# Vulnerabilities published in 2020


- [CVE-2020-27945](https://insights.sbomify.com/CVE-2020-27945/): Integer overflow in macOS (high 7.8)
- [CVE-2020-27944](https://insights.sbomify.com/CVE-2020-27944/): Memory corruption in iOS and iPadOS (high 7.8)
- [CVE-2020-27943](https://insights.sbomify.com/CVE-2020-27943/): Memory corruption in iOS and iPadOS (high 7.8)
- [CVE-2020-27942](https://insights.sbomify.com/CVE-2020-27942/): Other in Security Update - Catalina (high 7.8)
- [CVE-2020-27941](https://insights.sbomify.com/CVE-2020-27941/): Privilege escalation in macOS (high 7.8)
- [CVE-2020-27940](https://insights.sbomify.com/CVE-2020-27940/): Other in Apple TV app for Fire OS (medium 4.3)
- [CVE-2020-2794](https://insights.sbomify.com/CVE-2020-2794/): Other in Email Center (high 8.2)
- [CVE-2020-27939](https://insights.sbomify.com/CVE-2020-27939/): Memory corruption in macOS (high 7.8)
- [CVE-2020-27938](https://insights.sbomify.com/CVE-2020-27938/): Privilege escalation in macOS (high 7.8)
- [CVE-2020-27937](https://insights.sbomify.com/CVE-2020-27937/): Business logic in macOS (medium 5.5)
- [CVE-2020-27936](https://insights.sbomify.com/CVE-2020-27936/): Memory corruption in macOS (high 7.1)
- [CVE-2020-27935](https://insights.sbomify.com/CVE-2020-27935/): Security feature bypass in iOS and iPadOS (medium 6.3)
- [CVE-2020-27933](https://insights.sbomify.com/CVE-2020-27933/): Memory corruption in iOS and iPadOS (high 7.8)
- [CVE-2020-27932](https://insights.sbomify.com/CVE-2020-27932/): Apple Multiple Products Type Confusion (high 7.8, exploited in the wild)
- [CVE-2020-27931](https://insights.sbomify.com/CVE-2020-27931/): Memory corruption in iOS and iPadOS (high 7.8)
- [CVE-2020-27930](https://insights.sbomify.com/CVE-2020-27930/): Apple Multiple Products Memory Corruption (high 7.8, exploited in the wild)
- [CVE-2020-2793](https://insights.sbomify.com/CVE-2020-2793/): Other in Financial Services Analytical Applications Infrastructure (high 7.1)
- [CVE-2020-27929](https://insights.sbomify.com/CVE-2020-27929/): Business logic in iOS (medium 5.5)
- [CVE-2020-27927](https://insights.sbomify.com/CVE-2020-27927/): Memory corruption in iOS and iPadOS (high 7.8)
- [CVE-2020-27926](https://insights.sbomify.com/CVE-2020-27926/): Use after free in iOS and iPadOS (high 7.8)
- [CVE-2020-27925](https://insights.sbomify.com/CVE-2020-27925/): Business logic in iOS and iPadOS (medium 5.5)
- [CVE-2020-27924](https://insights.sbomify.com/CVE-2020-27924/): Memory corruption in iOS and iPadOS (high 7.8)
- [CVE-2020-27923](https://insights.sbomify.com/CVE-2020-27923/): Memory corruption in iOS and iPadOS (high 7.8)
- [CVE-2020-27922](https://insights.sbomify.com/CVE-2020-27922/): Other in iOS and iPadOS (high 7.8)
- [CVE-2020-27921](https://insights.sbomify.com/CVE-2020-27921/): Race condition in macOS (high 7.0)
- [CVE-2020-27920](https://insights.sbomify.com/CVE-2020-27920/): Use after free in iOS and iPadOS (high 8.8)
- [CVE-2020-27919](https://insights.sbomify.com/CVE-2020-27919/): Memory corruption in macOS (high 7.8)
- [CVE-2020-27918](https://insights.sbomify.com/CVE-2020-27918/): Use after free in iOS and iPadOS (high 7.8)
- [CVE-2020-27917](https://insights.sbomify.com/CVE-2020-27917/): Use after free in iOS and iPadOS (high 7.8)
- [CVE-2020-27916](https://insights.sbomify.com/CVE-2020-27916/): Memory corruption in iOS and iPadOS (high 7.8)
- [CVE-2020-27915](https://insights.sbomify.com/CVE-2020-27915/): Memory corruption in macOS (high 7.8)
- [CVE-2020-27914](https://insights.sbomify.com/CVE-2020-27914/): Memory corruption in macOS (high 7.8)
- [CVE-2020-27912](https://insights.sbomify.com/CVE-2020-27912/): Memory corruption in iOS and iPadOS (high 7.8)
