Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 79 of 215.
- CVE-2020-35918 Unexpected panic when decoding tokens in branca
- CVE-2020-35917 Reference counting error in pyo3
- CVE-2020-35916 Mutable reference with immutable provenance in image
- CVE-2020-35915 Data races in futures-intrusive
- CVE-2020-35914 Race condition in lock api project:lock api
- CVE-2020-35913 Race condition in lock api project:lock api
- CVE-2020-35912 Race condition in lock api project:lock api
- CVE-2020-35911 Race condition in lock api project:lock api
- CVE-2020-35910 Race condition in lock api project:lock api
- CVE-2020-3591 Cisco SD-WAN vManage Cross-Site Scripting Vulnerability
- CVE-2020-35909 Unexpected panic in multihash
- CVE-2020-35908 Improper `Sync` implementation on `FuturesUnordered` in futures-utils can cause data corruption
- CVE-2020-35907 futures_task::noop_waker_ref can segfault due to dereferencing a NULL pointer
- CVE-2020-35906 futures_task::waker may cause a use-after-free if used on a type that isn't 'static
- CVE-2020-35905 MutexGuard::map can cause a data race in safe code
- CVE-2020-35904 Memory corruption in crossbeam-channel project:crossbeam-channel
- CVE-2020-35903 Out of bounds read in dync
- CVE-2020-35902 Use-after-free in actix-codec
- CVE-2020-35901 Use-after-free in actix-http
- CVE-2020-35900 use-after-free vulnerability in Rust array-queue
- CVE-2020-3590 Cisco SD-WAN vManage Software Cross-Site Scripting Vulnerability
- CVE-2020-35899 Use after free in actix-service
- CVE-2020-35898 Use after free in actix-utils
- CVE-2020-35897 Data races in atom
- CVE-2020-35896 Insufficient size checks in ws
- CVE-2020-35895 Out-of-bounds write in stack
- CVE-2020-35894 Unaligned references in Obstack
- CVE-2020-35893 Memory corruption in simple-slab project:simple-slab
- CVE-2020-35892 Memory corruption in simple-slab project:simple-slab
- CVE-2020-35891 Double free in ordnung
- CVE-2020-35890 Out of bounds read in ordnung
- CVE-2020-3589 Cisco Identity Services Engine Cross-Site Scripting Vulnerability
- CVE-2020-35889 Memory safety violation in crayon
- CVE-2020-35888 Memory corruption in arr project:arr
- CVE-2020-35887 Multiple security issues including data race, buffer overflow, and uninitialized memory drop in arr
- CVE-2020-35886 Race condition in arr project:arr
- CVE-2020-35885 Double free in alpm-rs
- CVE-2020-35884 HTTP Request smuggling in tiny_http
- CVE-2020-35883 Path traversal in mozwire
- CVE-2020-35882 Data races in rocket
- CVE-2020-35881 Out of bounds write in traitobject
- CVE-2020-35880 Unsoundness in bigint
- CVE-2020-3588 Cisco Webex Meetings Desktop App Arbitrary Code Execution Vulnerability
- CVE-2020-35879 Data races in rulinalg
- CVE-2020-35878 Drop of uninitialized memory in Ozone
- CVE-2020-35877 Out of bounds read in Ozone
- CVE-2020-35876 Use after free in rio
- CVE-2020-35875 Excessive memory usage in tokio-rustls
- CVE-2020-35874 Use after free in internment
- CVE-2020-35873 Use after free in rusqlite project:rusqlite
- CVE-2020-35872 Memory corruption in rusqlite project:rusqlite
- CVE-2020-35871 Race condition in rusqlite project:rusqlite
- CVE-2020-35870 Use after free in rusqlite project:rusqlite
- CVE-2020-3587 Cisco SD-WAN vManage Software Cross-Site Scripting Vulnerability
- CVE-2020-35869 Memory corruption in rusqlite project:rusqlite
- CVE-2020-35868 Memory corruption in rusqlite project:rusqlite
- CVE-2020-35867 Memory corruption in rusqlite project:rusqlite
- CVE-2020-35866 Memory corruption in rusqlite project:rusqlite
- CVE-2020-35865 os_str_bytes relies on undefined behavior of `char::from_u32_unchecked`
- CVE-2020-35864 Dangling reference in flatbuffers
- CVE-2020-35863 HTTP Request Smuggling in hyper
- CVE-2020-35862 Use after free and double free in bitvec
- CVE-2020-35861 Out of bounds read in bumpalo
- CVE-2020-35860 NULL Pointer Dereference in cbox
- CVE-2020-3586 Cisco DNA Spaces Connector Command Injection Vulnerability
- CVE-2020-35859 Out of bounds access in lucet-runtime-internals
- CVE-2020-35858 Out of bounds write in prost
- CVE-2020-35857 Stack consumption in trust-dns-server
- CVE-2020-35856 Cross-site scripting in solarwinds:orion platform
- CVE-2020-35854 Cross-site scripting in textpattern:textpattern
- CVE-2020-35853 Cross-site scripting in 4homepages:4images
- CVE-2020-35852 Cross-site scripting in getgist:chatbox
- CVE-2020-35851 HGiga MailSherlock - Command Injection
- CVE-2020-35850 Server-side request forgery in cockpit-project:cockpit
- CVE-2020-3585 Cisco Firepower 1000 Series Bleichenbacher Attack Vulnerability
- CVE-2020-35849 MantisBT Incorrect Authorization for bug_revision_view_page.php check
- CVE-2020-35848 SQL injection in agentejo:cockpit
- CVE-2020-35847 SQL injection in agentejo:cockpit
- CVE-2020-35846 SQL injection in agentejo:cockpit
- CVE-2020-35845 Memory corruption in faststone:image viewer
- CVE-2020-35844 Memory corruption in faststone:image viewer
- CVE-2020-35843 Memory corruption in faststone:image viewer
- CVE-2020-35842 Cross-site scripting in netgear:d6200 firmware
- CVE-2020-35841 Cross-site scripting in netgear:d6200 firmware
- CVE-2020-35840 Cross-site scripting in netgear:d6200 firmware
- CVE-2020-35839 Cross-site scripting in netgear:d7800 firmware
- CVE-2020-35838 Cross-site scripting in netgear:d7800 firmware
- CVE-2020-35837 Cross-site scripting in netgear:d7800 firmware
- CVE-2020-35836 Cross-site scripting in netgear:d7800 firmware
- CVE-2020-35835 Cross-site scripting in netgear:d7800 firmware
- CVE-2020-35834 Cross-site scripting in netgear:d7800 firmware
- CVE-2020-35833 Cross-site scripting in netgear:d7800 firmware
- CVE-2020-35832 Cross-site scripting in netgear:d7800 firmware
- CVE-2020-35831 Cross-site scripting in netgear:d7800 firmware
- CVE-2020-35830 Cross-site scripting in netgear:d7800 firmware
- CVE-2020-3583 Cross-site scripting in Cisco Adaptive Security Appliance (ASA) Software
- CVE-2020-35829 Cross-site scripting in netgear:d7800 firmware
- CVE-2020-35828 Cross-site scripting in netgear:d7800 firmware
- CVE-2020-35827 Cross-site scripting in netgear:d7800 firmware
- CVE-2020-35826 Cross-site scripting in netgear:d7800 firmware