# Vulnerabilities published in 2020 - [CVE-2020-1114](https://insights.sbomify.com/CVE-2020-1114/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8) - [CVE-2020-11139](https://insights.sbomify.com/CVE-2020-11139/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking (high 7.5) - [CVE-2020-11138](https://insights.sbomify.com/CVE-2020-11138/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking (critical 9.8) - [CVE-2020-11137](https://insights.sbomify.com/CVE-2020-11137/): Integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking (critical 9.8) - [CVE-2020-11136](https://insights.sbomify.com/CVE-2020-11136/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking (critical 9.8) - [CVE-2020-11135](https://insights.sbomify.com/CVE-2020-11135/): Denial of service in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile (high 7.5) - [CVE-2020-11134](https://insights.sbomify.com/CVE-2020-11134/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking (critical 9.8) - [CVE-2020-11133](https://insights.sbomify.com/CVE-2020-11133/): Memory corruption in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile (high 7.8) - [CVE-2020-11132](https://insights.sbomify.com/CVE-2020-11132/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking (high 7.1) - [CVE-2020-11131](https://insights.sbomify.com/CVE-2020-11131/): Integer overflow in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music (high 7.8) - [CVE-2020-11130](https://insights.sbomify.com/CVE-2020-11130/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile (high 7.8) - [CVE-2020-1113](https://insights.sbomify.com/CVE-2020-1113/): Windows Task Scheduler Security Feature Bypass Vulnerability (medium 5.3) - [CVE-2020-11129](https://insights.sbomify.com/CVE-2020-11129/): Use after free in Snapdragon Consumer IOT, Snapdragon Mobile (high 7.8) - [CVE-2020-11128](https://insights.sbomify.com/CVE-2020-11128/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (high 7.8) - [CVE-2020-11127](https://insights.sbomify.com/CVE-2020-11127/): Integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking (high 7.8) - [CVE-2020-11126](https://insights.sbomify.com/CVE-2020-11126/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking (critical 9.1) - [CVE-2020-11125](https://insights.sbomify.com/CVE-2020-11125/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking (high 7.8) - [CVE-2020-11124](https://insights.sbomify.com/CVE-2020-11124/): Use after free in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music (high 7.8) - [CVE-2020-11123](https://insights.sbomify.com/CVE-2020-11123/): Security feature bypass in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking (medium 5.5) - [CVE-2020-11122](https://insights.sbomify.com/CVE-2020-11122/): Null dereference in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile (medium 5.5) - [CVE-2020-11121](https://insights.sbomify.com/CVE-2020-11121/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile (high 7.8) - [CVE-2020-11120](https://insights.sbomify.com/CVE-2020-11120/): Use after free in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (high 7.8) - [CVE-2020-1112](https://insights.sbomify.com/CVE-2020-1112/): Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability (high 8.5) - [CVE-2020-11119](https://insights.sbomify.com/CVE-2020-11119/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking (high 7.5) - [CVE-2020-11118](https://insights.sbomify.com/CVE-2020-11118/): Information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (high 7.5) - [CVE-2020-11117](https://insights.sbomify.com/CVE-2020-11117/): Command injection in Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Wired Infrastructure and Networking (critical 9.8) - [CVE-2020-11116](https://insights.sbomify.com/CVE-2020-11116/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (critical 9.8) - [CVE-2020-11115](https://insights.sbomify.com/CVE-2020-11115/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (high 7.5) - [CVE-2020-11114](https://insights.sbomify.com/CVE-2020-11114/): Memory corruption in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music (high 8.8) - [CVE-2020-11113](https://insights.sbomify.com/CVE-2020-11113/): jackson-databind mishandles the interaction between serialization gadgets and typing (high 8.8) - [CVE-2020-11112](https://insights.sbomify.com/CVE-2020-11112/): jackson-databind mishandles