# Vulnerabilities published in 2020


- [CVE-2020-36467](https://insights.sbomify.com/CVE-2020-36467/): Multiple soundness issues in cgc (medium 5.9)
- [CVE-2020-36466](https://insights.sbomify.com/CVE-2020-36466/): Data races in cgc (medium 5.9)
- [CVE-2020-36465](https://insights.sbomify.com/CVE-2020-36465/): Use after free in generic-array (high 7.5)
- [CVE-2020-36464](https://insights.sbomify.com/CVE-2020-36464/): Use after free in heapless (high 7.5)
- [CVE-2020-36463](https://insights.sbomify.com/CVE-2020-36463/): Data races in multiqueue (high 8.1)
- [CVE-2020-36462](https://insights.sbomify.com/CVE-2020-36462/): Duplicate Advisory: Data races on syncpool (high 8.1)
- [CVE-2020-36461](https://insights.sbomify.com/CVE-2020-36461/): Data races in noise_search (high 8.1)
- [CVE-2020-36460](https://insights.sbomify.com/CVE-2020-36460/): Data races in model (high 8.1)
- [CVE-2020-3646](https://insights.sbomify.com/CVE-2020-3646/): Memory corruption in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (high 7.8)
- [CVE-2020-36459](https://insights.sbomify.com/CVE-2020-36459/): Data races in dces (high 8.1)
- [CVE-2020-36458](https://insights.sbomify.com/CVE-2020-36458/): Data races in lexer (high 8.1)
- [CVE-2020-36457](https://insights.sbomify.com/CVE-2020-36457/): Data races in lever (high 8.1)
- [CVE-2020-36456](https://insights.sbomify.com/CVE-2020-36456/): Data races in toolshed (high 8.1)
- [CVE-2020-36455](https://insights.sbomify.com/CVE-2020-36455/): Slock<T> allows sending non-Send types across thread boundaries (high 8.1)
- [CVE-2020-36454](https://insights.sbomify.com/CVE-2020-36454/): Data races in parc (high 8.1)
- [CVE-2020-36453](https://insights.sbomify.com/CVE-2020-36453/): Data races in scottqueue (high 8.1)
- [CVE-2020-36452](https://insights.sbomify.com/CVE-2020-36452/): Memory corruption in array-tools (critical 9.8)
- [CVE-2020-36451](https://insights.sbomify.com/CVE-2020-36451/): Data races in rcu_cell (high 8.1)
- [CVE-2020-36450](https://insights.sbomify.com/CVE-2020-36450/): Data races in bunch (high 8.1)
- [CVE-2020-3645](https://insights.sbomify.com/CVE-2020-3645/): Denial of service in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking (high 7.5)
- [CVE-2020-36449](https://insights.sbomify.com/CVE-2020-36449/): Command injection in kekbit (high 8.1)
- [CVE-2020-36448](https://insights.sbomify.com/CVE-2020-36448/): Data races in cache (high 8.1)
- [CVE-2020-36447](https://insights.sbomify.com/CVE-2020-36447/): Data race in v9 (high 8.1)
- [CVE-2020-36446](https://insights.sbomify.com/CVE-2020-36446/): Data races in signal-simple (high 8.1)
- [CVE-2020-36445](https://insights.sbomify.com/CVE-2020-36445/): Data races in convec (high 8.1)
- [CVE-2020-36444](https://insights.sbomify.com/CVE-2020-36444/): Data races in async-coap (high 8.1)
- [CVE-2020-36443](https://insights.sbomify.com/CVE-2020-36443/): Use of Uninitialized Resource in libp2p-deflate (critical 9.8)
- [CVE-2020-36442](https://insights.sbomify.com/CVE-2020-36442/): Data races in beef (high 8.1)
- [CVE-2020-36441](https://insights.sbomify.com/CVE-2020-36441/): Data race in abox (high 8.1)
- [CVE-2020-36440](https://insights.sbomify.com/CVE-2020-36440/): Data races in libsbc (high 8.1)
- [CVE-2020-3644](https://insights.sbomify.com/CVE-2020-3644/): Information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking (medium 5.5)
- [CVE-2020-36439](https://insights.sbomify.com/CVE-2020-36439/): Data races in ticketed_lock (high 8.1)
- [CVE-2020-36438](https://insights.sbomify.com/CVE-2020-36438/): Data race in tiny_future (high 8.1)
- [CVE-2020-36437](https://insights.sbomify.com/CVE-2020-36437/): Data race in conqueue (high 8.1)
- [CVE-2020-36436](https://insights.sbomify.com/CVE-2020-36436/): Data races in unicycle (high 8.1)
- [CVE-2020-36435](https://insights.sbomify.com/CVE-2020-36435/): Data race in ruspiro-singleton (high 8.1)
- [CVE-2020-36434](https://insights.sbomify.com/CVE-2020-36434/): Double free in sys-info (critical 9.8)
