# Vulnerabilities published in 2020


- [CVE-2020-29379](https://insights.sbomify.com/CVE-2020-29379/): Auth bypass in vsolcn:v1600d-mini firmware (medium 5.5)
- [CVE-2020-29378](https://insights.sbomify.com/CVE-2020-29378/): Hardcoded credentials in vsolcn:v1600d-mini firmware (high 8.8)
- [CVE-2020-29377](https://insights.sbomify.com/CVE-2020-29377/): Hardcoded credentials in vsolcn:v1600d firmware (critical 9.8)
- [CVE-2020-29376](https://insights.sbomify.com/CVE-2020-29376/): Hardcoded credentials in vsolcn:v1600d-mini firmware (critical 9.8)
- [CVE-2020-29375](https://insights.sbomify.com/CVE-2020-29375/): Hardcoded credentials in vsolcn:v1600d-mini firmware (high 8.8)
- [CVE-2020-29374](https://insights.sbomify.com/CVE-2020-29374/): Race condition in debian:debian linux (low 3.6)
- [CVE-2020-29373](https://insights.sbomify.com/CVE-2020-29373/): Path traversal in linux:linux kernel (medium 6.5)
- [CVE-2020-29372](https://insights.sbomify.com/CVE-2020-29372/): Race condition in canonical:ubuntu linux (medium 4.7)
- [CVE-2020-29371](https://insights.sbomify.com/CVE-2020-29371/): Information disclosure in linux:linux kernel (low 3.3)
- [CVE-2020-29370](https://insights.sbomify.com/CVE-2020-29370/): Race condition in linux:linux kernel (high 7.0)
- [CVE-2020-2937](https://insights.sbomify.com/CVE-2020-2937/): Other in Insurance Accounting Analyzer (high 7.1)
- [CVE-2020-29369](https://insights.sbomify.com/CVE-2020-29369/): Race condition in linux:linux kernel (high 7.0)
- [CVE-2020-29368](https://insights.sbomify.com/CVE-2020-29368/): Race condition in linux:linux kernel (high 7.0)
- [CVE-2020-29367](https://insights.sbomify.com/CVE-2020-29367/): blosc2 heap-based buffer overflow (high 7.8)
- [CVE-2020-29364](https://insights.sbomify.com/CVE-2020-29364/): Cross-site scripting in netartmedia:news lister (medium 4.8)
- [CVE-2020-29363](https://insights.sbomify.com/CVE-2020-29363/): Memory corruption in debian:debian linux (high 7.5)
- [CVE-2020-29362](https://insights.sbomify.com/CVE-2020-29362/): Memory corruption in p11-kit project:p11-kit (medium 5.3)
- [CVE-2020-29361](https://insights.sbomify.com/CVE-2020-29361/): Integer overflow in debian:debian linux (high 7.5)
- [CVE-2020-2936](https://insights.sbomify.com/CVE-2020-2936/): Other in Financial Services Balance Sheet Planning (high 7.1)
- [CVE-2020-2935](https://insights.sbomify.com/CVE-2020-2935/): Other in Financial Services Hedge Management and IFRS Valuations (high 7.1)
- [CVE-2020-2934](https://insights.sbomify.com/CVE-2020-2934/): Other in WebLogic Server (medium 5.0)
- [CVE-2020-2933](https://insights.sbomify.com/CVE-2020-2933/): Denial of service in MySQL Connectors (low 2.2)
- [CVE-2020-29324](https://insights.sbomify.com/CVE-2020-29324/): Information disclosure in D-Link Router DIR-895L (high 7.5)
- [CVE-2020-29323](https://insights.sbomify.com/CVE-2020-29323/): Hardcoded credentials in D-Link Router DIR-885L-MFC (high 7.5)
- [CVE-2020-29322](https://insights.sbomify.com/CVE-2020-29322/): Hardcoded credentials in D-Link Router DIR-880L (high 7.5)
- [CVE-2020-29321](https://insights.sbomify.com/CVE-2020-29321/): Hardcoded credentials in D-Link Router DIR-868L (high 7.5)
- [CVE-2020-2932](https://insights.sbomify.com/CVE-2020-2932/): Denial of service in Knowledge (medium 5.9)
- [CVE-2020-29315](https://insights.sbomify.com/CVE-2020-29315/): Cross-site scripting in ThinkAdmin (medium 5.4)
- [CVE-2020-29312](https://insights.sbomify.com/CVE-2020-29312/): Deserialization in zend:zend framework (critical 9.8)
- [CVE-2020-29311](https://insights.sbomify.com/CVE-2020-29311/): Command injection in ubilling:ubilling (critical 9.8)
- [CVE-2020-2931](https://insights.sbomify.com/CVE-2020-2931/): Other in Knowledge (critical 9.8)
- [CVE-2020-29304](https://insights.sbomify.com/CVE-2020-29304/): Cross-site scripting in directoriespro:directories pro (medium 6.1)
- [CVE-2020-29303](https://insights.sbomify.com/CVE-2020-29303/): Cross-site scripting in directoriespro:directories pro (medium 6.1)
- [CVE-2020-2930](https://insights.sbomify.com/CVE-2020-2930/): Denial of service in MySQL Server (medium 4.4)
- [CVE-2020-29299](https://insights.sbomify.com/CVE-2020-29299/): Command injection in zyxel:nsg firmware (high 7.2)