- [CVE-2020-27911](https://insights.sbomify.com/CVE-2020-27911/): Integer overflow in iOS and iPadOS (high 7.8)
- [CVE-2020-27910](https://insights.sbomify.com/CVE-2020-27910/): Memory corruption in iOS and iPadOS (high 7.8)
- [CVE-2020-2791](https://insights.sbomify.com/CVE-2020-2791/): Other in Knowledge (critical 9.8)
- [CVE-2020-27909](https://insights.sbomify.com/CVE-2020-27909/): Memory corruption in iOS and iPadOS (high 7.8)
- [CVE-2020-27908](https://insights.sbomify.com/CVE-2020-27908/): Memory corruption in iOS and iPadOS (high 7.8)
- [CVE-2020-27907](https://insights.sbomify.com/CVE-2020-27907/): Memory corruption in macOS (high 7.8)
- [CVE-2020-27906](https://insights.sbomify.com/CVE-2020-27906/): Integer overflow in macOS (high 8.8)
- [CVE-2020-27905](https://insights.sbomify.com/CVE-2020-27905/): Memory corruption in iOS and iPadOS (high 7.8)
- [CVE-2020-27904](https://insights.sbomify.com/CVE-2020-27904/): Memory corruption in macOS (high 7.8)
- [CVE-2020-27903](https://insights.sbomify.com/CVE-2020-27903/): Privilege escalation in macOS (high 7.8)
- [CVE-2020-27902](https://insights.sbomify.com/CVE-2020-27902/): Auth bypass in iOS and iPadOS (medium 4.6)
- [CVE-2020-27901](https://insights.sbomify.com/CVE-2020-27901/): Security feature bypass in macOS (medium 6.3)
- [CVE-2020-27900](https://insights.sbomify.com/CVE-2020-27900/): Missing authorization in macOS (medium 5.5)
- [CVE-2020-2790](https://insights.sbomify.com/CVE-2020-2790/): Denial of service in MySQL Server (medium 6.5)
- [CVE-2020-27899](https://insights.sbomify.com/CVE-2020-27899/): Use after free in iOS and iPadOS (high 7.8)
- [CVE-2020-27898](https://insights.sbomify.com/CVE-2020-27898/): Security feature bypass in macOS (medium 5.5)
- [CVE-2020-27897](https://insights.sbomify.com/CVE-2020-27897/): Memory corruption in macOS (high 7.8)
- [CVE-2020-27896](https://insights.sbomify.com/CVE-2020-27896/): Path traversal in macOS (medium 5.5)
- [CVE-2020-27895](https://insights.sbomify.com/CVE-2020-27895/): Information disclosure in iTunes for Windows (low 3.3)
- [CVE-2020-27894](https://insights.sbomify.com/CVE-2020-27894/): Security feature bypass in macOS (medium 5.5)
- [CVE-2020-27893](https://insights.sbomify.com/CVE-2020-27893/): Missing authorization in macOS (medium 6.5)
- [CVE-2020-27892](https://insights.sbomify.com/CVE-2020-27892/): Denial of service in ti:z-stack (high 7.5)
- [CVE-2020-27891](https://insights.sbomify.com/CVE-2020-27891/): Denial of service in ti:z-stack (high 7.5)
- [CVE-2020-27890](https://insights.sbomify.com/CVE-2020-27890/): Denial of service in ti:z-stack (high 8.2)
- [CVE-2020-2789](https://insights.sbomify.com/CVE-2020-2789/): Other in iSupport (medium 4.7)
- [CVE-2020-27888](https://insights.sbomify.com/CVE-2020-27888/): Information disclosure in ui:unifi controller firmware (high 7.5)
- [CVE-2020-27887](https://insights.sbomify.com/CVE-2020-27887/): Command injection in eyesofnetwork:eyesofnetwork (high 8.8)
- [CVE-2020-27886](https://insights.sbomify.com/CVE-2020-27886/): SQL injection in eyesofnetwork:eyesofnetwork (critical 9.8)
- [CVE-2020-27885](https://insights.sbomify.com/CVE-2020-27885/): Cross-site scripting in wso2:api manager (medium 6.1)
- [CVE-2020-27874](https://insights.sbomify.com/CVE-2020-27874/): Memory corruption in WeChat (high 8.8)
- [CVE-2020-27873](https://insights.sbomify.com/CVE-2020-27873/): Missing authorization in R7450 (medium 6.5)
- [CVE-2020-27872](https://insights.sbomify.com/CVE-2020-27872/): Auth bypass in R7450 (high 8.8)
- [CVE-2020-27871](https://insights.sbomify.com/CVE-2020-27871/): Path traversal in Orion Platform (high 7.2)
- [CVE-2020-27870](https://insights.sbomify.com/CVE-2020-27870/): Path traversal in Orion Platform (high 7.5)
