CVE-2020-7838

A arbitrary code execution vulnerability exists in the way that the Stove client improperly validates input value. An attacker could execute arbitrary code when the user access to crafted web page. This issue affects: Smilegate STOVE Client 0.0.4.72.

• CWE-20
• CWE-20

• https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35851Third Party Advisory
• https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35851Third Party Advisory

Published

Dec 18, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-7829DaviewIndy 8.98.4 and earlier version contain Heap-based ove…7.8
• CVE-2020-7830RAONWIZ v2018.0.2.50 and earlier versions contains a vulnera…7.8
• CVE-2020-7831A vulnerability in the web-based contract management service…8.8
• CVE-2020-7832A vulnerability (improper input validation) in the DEXT5 Upl…9.8
• CVE-2020-7836VOICEYE WSActiveBridgeES versions prior to 2.1.0.3 contains …7.8
• CVE-2020-7837An issue was discovered in ML Report Program. There is a sta…8.8
• CVE-2020-7839In MaEPSBroker 2.5.0.31 and prior, a command injection vulne…9.8
• CVE-2020-7841Improper input validation vulnerability exists in TOBESOFT X…8.8
• CVE-2020-7842Improper Input validation vulnerability exists in Netis Kore…6.6
• CVE-2020-7845Spamsniper 5.0 ~ 5.2.7 contain a stack-based buffer overflow…9.8
• CVE-2020-7846Helpcom before v10.0 contains a file download and execution …8.8
• CVE-2020-7847The ipTIME NAS product allows an arbitrary file upload vulne…8