# Vulnerabilities published in 2020


- [OSV-2020-1054](https://insights.sbomify.com/OSV-2020-1054/): Heap-buffer-overflow in wabt::string_view::compare (not scored)
- [OSV-2020-1053](https://insights.sbomify.com/OSV-2020-1053/): UNKNOWN READ in js_parse_source_element (not scored)
- [OSV-2020-1051](https://insights.sbomify.com/OSV-2020-1051/): Global-buffer-overflow in kencodingprober::nsCodingStateMachine::NextState (not scored)
- [OSV-2020-1050](https://insights.sbomify.com/OSV-2020-1050/): UNKNOWN READ in arrow::Status arrow::internal::ValidateArrayVisitor::ValidateListArray<arrow::La (not scored)
- [OSV-2020-105](https://insights.sbomify.com/OSV-2020-105/): Segv on unknown address in cbor_typeof (not scored)
- [OSV-2020-1049](https://insights.sbomify.com/OSV-2020-1049/): Heap-use-after-free in WelsDec::WelsReorderRefList (not scored)
- [OSV-2020-1047](https://insights.sbomify.com/OSV-2020-1047/): UNKNOWN READ in arrow::ipc::internal::FieldFromFlatbuffer (not scored)
- [OSV-2020-1046](https://insights.sbomify.com/OSV-2020-1046/): Stack-buffer-overflow in sc_pkcs15emu_object_add (not scored)
- [OSV-2020-1043](https://insights.sbomify.com/OSV-2020-1043/): Heap-buffer-overflow in xport_construct_format (not scored)
- [OSV-2020-1042](https://insights.sbomify.com/OSV-2020-1042/): Heap-use-after-free in WelsDec::MapColToList0 (not scored)
- [OSV-2020-1041](https://insights.sbomify.com/OSV-2020-1041/): Use-of-uninitialized-value in McCopyWidthEq16_c (not scored)
- [OSV-2020-1040](https://insights.sbomify.com/OSV-2020-1040/): Heap-buffer-overflow in decode_bit_string (not scored)
- [OSV-2020-104](https://insights.sbomify.com/OSV-2020-104/): Heap-buffer-overflow in void arrow::util::internal::ByteStreamSlitDecodeSSE2<double> (not scored)
- [OSV-2020-1039](https://insights.sbomify.com/OSV-2020-1039/): UNKNOWN WRITE in putgreytile (not scored)
- [OSV-2020-1036](https://insights.sbomify.com/OSV-2020-1036/): Heap-use-after-free in void draco::Metadata::AddEntry<std::__1::vector<unsigned char, std::__1::allocat (not scored)
- [OSV-2020-1035](https://insights.sbomify.com/OSV-2020-1035/): UNKNOWN READ in subpixel_ssse3.asm:1165 (not scored)
- [OSV-2020-1030](https://insights.sbomify.com/OSV-2020-1030/): Heap-buffer-overflow in ih264d_compute_bs_non_mbaff_thread (not scored)
- [OSV-2020-1029](https://insights.sbomify.com/OSV-2020-1029/): Heap-buffer-overflow in iotlb_to_region_mips (not scored)
- [OSV-2020-1026](https://insights.sbomify.com/OSV-2020-1026/): Heap-buffer-overflow in DefragInsertFrag (not scored)
- [OSV-2020-1025](https://insights.sbomify.com/OSV-2020-1025/): UNKNOWN READ in auto LLVMFuzzerTestOneInput::$_1::operator (not scored)
- [OSV-2020-1022](https://insights.sbomify.com/OSV-2020-1022/): Heap-buffer-overflow in ptls_set_negotiated_protocol (not scored)
- [OSV-2020-1021](https://insights.sbomify.com/OSV-2020-1021/): UNKNOWN READ in exif_mnote_data_olympus_load (not scored)
- [OSV-2020-102](https://insights.sbomify.com/OSV-2020-102/): Heap-use-after-free in vips_buf_vappendf (not scored)
- [OSV-2020-1019](https://insights.sbomify.com/OSV-2020-1019/): Stack-buffer-overflow in getTLScertificate (not scored)
