020-3574/): Cisco IP Phone TCP Packet Flood Denial of Service Vulnerability (high 7.5)
- [CVE-2020-35738](https://insights.sbomify.com/CVE-2020-35738/): Integer overflow in debian:debian linux (medium 6.1)
- [CVE-2020-35737](https://insights.sbomify.com/CVE-2020-35737/): Missing authorization in newgensoft:egov (high 7.5)
- [CVE-2020-35736](https://insights.sbomify.com/CVE-2020-35736/): Path traversal in liftoffsoftware:gateone (high 7.5)
- [CVE-2020-35735](https://insights.sbomify.com/CVE-2020-35735/): Other in vidyo:vidyo (medium 4.7)
- [CVE-2020-35734](https://insights.sbomify.com/CVE-2020-35734/): Code injection in batflat:batflat (high 7.2)
- [CVE-2020-35733](https://insights.sbomify.com/CVE-2020-35733/): Security feature bypass in erlang:erlang\/otp (high 7.5)
- [CVE-2020-35730](https://insights.sbomify.com/CVE-2020-35730/): Roundcube Webmail Cross-Site Scripting (XSS) (medium 6.1, exploited in the wild)
- [CVE-2020-3573](https://insights.sbomify.com/CVE-2020-3573/): Cisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution Vulnerabilities (high 7.8)
- [CVE-2020-35729](https://insights.sbomify.com/CVE-2020-35729/): Command injection in klogserver:klog server (critical 9.8)
- [CVE-2020-35728](https://insights.sbomify.com/CVE-2020-35728/): Serialization gadget exploit in jackson-databind (high 8.1)
- [CVE-2020-35727](https://insights.sbomify.com/CVE-2020-35727/): Cross-site scripting in quest:policy authority for unified communications (medium 5.4)
- [CVE-2020-35726](https://insights.sbomify.com/CVE-2020-35726/): Cross-site scripting in quest:policy authority for unified communications (medium 6.1)
- [CVE-2020-35725](https://insights.sbomify.com/CVE-2020-35725/): Cross-site scripting in quest:policy authority for unified communications (medium 6.1)
- [CVE-2020-35724](https://insights.sbomify.com/CVE-2020-35724/): Cross-site scripting in quest:policy authority for unified communications (medium 5.4)
- [CVE-2020-35723](https://insights.sbomify.com/CVE-2020-35723/): Cross-site scripting in quest:policy authority for unified communications (medium 5.4)
- [CVE-2020-35722](https://insights.sbomify.com/CVE-2020-35722/): Cross-site request forgery in quest:policy authority for unified communications (medium 6.5)
- [CVE-2020-35721](https://insights.sbomify.com/CVE-2020-35721/): Cross-site scripting in quest:policy authority for unified communications (medium 5.4)
- [CVE-2020-35720](https://insights.sbomify.com/CVE-2020-35720/): Cross-site scripting in quest:policy authority for unified communications (medium 5.4)
- [CVE-2020-3572](https://insights.sbomify.com/CVE-2020-3572/): Denial of service in Cisco Adaptive Security Appliance (ASA) Software (high 8.6)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/80/