the interaction between serialization gadgets and typing (high 8.8) - [CVE-2020-11111](https://insights.sbomify.com/CVE-2020-11111/): jackson-databind mishandles the interaction between serialization gadgets and typing (high 8.8) - [CVE-2020-11110](https://insights.sbomify.com/CVE-2020-11110/): Grafana stored XSS (medium 5.4) - [CVE-2020-1111](https://insights.sbomify.com/CVE-2020-1111/): Windows Clipboard Service Elevation of Privilege Vulnerability (high 7.8) - [CVE-2020-11108](https://insights.sbomify.com/CVE-2020-11108/): File upload in pi-hole:pi-hole (high 8.8) - [CVE-2020-11107](https://insights.sbomify.com/CVE-2020-11107/): Misconfiguration in apachefriends:xampp (high 8.8) - [CVE-2020-11106](https://insights.sbomify.com/CVE-2020-11106/): Cross-site scripting in tecrail:responsive filemanager (medium 6.1) - [CVE-2020-11105](https://insights.sbomify.com/CVE-2020-11105/): Memory corruption in usc:cereal (critical 9.8) - [CVE-2020-11104](https://insights.sbomify.com/CVE-2020-11104/): Information disclosure in usc:cereal (medium 5.3) - [CVE-2020-11103](https://insights.sbomify.com/CVE-2020-11103/): Code injection in webswing:webswing (critical 9.8) - [CVE-2020-11102](https://insights.sbomify.com/CVE-2020-11102/): Memory corruption in qemu:qemu (medium 5.6) - [CVE-2020-11101](https://insights.sbomify.com/CVE-2020-11101/): Auth bypass in sierrawireless:airlink mobility manager (critical 9.8) - [CVE-2020-11100](https://insights.sbomify.com/CVE-2020-11100/): Memory corruption in canonical:ubuntu linux (high 8.8) - [CVE-2020-1110](https://insights.sbomify.com/CVE-2020-1110/): Windows Update Stack Elevation of Privilege Vulnerability (high 7.8) - [CVE-2020-11099](https://insights.sbomify.com/CVE-2020-11099/): OOB Read in license_read_new_or_upgrade_license_packet in FreeRDP (low 3.5) - [CVE-2020-11098](https://insights.sbomify.com/CVE-2020-11098/): Out-of-bound read in glyph_cache_put in FreeRDP (low 3.5) - [CVE-2020-11097](https://insights.sbomify.com/CVE-2020-11097/): OOB read in ntlm_av_pair_get in FreeRDP (low 3.5) - [CVE-2020-11096](https://insights.sbomify.com/CVE-2020-11096/): Global OOB read in update_read_cache_bitmap_v3_order in FreeRDP (low 3.5) - [CVE-2020-11095](https://insights.sbomify.com/CVE-2020-11095/): Global OOB read in update_recv_primary_order in FreeRDP (low 3.5) - [CVE-2020-11094](https://insights.sbomify.com/CVE-2020-11094/): Potential unauthorized access to stored request & session data when plugin is misconfigured in October CMS Debugbar (medium 6.1) - [CVE-2020-11093](https://insights.sbomify.com/CVE-2020-11093/): Authorization bypass in Hyperledger Indy (high 7.5) - [CVE-2020-11091](https://insights.sbomify.com/CVE-2020-11091/): Weave Net clusters susceptible to MitM attacks via IPv6 rogue router advertisements (medium 5.8) - [CVE-2020-11090](https://insights.sbomify.com/CVE-2020-11090/): Uncontrolled Resource Consumption in Indy Node (high 7.5) - [CVE-2020-1109](https://insights.sbomify.com/CVE-2020-1109/): Windows Update Stack Elevation of Privilege Vulnerability (high 7.8) - [CVE-2020-11089](https://insights.sbomify.com/CVE-2020-11089/): Out-of-bound read in FreeRDP (low 3.7) - [CVE-2020-11088](https://insights.sbomify.com/CVE-2020-11088/): Out-of-bound read in FreeRDP (low 3.1) - [CVE-2020-11087](https://insights.sbomify.com/CVE-2020-11087/): Out-of-bounds Read in FreeRDP (low 3.1) - [CVE-2020-11086](https://insights.sbomify.com/CVE-2020-11086/): Out-of-bounds Read in FreeRDP `ntlm_read_ntlm_v2_response` (low 3.1) - [CVE-2020-11085](https://insights.sbomify.com/CVE-2020-11085/): Out-of-bounds Read in FreeRDP (low 2.6) - [CVE-2020-11084](https://insights.sbomify.com/CVE-2020-11084/): Command Injection in iPear (medium 6.4) - [CVE-2020-11083](https://insights.sbomify.com/CVE-2020-11083/): Stored XSS in October (low 3.5) - [CVE-2020-11082](https://insights.sbomify.com/CVE-2020-11082/): Cross-Site Scripting in Kaminari (medium 6.4) - [CVE-2020-11081](https://insights.sbomify.com/CVE-2020-11081/): osquery susceptible to DLL search order hijacking of zlib1.dll (medium 5.3) - [CVE-2020-11080](https://insights.sbomify.com/CVE-2020-11080/): Denial of service in nghttp2 (low 3.7) - [CVE-2020-1108](https://insights.sbomify.com/CVE-2020-1108/): .NET Core & .NET Framework Denial of Service Vulnerability (high 7.5) - [CVE-2020-11079](https://insights.sbomify.com/CVE-2020-11079/): command