- [OSV-2020-1018](https://insights.sbomify.com/OSV-2020-1018/): Heap-use-after-free in draco::Metadata::AddSubMetadata (not scored)
- [OSV-2020-1017](https://insights.sbomify.com/OSV-2020-1017/): Heap-buffer-overflow in decode_bit_string (not scored)
- [OSV-2020-1016](https://insights.sbomify.com/OSV-2020-1016/): UNKNOWN READ in blosc_run_decompression_with_context (not scored)
- [OSV-2020-1015](https://insights.sbomify.com/OSV-2020-1015/): Heap-buffer-overflow in ndpi_search_memcached (not scored)
- [OSV-2020-1013](https://insights.sbomify.com/OSV-2020-1013/): Heap-buffer-overflow in ndpi_search_amazon_video (not scored)
- [OSV-2020-1012](https://insights.sbomify.com/OSV-2020-1012/): Heap-buffer-overflow in sas_read8 (not scored)
- [OSV-2020-1011](https://insights.sbomify.com/OSV-2020-1011/): Heap-buffer-overflow in ndpi_search_mail_smtp_tcp (not scored)
- [OSV-2020-1010](https://insights.sbomify.com/OSV-2020-1010/): Stack-use-after-return in ihevcd_process_thread (not scored)
- [OSV-2020-101](https://insights.sbomify.com/OSV-2020-101/): UNKNOWN READ in apache::thrift::transport::TMemoryBuffer::readSlow (not scored)
- [OSV-2020-1009](https://insights.sbomify.com/OSV-2020-1009/): Heap-buffer-overflow in mu::ParserBase::ParseCmdCodeBulk (not scored)
- [OSV-2020-1008](https://insights.sbomify.com/OSV-2020-1008/): Use-of-uninitialized-value in ihevc_recon_32x32 (not scored)
- [OSV-2020-1007](https://insights.sbomify.com/OSV-2020-1007/): Heap-use-after-free in DetectParseDupSigCompareFunc (not scored)
- [OSV-2020-1006](https://insights.sbomify.com/OSV-2020-1006/): Use-of-uninitialized-value in decimate_dsd_run (not scored)
- [OSV-2020-1005](https://insights.sbomify.com/OSV-2020-1005/): Global-buffer-overflow in ihevcd_unpack_coeffs (not scored)
- [OSV-2020-1004](https://insights.sbomify.com/OSV-2020-1004/): Heap-buffer-overflow in gtTileSeparate (not scored)
- [OSV-2020-1000](https://insights.sbomify.com/OSV-2020-1000/): Heap-buffer-overflow in xls_isCellTooSmall (not scored)
- [OSV-2020-10](https://insights.sbomify.com/OSV-2020-10/): Heap-use-after-free in ndpi_workflow_process_packet (not scored)
- [OSV-2020-1](https://insights.sbomify.com/OSV-2020-1/): Use-of-uninitialized-value in numaCrossingsByThreshold (not scored)
- [GHSA-xwqw-rf2q-xmhf](https://insights.sbomify.com/GHSA-xwqw-rf2q-xmhf/): Cross-Site Scripting in buefy (not scored)
- [GHSA-xwg3-gjxh-c8pm](https://insights.sbomify.com/GHSA-xwg3-gjxh-c8pm/): Malicious Package in ngx-context-menu (not scored)
- [GHSA-xw79-hhv6-578c](https://insights.sbomify.com/GHSA-xw79-hhv6-578c/): Cross-Site Scripting in serve (not scored)
- [GHSA-xrrg-wfwc-c7r3](https://insights.sbomify.com/GHSA-xrrg-wfwc-c7r3/): Malicious Package in bictoin-ops (not scored)
- [GHSA-xrr6-6ww3-f3qm](https://insights.sbomify.com/GHSA-xrr6-6ww3-f3qm/): Sandbox Breakout / Arbitrary Code Execution in value-censorship (not scored)
- [GHSA-xr53-m937-jr9c](https://insights.sbomify.com/GHSA-xr53-m937-jr9c/): Cross-Site Scripting in ngx-md (not scored)
- [GHSA-xr3g-4gg5-w3wq](https://insights.sbomify.com/GHSA-xr3g-4gg5-w3wq/): Malicious Package in degbu (not scored)
- [GHSA-xmmp-hrmx-x5g7](https://insights.sbomify.com/GHSA-xmmp-hrmx-x5g7/): Malicious Package in bowe (not scored)
