# Vulnerabilities published in 2020


- [CVE-2020-29550](https://insights.sbomify.com/CVE-2020-29550/): Information disclosure in urve:urve (high 7.5)
- [CVE-2020-2955](https://insights.sbomify.com/CVE-2020-2955/): Other in FLEXCUBE Core Banking (medium 6.3)
- [CVE-2020-29548](https://insights.sbomify.com/CVE-2020-29548/): Command injection in smartertools:smartermail (high 8.1)
- [CVE-2020-29547](https://insights.sbomify.com/CVE-2020-29547/): Command injection in citadel:webcit (medium 5.9)
- [CVE-2020-29540](https://insights.sbomify.com/CVE-2020-29540/): Server-side request forgery in systransoft:pure neural server (high 7.5)
- [CVE-2020-2954](https://insights.sbomify.com/CVE-2020-2954/): Cross-site scripting in PeopleSoft Enterprise HCM Candidate Gateway (medium 6.1)
- [CVE-2020-29539](https://insights.sbomify.com/CVE-2020-29539/): Cross-site scripting in systransoft:pure neural server (medium 5.4)
- [CVE-2020-29538](https://insights.sbomify.com/CVE-2020-29538/): Missing authorization in rsa:archer (medium 4.9)
- [CVE-2020-29537](https://insights.sbomify.com/CVE-2020-29537/): Open redirect in rsa:archer (medium 4.6)
- [CVE-2020-29536](https://insights.sbomify.com/CVE-2020-29536/): Information disclosure in rsa:archer (medium 4.3)
- [CVE-2020-29535](https://insights.sbomify.com/CVE-2020-29535/): Cross-site scripting in rsa:archer (medium 5.3)
- [CVE-2020-29534](https://insights.sbomify.com/CVE-2020-29534/): Other in linux:linux kernel (high 7.8)
- [CVE-2020-2953](https://insights.sbomify.com/CVE-2020-2953/): Other in Retail Customer Management and Segmentation Foundation (critical 9.8)
- [CVE-2020-29529](https://insights.sbomify.com/CVE-2020-29529/): Unsafe tar unpacking in HashiCorp go-slug (high 7.5)
- [CVE-2020-2952](https://insights.sbomify.com/CVE-2020-2952/): Other in HTTP Server (medium 6.5)
- [CVE-2020-29511](https://insights.sbomify.com/CVE-2020-29511/): Other in Go (critical 9.8)
- [CVE-2020-29510](https://insights.sbomify.com/CVE-2020-29510/): Other in Go (critical 9.8)
- [CVE-2020-2951](https://insights.sbomify.com/CVE-2020-2951/): Denial of service in VM VirtualBox (medium 6.5)
- [CVE-2020-29509](https://insights.sbomify.com/CVE-2020-29509/): Authentication Bypass in github.com/russellhaering/gosaml2 (critical 9.8)
- [CVE-2020-29508](https://insights.sbomify.com/CVE-2020-29508/): Weak cryptography in Dell BSAFE Micro Edition Suite (medium 5.3)
- [CVE-2020-29507](https://insights.sbomify.com/CVE-2020-29507/): Other in Dell BSAFE Crypto-C Micro Edition (medium 5.3)
- [CVE-2020-29506](https://insights.sbomify.com/CVE-2020-29506/): Weak cryptography in Dell BSAFE Crypto-C Micro Edition (medium 6.8)
- [CVE-2020-29505](https://insights.sbomify.com/CVE-2020-29505/): Weak cryptography in Dell BSAFE Crypto-C Micro Edition (high 7.1)
- [CVE-2020-29504](https://insights.sbomify.com/CVE-2020-29504/): Weak cryptography in BSAFE Crypto-C Micro Edition (high 7.4)
- [CVE-2020-29503](https://insights.sbomify.com/CVE-2020-29503/): Misconfiguration in PowerStore (medium 4.1)
- [CVE-2020-29502](https://insights.sbomify.com/CVE-2020-29502/): Information disclosure in PowerStore (high 7.5)
- [CVE-2020-29501](https://insights.sbomify.com/CVE-2020-29501/): Information disclosure in PowerStore (medium 6.4)
- [CVE-2020-29500](https://insights.sbomify.com/CVE-2020-29500/): Information disclosure in PowerStore (high 7.5)
- [CVE-2020-2950](https://insights.sbomify.com/CVE-2020-2950/): Other in Oracle Business Intelligence Enterprise Edition (critical 9.8)
- [CVE-2020-29499](https://insights.sbomify.com/CVE-2020-29499/): Command injection in PowerStore (medium 6.4)
- [CVE-2020-29498](https://insights.sbomify.com/CVE-2020-29498/): Open redirect in Wyse Management Suite (medium 6.1)
- [CVE-2020-29497](https://insights.sbomify.com/CVE-2020-29497/): Cross-site scripting in Wyse Management Suite (medium 5.4)
- [CVE-2020-29496](https://insights.sbomify.com/CVE-2020-29496/): Cross-site scripting in Wyse Management Suite (medium 4.8)
- [CVE-2020-29495](https://insights.sbomify.com/CVE-2020-29495/): Command injection in Avamar (critical 10.0)
