# Vulnerabilities published in 2020


- [CVE-2020-28847](https://insights.sbomify.com/CVE-2020-28847/): Cross site scripting in valine (medium 5.4)
- [CVE-2020-28846](https://insights.sbomify.com/CVE-2020-28846/): Cross-site request forgery in seacms:seacms (medium 6.5)
- [CVE-2020-28845](https://insights.sbomify.com/CVE-2020-28845/): Code injection in netskope:netskope (high 7.8)
- [CVE-2020-28841](https://insights.sbomify.com/CVE-2020-28841/): Denial of service in drivergenius:drivergenius firmware (medium 5.5)
- [CVE-2020-28840](https://insights.sbomify.com/CVE-2020-28840/): Memory corruption in matthiaswandel:jhead (high 7.8)
- [CVE-2020-2884](https://insights.sbomify.com/CVE-2020-2884/): Other in WebLogic Server (critical 9.8)
- [CVE-2020-28838](https://insights.sbomify.com/CVE-2020-28838/): OpenCart Cross-Site Request Forgery (CSRF) (low 3.5)
- [CVE-2020-2883](https://insights.sbomify.com/CVE-2020-2883/): Oracle WebLogic Server Unspecified (critical 9.8, exploited in the wild)
- [CVE-2020-2882](https://insights.sbomify.com/CVE-2020-2882/): Other in Human Resources (high 8.1)
- [CVE-2020-2881](https://insights.sbomify.com/CVE-2020-2881/): Other in CRM Technical Foundation (high 8.2)
- [CVE-2020-2880](https://insights.sbomify.com/CVE-2020-2880/): Other in Learning Management (high 8.2)
- [CVE-2020-2879](https://insights.sbomify.com/CVE-2020-2879/): Other in Scripting (high 8.2)
- [CVE-2020-2878](https://insights.sbomify.com/CVE-2020-2878/): Other in iSupport (high 8.2)
- [CVE-2020-2877](https://insights.sbomify.com/CVE-2020-2877/): Other in Partner Management (high 8.2)
- [CVE-2020-2876](https://insights.sbomify.com/CVE-2020-2876/): Other in Marketing (high 8.2)
- [CVE-2020-28759](https://insights.sbomify.com/CVE-2020-28759/): Memory corruption in tengine project:tengine (medium 5.5)
- [CVE-2020-2875](https://insights.sbomify.com/CVE-2020-2875/): Other in MySQL Connectors (medium 4.7)
- [CVE-2020-2874](https://insights.sbomify.com/CVE-2020-2874/): Other in Email Center (high 8.2)
- [CVE-2020-28736](https://insights.sbomify.com/CVE-2020-28736/): Improper Restriction of XML External Entity Reference in Plone (high 8.8)
- [CVE-2020-28735](https://insights.sbomify.com/CVE-2020-28735/): SSRF attacks via tracebacks in Plone (high 8.8)
- [CVE-2020-28734](https://insights.sbomify.com/CVE-2020-28734/): Improper Restriction of XML External Entity Reference in Plone (high 8.8)
- [CVE-2020-2873](https://insights.sbomify.com/CVE-2020-2873/): Other in Customer Interaction History (high 8.2)
- [CVE-2020-28727](https://insights.sbomify.com/CVE-2020-28727/): Cross-site scripting in seeddms:seeddms (medium 6.1)
- [CVE-2020-28726](https://insights.sbomify.com/CVE-2020-28726/): Open redirect in seeddms:seeddms (medium 6.1)
- [CVE-2020-28724](https://insights.sbomify.com/CVE-2020-28724/): Open Redirect in werkzeug (medium 6.1)
- [CVE-2020-28723](https://insights.sbomify.com/CVE-2020-28723/): Denial of service in cloudavid:pparam (high 7.5)
- [CVE-2020-28722](https://insights.sbomify.com/CVE-2020-28722/): Cross-site scripting in deskpro:deskpro (medium 5.4)
- [CVE-2020-2872](https://insights.sbomify.com/CVE-2020-2872/): Other in iSupport (high 8.2)
- [CVE-2020-28717](https://insights.sbomify.com/CVE-2020-28717/): Cross-site scripting in kindsoft:kindeditor (medium 6.1)
- [CVE-2020-28715](https://insights.sbomify.com/CVE-2020-28715/): Other in leeco:letv x43 firmware (critical 9.8)
- [CVE-2020-28713](https://insights.sbomify.com/CVE-2020-28713/): Missing authorization in nightowlsp:smart doorbell firmware (medium 6.5)
- [CVE-2020-2871](https://insights.sbomify.com/CVE-2020-2871/): Other in Advanced Outbound Telephony (high 8.2)
- [CVE-2020-28707](https://insights.sbomify.com/CVE-2020-28707/): Cross-site scripting in stockdio:stockdio historical chart (medium 6.1)
- [CVE-2020-28705](https://insights.sbomify.com/CVE-2020-28705/): Cross-site request forgery in thedaylightstudio:fuel cms (medium 4.3)
