# Vulnerabilities published in 2020


- [CVE-2020-35122](https://insights.sbomify.com/CVE-2020-35122/): SQL injection in keysight:keysight database connector (high 7.5)
- [CVE-2020-35121](https://insights.sbomify.com/CVE-2020-35121/): Cross-site scripting in keysight:database connector (high 8.8)
- [CVE-2020-3512](https://insights.sbomify.com/CVE-2020-3512/): Cisco IOS and IOS XE Software PROFINET Link Layer Discovery Protocol Denial of Service Vulnerability (high 7.4)
- [CVE-2020-35114](https://insights.sbomify.com/CVE-2020-35114/): Memory corruption in Firefox (high 8.8)
- [CVE-2020-35113](https://insights.sbomify.com/CVE-2020-35113/): Memory corruption in Firefox (high 8.8)
- [CVE-2020-35112](https://insights.sbomify.com/CVE-2020-35112/): Security feature bypass in Firefox (high 8.8)
- [CVE-2020-35111](https://insights.sbomify.com/CVE-2020-35111/): Information disclosure in Firefox (medium 4.3)
- [CVE-2020-3511](https://insights.sbomify.com/CVE-2020-3511/): Cisco IOS and IOS XE Software ISDN Q.931 Denial of Service Vulnerability (high 7.4)
- [CVE-2020-3510](https://insights.sbomify.com/CVE-2020-3510/): Cisco IOS XE Software for Catalyst 9200 Series Switches Umbrella Connector Denial of Service Vulnerability (high 8.6)
- [CVE-2020-3509](https://insights.sbomify.com/CVE-2020-3509/): Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers DHCP Denial of Service Vulnerability (high 8.6)
- [CVE-2020-3508](https://insights.sbomify.com/CVE-2020-3508/): Denial of service in Cisco IOS XE Software (high 7.4)
- [CVE-2020-3507](https://insights.sbomify.com/CVE-2020-3507/): Memory corruption in Cisco Video Surveillance 8000 Series IP Cameras (high 8.8)
- [CVE-2020-3506](https://insights.sbomify.com/CVE-2020-3506/): Memory corruption in Cisco Video Surveillance 8000 Series IP Cameras (high 8.8)
- [CVE-2020-3505](https://insights.sbomify.com/CVE-2020-3505/): Cisco Video Surveillance 8000 Series IP Cameras Cisco Discovery Protocol Memory Leak Vulnerability (medium 6.5)
- [CVE-2020-3504](https://insights.sbomify.com/CVE-2020-3504/): Cisco UCS Manager Software Local Management CLI Denial of Service Vulnerability (low 3.3)
- [CVE-2020-35037](https://insights.sbomify.com/CVE-2020-35037/): Events Manager < 5.9.8 - Cross-Site Scripting (XSS) (medium 6.1)
- [CVE-2020-3503](https://insights.sbomify.com/CVE-2020-3503/): Cisco IOS XE Software Guest Shell Unauthorized File System Access Vulnerability (medium 6.0)
- [CVE-2020-3502](https://insights.sbomify.com/CVE-2020-3502/): Cisco Webex Meetings Desktop App Information Disclosure Vulnerabilities (medium 4.1)
- [CVE-2020-35012](https://insights.sbomify.com/CVE-2020-35012/): Events Manager < 5.9.8 - Admin+ SQL Injection (high 7.2)
- [CVE-2020-3501](https://insights.sbomify.com/CVE-2020-3501/): Cisco Webex Meetings Desktop App Information Disclosure Vulnerabilities (medium 4.1)
- [CVE-2020-3500](https://insights.sbomify.com/CVE-2020-3500/): Cisco StarOS IPv6 Denial of Service Vulnerability (medium 6.8)
- [CVE-2020-3499](https://insights.sbomify.com/CVE-2020-3499/): Cisco Firepower Management Center Software Denial of Service Vulnerability (high 8.6)
- [CVE-2020-3498](https://insights.sbomify.com/CVE-2020-3498/): Cisco Jabber for Windows Information Disclosure Vulnerability (medium 6.5)
- [CVE-2020-3497](https://insights.sbomify.com/CVE-2020-3497/): Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerabilities (high 7.4)
- [CVE-2020-3496](https://insights.sbomify.com/CVE-2020-3496/): Cisco Small Business Smart and Managed Switches Denial of Service Vulnerability (medium 5.3)
- [CVE-2020-3495](https://insights.sbomify.com/CVE-2020-3495/): Cisco Jabber for Windows Message Handling Arbitrary Code Execution Vulnerability (critical 9.9)
