Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 12 of 215.
- OSV-2020-1054 Heap-buffer-overflow in wabt::string_view::compare
- OSV-2020-1053 UNKNOWN READ in js_parse_source_element
- OSV-2020-1051 Global-buffer-overflow in kencodingprober::nsCodingStateMachine::NextState
- OSV-2020-1050 UNKNOWN READ in arrow::Status arrow::internal::ValidateArrayVisitor::ValidateListArray<arrow::La
- OSV-2020-105 Segv on unknown address in cbor_typeof
- OSV-2020-1049 Heap-use-after-free in WelsDec::WelsReorderRefList
- OSV-2020-1047 UNKNOWN READ in arrow::ipc::internal::FieldFromFlatbuffer
- OSV-2020-1046 Stack-buffer-overflow in sc_pkcs15emu_object_add
- OSV-2020-1043 Heap-buffer-overflow in xport_construct_format
- OSV-2020-1042 Heap-use-after-free in WelsDec::MapColToList0
- OSV-2020-1041 Use-of-uninitialized-value in McCopyWidthEq16_c
- OSV-2020-1040 Heap-buffer-overflow in decode_bit_string
- OSV-2020-104 Heap-buffer-overflow in void arrow::util::internal::ByteStreamSlitDecodeSSE2<double>
- OSV-2020-1039 UNKNOWN WRITE in putgreytile
- OSV-2020-1036 Heap-use-after-free in void draco::Metadata::AddEntry<std::__1::vector<unsigned char, std::__1::allocat
- OSV-2020-1035 UNKNOWN READ in subpixel_ssse3.asm:1165
- OSV-2020-1030 Heap-buffer-overflow in ih264d_compute_bs_non_mbaff_thread
- OSV-2020-1029 Heap-buffer-overflow in iotlb_to_region_mips
- OSV-2020-1026 Heap-buffer-overflow in DefragInsertFrag
- OSV-2020-1025 UNKNOWN READ in auto LLVMFuzzerTestOneInput::$_1::operator
- OSV-2020-1022 Heap-buffer-overflow in ptls_set_negotiated_protocol
- OSV-2020-1021 UNKNOWN READ in exif_mnote_data_olympus_load
- OSV-2020-102 Heap-use-after-free in vips_buf_vappendf
- OSV-2020-1019 Stack-buffer-overflow in getTLScertificate
- OSV-2020-1018 Heap-use-after-free in draco::Metadata::AddSubMetadata
- OSV-2020-1017 Heap-buffer-overflow in decode_bit_string
- OSV-2020-1016 UNKNOWN READ in blosc_run_decompression_with_context
- OSV-2020-1015 Heap-buffer-overflow in ndpi_search_memcached
- OSV-2020-1013 Heap-buffer-overflow in ndpi_search_amazon_video
- OSV-2020-1012 Heap-buffer-overflow in sas_read8
- OSV-2020-1011 Heap-buffer-overflow in ndpi_search_mail_smtp_tcp
- OSV-2020-1010 Stack-use-after-return in ihevcd_process_thread
- OSV-2020-101 UNKNOWN READ in apache::thrift::transport::TMemoryBuffer::readSlow
- OSV-2020-1009 Heap-buffer-overflow in mu::ParserBase::ParseCmdCodeBulk
- OSV-2020-1008 Use-of-uninitialized-value in ihevc_recon_32x32
- OSV-2020-1007 Heap-use-after-free in DetectParseDupSigCompareFunc
- OSV-2020-1006 Use-of-uninitialized-value in decimate_dsd_run
- OSV-2020-1005 Global-buffer-overflow in ihevcd_unpack_coeffs
- OSV-2020-1004 Heap-buffer-overflow in gtTileSeparate
- OSV-2020-1000 Heap-buffer-overflow in xls_isCellTooSmall
- OSV-2020-10 Heap-use-after-free in ndpi_workflow_process_packet
- OSV-2020-1 Use-of-uninitialized-value in numaCrossingsByThreshold
- GHSA-xwqw-rf2q-xmhf Cross-Site Scripting in buefy
- GHSA-xwg3-gjxh-c8pm Malicious Package in ngx-context-menu
- GHSA-xw79-hhv6-578c Cross-Site Scripting in serve
- GHSA-xrrg-wfwc-c7r3 Malicious Package in bictoin-ops