- [CVE-2020-28702](https://insights.sbomify.com/CVE-2020-28702/): SQL injection in pybbs project:pybbs (high 7.5)
- [CVE-2020-2870](https://insights.sbomify.com/CVE-2020-2870/): Other in One-to-One Fulfillment (high 8.2)
- [CVE-2020-28695](https://insights.sbomify.com/CVE-2020-28695/): Command injection in askey:rtf3505vw-n1 br sv g000 r3505vwn1001 s32 7 firmware (high 8.8)
- [CVE-2020-28693](https://insights.sbomify.com/CVE-2020-28693/): File upload in horizontcms project:horizontcms (high 8.8)
- [CVE-2020-28692](https://insights.sbomify.com/CVE-2020-28692/): File upload in gilacms:gila cms (high 7.2)
- [CVE-2020-2869](https://insights.sbomify.com/CVE-2020-2869/): Other in WebLogic Server (medium 4.3)
- [CVE-2020-28688](https://insights.sbomify.com/CVE-2020-28688/): File upload in artworks gallery in php\, css\, javascript\, and mysql project:artworks gallery in php\, css\, javascript\, and mysql (high 8.8)
- [CVE-2020-28687](https://insights.sbomify.com/CVE-2020-28687/): File upload in artworks gallery in php\, css\, javascript\, and mysql project:artworks gallery in php\, css\, javascript\, and mysql (high 8.8)
- [CVE-2020-2868](https://insights.sbomify.com/CVE-2020-2868/): Cross-site scripting in PeopleSoft Enterprise PT PeopleTools (medium 6.1)
- [CVE-2020-28679](https://insights.sbomify.com/CVE-2020-28679/): SQL injection in zohocorp:manageengine applications manager (high 8.8)
- [CVE-2020-28672](https://insights.sbomify.com/CVE-2020-28672/): File upload in monocms:monocms (high 7.2)
- [CVE-2020-2867](https://insights.sbomify.com/CVE-2020-2867/): Other in WebLogic Server (high 8.2)
- [CVE-2020-2866](https://insights.sbomify.com/CVE-2020-2866/): Other in Applications Framework (medium 5.3)
- [CVE-2020-28657](https://insights.sbomify.com/CVE-2020-28657/): SQL injection in bittacora:bpanel (critical 9.8)
- [CVE-2020-28656](https://insights.sbomify.com/CVE-2020-28656/): Security feature bypass in vw:polo firmware (medium 6.8)
- [CVE-2020-28653](https://insights.sbomify.com/CVE-2020-28653/): Code injection in zohocorp:manageengine opmanager (critical 9.8)
- [CVE-2020-28650](https://insights.sbomify.com/CVE-2020-28650/): Cross-site scripting in wpbakery:page builder (medium 6.4)
- [CVE-2020-2865](https://insights.sbomify.com/CVE-2020-2865/): Information disclosure in Configurator (medium 5.3)
- [CVE-2020-28649](https://insights.sbomify.com/CVE-2020-28649/): Cross-site request forgery in orbisius:child theme creator (high 8.8)
- [CVE-2020-28648](https://insights.sbomify.com/CVE-2020-28648/): Code injection in nagios:nagios xi (high 8.8)
- [CVE-2020-28647](https://insights.sbomify.com/CVE-2020-28647/): Cross-site scripting in progress:moveit transfer (medium 5.4)
- [CVE-2020-28646](https://insights.sbomify.com/CVE-2020-28646/): Code injection in owncloud:owncloud desktop client (high 7.8)
- [CVE-2020-28645](https://insights.sbomify.com/CVE-2020-28645/): Path traversal in owncloud:owncloud (critical 9.1)
- [CVE-2020-28644](https://insights.sbomify.com/CVE-2020-28644/): Cross-site request forgery in owncloud:owncloud (medium 4.3)
- [CVE-2020-28642](https://insights.sbomify.com/CVE-2020-28642/): Weak cryptography in infinitewp:infinitewp (critical 9.8)
- [CVE-2020-28641](https://insights.sbomify.com/CVE-2020-28641/): Path traversal in malwarebytes:endpoint protection (high 7.1)
- [CVE-2020-2864](https://insights.sbomify.com/CVE-2020-2864/): Information disclosure in iSupplier Portal (medium 5.3)
- [CVE-2020-28638](https://insights.sbomify.com/CVE-2020-28638/): Weak cryptography in dyne:tomb (critical 9.8)
- [CVE-2020-28636](https://insights.sbomify.com/CVE-2020-28636/): Memory corruption in CGAL (critical 10.0)
- [CVE-2020-28635](https://insights.sbomify.com/CVE-2020-28635/): Memory corruption in libcgal (critical 10.0)
- [CVE-2020-28634](https://insights.sbomify.com/CVE-2020-28634/): Memory corruption in libcgal (critical 10.0)