- [CVE-2020-3494](https://insights.sbomify.com/CVE-2020-3494/): Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerabilities (high 7.4)
- [CVE-2020-3493](https://insights.sbomify.com/CVE-2020-3493/): Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerabilities (high 7.4)
- [CVE-2020-3492](https://insights.sbomify.com/CVE-2020-3492/): Denial of service in Cisco Wireless LAN Controller (WLC) (high 8.6)
- [CVE-2020-3491](https://insights.sbomify.com/CVE-2020-3491/): Cisco Vision Dynamic Signage Director Stored Cross-Site Scripting Vulnerability (medium 5.5)
- [CVE-2020-3490](https://insights.sbomify.com/CVE-2020-3490/): Cisco Vision Dynamic Signage Director Path Traversal Vulnerability (medium 4.9)
- [CVE-2020-3489](https://insights.sbomify.com/CVE-2020-3489/): Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerabilities (high 7.4)
- [CVE-2020-3488](https://insights.sbomify.com/CVE-2020-3488/): Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerabilities (high 7.4)
- [CVE-2020-3487](https://insights.sbomify.com/CVE-2020-3487/): Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerabilities (high 7.4)
- [CVE-2020-3486](https://insights.sbomify.com/CVE-2020-3486/): Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerabilities (high 7.4)
- [CVE-2020-3485](https://insights.sbomify.com/CVE-2020-3485/): Cisco Vision Dynamic Signage Director Role-Based Access Control Vulnerability (medium 6.3)
- [CVE-2020-3484](https://insights.sbomify.com/CVE-2020-3484/): Cisco Vision Dynamic Signage Director Directory Traversal Information Disclosure Vulnerability (medium 5.3)
- [CVE-2020-3483](https://insights.sbomify.com/CVE-2020-3483/): Duo Network Gateway (DNG) Information Disclosure Vulnerability (high 7.1)
- [CVE-2020-3482](https://insights.sbomify.com/CVE-2020-3482/): Cisco Expressway Software Unauthorized Access Information Disclosure Vulnerability (medium 6.5)
- [CVE-2020-3481](https://insights.sbomify.com/CVE-2020-3481/): Clam AntiVirus (ClamAV) Software Null Pointer Dereference Vulnerability (high 7.5)
- [CVE-2020-3480](https://insights.sbomify.com/CVE-2020-3480/): Cisco IOS XE Software Zone-Based Firewall Denial of Service Vulnerabilities (high 8.6)
- [CVE-2020-3479](https://insights.sbomify.com/CVE-2020-3479/): Cisco IOS and IOS XE Software MP-BGP EVPN Denial of Service Vulnerability (medium 6.1)
- [CVE-2020-3478](https://insights.sbomify.com/CVE-2020-3478/): Cisco Enterprise NFV Infrastructure Software File Overwrite Vulnerability (high 8.1)
- [CVE-2020-3477](https://insights.sbomify.com/CVE-2020-3477/): Cisco IOS and IOS XE Software Information Disclosure Vulnerability (medium 5.5)
- [CVE-2020-3476](https://insights.sbomify.com/CVE-2020-3476/): Cisco IOS XE Software Arbitrary File Overwrite Vulnerability (medium 4.4)
- [CVE-2020-3475](https://insights.sbomify.com/CVE-2020-3475/): Cisco IOS XE Software Web Management Framework Vulnerabilities (medium 4.3)
- [CVE-2020-3474](https://insights.sbomify.com/CVE-2020-3474/): Cisco IOS XE Software Web Management Framework Vulnerabilities (medium 4.3)
- [CVE-2020-3473](https://insights.sbomify.com/CVE-2020-3473/): Cisco IOS XR Software Authenticated User Privilege Escalation Vulnerability (high 7.8)
- [CVE-2020-3472](https://insights.sbomify.com/CVE-2020-3472/): Cisco Webex Meetings User Email Address Information Disclosure Vulnerability (medium 5.0)
- [CVE-2020-3471](https://insights.sbomify.com/CVE-2020-3471/): Cisco Webex Meetings and Cisco Webex Meetings Server Unauthorized Audio Information Exposure Vulnerability (medium 6.5)
- [CVE-2020-3470](https://insights.sbomify.com/CVE-2020-3470/): Cisco Integrated Management Controller Multiple Remote Code Execution Vulnerabilities (critical 9.8)