- [CVE-2020-36433](https://insights.sbomify.com/CVE-2020-36433/): Unaligned memory allocation in chunky (high 7.5)
- [CVE-2020-36432](https://insights.sbomify.com/CVE-2020-36432/): Use of Uninitialized Resource in alg_ds (critical 9.8)
- [CVE-2020-36431](https://insights.sbomify.com/CVE-2020-36431/): Memory corruption in unicorn-engine:unicorn engine (medium 5.5)
- [CVE-2020-36430](https://insights.sbomify.com/CVE-2020-36430/): Memory corruption in fedoraproject:fedora (high 7.8)
- [CVE-2020-3643](https://insights.sbomify.com/CVE-2020-3643/): Information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking (medium 5.5)
- [CVE-2020-36429](https://insights.sbomify.com/CVE-2020-36429/): Memory corruption in open62541:open62541 (medium 5.5)
- [CVE-2020-36428](https://insights.sbomify.com/CVE-2020-36428/): Memory corruption in matio project:matio (high 8.8)
- [CVE-2020-36427](https://insights.sbomify.com/CVE-2020-36427/): Denial of service in gnome:gthumb (medium 5.5)
- [CVE-2020-36426](https://insights.sbomify.com/CVE-2020-36426/): Memory corruption in arm:mbed tls (high 7.5)
- [CVE-2020-36425](https://insights.sbomify.com/CVE-2020-36425/): Security feature bypass in arm:mbed tls (medium 5.3)
- [CVE-2020-36424](https://insights.sbomify.com/CVE-2020-36424/): Information disclosure in arm:mbed tls (medium 4.7)
- [CVE-2020-36423](https://insights.sbomify.com/CVE-2020-36423/): Weak cryptography in arm:mbed tls (high 7.5)
- [CVE-2020-36422](https://insights.sbomify.com/CVE-2020-36422/): Information disclosure in arm:mbed tls (medium 5.3)
- [CVE-2020-36421](https://insights.sbomify.com/CVE-2020-36421/): Information disclosure in arm:mbed tls (medium 5.3)
- [CVE-2020-36420](https://insights.sbomify.com/CVE-2020-36420/): Denial of service in polipo project:polipo (high 7.5)
- [CVE-2020-3642](https://insights.sbomify.com/CVE-2020-3642/): Use after free in Snapdragon Consumer IOT, Snapdragon Mobile (high 7.8)
- [CVE-2020-36416](https://insights.sbomify.com/CVE-2020-36416/): Cross-site scripting in cmsmadesimple:cms made simple (medium 5.4)
- [CVE-2020-36415](https://insights.sbomify.com/CVE-2020-36415/): Cross-site scripting in cmsmadesimple:cms made simple (medium 5.4)
- [CVE-2020-36414](https://insights.sbomify.com/CVE-2020-36414/): Cross-site scripting in cmsmadesimple:cms made simple (medium 5.4)
- [CVE-2020-36413](https://insights.sbomify.com/CVE-2020-36413/): Cross-site scripting in cmsmadesimple:cms made simple (medium 5.4)
- [CVE-2020-36412](https://insights.sbomify.com/CVE-2020-36412/): Cross-site scripting in cmsmadesimple:cms made simple (medium 5.4)
- [CVE-2020-36411](https://insights.sbomify.com/CVE-2020-36411/): Cross-site scripting in cmsmadesimple:cms made simple (medium 5.4)
- [CVE-2020-36410](https://insights.sbomify.com/CVE-2020-36410/): Cross-site scripting in cmsmadesimple:cms made simple (medium 5.4)
- [CVE-2020-3641](https://insights.sbomify.com/CVE-2020-3641/): Integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (critical 9.8)
- [CVE-2020-36409](https://insights.sbomify.com/CVE-2020-36409/): Cross-site scripting in cmsmadesimple:cms made simple (medium 5.4)
- [CVE-2020-36408](https://insights.sbomify.com/CVE-2020-36408/): Cross-site scripting in cmsmadesimple:cms made simple (medium 5.4)
- [CVE-2020-36407](https://insights.sbomify.com/CVE-2020-36407/): Memory corruption in aomedia:libavif (high 8.8)
- [CVE-2020-36406](https://insights.sbomify.com/CVE-2020-36406/): Memory corruption in uwebsockets project:uwebsockets (high 8.8)
- [CVE-2020-36405](https://insights.sbomify.com/CVE-2020-36405/): Use after free in keystone-engine:keystone engine (high 7.8)
- [CVE-2020-36404](https://insights.sbomify.com/CVE-2020-36404/): Memory corruption in keystone-engine:keystone (high 7.8)
- [CVE-2020-36403](https://insights.sbomify.com/CVE-2020-36403/): Memory corruption in htslib:htslib (high 8.8)
- [CVE-2020-36402](https://insights.sbomify.com/CVE-2020-36402/): Memory corruption in soliditylang:solidity (high 7.8)