injection fix in node-dns-sync (high 8.6) - [CVE-2020-11078](https://insights.sbomify.com/CVE-2020-11078/): CRLF injection in httplib2 (medium 6.8) - [CVE-2020-11077](https://insights.sbomify.com/CVE-2020-11077/): HTTP Smuggling via Transfer-Encoding Header in Puma (medium 6.8) - [CVE-2020-11076](https://insights.sbomify.com/CVE-2020-11076/): HTTP Smuggling via Transfer-Encoding Header in Puma (high 7.5) - [CVE-2020-11075](https://insights.sbomify.com/CVE-2020-11075/): Shell Escape in Anchore Engine (high 7.7) - [CVE-2020-11074](https://insights.sbomify.com/CVE-2020-11074/): Stored XSS in PrestaShop (medium 5.4) - [CVE-2020-11073](https://insights.sbomify.com/CVE-2020-11073/): Remote Code Execution in Autoswitch Python Virtualenv (high 7.9) - [CVE-2020-11072](https://insights.sbomify.com/CVE-2020-11072/): False-negative validation results in MINT transactions with invalid baton (high 8.6) - [CVE-2020-11071](https://insights.sbomify.com/CVE-2020-11071/): False-negative validation results in MINT transactions with invalid baton (high 8.6) - [CVE-2020-11070](https://insights.sbomify.com/CVE-2020-11070/): Cross-Site Scripting in SVG Sanitizer (medium 5.4) - [CVE-2020-1107](https://insights.sbomify.com/CVE-2020-1107/): Microsoft SharePoint Spoofing Vulnerability (medium 5.4) - [CVE-2020-11069](https://insights.sbomify.com/CVE-2020-11069/): Cross-Site Request Forgery in TYPO3 CMS (high 8.0) - [CVE-2020-11068](https://insights.sbomify.com/CVE-2020-11068/): Potential Buffer Overflow in LoRaMac-node (medium 5.0) - [CVE-2020-11067](https://insights.sbomify.com/CVE-2020-11067/): Deserialization of Untrusted Data in TYPO3 CMS (high 8.8) - [CVE-2020-11066](https://insights.sbomify.com/CVE-2020-11066/): Improperly Controlled Modification of Dynamically-Determined Object Attributes in TYPO3 CMS (high 8.7) - [CVE-2020-11065](https://insights.sbomify.com/CVE-2020-11065/): Cross-Site Scripting in TYPO3 CMS (medium 5.4) - [CVE-2020-11064](https://insights.sbomify.com/CVE-2020-11064/): Cross-Site Scripting in TYPO3 CMS (medium 5.4) - [CVE-2020-11063](https://insights.sbomify.com/CVE-2020-11063/): Observable Response Discrepancy in TYPO3 CMS (low 3.7) - [CVE-2020-11062](https://insights.sbomify.com/CVE-2020-11062/): Reflexive XSS in GLPI (medium 6.0) - [CVE-2020-11061](https://insights.sbomify.com/CVE-2020-11061/): Heap-based Buffer Overflow in Bareos Director (medium 6.0) - [CVE-2020-11060](https://insights.sbomify.com/CVE-2020-11060/): Remote Code Execution in GLPI (high 7.4) - [CVE-2020-1106](https://insights.sbomify.com/CVE-2020-1106/): Microsoft Office SharePoint XSS Vulnerability (medium 5.4) - [CVE-2020-11059](https://insights.sbomify.com/CVE-2020-11059/): Exposure of Sensitive Information to an Unauthorized Actor in AEgir (critical 9.6) - [CVE-2020-11058](https://insights.sbomify.com/CVE-2020-11058/): Improper Restriction of Operations within the Bounds of a Memory Buffer in FreeRDP (low 2.2) - [CVE-2020-11057](https://insights.sbomify.com/CVE-2020-11057/): Code Injection in XWiki Platform (critical 9.9) - [CVE-2020-11056](https://insights.sbomify.com/CVE-2020-11056/): Potential Code Injection in Sprout Forms (high 7.4) - [CVE-2020-11055](https://insights.sbomify.com/CVE-2020-11055/): Cross-site Scripting in BookStack (medium 6.3) - [CVE-2020-11054](https://insights.sbomify.com/CVE-2020-11054/): Incorrect Provision of Specified Functionality in qutebrowser (low 3.5) - [CVE-2020-11053](https://insights.sbomify.com/CVE-2020-11053/): Open Redirect in OAuth2 Proxy (high 7.1) - [CVE-2020-11052](https://insights.sbomify.com/CVE-2020-11052/): Improper Restriction of Excessive Authentication Attempts in Sorcery (high 8.3) - [CVE-2020-11051](https://insights.sbomify.com/CVE-2020-11051/): XSS in Wiki.js (medium 6.9) - [CVE-2020-11050](https://insights.sbomify.com/CVE-2020-11050/): Improper Validation of Certificate with Host Mismatch in Java-WebSocket (critical 9.0) - [CVE-2020-1105](https://insights.sbomify.com/CVE-2020-1105/): Microsoft SharePoint Spoofing Vulnerability (medium 5.4) - [CVE-2020-11049](https://insights.sbomify.com/CVE-2020-11049/): Out-of-bounds Read in FreeRDPrdp_read_share_control_header (medium 5.5) - [CVE-2020-11048](https://insights.sbomify.com/CVE-2020-11048/): Out-of-bounds Read in FreeRDPrdp_read_flow_control_pdu (low 2.2) --- From sbomify Insights: https://insights.sbomify.com/years/2020/page/193/