- [CVE-2020-29494](https://insights.sbomify.com/CVE-2020-29494/): Path traversal in Avamar (high 8.7)
- [CVE-2020-29493](https://insights.sbomify.com/CVE-2020-29493/): SQL injection in Avamar (critical 10.0)
- [CVE-2020-29492](https://insights.sbomify.com/CVE-2020-29492/): Misconfiguration in Wyse Proprietary OS (ThinOS) (critical 10.0)
- [CVE-2020-29491](https://insights.sbomify.com/CVE-2020-29491/): Misconfiguration in Wyse Proprietary OS (ThinOS) (critical 10.0)
- [CVE-2020-29490](https://insights.sbomify.com/CVE-2020-29490/): Denial of service in Unity (high 7.5)
- [CVE-2020-2949](https://insights.sbomify.com/CVE-2020-2949/): Information disclosure in Coherence (medium 5.3)
- [CVE-2020-29489](https://insights.sbomify.com/CVE-2020-29489/): Information disclosure in Unity (medium 6.4)
- [CVE-2020-29487](https://insights.sbomify.com/CVE-2020-29487/): Denial of service in xen:xapi (high 7.5)
- [CVE-2020-29486](https://insights.sbomify.com/CVE-2020-29486/): Denial of service in debian:debian linux (medium 6.0)
- [CVE-2020-29485](https://insights.sbomify.com/CVE-2020-29485/): Denial of service in debian:debian linux (medium 5.5)
- [CVE-2020-29484](https://insights.sbomify.com/CVE-2020-29484/): Null dereference in debian:debian linux (medium 6.0)
- [CVE-2020-29483](https://insights.sbomify.com/CVE-2020-29483/): Use after free in debian:debian linux (medium 6.5)
- [CVE-2020-29482](https://insights.sbomify.com/CVE-2020-29482/): Path traversal in debian:debian linux (medium 6.0)
- [CVE-2020-29481](https://insights.sbomify.com/CVE-2020-29481/): Information disclosure in debian:debian linux (high 8.8)
- [CVE-2020-29480](https://insights.sbomify.com/CVE-2020-29480/): Missing authorization in debian:debian linux (low 2.3)
- [CVE-2020-29479](https://insights.sbomify.com/CVE-2020-29479/): Missing authorization in debian:debian linux (high 8.8)
- [CVE-2020-29478](https://insights.sbomify.com/CVE-2020-29478/): Misconfiguration in CA Service Catalog (high 7.5)
- [CVE-2020-29477](https://insights.sbomify.com/CVE-2020-29477/): Cross-site scripting in invisioncommunity:community (medium 4.8)
- [CVE-2020-29475](https://insights.sbomify.com/CVE-2020-29475/): Cross-site scripting in nopcommerce:store (medium 4.8)
- [CVE-2020-29474](https://insights.sbomify.com/CVE-2020-29474/): SQL injection in egavilanmedia:egm address book (critical 9.8)
- [CVE-2020-29472](https://insights.sbomify.com/CVE-2020-29472/): SQL injection in egavilanmedia:under construction page with cpanel (critical 9.8)
- [CVE-2020-29471](https://insights.sbomify.com/CVE-2020-29471/): OpenCart Stored Cross-Site Scripting (medium 4.8)
- [CVE-2020-29470](https://insights.sbomify.com/CVE-2020-29470/): OpenCart Cross-site Scripting (XSS) in the Subject field of mail. (medium 4.8)
- [CVE-2020-2947](https://insights.sbomify.com/CVE-2020-2947/): Other in PeopleSoft Enterprise HCM Absence Management (medium 4.3)
- [CVE-2020-29469](https://insights.sbomify.com/CVE-2020-29469/): Cross-site scripting in wondercms:wondercms (medium 5.4)
- [CVE-2020-2946](https://insights.sbomify.com/CVE-2020-2946/): Other in APM - Application Performance Management (medium 6.0)
- [CVE-2020-29458](https://insights.sbomify.com/CVE-2020-29458/): Cross-site request forgery in textpattern:textpattern (high 8.8)
- [CVE-2020-29457](https://insights.sbomify.com/CVE-2020-29457/): Improper Certificate Validation in OPCFoundation.NetStandard.Opc.Ua.Core (medium 4.4)
- [CVE-2020-29456](https://insights.sbomify.com/CVE-2020-29456/): Cross-site scripting in papermerge (medium 6.1)
- [CVE-2020-29455](https://insights.sbomify.com/CVE-2020-29455/): Cross-site scripting in smartystreets:liveaddressplugin.js (medium 6.1)
- [CVE-2020-29454](https://insights.sbomify.com/CVE-2020-29454/): Incorrect permission enforcement in UmbracoCms (medium 4.3)
- [CVE-2020-29453](https://insights.sbomify.com/CVE-2020-29453/): Path traversal in Jira Data Center (medium 5.3)
- [CVE-2020-29451](https://insights.sbomify.com/CVE-2020-29451/): Information disclosure in Jira Data Center (medium 4.3)
- [CVE-2020-29450](https://insights.sbomify.com/CVE-2020-29450/): Denial of service in Confluence Server (medium 6.5)
