# Vulnerabilities published in 2020 - [CVE-2020-36369](https://insights.sbomify.com/CVE-2020-36369/): Denial of service in cesanta:mjs (medium 5.5) - [CVE-2020-36368](https://insights.sbomify.com/CVE-2020-36368/): Denial of service in cesanta:mjs (medium 5.5) - [CVE-2020-36367](https://insights.sbomify.com/CVE-2020-36367/): Denial of service in cesanta:mjs (medium 5.5) - [CVE-2020-36366](https://insights.sbomify.com/CVE-2020-36366/): Denial of service in cesanta:mjs (medium 5.5) - [CVE-2020-36365](https://insights.sbomify.com/CVE-2020-36365/): Open redirect in smartstore:smartstorenet (medium 6.1) - [CVE-2020-36364](https://insights.sbomify.com/CVE-2020-36364/): Path traversal in smartstore:smartstorenet (critical 9.1) - [CVE-2020-36363](https://insights.sbomify.com/CVE-2020-36363/): Weak cryptography in amazon:amazon cloudfront (critical 9.8) - [CVE-2020-3636](https://insights.sbomify.com/CVE-2020-3636/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking (high 7.8) - [CVE-2020-3635](https://insights.sbomify.com/CVE-2020-3635/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables (high 7.8) - [CVE-2020-3634](https://insights.sbomify.com/CVE-2020-3634/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables (critical 9.1) - [CVE-2020-36334](https://insights.sbomify.com/CVE-2020-36334/): Cross-site request forgery in themegrill:themegrill demo importer (high 8.8) - [CVE-2020-36333](https://insights.sbomify.com/CVE-2020-36333/): Missing authorization in themegrill:themegrill demo importer (critical 9.1) - [CVE-2020-36332](https://insights.sbomify.com/CVE-2020-36332/): Denial of service in libwebp (high 7.5) - [CVE-2020-36331](https://insights.sbomify.com/CVE-2020-36331/): Memory corruption in libwebp (critical 9.1) - [CVE-2020-36330](https://insights.sbomify.com/CVE-2020-36330/): Memory corruption in libwebp (critical 9.1) - [CVE-2020-3633](https://insights.sbomify.com/CVE-2020-3633/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (critical 9.8) - [CVE-2020-36329](https://insights.sbomify.com/CVE-2020-36329/): Use after free in libwebp (critical 9.8) - [CVE-2020-36328](https://insights.sbomify.com/CVE-2020-36328/): Memory corruption in libwebp (critical 9.8) - [CVE-2020-36327](https://insights.sbomify.com/CVE-2020-36327/): Dependency Confusion in Bundler (high 8.8) - [CVE-2020-36326](https://insights.sbomify.com/CVE-2020-36326/): Object injection in PHPMailer/PHPMailer (critical 9.8) - [CVE-2020-36325](https://insights.sbomify.com/CVE-2020-36325/): Memory corruption in jansson project:jansson (high 7.5) - [CVE-2020-36324](https://insights.sbomify.com/CVE-2020-36324/): Cross-site scripting in wikimedia:analytics-quarry-web (medium 6.1) - [CVE-2020-36323](https://insights.sbomify.com/CVE-2020-36323/): Memory corruption in fedoraproject:fedora (high 8.2) - [CVE-2020-36322](https://insights.sbomify.com/CVE-2020-36322/): Denial of service in debian:debian linux (medium 5.5) - [CVE-2020-36321](https://insights.sbomify.com/CVE-2020-36321/): Directory traversal in development mode handler in Vaadin 14 and 15-17 (medium 5.9) - [CVE-2020-36320](https://insights.sbomify.com/CVE-2020-36320/): Regular expression Denial of Service (ReDoS) in EmailValidator class in Vaadin 7 (high 7.5) - [CVE-2020-3632](https://insights.sbomify.com/CVE-2020-3632/): Memory corruption in Snapdragon Compute, Snapdragon Mobile (high 7.8) - [CVE-2020-36319](https://insights.sbomify.com/CVE-2020-36319/): Potential sensitive data exposure in applications using Vaadin 15 (low 3.1) - [CVE-2020-36318](https://insights.sbomify.com/CVE-2020-36318/): Use after free in rust-lang:rust (critical 9.8) - [CVE-2020-36317](https://insights.sbomify.com/CVE-2020-36317/): Memory corruption in rust-lang:rust (high 7.5) - [CVE-2020-36316](https://insights.sbomify.com/CVE-2020-36316/): Memory corruption in relic project:relic (medium 5.5) - [CVE-2020-36315](https://insights.sbomify.com/CVE-2020-36315/): Weak cryptography in relic project:relic (medium 5.3) - [CVE-2020-36314](https://insights.sbomify.com/CVE-2020-36314/): Path traversal in fedoraproject:fedora (low 3.9) - [CVE-2020-36313](https://insights.sbomify.com/CVE-2020-36313/): Use