- [CVE-2020-2787](https://insights.sbomify.com/CVE-2020-2787/): Other in Outside In Technology (high 7.3)
- [CVE-2020-27869](https://insights.sbomify.com/CVE-2020-27869/): SQL injection in Network Performance Monitor (high 8.8)
- [CVE-2020-27868](https://insights.sbomify.com/CVE-2020-27868/): Deserialization in Ocularis (critical 9.8)
- [CVE-2020-27867](https://insights.sbomify.com/CVE-2020-27867/): Command injection in Multiple Routers (medium 6.8)
- [CVE-2020-27866](https://insights.sbomify.com/CVE-2020-27866/): Auth bypass in Multiple Routers (high 8.8)
- [CVE-2020-27865](https://insights.sbomify.com/CVE-2020-27865/): Auth bypass in DAP-1860 (high 8.8)
- [CVE-2020-27864](https://insights.sbomify.com/CVE-2020-27864/): Command injection in DAP-1860 (high 8.8)
- [CVE-2020-27863](https://insights.sbomify.com/CVE-2020-27863/): Auth bypass in Multiple Routers (medium 6.5)
- [CVE-2020-27862](https://insights.sbomify.com/CVE-2020-27862/): Command injection in Multiple Routers (high 8.8)
- [CVE-2020-27861](https://insights.sbomify.com/CVE-2020-27861/): Command injection in Orbi (high 8.8)
- [CVE-2020-27860](https://insights.sbomify.com/CVE-2020-27860/): Memory corruption in Reader (high 7.8)
- [CVE-2020-2786](https://insights.sbomify.com/CVE-2020-2786/): Other in Outside In Technology (high 7.3)
- [CVE-2020-27859](https://insights.sbomify.com/CVE-2020-27859/): Path traversal in ESMPRO Manager (high 7.5)
- [CVE-2020-27858](https://insights.sbomify.com/CVE-2020-27858/): XML external entity in D2D (high 7.5)
- [CVE-2020-27857](https://insights.sbomify.com/CVE-2020-27857/): Memory corruption in Studio Photo (high 7.8)
- [CVE-2020-27856](https://insights.sbomify.com/CVE-2020-27856/): Memory corruption in Studio Photo (low 3.3)
- [CVE-2020-27855](https://insights.sbomify.com/CVE-2020-27855/): Memory corruption in Studio Photo (low 3.3)
- [CVE-2020-27853](https://insights.sbomify.com/CVE-2020-27853/): Memory corruption in wire:wire (critical 9.8)
- [CVE-2020-27852](https://insights.sbomify.com/CVE-2020-27852/): Gravity Forms stored Cross-Site Scripting (XSS) vulnerability in the survey feature (medium 5.4)
- [CVE-2020-27851](https://insights.sbomify.com/CVE-2020-27851/): Gravity Forms stored HTML injection vulnerability (medium 5.4)
- [CVE-2020-27850](https://insights.sbomify.com/CVE-2020-27850/): Gravity Forms stored Cross-Site Scripting (XSS) vulnerability (medium 4.8)
- [CVE-2020-2785](https://insights.sbomify.com/CVE-2020-2785/): Other in Outside In Technology (high 7.3)
- [CVE-2020-27848](https://insights.sbomify.com/CVE-2020-27848/): SQL injection in dotcms:dotcms (high 8.8)
- [CVE-2020-27847](https://insights.sbomify.com/CVE-2020-27847/): Auth bypass in dexidp/dex (critical 9.8)
- [CVE-2020-27846](https://insights.sbomify.com/CVE-2020-27846/): XML Processing error in github.com/crewjam/saml (critical 9.8)
- [CVE-2020-27845](https://insights.sbomify.com/CVE-2020-27845/): Memory corruption in openjpeg (medium 5.5)
- [CVE-2020-27844](https://insights.sbomify.com/CVE-2020-27844/): Memory corruption in openjpeg (high 7.8)
- [CVE-2020-27843](https://insights.sbomify.com/CVE-2020-27843/): Memory corruption in openjpeg (medium 5.5)
- [CVE-2020-27842](https://insights.sbomify.com/CVE-2020-27842/): Null dereference in openjpeg (medium 5.5)
- [CVE-2020-27841](https://insights.sbomify.com/CVE-2020-27841/): Memory corruption in openjpeg (medium 5.5)
- [CVE-2020-27840](https://insights.sbomify.com/CVE-2020-27840/): Memory corruption in samba (high 7.5)
- [CVE-2020-2784](https://insights.sbomify.com/CVE-2020-2784/): Other in Outside In Technology (high 7.3)
- [CVE-2020-27839](https://insights.sbomify.com/CVE-2020-27839/): Information disclosure in ceph-dashboard (medium 5.4)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/99/