2019

SAP NetWeaver Process Integration, versions: SAP_XIESR: 7.20, SAP_XITOOL: 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50, does not

SAP BusinessObjects Business Intelligence Platform (Administration Console), versions 4.2, 4.3, module BILogon/appServic

Resource allocation error while playing the video whose dimensions are more than supported dimension in Snapdragon Auto,

Wrong permissions in configuration file can lead to unauthorized permission in Snapdragon Auto, Snapdragon Connectivity,

An unprivileged user can craft a bitstream such that the payload encoded in the bitstream gains code execution in Snapdr

An unprivileged user can craft a bitstream such that the payload encoded in the bitstream gains code execution in Snapdr

An out-of-bounds read was possible in WhatsApp due to incorrect parsing of RTP extension headers. This issue affects Wha

When receiving calls using WhatsApp for Android, a missing size check when parsing a sender-provided packet allowed for

When receiving calls using WhatsApp on Android, a stack allocation failed to properly account for the amount of data bei

A non-time constant function memcmp is used which creates a side channel that could leak information in Snapdragon Auto,

Buffer overflow in WLAN function due to improper check of buffer size before copying in Snapdragon Auto, Snapdragon Cons

Out of bounds read occurs due to improper validation of array while processing VDEV stop response from WLAN firmware in

Buffer overflow in WLAN driver event handlers due to improper validation of array index in Snapdragon Auto, Snapdragon C

A buffer overflow can occur while processing an extscan hotlist event in Snapdragon Auto, Snapdragon Consumer Electronic

When receiving calls using WhatsApp for iOS, a missing size check when parsing a sender-provided packet allowed for a st

Use-after-free vulnerability will occur if reset of the routing table encounters an invalid rule id while processing com

Out of bounds memory read and access may lead to unexpected behavior in GNSS XTRA Parser in Snapdragon Auto, Snapdragon

Out-of-Bounds access in TZ due to invalid index calculated to check against DDR in Snapdragon Auto, Snapdragon Connectiv

Metadata verification and partial hash system calls by bootloader may corrupt parallel hashing state in progress resulti

Truncated access authentication token leads to weakened access control for stored secure application data in Snapdragon

While deserializing any key blob during key operations, buffer overflow could occur, exposing partial key information if

The HMAC authenticating the message from QSEE is vulnerable to timing side channel analysis leading to potentially forge

Out of bounds memory read and access due to improper array index validation may lead to unexpected behavior while decodi

Due to missing permissions in Android Manifest file, Sensitive information disclosure issue can happen in PCI RCS app in

Out-of-Bounds write due to incorrect array index check in PMIC in Snapdragon Auto, Snapdragon Compute, Snapdragon Consum

Lack of check on length of reason-code fetched from payload may lead driver access the memory not allocated to the frame

The txrx stats req might be double freed in the pdev detach when the host driver is unloading in Snapdragon Auto, Snapdr

Failure to initialize the reserved memory which is sent to the firmware might lead to exposure of 1 byte of uninitialize

Use after issue in WLAN function due to multiple ACS scan requests at a time in Snapdragon Auto, Snapdragon Consumer IOT

Possible out of bounds write due to improper input validation while processing DO_ACS vendor command in Snapdragon Auto,

Lack of input validation in WLAN function can lead to potential heap overflow in Snapdragon Auto, Snapdragon Consumer IO

Use after issue in WLAN function due to multiple ACS scan requests at a time in Snapdragon Auto, Snapdragon Consumer IOT

Kernel can inject faults in computations during the execution of TrustZone leading to information disclosure in Snapdrag

IBM Connections 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript

IBM i 7.27.3 Clustering could allow a local attacker to obtain sensitive information, caused by the use of advanced node

IBM MQ Advanced Cloud Pak (IBM Cloud Private 1.0.0 through 3.0.1) stores user credentials in plain in clear text which c

In http.c in Embedthis GoAhead before 4.1.1 and 5.x before 5.0.1, a header parsing vulnerability causes a memory asserti

In Eclipse Buildship versions prior to 3.1.1, the build files indicate that this project is resolving dependencies over

An argument injection vulnerability in Atlassian Sourcetree for Windows's URI handlers, in all versions prior to 3.1.3,

cfme-gemset versions 5.10.4.3 and below, 5.9.9.3 and below are vulnerable to a data leak, due to an improper authorizati

A flaw was found in the Linux kernel. A heap based buffer overflow in mwifiex_uap_parse_tail_ies function in drivers/net

An issue was discovered in the Linux kernel before 5.0. The function __mdiobus_register() in drivers/net/phy/mdio_bus.c

An issue was discovered in the Linux kernel before 4.20.15. The nfc_llcp_build_tlv function in net/nfc/llcp_commands.c m

An issue was discovered in Digital Persona U.are.U 4500 Fingerprint Reader v24. The key and salt used for obfuscating th

In radare2 through 3.5.1, the rcc_context function of libr/egg/egg_lang.c mishandles changing context. This allows remot

BD Alaris Gateway versions, 1.0.13,1.1.3 Build 10,1.1.3 MR Build 11,1.1.5, and 1.1.6, The web browser user interface on

BD Alaris Gateway Workstation Versions, 1.1.3 Build 10, 1.1.3 MR Build 11, 1.2 Build 15, 1.3.0 Build 14, 1.3.1 Build 13,

In createInstanceFromNamedArguments in Shopware through 5.6.x, a crafted web request can trigger a PHP object instantiat

An issue was discovered in versions earlier than 1.3.2 for Polycom RealPresence Debut where the admin cookie is reset on

An issue was discovered in versions earlier than 1.3.0-66872 for Polycom RealPresence Debut that allows attackers to arb