2020

u'Possible buffer overflow while updating output buffer for IMEI and Gateway Address due to lack of check of input valid

u'Buffer overflow can happen as part of SIP message packet processing while storing values in array due to lack of check

u'Potential out of bounds read while processing downlink NAS transport message due to improper length check of Informati

u'Remote code execution can happen by sending a carefully crafted POST query when Device configuration is accessed from

u'Buffer overflow occurs while processing SIP message packet due to lack of check of index validation before copying int

u'fscanf reads a string from a file and stores its contents on a statically allocated stack memory which leads to stack

u'Buffer over-read while processing received L2CAP packet due to lack of integer overflow check' in Snapdragon Auto, Sna

u'Out of bound memory access while processing GATT data received due to lack of check of pdu data length and leads to re

vBulletin 5.5.4 through 5.6.2 allows remote command execution via crafted subWidgets data in an ajax/render/widget_tabbe

An issue was discovered in EyesOfNetwork eonweb 5.3-7 through 5.3-8. The eonweb web interface is prone to a SQL injectio

An issue was discovered in FastReport before 2020.4.0. It lacks a ScriptSecurity feature and therefore may mishandle (fo

SQL Injection in Zoho ManageEngine Applications Manager 14 before 14560 allows an attacker to execute commands on the se

An issue was discovered on Western Digital My Cloud NAS devices before 5.04.114. They allow remote code execution with r

Improper access control vulnerability in lbd in Synology Router Manager (SRM) before 1.2.4-8081 allows remote attackers

NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30, contain a vulnerability in the AMI BMC firmwa

NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30 and all DGX-2 with BMC firmware versions prior

A Weak Session Management vulnerability in Citadel WebCit through 926 allows unauthenticated remote attackers to hijack

Winston 1.5.4 devices have a CORS configuration that trusts arbitrary origins. This allows requests to be made and viewe

Winston 1.5.4 devices have an SSH user account with access from bastion hosts. This is undocumented in device documents

If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. QNAP has alre

Winston 1.5.4 devices are vulnerable to command injection via the API.

osCommerce Phoenix CE before 1.0.5.4 allows OS command injection remotely. Within admin/mail.php, a from POST parameter

A vulnerability in the Pulse Secure Desktop Client < 9.1R9 is vulnerable to the client registry privilege escalation att

An Arbitrary File Upload in the Upload Image component in SourceCodester Car Rental Management System 1.0 allows the use

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.6, Security U

A validation issue existed in Trust Anchor Management. This issue was addressed with improved validation. This issue is

Addressed remote code execution vulnerability in AvailableApps.php that allowed escalation of privileges in Western Digi

Addressed remote code execution vulnerability in DsdkProxy.php due to insufficient sanitization and insufficient validat

Addressed remote code execution vulnerability in cgi_api.php that allowed escalation of privileges in Western Digital My

Addressed remote code execution vulnerability in reg_device.php due to insufficient validation of user input.in Western

Addressed multiple stack buffer overflow vulnerabilities that could allow an attacker to carry out escalation of privile

A memory consumption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.1, S

Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Catalina 1

Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Catalina 1

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15, iOS 13,

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.1, Se

A memory corruption issue was addressed with improved memory handling. This issue is fixed in watchOS 6, iOS 13, tvOS 13

An out-of-bounds read was addressed with improved input validation. This issue is fixed in AirPort Base Station Firmware

A use after free issue was addressed with improved memory management. This issue is fixed in AirPort Base Station Firmwa

A null pointer dereference was addressed with improved input validation. This issue is fixed in AirPort Base Station Fir

An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input

The issue was addressed with improved validation on the FaceTime server. This issue is fixed in macOS Mojave 10.14.3 Sup

This issue is fixed in macOS Mojave 10.14. A permissions issue existed in DiskArbitration. This was addressed with addit

Wire before 2020-10-16 allows remote attackers to cause a denial of service (application crash) or possibly execute arbi

Arbitrary code execution vlnerability in Operation bridge Manager, Application Performance Management and Operations Bri

An issue was discovered in beta versions of the 1Password command-line tool prior to 0.5.5 and in beta versions of the 1

A RemoteFunctions endpoint with missing access control in konzept-ix publiXone before 2020.015 allows attackers to discl

konzept-ix publiXone before 2020.015 allows attackers to take over arbitrary user accounts by crafting password-reset to

libtac in pam_tacplus through 1.5.1 lacks a check for a failure of RAND_bytes()/RAND_pseudo_bytes(). This could lead to

Ruckus vRioT through 1.5.1.0.21 has an API backdoor that is hardcoded into validate_token.py. An unauthenticated attacke