- [CVE-2020-36401](https://insights.sbomify.com/CVE-2020-36401/): Memory corruption in mruby:mruby (high 7.8)
- [CVE-2020-36400](https://insights.sbomify.com/CVE-2020-36400/): Memory corruption in zeromq:libzmq (critical 9.8)
- [CVE-2020-3640](https://insights.sbomify.com/CVE-2020-3640/): Memory corruption in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking (high 7.8)
- [CVE-2020-36399](https://insights.sbomify.com/CVE-2020-36399/): Cross-site scripting in phplist:phplist (medium 5.4)
- [CVE-2020-36398](https://insights.sbomify.com/CVE-2020-36398/): Cross-site scripting in phplist:phplist (medium 5.4)
- [CVE-2020-36397](https://insights.sbomify.com/CVE-2020-36397/): LavaLite Stored Cross-site Scripting vulnerability (medium 5.4)
- [CVE-2020-36396](https://insights.sbomify.com/CVE-2020-36396/): Stored XSS in LavaLite 5.8.0 (medium 5.4)
- [CVE-2020-36395](https://insights.sbomify.com/CVE-2020-36395/): Stored XSS in LavaLite 5.8.0 (medium 5.4)
- [CVE-2020-36394](https://insights.sbomify.com/CVE-2020-36394/): Privilege escalation in pam setquota project:pam setquota (high 7.0)
- [CVE-2020-3639](https://insights.sbomify.com/CVE-2020-3639/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables (critical 9.8)
- [CVE-2020-36389](https://insights.sbomify.com/CVE-2020-36389/): Cross-site request forgery in civicrm:civicrm (medium 4.3)
- [CVE-2020-36388](https://insights.sbomify.com/CVE-2020-36388/): File upload in civicrm:civicrm (high 8.8)
- [CVE-2020-36387](https://insights.sbomify.com/CVE-2020-36387/): Use after free in linux:linux kernel (high 7.8)
- [CVE-2020-36386](https://insights.sbomify.com/CVE-2020-36386/): Memory corruption in linux:linux kernel (high 7.1)
- [CVE-2020-36385](https://insights.sbomify.com/CVE-2020-36385/): Use after free in linux:linux kernel (high 7.8)
- [CVE-2020-36384](https://insights.sbomify.com/CVE-2020-36384/): Cross-site scripting in pagelayer:pagelayer (medium 6.1)
- [CVE-2020-36383](https://insights.sbomify.com/CVE-2020-36383/): Cross-site scripting in pagelayer:pagelayer (medium 6.1)
- [CVE-2020-36382](https://insights.sbomify.com/CVE-2020-36382/): Denial of service in OpenVPN Access Server (high 7.5)
- [CVE-2020-36381](https://insights.sbomify.com/CVE-2020-36381/): Vulnerability in singleCrunch function leads to arbitrary code execution via filePath parameters (critical 9.8)
- [CVE-2020-36380](https://insights.sbomify.com/CVE-2020-36380/): Vulnerability in crunch function leads to arbitrary code execution via filePath parameters (critical 9.8)
- [CVE-2020-3638](https://insights.sbomify.com/CVE-2020-3638/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking (high 7.8)
- [CVE-2020-36379](https://insights.sbomify.com/CVE-2020-36379/): Vulnerability in remove function leads to arbitrary code execution via filePath parameters (critical 9.8)
- [CVE-2020-36378](https://insights.sbomify.com/CVE-2020-36378/): Vulnerability in packageCmd function leads to arbitrary code execution via filePath parameters (critical 9.8)
- [CVE-2020-36377](https://insights.sbomify.com/CVE-2020-36377/): Vulnerability in dump function leads to arbitrary code execution via filePath parameters (critical 9.8)
- [CVE-2020-36376](https://insights.sbomify.com/CVE-2020-36376/): Vulnerability in list function leads to arbitrary code execution via filePath parameters (critical 9.8)
- [CVE-2020-36375](https://insights.sbomify.com/CVE-2020-36375/): Denial of service in cesanta:mjs (medium 5.5)
- [CVE-2020-36374](https://insights.sbomify.com/CVE-2020-36374/): Denial of service in cesanta:mjs (medium 5.5)
- [CVE-2020-36373](https://insights.sbomify.com/CVE-2020-36373/): Denial of service in cesanta:mjs (medium 5.5)
- [CVE-2020-36372](https://insights.sbomify.com/CVE-2020-36372/): Denial of service in cesanta:mjs (medium 5.5)
- [CVE-2020-36371](https://insights.sbomify.com/CVE-2020-36371/): Denial of service in cesanta:mjs (medium 5.5)
- [CVE-2020-36370](https://insights.sbomify.com/CVE-2020-36370/): Denial of service in cesanta:mjs (medium 5.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/75/