- [CVE-2020-29297](https://insights.sbomify.com/CVE-2020-29297/): SQL injection in oretnom23:online food ordering system (critical 9.8)
- [CVE-2020-29292](https://insights.sbomify.com/CVE-2020-29292/): Cross-site request forgery in iball:wrd12en firmware (medium 6.5)
- [CVE-2020-2929](https://insights.sbomify.com/CVE-2020-2929/): Other in VM VirtualBox (high 7.8)
- [CVE-2020-29288](https://insights.sbomify.com/CVE-2020-29288/): SQL injection in admerc:gym management system (critical 9.8)
- [CVE-2020-29287](https://insights.sbomify.com/CVE-2020-29287/): SQL injection in car rental management system project:car rental management system (critical 9.8)
- [CVE-2020-29285](https://insights.sbomify.com/CVE-2020-29285/): SQL injection in point of sales in php\/pdo project:point of sales in php\/pdo (critical 9.8)
- [CVE-2020-29284](https://insights.sbomify.com/CVE-2020-29284/): SQL injection in multi restaurant table reservation system project:multi restaurant table reservation system (critical 9.8)
- [CVE-2020-29283](https://insights.sbomify.com/CVE-2020-29283/): SQL injection in online doctor appointment booking system php and mysql project:online doctor appointment booking system php and mysql (critical 9.8)
- [CVE-2020-29282](https://insights.sbomify.com/CVE-2020-29282/): SQL injection in bloodx project:bloodx (critical 9.8)
- [CVE-2020-29280](https://insights.sbomify.com/CVE-2020-29280/): SQL injection in victor cms project:victor cms (critical 9.8)
- [CVE-2020-2928](https://insights.sbomify.com/CVE-2020-2928/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2020-29279](https://insights.sbomify.com/CVE-2020-29279/): Code injection in 74cms:74cms (critical 9.8)
- [CVE-2020-2927](https://insights.sbomify.com/CVE-2020-2927/): Other in Solaris Operating System (high 7.8)
- [CVE-2020-29260](https://insights.sbomify.com/CVE-2020-29260/): Denial of service in debian:debian linux (high 7.5)
- [CVE-2020-2926](https://insights.sbomify.com/CVE-2020-2926/): Denial of service in MySQL Server (medium 4.4)
- [CVE-2020-29259](https://insights.sbomify.com/CVE-2020-29259/): Cross-site scripting in online examination system project:online examination system (medium 5.4)
- [CVE-2020-29258](https://insights.sbomify.com/CVE-2020-29258/): Cross-site scripting in online examination system project:online examination system (medium 6.1)
- [CVE-2020-29257](https://insights.sbomify.com/CVE-2020-29257/): Cross-site scripting in online examination system project:online examination system (medium 6.1)
- [CVE-2020-29254](https://insights.sbomify.com/CVE-2020-29254/): Cross-site request forgery in tiki:tikiwiki cms\/groupware (high 8.8)
- [CVE-2020-29250](https://insights.sbomify.com/CVE-2020-29250/): Cross-site scripting in cxuu:cxuucms (medium 6.1)
- [CVE-2020-2925](https://insights.sbomify.com/CVE-2020-2925/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2020-29249](https://insights.sbomify.com/CVE-2020-29249/): Cross-site scripting in cxuu:cxuucms (medium 6.1)
- [CVE-2020-29247](https://insights.sbomify.com/CVE-2020-29247/): Cross-site scripting in wondercms:wondercms (medium 4.8)
- [CVE-2020-29245](https://insights.sbomify.com/CVE-2020-29245/): dhowden tag panic due to out-of-bounds read (medium 6.5)
- [CVE-2020-29244](https://insights.sbomify.com/CVE-2020-29244/): dhowden tag panic due to out-of-bounds read (medium 6.5)
- [CVE-2020-29243](https://insights.sbomify.com/CVE-2020-29243/): dhowden tag panic due to out-of-bounds read (medium 6.5)
- [CVE-2020-29242](https://insights.sbomify.com/CVE-2020-29242/): Denial of Service in dhowden/tag (medium 6.5)
- [CVE-2020-29241](https://insights.sbomify.com/CVE-2020-29241/): Cross-site scripting in online news portal project:online news portal (medium 4.8)
- [CVE-2020-29240](https://insights.sbomify.com/CVE-2020-29240/): Cross-site scripting in lepton-cms:leptoncms (medium 4.8)
- [CVE-2020-2924](https://insights.sbomify.com/CVE-2020-2924/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2020-29239](https://insights.sbomify.com/CVE-2020-29239/): Cross-site scripting in janobe:online voting system (medium 6.1)
- [CVE-2020-29238](https://insights.sbomify.com/CVE-2020-29238/): Integer overflow in expressvpn:expressvpn (high 7.5)
- [CVE-2020-29233](https://insights.sbomify.com/CVE-2020-29233/): Cross-site scripting in wondercms:wondercms (medium 5.4)