- [CVE-2020-2945](https://insights.sbomify.com/CVE-2020-2945/): Other in Financial Services Deposit Insurance Calculations for Liquidity Risk Management (high 7.1)
- [CVE-2020-29448](https://insights.sbomify.com/CVE-2020-29448/): Path traversal in Confluence Data Center (medium 5.3)
- [CVE-2020-29447](https://insights.sbomify.com/CVE-2020-29447/): Denial of service in Crucible (medium 4.3)
- [CVE-2020-29446](https://insights.sbomify.com/CVE-2020-29446/): Missing authorization in Crucible (medium 5.3)
- [CVE-2020-29445](https://insights.sbomify.com/CVE-2020-29445/): Server-side request forgery in Confluence Server (medium 4.3)
- [CVE-2020-29444](https://insights.sbomify.com/CVE-2020-29444/): Cross-site scripting in Confluence Server (medium 5.4)
- [CVE-2020-29443](https://insights.sbomify.com/CVE-2020-29443/): Memory corruption in debian:debian linux (low 3.9)
- [CVE-2020-29441](https://insights.sbomify.com/CVE-2020-29441/): File upload in outsystems:outsystems (high 7.2)
- [CVE-2020-29440](https://insights.sbomify.com/CVE-2020-29440/): Security feature bypass in tesla:model x firmware (medium 4.6)
- [CVE-2020-2944](https://insights.sbomify.com/CVE-2020-2944/): Memory corruption in Solaris Operating System (high 8.8)
- [CVE-2020-29439](https://insights.sbomify.com/CVE-2020-29439/): Auth bypass in tesla:model x firmware (medium 4.6)
- [CVE-2020-29438](https://insights.sbomify.com/CVE-2020-29438/): Security feature bypass in tesla:model x firmware (medium 6.5)
- [CVE-2020-29437](https://insights.sbomify.com/CVE-2020-29437/): SQL injection in orangehrm:orangehrm (high 8.1)
- [CVE-2020-29436](https://insights.sbomify.com/CVE-2020-29436/): XML external entity in sonatype:nexus repository manager (medium 6.5)
- [CVE-2020-2943](https://insights.sbomify.com/CVE-2020-2943/): Other in Financial Services Liquidity Risk Measurement and Management (high 7.1)
- [CVE-2020-2942](https://insights.sbomify.com/CVE-2020-2942/): Other in Financial Services Price Creation and Discovery (high 7.1)
- [CVE-2020-2941](https://insights.sbomify.com/CVE-2020-2941/): Other in Financial Services Funds Transfer Pricing (high 7.1)
- [CVE-2020-2940](https://insights.sbomify.com/CVE-2020-2940/): Other in Financial Services Profitability Management (high 7.1)
- [CVE-2020-29396](https://insights.sbomify.com/CVE-2020-29396/): Privilege escalation in Odoo Community (critical 9.9)
- [CVE-2020-29395](https://insights.sbomify.com/CVE-2020-29395/): Cross-site scripting in myeventon:eventon (medium 6.1)
- [CVE-2020-29394](https://insights.sbomify.com/CVE-2020-29394/): Memory corruption in debian:debian linux (high 7.8)
- [CVE-2020-29392](https://insights.sbomify.com/CVE-2020-29392/): Hardcoded credentials in lock password manager safe app project:lock password manager safe app (medium 4.6)
- [CVE-2020-29390](https://insights.sbomify.com/CVE-2020-29390/): Command injection in zeroshell:zeroshell (critical 9.8)
- [CVE-2020-2939](https://insights.sbomify.com/CVE-2020-2939/): Other in Financial Services Asset Liability Management (high 7.1)
- [CVE-2020-29389](https://insights.sbomify.com/CVE-2020-29389/): Hardcoded credentials in docker:crux linux docker image (critical 9.8)
- [CVE-2020-29385](https://insights.sbomify.com/CVE-2020-29385/): Denial of service in canonical:ubuntu linux (medium 5.5)
- [CVE-2020-29384](https://insights.sbomify.com/CVE-2020-29384/): Integer overflow in advsys:pngout (medium 5.5)
- [CVE-2020-29383](https://insights.sbomify.com/CVE-2020-29383/): Hardcoded credentials in vsolcn:v1600d-mini firmware (high 7.8)
- [CVE-2020-29382](https://insights.sbomify.com/CVE-2020-29382/): Hardcoded credentials in vsolcn:v1600d firmware (high 7.8)
- [CVE-2020-29381](https://insights.sbomify.com/CVE-2020-29381/): Command injection in vsolcn:v1600d-mini firmware (critical 9.8)
- [CVE-2020-29380](https://insights.sbomify.com/CVE-2020-29380/): Information disclosure in vsolcn:v1600d-mini firmware (medium 5.9)
- [CVE-2020-2938](https://insights.sbomify.com/CVE-2020-2938/): Other in Financial Services Loan Loss Forecasting and Provisioning (high 7.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/90/