after free in linux:linux kernel (high 7.8) - [CVE-2020-36312](https://insights.sbomify.com/CVE-2020-36312/): Denial of service in linux:linux kernel (medium 5.5) - [CVE-2020-36311](https://insights.sbomify.com/CVE-2020-36311/): Denial of service in debian:debian linux (medium 5.5) - [CVE-2020-36310](https://insights.sbomify.com/CVE-2020-36310/): Denial of service in debian:debian linux (medium 5.5) - [CVE-2020-36309](https://insights.sbomify.com/CVE-2020-36309/): Other in openresty:lua-nginx-module (medium 5.3) - [CVE-2020-36308](https://insights.sbomify.com/CVE-2020-36308/): Information disclosure in debian:debian linux (medium 5.3) - [CVE-2020-36307](https://insights.sbomify.com/CVE-2020-36307/): Cross-site scripting in debian:debian linux (medium 6.1) - [CVE-2020-36306](https://insights.sbomify.com/CVE-2020-36306/): Cross-site scripting in debian:debian linux (medium 6.1) - [CVE-2020-3630](https://insights.sbomify.com/CVE-2020-3630/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (high 7.8) - [CVE-2020-36290](https://insights.sbomify.com/CVE-2020-36290/): Cross-site scripting in Confluence Data Center (medium 5.4) - [CVE-2020-3629](https://insights.sbomify.com/CVE-2020-3629/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (high 7.8) - [CVE-2020-36289](https://insights.sbomify.com/CVE-2020-36289/): Information disclosure in Jira Data Center (medium 5.3) - [CVE-2020-36288](https://insights.sbomify.com/CVE-2020-36288/): Cross-site scripting in Jira Data Center (medium 6.1) - [CVE-2020-36287](https://insights.sbomify.com/CVE-2020-36287/): Missing authorization in Jira Data Center (medium 5.3) - [CVE-2020-36286](https://insights.sbomify.com/CVE-2020-36286/): Information disclosure in Jira Data Center (medium 5.3) - [CVE-2020-36285](https://insights.sbomify.com/CVE-2020-36285/): Weak cryptography in unionpayintl:union pay (high 7.5) - [CVE-2020-36284](https://insights.sbomify.com/CVE-2020-36284/): Weak cryptography in unionpayintl:union pay (high 7.5) - [CVE-2020-36283](https://insights.sbomify.com/CVE-2020-36283/): Cross-site request forgery in hidglobal:omnikey 5127 firmware (critical 9.6) - [CVE-2020-36282](https://insights.sbomify.com/CVE-2020-36282/): Unsafe Deserialization that can Result in Code Execution (critical 9.8) - [CVE-2020-36281](https://insights.sbomify.com/CVE-2020-36281/): Memory corruption in debian:debian linux (high 7.5) - [CVE-2020-36280](https://insights.sbomify.com/CVE-2020-36280/): Memory corruption in fedoraproject:fedora (high 7.5) - [CVE-2020-3628](https://insights.sbomify.com/CVE-2020-3628/): Misconfiguration in Snapdragon Consumer IOT, Snapdragon Mobile (critical 9.8) - [CVE-2020-36279](https://insights.sbomify.com/CVE-2020-36279/): Memory corruption in debian:debian linux (high 7.5) - [CVE-2020-36278](https://insights.sbomify.com/CVE-2020-36278/): Memory corruption in debian:debian linux (high 7.5) - [CVE-2020-36277](https://insights.sbomify.com/CVE-2020-36277/): Denial of service in debian:debian linux (high 7.5) - [CVE-2020-3626](https://insights.sbomify.com/CVE-2020-3626/): Missing authorization in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables (high 7.8) - [CVE-2020-36255](https://insights.sbomify.com/CVE-2020-36255/): Weak cryptography in identitymodel project:identitymodel (high 7.5) - [CVE-2020-36254](https://insights.sbomify.com/CVE-2020-36254/): Path traversal in dropbear ssh project:dropbear ssh (high 8.1) - [CVE-2020-36252](https://insights.sbomify.com/CVE-2020-36252/): Weak cryptography in owncloud:owncloud server (medium 6.8) - [CVE-2020-36251](https://insights.sbomify.com/CVE-2020-36251/): Missing authorization in owncloud:owncloud (low 3.5) - [CVE-2020-36250](https://insights.sbomify.com/CVE-2020-36250/): Security feature bypass in owncloud:owncloud client (medium 6.1) - [CVE-2020-3625](https://insights.sbomify.com/CVE-2020-3625/): Memory corruption in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile (high 7.8) - [CVE-2020-36249](https://insights.sbomify.com/CVE-2020-36249/): Security feature bypass in owncloud:file firewall (high 