- [CVE-2020-3468](https://insights.sbomify.com/CVE-2020-3468/): Cisco SD-WAN vManage Software SQL Injection Vulnerability (medium 5.4)
- [CVE-2020-3467](https://insights.sbomify.com/CVE-2020-3467/): Cisco Identity Services Engine Authorization Bypass Vulnerability (high 7.7)
- [CVE-2020-3466](https://insights.sbomify.com/CVE-2020-3466/): Cisco DNA Center Cross-Site Scripting Vulnerabilities (medium 4.7)
- [CVE-2020-3465](https://insights.sbomify.com/CVE-2020-3465/): Cisco IOS XE Software Ethernet Frame Denial of Service Vulnerability (high 7.4)
- [CVE-2020-3464](https://insights.sbomify.com/CVE-2020-3464/): Cisco UCS Director Stored Cross-Site Scripting Vulnerability (medium 4.8)
- [CVE-2020-3463](https://insights.sbomify.com/CVE-2020-3463/): Cisco Webex Meetings Reflected Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2020-3462](https://insights.sbomify.com/CVE-2020-3462/): Cisco Data Center Network Manager SQL Injection Vulnerability (medium 6.3)
- [CVE-2020-3461](https://insights.sbomify.com/CVE-2020-3461/): Cisco Data Center Network Manager Information Disclosure Vulnerability (medium 5.3)
- [CVE-2020-3460](https://insights.sbomify.com/CVE-2020-3460/): Cisco Data Center Network Manager Cross-Site Scripting Vulnerability (medium 4.7)
- [CVE-2020-3459](https://insights.sbomify.com/CVE-2020-3459/): Cisco FXOS Software for Firepower 4100/9300 Series Command Injection Vulnerability (medium 6.7)
- [CVE-2020-3458](https://insights.sbomify.com/CVE-2020-3458/): Security feature bypass in Cisco Adaptive Security Appliance (ASA) Software (medium 6.7)
- [CVE-2020-3457](https://insights.sbomify.com/CVE-2020-3457/): Cisco FXOS Software Command Injection Vulnerability (medium 6.7)
- [CVE-2020-3456](https://insights.sbomify.com/CVE-2020-3456/): Cisco FXOS Software Firepower Chassis Manager Cross-Site Request Forgery Vulnerability (high 8.8)
- [CVE-2020-3455](https://insights.sbomify.com/CVE-2020-3455/): Cisco FXOS Software for Firepower 4100/9300 Series Appliances Secure Boot Bypass Vulnerability (medium 6.7)
- [CVE-2020-3454](https://insights.sbomify.com/CVE-2020-3454/): Cisco NX-OS Software Call Home Command Injection Vulnerability (high 7.2)
- [CVE-2020-3453](https://insights.sbomify.com/CVE-2020-3453/): Cisco Small Business RV340 Series Routers Command Injection and Remote Code Execution Vulnerabilities (medium 4.7)
- [CVE-2020-3452](https://insights.sbomify.com/CVE-2020-3452/): Cisco ASA and FTD Read-Only Path Traversal (high 7.5, exploited in the wild)
- [CVE-2020-3451](https://insights.sbomify.com/CVE-2020-3451/): Cisco Small Business RV340 Series Routers Command Injection and Remote Code Execution Vulnerabilities (medium 4.7)
- [CVE-2020-3450](https://insights.sbomify.com/CVE-2020-3450/): Cisco Vision Dynamic Signage Director SQL Injection Vulnerability (medium 4.9)
- [CVE-2020-3449](https://insights.sbomify.com/CVE-2020-3449/): Cisco IOS XR Software Additional Paths Denial of Service Vulnerability (medium 4.3)
- [CVE-2020-3448](https://insights.sbomify.com/CVE-2020-3448/): Cisco Cyber Vision Center Software Access Control Bypass Vulnerability (medium 5.8)
- [CVE-2020-3447](https://insights.sbomify.com/CVE-2020-3447/): Cisco Email Security Appliance and Cisco Content Security Management Appliance Information Disclosure Vulnerability (medium 5.5)
- [CVE-2020-3446](https://insights.sbomify.com/CVE-2020-3446/): Cisco vWAAS for Cisco ENCS 5400-W Series and CSP 5000-W Series Default Credentials Vulnerability (critical 9.8)
- [CVE-2020-3444](https://insights.sbomify.com/CVE-2020-3444/): Cisco SD-WAN Software Packet Filtering Bypass Vulnerability (medium 5.8)
- [CVE-2020-3443](https://insights.sbomify.com/CVE-2020-3443/): Cisco Smart Software Manager On-Prem Privilege Escalation Vulnerability (high 8.8)
