# Vulnerabilities published in 2020


- [CVE-2020-35475](https://insights.sbomify.com/CVE-2020-35475/): Cross-site scripting in debian:debian linux (high 7.5)
- [CVE-2020-35474](https://insights.sbomify.com/CVE-2020-35474/): Cross-site scripting in fedoraproject:fedora (medium 6.1)
- [CVE-2020-35473](https://insights.sbomify.com/CVE-2020-35473/): Information disclosure in bluetooth:bluetooth core specification (medium 4.3)
- [CVE-2020-35471](https://insights.sbomify.com/CVE-2020-35471/): Denial of service in envoyproxy:envoy (high 7.5)
- [CVE-2020-35470](https://insights.sbomify.com/CVE-2020-35470/): Other in envoyproxy:envoy (high 8.8)
- [CVE-2020-3547](https://insights.sbomify.com/CVE-2020-3547/): Information disclosure in Cisco Web Security Appliance (WSA) (medium 4.3)
- [CVE-2020-35469](https://insights.sbomify.com/CVE-2020-35469/): Hardcoded credentials in softwareag:terracotta server oss (critical 9.8)
- [CVE-2020-35468](https://insights.sbomify.com/CVE-2020-35468/): Hardcoded credentials in appbase:streams (critical 9.8)
- [CVE-2020-35467](https://insights.sbomify.com/CVE-2020-35467/): Hardcoded credentials in docker:docs (critical 9.8)
- [CVE-2020-35466](https://insights.sbomify.com/CVE-2020-35466/): Hardcoded credentials in blackfire:blackfire docker image (critical 9.8)
- [CVE-2020-35464](https://insights.sbomify.com/CVE-2020-35464/): Hardcoded credentials in weave:cloud agent (critical 9.8)
- [CVE-2020-35463](https://insights.sbomify.com/CVE-2020-35463/): Hardcoded credentials in instana:dynamic apm (critical 9.8)
- [CVE-2020-35462](https://insights.sbomify.com/CVE-2020-35462/): Hardcoded credentials in coscale agent project:coscale agent (critical 9.8)
- [CVE-2020-35460](https://insights.sbomify.com/CVE-2020-35460/): MPXJ path Traversal vulnerability (medium 5.3)
- [CVE-2020-3546](https://insights.sbomify.com/CVE-2020-3546/): Cisco Email Security Appliance Information Disclosure Vulnerability (medium 5.3)
- [CVE-2020-35459](https://insights.sbomify.com/CVE-2020-35459/): ClusterLabs crmsh vulnerable to shell code injection (high 7.8)
- [CVE-2020-35458](https://insights.sbomify.com/CVE-2020-35458/): Code injection in clusterlabs:hawk (critical 9.8)
- [CVE-2020-35457](https://insights.sbomify.com/CVE-2020-35457/): Integer overflow in gnome:glib (high 7.8)
- [CVE-2020-35456](https://insights.sbomify.com/CVE-2020-35456/): Information disclosure in taidii:diibear (medium 5.5)
- [CVE-2020-35455](https://insights.sbomify.com/CVE-2020-35455/): Information disclosure in taidii:diibear (high 7.8)
- [CVE-2020-35454](https://insights.sbomify.com/CVE-2020-35454/): Information disclosure in taidii:diibear (medium 6.8)
- [CVE-2020-35453](https://insights.sbomify.com/CVE-2020-35453/): Security feature bypass in hashicorp:vault (medium 5.3)
- [CVE-2020-35452](https://insights.sbomify.com/CVE-2020-35452/): mod_auth_digest possible stack overflow by one nul byte (high 7.3)
- [CVE-2020-35451](https://insights.sbomify.com/CVE-2020-35451/): Oozie local privilege escalation (medium 4.7)
- [CVE-2020-35450](https://insights.sbomify.com/CVE-2020-35450/): Null dereference in gobby project:gobby (high 7.5)
- [CVE-2020-3545](https://insights.sbomify.com/CVE-2020-3545/): Cisco FXOS Software Buffer Overflow Vulnerability (medium 6.0)
- [CVE-2020-35448](https://insights.sbomify.com/CVE-2020-35448/): Memory corruption in gnu:binutils (low 3.3)