- GHSA-xrr6-6ww3-f3qm Sandbox Breakout / Arbitrary Code Execution in value-censorship
- GHSA-xr53-m937-jr9c Cross-Site Scripting in ngx-md
- GHSA-xr3g-4gg5-w3wq Malicious Package in degbu
- GHSA-xmmp-hrmx-x5g7 Malicious Package in bowe
- GHSA-xhjx-mfr6-9rr4 Command Injection in samsung-remote
- GHSA-xh8g-j88w-6v59 Malicious Package in cionstring
- GHSA-xgp2-cc4r-7vf6 Denial of Service in http-live-simulator
- GHSA-xfrc-7mj2-5xh9 Undefined Behavior in zencashjs
- GHSA-xf64-2f9p-6pqq Information Exposure in type-graphql
- GHSA-xcgx-27q5-7634 Malicious Package in commanedr
- GHSA-x9hc-rw35-f44h Sandbox Breakout / Arbitrary Code Execution in static-eval
- GHSA-x9gm-qxhh-rf75 Malicious Package in cordova-plugin-china-picker
- GHSA-x8m7-cv39-xmg9 Malicious Package in jq-sha3
- GHSA-x87g-rgrh-r6g3 Malicious Package in rpc-websocket
- GHSA-x6m6-5hrf-fh6r Denial of Service in markdown-it-toc-and-anchor
- GHSA-x6gq-467r-hwcc Malicious Package in soket.js
- GHSA-x6ch-c6rv-f7wh Malicious Package in asymc
- GHSA-x48m-gp6r-gp4v Malicious Package in rate-map
- GHSA-x45v-pvpg-hcrh Malicious Package in mysql-koa
- GHSA-x3w4-mrmv-cw2x Malicious Package in buffev-xor
- GHSA-x3m6-rprw-862w Malicious Package in node-buc
- GHSA-wxrm-2h86-v95f Malicious Package in pizza-pasta
- GHSA-wx77-rp39-c6vg Regular Expression Denial of Service in markdown
- GHSA-wwwg-6r7f-9c9h Malicious Package in file-logging
- GHSA-wwgf-3xp7-cxj4 Potentially sensitive data exposure in Symfony Web Socket Bundle
- GHSA-wvh7-5p38-2qfc Storing Password in Local Storage
- GHSA-wv39-cgmm-cq29 Malicious Package in buffmr-xor
- GHSA-wqq8-mqj9-697f PrestaShop autoupgrade module ZIP archives were vulnerable from CVE-2017-9841
- GHSA-wqhw-frpx-5mmp Command Injection in tomato
- GHSA-wqgx-4q47-j2w5 Insecure Cryptography Algorithm in parsel
- GHSA-wqgq-mfvj-6qxp Malicious Package in koa-body-parse
- GHSA-wpfc-3w63-g4hm Malicious Package in axois
- GHSA-wp2p-q35g-3rjj Malicious Package in soket.io
- GHSA-wmcq-3wfx-qjx5 Directory Traversal in nodeload-nmickuli
- GHSA-wm7q-rxch-43mx Byass due to validation before canonicalization in serve
- GHSA-wjpj-gmc3-5w56 Malicious Package in buvfer-xor
- GHSA-wjf2-7f9g-86f5 Malicious Package in fast-requests
- GHSA-whv6-rj84-2vh2 Cross-Site Scripting in nextcloud-vue-collections
- GHSA-whrh-9j4q-g7ph CSRF Vulnerability in polaris-website
- GHSA-whjr-jj69-7prm Malicious Package in import-mysql
- GHSA-wh87-3959-vfrq Malicious Package in buffer-hor
- GHSA-wgw3-gf4p-62xc Command Injection in wizard-syncronizer
- GHSA-wgvj-6v57-wjh3 Malicious Package in bowee
- GHSA-wfjh-3hq2-r276 Malicious Package in node-spdy
- GHSA-wfhx-6pcm-7m55 Path Traversal in ponse
- GHSA-wch2-46wj-6x5j Malicious Package in bip30
- GHSA-wc7q-qpm4-8pqv Malicious Package in rrequest
- GHSA-w9q5-mvc6-5cw3 Malicious Package in bufder-xor
- GHSA-w9hw-v97w-g5f5 Malicious Package in bitconi-ops
- GHSA-w992-2gmj-9xxj Cross-Site Scripting in swagger-ui
- GHSA-w8hg-mxvh-9h57 Malicious Package in angular-bmap
- GHSA-w7wg-24g3-2c78 Malicious Package in requset
- GHSA-w725-67p7-xv22 Command Injection in local-devices
- GHSA-w6xj-45gv-fw35 Malicious Package in stream-combine