- [CVE-2020-28633](https://insights.sbomify.com/CVE-2020-28633/): Memory corruption in libcgal (critical 10.0)
- [CVE-2020-28632](https://insights.sbomify.com/CVE-2020-28632/): Memory corruption in libcgal (critical 10.0)
- [CVE-2020-28631](https://insights.sbomify.com/CVE-2020-28631/): Memory corruption in libcgal (critical 10.0)
- [CVE-2020-28630](https://insights.sbomify.com/CVE-2020-28630/): Memory corruption in libcgal (critical 10.0)
- [CVE-2020-2863](https://insights.sbomify.com/CVE-2020-2863/): Other in Advanced Outbound Telephony (high 8.5)
- [CVE-2020-28629](https://insights.sbomify.com/CVE-2020-28629/): Memory corruption in libcgal (critical 10.0)
- [CVE-2020-28628](https://insights.sbomify.com/CVE-2020-28628/): Memory corruption in libcgal (critical 10.0)
- [CVE-2020-28627](https://insights.sbomify.com/CVE-2020-28627/): Memory corruption in libcgal (critical 10.0)
- [CVE-2020-28626](https://insights.sbomify.com/CVE-2020-28626/): Memory corruption in libcgal (critical 10.0)
- [CVE-2020-28625](https://insights.sbomify.com/CVE-2020-28625/): Memory corruption in libcgal (critical 10.0)
- [CVE-2020-28624](https://insights.sbomify.com/CVE-2020-28624/): Memory corruption in libcgal (critical 10.0)
- [CVE-2020-28623](https://insights.sbomify.com/CVE-2020-28623/): Memory corruption in libcgal (critical 10.0)
- [CVE-2020-28622](https://insights.sbomify.com/CVE-2020-28622/): Memory corruption in libcgal (critical 10.0)
- [CVE-2020-28621](https://insights.sbomify.com/CVE-2020-28621/): Memory corruption in libcgal (critical 10.0)
- [CVE-2020-28620](https://insights.sbomify.com/CVE-2020-28620/): Memory corruption in libcgal (critical 10.0)
- [CVE-2020-2862](https://insights.sbomify.com/CVE-2020-2862/): Other in One-to-One Fulfillment (medium 4.7)
- [CVE-2020-28619](https://insights.sbomify.com/CVE-2020-28619/): Memory corruption in libcgal (critical 10.0)
- [CVE-2020-28618](https://insights.sbomify.com/CVE-2020-28618/): Memory corruption in libcgal (critical 10.0)
- [CVE-2020-28617](https://insights.sbomify.com/CVE-2020-28617/): Memory corruption in libcgal (critical 10.0)
- [CVE-2020-28616](https://insights.sbomify.com/CVE-2020-28616/): Memory corruption in libcgal (critical 10.0)
- [CVE-2020-28615](https://insights.sbomify.com/CVE-2020-28615/): Memory corruption in libcgal (critical 10.0)
- [CVE-2020-28614](https://insights.sbomify.com/CVE-2020-28614/): Memory corruption in libcgal (critical 10.0)
- [CVE-2020-28613](https://insights.sbomify.com/CVE-2020-28613/): Memory corruption in libcgal (critical 10.0)
- [CVE-2020-28612](https://insights.sbomify.com/CVE-2020-28612/): Memory corruption in libcgal (critical 10.0)
- [CVE-2020-28611](https://insights.sbomify.com/CVE-2020-28611/): Memory corruption in libcgal (critical 10.0)
- [CVE-2020-28610](https://insights.sbomify.com/CVE-2020-28610/): Memory corruption in libcgal (critical 10.0)
- [CVE-2020-2861](https://insights.sbomify.com/CVE-2020-2861/): Other in Marketing (high 8.2)
- [CVE-2020-28609](https://insights.sbomify.com/CVE-2020-28609/): Memory corruption in libcgal (critical 10.0)
- [CVE-2020-28608](https://insights.sbomify.com/CVE-2020-28608/): Memory corruption in libcgal (critical 10.0)
- [CVE-2020-28607](https://insights.sbomify.com/CVE-2020-28607/): Memory corruption in libcgal (critical 10.0)
- [CVE-2020-28606](https://insights.sbomify.com/CVE-2020-28606/): Memory corruption in libcgal (critical 10.0)
- [CVE-2020-28605](https://insights.sbomify.com/CVE-2020-28605/): Memory corruption in libcgal (critical 10.0)
- [CVE-2020-28604](https://insights.sbomify.com/CVE-2020-28604/): Memory corruption in libcgal (critical 10.0)
- [CVE-2020-28603](https://insights.sbomify.com/CVE-2020-28603/): Memory corruption in libcgal (critical 10.0)
- [CVE-2020-28602](https://insights.sbomify.com/CVE-2020-28602/): Memory corruption in libcgal (critical 10.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/94/