- [CVE-2020-35442](https://insights.sbomify.com/CVE-2020-35442/): File upload in fangfa:fdcms (critical 9.8)
- [CVE-2020-35441](https://insights.sbomify.com/CVE-2020-35441/): SQL injection in fangfa:fdcms (critical 9.8)
- [CVE-2020-3544](https://insights.sbomify.com/CVE-2020-3544/): Memory corruption in Cisco Video Surveillance 8000 Series IP Cameras (high 8.8)
- [CVE-2020-35438](https://insights.sbomify.com/CVE-2020-35438/): Cross-site scripting in kamalkhan:kk star ratings (medium 6.1)
- [CVE-2020-35437](https://insights.sbomify.com/CVE-2020-35437/): Cross-site scripting in intelliants:subrion cms (medium 6.1)
- [CVE-2020-35430](https://insights.sbomify.com/CVE-2020-35430/): SQL injection in inxedu:inxedu (critical 9.8)
- [CVE-2020-3543](https://insights.sbomify.com/CVE-2020-3543/): Cisco Video Surveillance 8000 Series IP Cameras Cisco Discovery Protocol Memory Leak Vulnerability (medium 6.5)
- [CVE-2020-35427](https://insights.sbomify.com/CVE-2020-35427/): SQL injection in phpgurukul:employee record management system (critical 9.8)
- [CVE-2020-3542](https://insights.sbomify.com/CVE-2020-3542/): Cisco Webex Training Unauthorized Meeting Join Vulnerability (medium 5.3)
- [CVE-2020-35419](https://insights.sbomify.com/CVE-2020-35419/): Cross-site scripting in group-office:group office (medium 6.1)
- [CVE-2020-35418](https://insights.sbomify.com/CVE-2020-35418/): Cross-site scripting in group-office:group office (medium 5.4)
- [CVE-2020-35416](https://insights.sbomify.com/CVE-2020-35416/): Cross-site scripting in onlineonly:phpjabbers appointment scheduler (medium 6.1)
- [CVE-2020-3541](https://insights.sbomify.com/CVE-2020-3541/): Information disclosure in Cisco Webex Meetings (medium 4.4)
- [CVE-2020-35398](https://insights.sbomify.com/CVE-2020-35398/): Information disclosure in utimf:uti mutual fund invest online (medium 5.3)
- [CVE-2020-35396](https://insights.sbomify.com/CVE-2020-35396/): Cross-site scripting in egavilanmedia:barcodes generator (medium 6.1)
- [CVE-2020-35395](https://insights.sbomify.com/CVE-2020-35395/): Cross-site scripting in egavilanmedia:expense management system (medium 6.1)
- [CVE-2020-35391](https://insights.sbomify.com/CVE-2020-35391/): Information disclosure in tenda:f3 firmware (critical 9.6)
- [CVE-2020-3539](https://insights.sbomify.com/CVE-2020-3539/): Cisco Data Center Network Manager Authorization Bypass Vulnerability (medium 6.3)
- [CVE-2020-35388](https://insights.sbomify.com/CVE-2020-35388/): Information disclosure in rockoa:xinhu (high 7.5)
- [CVE-2020-35382](https://insights.sbomify.com/CVE-2020-35382/): SQL injection in classroombookings:classroombookings (high 7.2)
- [CVE-2020-35381](https://insights.sbomify.com/CVE-2020-35381/): Denial of Service in jsonparser (high 7.5)
- [CVE-2020-35380](https://insights.sbomify.com/CVE-2020-35380/): Denial of service in GJSON (high 7.5)
- [CVE-2020-3538](https://insights.sbomify.com/CVE-2020-3538/): Cisco Data Center Network Manager Path Traversal Vulnerability (medium 4.6)
- [CVE-2020-35378](https://insights.sbomify.com/CVE-2020-35378/): SQL injection in online bus ticket reservation project:online bus ticket reservation (critical 9.8)
- [CVE-2020-35376](https://insights.sbomify.com/CVE-2020-35376/): Denial of service in fedoraproject:fedora (high 7.5)
- [CVE-2020-35373](https://insights.sbomify.com/CVE-2020-35373/): Cross-site scripting in fiyo:fiyo cms (medium 6.1)
