# Vulnerabilities published in 2020


- [CVE-2020-35585](https://insights.sbomify.com/CVE-2020-35585/): Weak cryptography in mersive:solstice pod firmware (high 7.5)
- [CVE-2020-35584](https://insights.sbomify.com/CVE-2020-35584/): Information disclosure in mersive:solstice pod firmware (medium 5.9)
- [CVE-2020-35582](https://insights.sbomify.com/CVE-2020-35582/): Cross-site scripting in enviragallery:envira gallery (medium 5.4)
- [CVE-2020-35581](https://insights.sbomify.com/CVE-2020-35581/): Cross-site scripting in enviragallery:envira gallery (medium 5.4)
- [CVE-2020-35580](https://insights.sbomify.com/CVE-2020-35580/): Path traversal in searchblox:searchblox (high 7.5)
- [CVE-2020-3558](https://insights.sbomify.com/CVE-2020-3558/): Cisco Firepower Management Center Software Open Redirect Vulnerability (medium 4.7)
- [CVE-2020-35579](https://insights.sbomify.com/CVE-2020-35579/): Server-side request forgery in subconverter project:subconverter (high 7.5)
- [CVE-2020-35578](https://insights.sbomify.com/CVE-2020-35578/): Command injection in nagios:nagios xi (high 7.2)
- [CVE-2020-35577](https://insights.sbomify.com/CVE-2020-35577/): Missing authorization in endalia:selection portal (medium 6.5)
- [CVE-2020-35576](https://insights.sbomify.com/CVE-2020-35576/): Command injection in tp-link:tl-wr841n firmware (high 8.8)
- [CVE-2020-35575](https://insights.sbomify.com/CVE-2020-35575/): Information disclosure in tp-link:archer c5 firmware (critical 9.8)
- [CVE-2020-35573](https://insights.sbomify.com/CVE-2020-35573/): Denial of service in debian:debian linux (high 7.5)
- [CVE-2020-35572](https://insights.sbomify.com/CVE-2020-35572/): vrana/adminer via XSS in the history parameter in SQL command (medium 6.1)
- [CVE-2020-35571](https://insights.sbomify.com/CVE-2020-35571/): MantisBT XSS in manage_custom_field_update.php (medium 6.1)
- [CVE-2020-35570](https://insights.sbomify.com/CVE-2020-35570/): Foreced Browsing vulnerability in products of MB connect line and Helmholz (medium 5.3)
- [CVE-2020-3557](https://insights.sbomify.com/CVE-2020-3557/): Cisco Firepower Management Center Software Denial of Service Vulnerability (medium 5.3)
- [CVE-2020-35569](https://insights.sbomify.com/CVE-2020-35569/): Cross-site scripting in mbconnectline:mbconnect24 (medium 6.1)
- [CVE-2020-35568](https://insights.sbomify.com/CVE-2020-35568/): Sensitive Information Exposure in products of MB connect line and Helmholz (medium 4.3)
- [CVE-2020-35567](https://insights.sbomify.com/CVE-2020-35567/): Hardcoded credentials in mbconnectline:mbconnect24 (high 7.8)
- [CVE-2020-35566](https://insights.sbomify.com/CVE-2020-35566/): Local file inclusion vulnerability in products of MB connect line and Helmholz (medium 5.3)
- [CVE-2020-35565](https://insights.sbomify.com/CVE-2020-35565/): Auth bypass in mbconnectline:mbconnect24 (critical 9.8)
- [CVE-2020-35564](https://insights.sbomify.com/CVE-2020-35564/): Code injection in mbconnectline:mbconnect24 (high 7.5)
- [CVE-2020-35563](https://insights.sbomify.com/CVE-2020-35563/): Cross-site scripting in mbconnectline:mbconnect24 (medium 5.4)
- [CVE-2020-35561](https://insights.sbomify.com/CVE-2020-35561/): SSRF in variuos products of MB connect line and Helmholz (medium 5.3)
- [CVE-2020-35560](https://insights.sbomify.com/CVE-2020-35560/): Open redirect in mbconnectline:mbconnect24 (medium 6.1)
- [CVE-2020-3556](https://insights.sbomify.com/CVE-2020-3556/): Cisco AnyConnect Secure Mobility Client Arbitrary Code Execution Vulnerability (high 7.3)
- [CVE-2020-35559](https://insights.sbomify.com/CVE-2020-35559/): Denial of service in mbconnectline:mbconnect24 (medium 4.3)
- [CVE-2020-35558](https://insights.sbomify.com/CVE-2020-35558/): SSRF in products of MB connect line and Helmholz (high 7.5)
- [CVE-2020-35557](https://insights.sbomify.com/CVE-2020-35557/): Improper Access Validation in products of MB connect line and Helmholz (medium 6.5)
- [CVE-2020-35556](https://insights.sbomify.com/CVE-2020-35556/): Misconfiguration in acronis:cyber protect (high 7.5)
- [CVE-2020-35555](https://insights.sbomify.com/CVE-2020-35555/): Security feature bypass in google:android (high 7.8)