- [GHSA-xhjx-mfr6-9rr4](https://insights.sbomify.com/GHSA-xhjx-mfr6-9rr4/): Command Injection in samsung-remote (not scored)
- [GHSA-xh8g-j88w-6v59](https://insights.sbomify.com/GHSA-xh8g-j88w-6v59/): Malicious Package in cionstring (not scored)
- [GHSA-xgp2-cc4r-7vf6](https://insights.sbomify.com/GHSA-xgp2-cc4r-7vf6/): Denial of Service in http-live-simulator (not scored)
- [GHSA-xfrc-7mj2-5xh9](https://insights.sbomify.com/GHSA-xfrc-7mj2-5xh9/): Undefined Behavior in zencashjs (not scored)
- [GHSA-xf64-2f9p-6pqq](https://insights.sbomify.com/GHSA-xf64-2f9p-6pqq/): Information Exposure in type-graphql (not scored)
- [GHSA-xcgx-27q5-7634](https://insights.sbomify.com/GHSA-xcgx-27q5-7634/): Malicious Package in commanedr (not scored)
- [GHSA-x9hc-rw35-f44h](https://insights.sbomify.com/GHSA-x9hc-rw35-f44h/): Sandbox Breakout / Arbitrary Code Execution in static-eval (not scored)
- [GHSA-x9gm-qxhh-rf75](https://insights.sbomify.com/GHSA-x9gm-qxhh-rf75/): Malicious Package in cordova-plugin-china-picker (not scored)
- [GHSA-x8m7-cv39-xmg9](https://insights.sbomify.com/GHSA-x8m7-cv39-xmg9/): Malicious Package in jq-sha3 (not scored)
- [GHSA-x87g-rgrh-r6g3](https://insights.sbomify.com/GHSA-x87g-rgrh-r6g3/): Malicious Package in rpc-websocket (not scored)
- [GHSA-x6m6-5hrf-fh6r](https://insights.sbomify.com/GHSA-x6m6-5hrf-fh6r/): Denial of Service in markdown-it-toc-and-anchor (not scored)
- [GHSA-x6gq-467r-hwcc](https://insights.sbomify.com/GHSA-x6gq-467r-hwcc/): Malicious Package in soket.js (not scored)
- [GHSA-x6ch-c6rv-f7wh](https://insights.sbomify.com/GHSA-x6ch-c6rv-f7wh/): Malicious Package in asymc (not scored)
- [GHSA-x48m-gp6r-gp4v](https://insights.sbomify.com/GHSA-x48m-gp6r-gp4v/): Malicious Package in rate-map (not scored)
- [GHSA-x45v-pvpg-hcrh](https://insights.sbomify.com/GHSA-x45v-pvpg-hcrh/): Malicious Package in mysql-koa (not scored)
- [GHSA-x3w4-mrmv-cw2x](https://insights.sbomify.com/GHSA-x3w4-mrmv-cw2x/): Malicious Package in buffev-xor (not scored)
- [GHSA-x3m6-rprw-862w](https://insights.sbomify.com/GHSA-x3m6-rprw-862w/): Malicious Package in node-buc (not scored)
- [GHSA-wxrm-2h86-v95f](https://insights.sbomify.com/GHSA-wxrm-2h86-v95f/): Malicious Package in pizza-pasta (not scored)
- [GHSA-wx77-rp39-c6vg](https://insights.sbomify.com/GHSA-wx77-rp39-c6vg/): Regular Expression Denial of Service in markdown (not scored)
- [GHSA-wwwg-6r7f-9c9h](https://insights.sbomify.com/GHSA-wwwg-6r7f-9c9h/): Malicious Package in file-logging (not scored)
- [GHSA-wwgf-3xp7-cxj4](https://insights.sbomify.com/GHSA-wwgf-3xp7-cxj4/): Potentially sensitive data exposure in Symfony Web Socket Bundle (not scored)
- [GHSA-wvh7-5p38-2qfc](https://insights.sbomify.com/GHSA-wvh7-5p38-2qfc/): Storing Password in Local Storage (not scored)
- [GHSA-wv39-cgmm-cq29](https://insights.sbomify.com/GHSA-wv39-cgmm-cq29/): Malicious Package in buffmr-xor (not scored)
- [GHSA-wqq8-mqj9-697f](https://insights.sbomify.com/GHSA-wqq8-mqj9-697f/): PrestaShop autoupgrade module ZIP archives were vulnerable from CVE-2017-9841 (not scored)
- [GHSA-wqhw-frpx-5mmp](https://insights.sbomify.com/GHSA-wqhw-frpx-5mmp/): Command Injection in tomato (not scored)