- [CVE-2020-29231](https://insights.sbomify.com/CVE-2020-29231/): Cross-site scripting in egavilanmedia:user registration and login system with admin panel (medium 5.4)
- [CVE-2020-29230](https://insights.sbomify.com/CVE-2020-29230/): Cross-site scripting in egavilanmedia:user registration and login system with admin panel (medium 6.1)
- [CVE-2020-2923](https://insights.sbomify.com/CVE-2020-2923/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2020-29228](https://insights.sbomify.com/CVE-2020-29228/): SQL injection in egavilanmedia:user registration and login system with admin panel (high 7.5)
- [CVE-2020-29227](https://insights.sbomify.com/CVE-2020-29227/): Path traversal in car rental management system project:car rental management system (critical 9.8)
- [CVE-2020-2922](https://insights.sbomify.com/CVE-2020-2922/): Information disclosure in MySQL Server (low 3.7)
- [CVE-2020-29215](https://insights.sbomify.com/CVE-2020-29215/): Cross-site scripting in razormist:employee management system (medium 5.4)
- [CVE-2020-29214](https://insights.sbomify.com/CVE-2020-29214/): SQL injection in alumni management system project:alumni management system (critical 9.8)
- [CVE-2020-2921](https://insights.sbomify.com/CVE-2020-2921/): Denial of service in MySQL Server (medium 4.4)
- [CVE-2020-29205](https://insights.sbomify.com/CVE-2020-29205/): Cross-site scripting in projectworlds:travel management system (medium 6.1)
- [CVE-2020-29204](https://insights.sbomify.com/CVE-2020-29204/): Cross-site Scripting in XXL-JOB (medium 6.1)
- [CVE-2020-29203](https://insights.sbomify.com/CVE-2020-29203/): Memory corruption in struct2json project:struct2json (critical 9.8)
- [CVE-2020-2920](https://insights.sbomify.com/CVE-2020-2920/): Cross-site scripting in Agile PLM Framework (medium 6.1)
- [CVE-2020-29194](https://insights.sbomify.com/CVE-2020-29194/): Denial of service in panasonic:wv-s2231l firmware (high 7.5)
- [CVE-2020-29193](https://insights.sbomify.com/CVE-2020-29193/): Hardcoded credentials in panasonic:wv-s2231l firmware (medium 6.8)
- [CVE-2020-29189](https://insights.sbomify.com/CVE-2020-29189/): Missing authorization in terra-master:tos (high 8.1)
- [CVE-2020-29177](https://insights.sbomify.com/CVE-2020-29177/): Path traversal in zblogcn:z-blogphp (critical 9.1)
- [CVE-2020-29176](https://insights.sbomify.com/CVE-2020-29176/): File upload in zblogcn:z-blogphp (high 7.8)
- [CVE-2020-29172](https://insights.sbomify.com/CVE-2020-29172/): Cross-site scripting in litespeedtech:litespeed cache (medium 6.1)
- [CVE-2020-29171](https://insights.sbomify.com/CVE-2020-29171/): Cross-site scripting in tipsandtricks-hq:wp security \& firewall (medium 6.1)
- [CVE-2020-29168](https://insights.sbomify.com/CVE-2020-29168/): SQL injection in online doctor appointment booking system php and mysql project:online doctor appointment booking system php and mysql (critical 9.8)
- [CVE-2020-29166](https://insights.sbomify.com/CVE-2020-29166/): Path traversal in rainbowfishsoftware:pacsone server (high 7.5)
- [CVE-2020-29165](https://insights.sbomify.com/CVE-2020-29165/): Missing authorization in rainbowfishsoftware:pacsone server (critical 9.8)
- [CVE-2020-29164](https://insights.sbomify.com/CVE-2020-29164/): Cross-site scripting in rainbowfishsoftware:pacsone server (medium 6.1)
- [CVE-2020-29163](https://insights.sbomify.com/CVE-2020-29163/): SQL injection in rainbowfishsoftware:pacsone server (high 8.8)
- [CVE-2020-29160](https://insights.sbomify.com/CVE-2020-29160/): Missing authorization in zammad:zammad (high 7.5)
- [CVE-2020-29159](https://insights.sbomify.com/CVE-2020-29159/): Privilege escalation in zammad:zammad (medium 4.9)
- [CVE-2020-29158](https://insights.sbomify.com/CVE-2020-29158/): Missing authorization in zammad:zammad (medium 4.3)
- [CVE-2020-29157](https://insights.sbomify.com/CVE-2020-29157/): Other in raonwiz:raon k editor (high 7.8)
- [CVE-2020-29156](https://insights.sbomify.com/CVE-2020-29156/): WooCommerce Incorrect Authorization (medium 5.3)
- [CVE-2020-2915](https://insights.sbomify.com/CVE-2020-2915/): Other in Coherence (critical 9.8)
- [CVE-2020-29147](https://insights.sbomify.com/CVE-2020-29147/): SQL injection in wayang-cms project:wayang-cms (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/91/