- [CVE-2020-35554](https://insights.sbomify.com/CVE-2020-35554/): Other in google:android (high 7.8)
- [CVE-2020-35553](https://insights.sbomify.com/CVE-2020-35553/): Denial of service in google:android (high 7.5)
- [CVE-2020-35552](https://insights.sbomify.com/CVE-2020-35552/): Misconfiguration in google:android (medium 5.3)
- [CVE-2020-35551](https://insights.sbomify.com/CVE-2020-35551/): Security feature bypass in google:android (critical 9.8)
- [CVE-2020-35550](https://insights.sbomify.com/CVE-2020-35550/): Security feature bypass in google:android (critical 9.8)
- [CVE-2020-3555](https://insights.sbomify.com/CVE-2020-3555/): Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SIP Denial of Service Vulnerability (medium 6.8)
- [CVE-2020-35549](https://insights.sbomify.com/CVE-2020-35549/): Security feature bypass in google:android (medium 5.5)
- [CVE-2020-35548](https://insights.sbomify.com/CVE-2020-35548/): Denial of service in google:android (medium 5.5)
- [CVE-2020-35547](https://insights.sbomify.com/CVE-2020-35547/): Missing authorization in mitel:micollab (critical 9.1)
- [CVE-2020-35546](https://insights.sbomify.com/CVE-2020-35546/): Lexmark MX6500 LW75.JD.P296 and previous devices have Incorrect Access Control via the access control settings. (critical 9.1)
- [CVE-2020-35545](https://insights.sbomify.com/CVE-2020-35545/): SQL injection in spotweb project:spotweb (critical 9.8)
- [CVE-2020-35542](https://insights.sbomify.com/CVE-2020-35542/): Cross-site scripting in unisys:data exchange management studio (medium 5.4)
- [CVE-2020-3554](https://insights.sbomify.com/CVE-2020-3554/): Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Denial of Service Vulnerability (high 8.6)
- [CVE-2020-35538](https://insights.sbomify.com/CVE-2020-35538/): Null dereference in libjpeg-turbo (medium 5.5)
- [CVE-2020-35535](https://insights.sbomify.com/CVE-2020-35535/): Memory corruption in LibRaw (medium 5.5)
- [CVE-2020-35534](https://insights.sbomify.com/CVE-2020-35534/): Memory corruption in LibRaw (medium 5.5)
- [CVE-2020-35533](https://insights.sbomify.com/CVE-2020-35533/): Memory corruption in LibRaw (medium 5.5)
- [CVE-2020-35532](https://insights.sbomify.com/CVE-2020-35532/): Memory corruption in LibRaw (medium 5.5)
- [CVE-2020-35531](https://insights.sbomify.com/CVE-2020-35531/): Memory corruption in LibRaw (medium 5.5)
- [CVE-2020-35530](https://insights.sbomify.com/CVE-2020-35530/): Memory corruption in LibRaw (medium 5.5)
- [CVE-2020-3553](https://insights.sbomify.com/CVE-2020-3553/): Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities (medium 4.8)
- [CVE-2020-35527](https://insights.sbomify.com/CVE-2020-35527/): Memory corruption in sqlite (critical 9.8)
- [CVE-2020-35525](https://insights.sbomify.com/CVE-2020-35525/): Null dereference in sqlite (high 7.5)
- [CVE-2020-35524](https://insights.sbomify.com/CVE-2020-35524/): Memory corruption in libtiff (high 7.8)
- [CVE-2020-35523](https://insights.sbomify.com/CVE-2020-35523/): Integer overflow in libtiff (high 7.8)
- [CVE-2020-35522](https://insights.sbomify.com/CVE-2020-35522/): Denial of service in libtiff (medium 5.5)
- [CVE-2020-35521](https://insights.sbomify.com/CVE-2020-35521/): Denial of service in libtiff (medium 5.5)
- [CVE-2020-3552](https://insights.sbomify.com/CVE-2020-3552/): Cisco Aironet Access Points Ethernet Wired Clients Denial of Service Vulnerability (high 7.4)
- [CVE-2020-35519](https://insights.sbomify.com/CVE-2020-35519/): Memory corruption in kernel (high 7.8)
- [CVE-2020-35518](https://insights.sbomify.com/CVE-2020-35518/): Information disclosure in 389-ds-base (medium 5.3)
- [CVE-2020-35517](https://insights.sbomify.com/CVE-2020-35517/): Privilege escalation in qemu (high 8.2)
- [CVE-2020-35514](https://insights.sbomify.com/CVE-2020-35514/): Misconfiguration in openshift/machine-config-operator (high 7.0)
- [CVE-2020-35513](https://insights.sbomify.com/CVE-2020-35513/): Denial of service in kernel (medium 4.9)
- [CVE-2020-35512](https://insights.sbomify.com/CVE-2020-35512/): Use after free in D-Bus Development branch (high 7.8)
- [CVE-2020-35511](https://insights.sbomify.com/CVE-2020-35511/): Memory corruption in pngcheck (high 7.8)