- [CVE-2020-35370](https://insights.sbomify.com/CVE-2020-35370/): Path traversal in raysync:raysync (high 8.8)
- [CVE-2020-3537](https://insights.sbomify.com/CVE-2020-3537/): Cisco Jabber for Windows Universal Naming Convention Link Handling Vulnerability (medium 5.7)
- [CVE-2020-35364](https://insights.sbomify.com/CVE-2020-35364/): Privilege escalation in huorong:internet security (critical 9.8)
- [CVE-2020-35362](https://insights.sbomify.com/CVE-2020-35362/): Path traversal in dext5:dext5upload (high 7.5)
- [CVE-2020-3536](https://insights.sbomify.com/CVE-2020-3536/): Cisco SD-WAN vManage Cross-Site Scripting Vulnerability (medium 6.4)
- [CVE-2020-35359](https://insights.sbomify.com/CVE-2020-35359/): Denial of service in pureftpd:pure-ftpd (high 7.5)
- [CVE-2020-35358](https://insights.sbomify.com/CVE-2020-35358/): Auth bypass in domainmod:domainmod (critical 9.8)
- [CVE-2020-35357](https://insights.sbomify.com/CVE-2020-35357/): Memory corruption in debian:debian linux (medium 6.5)
- [CVE-2020-3535](https://insights.sbomify.com/CVE-2020-3535/): Cisco Webex Teams Client for Windows DLL Hijacking Vulnerability (high 7.8)
- [CVE-2020-35349](https://insights.sbomify.com/CVE-2020-35349/): Cross-site scripting in techkshetrainfo:savsoft quiz (medium 4.8)
- [CVE-2020-35347](https://insights.sbomify.com/CVE-2020-35347/): Cross-site request forgery in cxuu:cxuucms (medium 6.5)
- [CVE-2020-35346](https://insights.sbomify.com/CVE-2020-35346/): Cross-site scripting in cxuu:cxuucms (medium 4.8)
- [CVE-2020-35342](https://insights.sbomify.com/CVE-2020-35342/): Information disclosure in gnu:binutils (high 7.5)
- [CVE-2020-35340](https://insights.sbomify.com/CVE-2020-35340/): Path traversal in expertpdf:expertpdf (high 7.5)
- [CVE-2020-35339](https://insights.sbomify.com/CVE-2020-35339/): Code injection in 74cms:74cms (critical 9.8)
- [CVE-2020-35338](https://insights.sbomify.com/CVE-2020-35338/): Hardcoded credentials in mobileviewpoint:wireless multiplex terminal playout server (critical 9.8)
- [CVE-2020-35337](https://insights.sbomify.com/CVE-2020-35337/): SQL injection in thinksaas:thinksaas (critical 9.8)
- [CVE-2020-3533](https://insights.sbomify.com/CVE-2020-3533/): Cisco Firepower Threat Defense Software SNMP Denial of Service Vulnerability (high 8.6)
- [CVE-2020-35329](https://insights.sbomify.com/CVE-2020-35329/): SQL injection in courier management system project:courier management system (medium 6.5)
- [CVE-2020-35328](https://insights.sbomify.com/CVE-2020-35328/): Cross-site scripting in courier management system project:courier management system (medium 5.4)
- [CVE-2020-35327](https://insights.sbomify.com/CVE-2020-35327/): SQL injection in courier management system project:courier management system (medium 6.5)
- [CVE-2020-35326](https://insights.sbomify.com/CVE-2020-35326/): SQL injection in inxedu:inxedu (critical 9.8)
- [CVE-2020-3532](https://insights.sbomify.com/CVE-2020-3532/): Cisco Unified Communications Products Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2020-35314](https://insights.sbomify.com/CVE-2020-35314/): File upload in wondercms:wondercms (critical 9.8)
- [CVE-2020-35313](https://insights.sbomify.com/CVE-2020-35313/): Server-side request forgery in wondercms:wondercms (critical 9.8)