- [GHSA-wqgx-4q47-j2w5](https://insights.sbomify.com/GHSA-wqgx-4q47-j2w5/): Insecure Cryptography Algorithm in parsel (not scored)
- [GHSA-wqgq-mfvj-6qxp](https://insights.sbomify.com/GHSA-wqgq-mfvj-6qxp/): Malicious Package in koa-body-parse (not scored)
- [GHSA-wpfc-3w63-g4hm](https://insights.sbomify.com/GHSA-wpfc-3w63-g4hm/): Malicious Package in axois (not scored)
- [GHSA-wp2p-q35g-3rjj](https://insights.sbomify.com/GHSA-wp2p-q35g-3rjj/): Malicious Package in soket.io (not scored)
- [GHSA-wmcq-3wfx-qjx5](https://insights.sbomify.com/GHSA-wmcq-3wfx-qjx5/): Directory Traversal in nodeload-nmickuli (not scored)
- [GHSA-wm7q-rxch-43mx](https://insights.sbomify.com/GHSA-wm7q-rxch-43mx/): Byass due to validation before canonicalization in serve (not scored)
- [GHSA-wjpj-gmc3-5w56](https://insights.sbomify.com/GHSA-wjpj-gmc3-5w56/): Malicious Package in buvfer-xor (not scored)
- [GHSA-wjf2-7f9g-86f5](https://insights.sbomify.com/GHSA-wjf2-7f9g-86f5/): Malicious Package in fast-requests (not scored)
- [GHSA-whv6-rj84-2vh2](https://insights.sbomify.com/GHSA-whv6-rj84-2vh2/): Cross-Site Scripting in nextcloud-vue-collections (not scored)
- [GHSA-whrh-9j4q-g7ph](https://insights.sbomify.com/GHSA-whrh-9j4q-g7ph/): CSRF Vulnerability in polaris-website (not scored)
- [GHSA-whjr-jj69-7prm](https://insights.sbomify.com/GHSA-whjr-jj69-7prm/): Malicious Package in import-mysql (not scored)
- [GHSA-wh87-3959-vfrq](https://insights.sbomify.com/GHSA-wh87-3959-vfrq/): Malicious Package in buffer-hor (not scored)
- [GHSA-wgw3-gf4p-62xc](https://insights.sbomify.com/GHSA-wgw3-gf4p-62xc/): Command Injection in wizard-syncronizer (not scored)
- [GHSA-wgvj-6v57-wjh3](https://insights.sbomify.com/GHSA-wgvj-6v57-wjh3/): Malicious Package in bowee (not scored)
- [GHSA-wfjh-3hq2-r276](https://insights.sbomify.com/GHSA-wfjh-3hq2-r276/): Malicious Package in node-spdy (not scored)
- [GHSA-wfhx-6pcm-7m55](https://insights.sbomify.com/GHSA-wfhx-6pcm-7m55/): Path Traversal in ponse (not scored)
- [GHSA-wch2-46wj-6x5j](https://insights.sbomify.com/GHSA-wch2-46wj-6x5j/): Malicious Package in bip30 (not scored)
- [GHSA-wc7q-qpm4-8pqv](https://insights.sbomify.com/GHSA-wc7q-qpm4-8pqv/): Malicious Package in rrequest (not scored)
- [GHSA-w9q5-mvc6-5cw3](https://insights.sbomify.com/GHSA-w9q5-mvc6-5cw3/): Malicious Package in bufder-xor (not scored)
- [GHSA-w9hw-v97w-g5f5](https://insights.sbomify.com/GHSA-w9hw-v97w-g5f5/): Malicious Package in bitconi-ops (not scored)
- [GHSA-w992-2gmj-9xxj](https://insights.sbomify.com/GHSA-w992-2gmj-9xxj/): Cross-Site Scripting in swagger-ui (not scored)
- [GHSA-w8hg-mxvh-9h57](https://insights.sbomify.com/GHSA-w8hg-mxvh-9h57/): Malicious Package in angular-bmap (not scored)
- [GHSA-w7wg-24g3-2c78](https://insights.sbomify.com/GHSA-w7wg-24g3-2c78/): Malicious Package in requset (not scored)
- [GHSA-w725-67p7-xv22](https://insights.sbomify.com/GHSA-w725-67p7-xv22/): Command Injection in local-devices (not scored)
- [GHSA-w6xj-45gv-fw35](https://insights.sbomify.com/GHSA-w6xj-45gv-fw35/): Malicious Package in stream-combine (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/12/