- [CVE-2020-35510](https://insights.sbomify.com/CVE-2020-35510/): Uncontrolled Resource Consumption in jboss-remoting (medium 5.9)
- [CVE-2020-3551](https://insights.sbomify.com/CVE-2020-3551/): Cisco Identity Services Engine Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2020-35509](https://insights.sbomify.com/CVE-2020-35509/): Keycloak vulnerable to Improper Certificate Validation (medium 5.4)
- [CVE-2020-35508](https://insights.sbomify.com/CVE-2020-35508/): Race condition in kernel (medium 4.5)
- [CVE-2020-35507](https://insights.sbomify.com/CVE-2020-35507/): Null dereference in binutils (medium 5.5)
- [CVE-2020-35506](https://insights.sbomify.com/CVE-2020-35506/): Use after free in QEMU (medium 6.7)
- [CVE-2020-35505](https://insights.sbomify.com/CVE-2020-35505/): Null dereference in QEMU (medium 4.4)
- [CVE-2020-35504](https://insights.sbomify.com/CVE-2020-35504/): Null dereference in QEMU (medium 6.0)
- [CVE-2020-35503](https://insights.sbomify.com/CVE-2020-35503/): Null dereference in QEMU (medium 6.0)
- [CVE-2020-35502](https://insights.sbomify.com/CVE-2020-35502/): Denial of service in privoxy (high 7.5)
- [CVE-2020-35501](https://insights.sbomify.com/CVE-2020-35501/): Security feature bypass in kernel (low 3.4)
- [CVE-2020-3550](https://insights.sbomify.com/CVE-2020-3550/): Cisco Firepower Management Center Software and Firepower Threat Defense Software Directory Traversal Vulnerability (high 8.1)
- [CVE-2020-35499](https://insights.sbomify.com/CVE-2020-35499/): Null dereference in kernel (medium 6.7)
- [CVE-2020-35498](https://insights.sbomify.com/CVE-2020-35498/): Denial of service in openvswitch (high 7.5)
- [CVE-2020-35497](https://insights.sbomify.com/CVE-2020-35497/): Missing authorization in ovirt-engine (medium 6.5)
- [CVE-2020-35496](https://insights.sbomify.com/CVE-2020-35496/): Null dereference in binutils (medium 5.5)
- [CVE-2020-35495](https://insights.sbomify.com/CVE-2020-35495/): Null dereference in binutils (medium 5.5)
- [CVE-2020-35494](https://insights.sbomify.com/CVE-2020-35494/): Memory corruption in binutils (medium 6.1)
- [CVE-2020-35493](https://insights.sbomify.com/CVE-2020-35493/): Memory corruption in binutils (medium 5.5)
- [CVE-2020-35492](https://insights.sbomify.com/CVE-2020-35492/): Memory corruption in cairo (high 7.8)
- [CVE-2020-35491](https://insights.sbomify.com/CVE-2020-35491/): Serialization gadgets exploit in jackson-databind (high 8.1)
- [CVE-2020-35490](https://insights.sbomify.com/CVE-2020-35490/): Serialization gadgets exploit in jackson-databind (high 8.1)
- [CVE-2020-3549](https://insights.sbomify.com/CVE-2020-3549/): Cisco Firepower Management Center Software and Firepower Threat Defense Software sftunnel Pass the Hash Vulnerability (high 8.1)
- [CVE-2020-35489](https://insights.sbomify.com/CVE-2020-35489/): File upload in rocklobster:contact form 7 (critical 10.0)
- [CVE-2020-35488](https://insights.sbomify.com/CVE-2020-35488/): Denial of service in nxlog:nxlog (high 7.5)
- [CVE-2020-35483](https://insights.sbomify.com/CVE-2020-35483/): Other in anydesk:anydesk (high 7.8)
- [CVE-2020-35482](https://insights.sbomify.com/CVE-2020-35482/): Cross-site scripting in solarwinds:serv-u (medium 5.4)
- [CVE-2020-35481](https://insights.sbomify.com/CVE-2020-35481/): Code injection in solarwinds:serv-u (critical 9.8)
- [CVE-2020-35480](https://insights.sbomify.com/CVE-2020-35480/): Information disclosure in debian:debian linux (medium 5.3)
- [CVE-2020-3548](https://insights.sbomify.com/CVE-2020-3548/): Cisco Email Security Appliance Denial Of Service Vulnerability (medium 5.3)
- [CVE-2020-35479](https://insights.sbomify.com/CVE-2020-35479/): Cross-site scripting in debian:debian linux (medium 6.1)
- [CVE-2020-35478](https://insights.sbomify.com/CVE-2020-35478/): Cross-site scripting in fedoraproject:fedora (medium 6.1)
- [CVE-2020-35477](https://insights.sbomify.com/CVE-2020-35477/): Other in debian:debian linux (medium 5.3)
- [CVE-2020-35476](https://insights.sbomify.com/CVE-2020-35476/): OS Command Injection in OpenTSDB (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/82/