- [CVE-2020-3531](https://insights.sbomify.com/CVE-2020-3531/): Cisco IoT Field Network Director Unauthenticated REST API Vulnerability (critical 9.8)
- [CVE-2020-35309](https://insights.sbomify.com/CVE-2020-35309/): Cross-site scripting in bakeshop online ordering system project:bakeshop online ordering system (medium 4.8)
- [CVE-2020-35308](https://insights.sbomify.com/CVE-2020-35308/): Code injection in conquest dicom server project:conquest dicom server (critical 9.8)
- [CVE-2020-35305](https://insights.sbomify.com/CVE-2020-35305/): Gollum Cross-site Scripting vulnerability via filename parameter to New Page dialog (medium 6.1)
- [CVE-2020-3530](https://insights.sbomify.com/CVE-2020-3530/): Cisco IOS XR Authenticated User Privilege Escalation Vulnerability (high 8.4)
- [CVE-2020-35296](https://insights.sbomify.com/CVE-2020-35296/): ThinkAdmin Admin Panel Access using Default Credentials (high 7.5)
- [CVE-2020-3529](https://insights.sbomify.com/CVE-2020-3529/): Denial of service in Cisco Adaptive Security Appliance (ASA) Software (high 8.6)
- [CVE-2020-35284](https://insights.sbomify.com/CVE-2020-35284/): Path traversal in flamingoim project:flamingoim (high 7.5)
- [CVE-2020-3528](https://insights.sbomify.com/CVE-2020-3528/): Denial of service in Cisco Adaptive Security Appliance (ASA) Software (high 8.6)
- [CVE-2020-35276](https://insights.sbomify.com/CVE-2020-35276/): SQL injection in egavilanmedia:ecm address book (critical 9.8)
- [CVE-2020-35275](https://insights.sbomify.com/CVE-2020-35275/): Cross-site scripting in coastercms:coastercms (medium 5.4)
- [CVE-2020-35274](https://insights.sbomify.com/CVE-2020-35274/): Cross-site scripting in dotcms:dotcms (medium 4.8)
- [CVE-2020-35273](https://insights.sbomify.com/CVE-2020-35273/): Cross-site request forgery in egavilanmedia:user registration \& login system with admin panel (high 8.0)
- [CVE-2020-35272](https://insights.sbomify.com/CVE-2020-35272/): Cross-site scripting in employee performance evaluation system project:employee performance evaluation system (medium 4.8)
- [CVE-2020-35271](https://insights.sbomify.com/CVE-2020-35271/): Cross-site scripting in employee performance evaluation system project:employee performance evaluation system (medium 4.8)
- [CVE-2020-35270](https://insights.sbomify.com/CVE-2020-35270/): SQL injection in student result management system project:student result management system (critical 9.1)
- [CVE-2020-3527](https://insights.sbomify.com/CVE-2020-3527/): Cisco Catalyst 9200 Series Switches Jumbo Frame Denial of Service Vulnerability (high 8.6)
- [CVE-2020-35269](https://insights.sbomify.com/CVE-2020-35269/): Cross-site request forgery in nagios:nagios core (high 8.8)
- [CVE-2020-35263](https://insights.sbomify.com/CVE-2020-35263/): SQL injection in egavilanmedia:user registration and login system with admin panel (critical 9.8)
- [CVE-2020-35262](https://insights.sbomify.com/CVE-2020-35262/): Cross-site scripting in digisol:dg-hr3400 firmware (medium 6.1)
- [CVE-2020-35261](https://insights.sbomify.com/CVE-2020-35261/): Cross-site scripting in multi restaurant table reservation system project:multi restaurant table reservation system (medium 5.4)
- [CVE-2020-3526](https://insights.sbomify.com/CVE-2020-3526/): Cisco IOS XE Software Common Open Policy Service Engine Denial of Service Vulnerability (high 8.6)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/83/