7.5) - [CVE-2020-36248](https://insights.sbomify.com/CVE-2020-36248/): Security feature bypass in owncloud:owncloud client (low 3.9) - [CVE-2020-36247](https://insights.sbomify.com/CVE-2020-36247/): Cross-site request forgery in osc:open ondemand (high 8.8) - [CVE-2020-36246](https://insights.sbomify.com/CVE-2020-36246/): Command injection in amaze file manager project:amaze file manager (high 7.8) - [CVE-2020-36245](https://insights.sbomify.com/CVE-2020-36245/): GramAddict bot uses dependency with reverse tcp backdoor (high 8.8) - [CVE-2020-36244](https://insights.sbomify.com/CVE-2020-36244/): Memory corruption in debian:debian linux (critical 9.8) - [CVE-2020-36243](https://insights.sbomify.com/CVE-2020-36243/): Command injection in open-emr:openemr (high 8.8) - [CVE-2020-36242](https://insights.sbomify.com/CVE-2020-36242/): PyCA Cryptography symmetrically encrypting large values can lead to integer overflow (critical 9.1) - [CVE-2020-36241](https://insights.sbomify.com/CVE-2020-36241/): Path traversal in fedoraproject:fedora (medium 5.5) - [CVE-2020-36240](https://insights.sbomify.com/CVE-2020-36240/): Path traversal in Crowd (medium 5.3) - [CVE-2020-3624](https://insights.sbomify.com/CVE-2020-3624/): Integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking (high 7.8) - [CVE-2020-36239](https://insights.sbomify.com/CVE-2020-36239/): Missing authorization in Jira Core Data Center (critical 9.8) - [CVE-2020-36238](https://insights.sbomify.com/CVE-2020-36238/): Missing authorization in Jira Data Center (medium 5.3) - [CVE-2020-36237](https://insights.sbomify.com/CVE-2020-36237/): Information disclosure in Jira Data Center (medium 5.3) - [CVE-2020-36236](https://insights.sbomify.com/CVE-2020-36236/): Cross-site scripting in Jira Data Center (medium 6.1) - [CVE-2020-36235](https://insights.sbomify.com/CVE-2020-36235/): Information disclosure in Jira Data Center (medium 5.3) - [CVE-2020-36234](https://insights.sbomify.com/CVE-2020-36234/): Cross-site scripting in Jira Data Center (medium 4.8) - [CVE-2020-36233](https://insights.sbomify.com/CVE-2020-36233/): Misconfiguration in Bitbucket Data Center (high 7.8) - [CVE-2020-36232](https://insights.sbomify.com/CVE-2020-36232/): Server-side request forgery in Atlassian Gadgets (medium 5.0) - [CVE-2020-36231](https://insights.sbomify.com/CVE-2020-36231/): Missing authorization in Jira Data Center (medium 4.3) - [CVE-2020-36230](https://insights.sbomify.com/CVE-2020-36230/): Denial of service in apache:bookkeeper (high 7.5) - [CVE-2020-3623](https://insights.sbomify.com/CVE-2020-3623/): Denial of service in Snapdragon Mobile (high 7.8) - [CVE-2020-36229](https://insights.sbomify.com/CVE-2020-36229/): Denial of service in apple:mac os x (high 7.5) - [CVE-2020-36228](https://insights.sbomify.com/CVE-2020-36228/): Integer overflow in apple:macos (high 7.5) - [CVE-2020-36227](https://insights.sbomify.com/CVE-2020-36227/): Denial of service in apple:macos (high 7.5) - [CVE-2020-36226](https://insights.sbomify.com/CVE-2020-36226/): Memory corruption in apple:mac os x (high 7.5) - [CVE-2020-36225](https://insights.sbomify.com/CVE-2020-36225/): Memory corruption in apple:macos (high 7.5) - [CVE-2020-36224](https://insights.sbomify.com/CVE-2020-36224/): Memory corruption in apple:mac os x (high 7.5) - [CVE-2020-36223](https://insights.sbomify.com/CVE-2020-36223/): Memory corruption in apple:mac os x (high 7.5) - [CVE-2020-36222](https://insights.sbomify.com/CVE-2020-36222/): Denial of service in apple:mac os x (high 7.5) - [CVE-2020-36221](https://insights.sbomify.com/CVE-2020-36221/): Integer overflow in apple:mac os x (high 7.5) - [CVE-2020-36220](https://insights.sbomify.com/CVE-2020-36220/): Data race in va-ts (medium 5.9) - [CVE-2020-3622](https://insights.sbomify.com/CVE-2020-3622/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking (high 7.8) - [CVE-2020-36219](https://insights.sbomify.com/CVE-2020-36219/): Data race in atomic-option (medium 5.9) - [CVE-2020-36218](https://insights.sbomify.com/CVE-2020-36218/): Improper synchronization in buttplug (medium 5.9) --- From sbomify Insights: https://insights.sbomify.com/years/2020/page/76/