- [CVE-2020-3442](https://insights.sbomify.com/CVE-2020-3442/): DuoConnect SSH Connection Vulnerability (medium 4.8)
- [CVE-2020-3441](https://insights.sbomify.com/CVE-2020-3441/): Cisco Webex Meetings and Cisco Webex Meetings Server Information Disclosure Vulnerability (medium 5.3)
- [CVE-2020-3440](https://insights.sbomify.com/CVE-2020-3440/): Cisco Webex Meetings Desktop App for Windows Arbitrary File Overwrite Vulnerability (medium 6.5)
- [CVE-2020-3439](https://insights.sbomify.com/CVE-2020-3439/): Cisco Data Center Network Manager Stored Cross-Site Scripting Vulnerability (medium 5.9)
- [CVE-2020-3437](https://insights.sbomify.com/CVE-2020-3437/): Cisco SD-WAN vManage Software Information Disclosure Vulnerability (medium 6.5)
- [CVE-2020-3436](https://insights.sbomify.com/CVE-2020-3436/): Denial of service in Cisco Adaptive Security Appliance (ASA) Software (high 8.6)
- [CVE-2020-3435](https://insights.sbomify.com/CVE-2020-3435/): Cisco AnyConnect Secure Mobility Client for Windows Profile Modification Vulnerability (medium 5.5)
- [CVE-2020-3434](https://insights.sbomify.com/CVE-2020-3434/): Cisco AnyConnect Secure Mobility Client for Windows Denial of Service Vulnerability (medium 5.5)
- [CVE-2020-3433](https://insights.sbomify.com/CVE-2020-3433/): Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking (high 7.8, exploited in the wild)
- [CVE-2020-3432](https://insights.sbomify.com/CVE-2020-3432/): Cisco AnyConnect Secure Mobility Client for Mac OS File Corruption Vulnerability (medium 5.6)
- [CVE-2020-3431](https://insights.sbomify.com/CVE-2020-3431/): Cisco Small Business RV Series Routers Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2020-3430](https://insights.sbomify.com/CVE-2020-3430/): Cisco Jabber for Windows Protocol Handler Command Injection Vulnerability (high 8.8)
- [CVE-2020-3429](https://insights.sbomify.com/CVE-2020-3429/): Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family WPA Denial of Service Vulnerability (high 7.4)
- [CVE-2020-3428](https://insights.sbomify.com/CVE-2020-3428/): Denial of service in Cisco IOS XE Software (high 7.4)
- [CVE-2020-3427](https://insights.sbomify.com/CVE-2020-3427/): Duo Authentication for Windows Logon and RDP Privilege Escalation Vulnerability (medium 6.6)
- [CVE-2020-3426](https://insights.sbomify.com/CVE-2020-3426/): Cisco IOS Software for Cisco Industrial Routers Virtual-LPWA Unauthorized Access Vulnerability (high 7.5)
- [CVE-2020-3425](https://insights.sbomify.com/CVE-2020-3425/): Cisco IOS XE Software Privilege Escalation Vulnerabilities (high 8.8)
- [CVE-2020-3423](https://insights.sbomify.com/CVE-2020-3423/): Cisco IOS XE Software Arbitrary Code Execution Vulnerability (medium 5.1)
- [CVE-2020-3422](https://insights.sbomify.com/CVE-2020-3422/): Cisco IOS XE Software IP Service Level Agreements Denial of Service Vulnerability (high 8.6)
- [CVE-2020-3421](https://insights.sbomify.com/CVE-2020-3421/): Cisco IOS XE Software Zone-Based Firewall Denial of Service Vulnerabilities (high 8.6)
- [CVE-2020-3420](https://insights.sbomify.com/CVE-2020-3420/): Cisco Unified Communications Manager Stored Cross-Site Scripting Vulnerability (medium 5.4)
- [CVE-2020-3419](https://insights.sbomify.com/CVE-2020-3419/): Cisco Webex Meetings and Cisco Webex Meetings Server Ghost Join Vulnerability (medium 6.5)
- [CVE-2020-3418](https://insights.sbomify.com/CVE-2020-3418/): Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family Improper Access Control Vulnerability (medium 4.7)
- [CVE-2020-3417](https://insights.sbomify.com/CVE-2020-3417/): Cisco IOS XE Software Arbitrary Code Execution Vulnerability (medium 6.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/85/