2020

In Bluetooth AVRCP, there is a possible leak of audio metadata due to residual data. This could lead to remote informati

In Telephony, there is a possible permission bypass due to a missing permission check. This could lead to local informat

In Telephony, there is a possible permission bypass due to a missing permission check. This could lead to local informat

In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disc

In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disc

In Telephony, there is a possible permission bypass due to a missing permission check. This could lead to local informat

In hwservicemanager, there is a possible out of bounds write due to freeing a wild pointer. This could lead to local esc

In libhwbinder, there is a possible information disclosure due to uninitialized data. This could lead to local informati

In the Settings app, there is an insecure default value. This could lead to local escalation of privilege and tapjacking

In Android Auto Settings, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local

In NFC, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege wit

In Telephony, there are possible leaks of sensitive data due to missing permission checks. This could lead to local info

In the Accessibility service, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to l

Adobe Media Encoder version 14.3.2 (and earlier versions) has an out-of-bounds read vulnerability that could be exploite

Adobe Media Encoder version 14.3.2 (and earlier versions) has an out-of-bounds read vulnerability that could be exploite

Adobe Media Encoder version 14.3.2 (and earlier versions) has an out-of-bounds read vulnerability that could be exploite

In AppSpider installer versions prior to 7.2.126, the AppSpider installer calls an executable which can be placed in the

NVIDIA GeForce NOW, versions prior to 2.0.23 (Windows, macOS) and versions prior to 5.31 (Android, Shield TV), contains

NVIDIA GeForce NOW, versions prior to 2.0.23 on Windows and macOS, contains a vulnerability in the desktop application s

An issue was discovered in 1CRM System through 8.6.7. An insecure direct object reference to internally stored files all

An issue was discovered in Gradle Enterprise before 2020.2.4. Because of unrestricted cross-origin requests to read-only

In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code exec

In the System UI, there is a possible system crash due to an uncaught exception. This could lead to local permanent deni

In WiFi tethering, there is a possible attacker controlled intent due to an unsafe PendingIntent. This could lead to loc

In the audio server, there is a missing permission check. This could lead to local escalation of privilege regarding aud

An issue was discovered in Gradle Enterprise 2018.2 - 2020.2.4. The CSRF prevention token is stored in a request cookie

An issue was discovered in Gradle Enterprise 2017.1 - 2020.2.4. The /usage page of Gradle Enterprise conveys high level

An issue was discovered in Gradle Enterprise 2018.5 - 2020.2.4. An attacker with physical access to the browser of a use

An issue was discovered in Gradle Enterprise 2018.5 - 2020.2.4. When configuring Gradle Enterprise to integrate with a S

An issue was discovered in Gradle Enterprise 2018.2 and Gradle Enterprise Build Cache Node 4.1. Cross-site transmission

An issue was discovered in Gradle Enterprise 2018.5. An attacker can potentially make repeated attempts to guess a local

An issue was discovered in Gradle Enterprise 2020.2 - 2020.2.4. An XSS issue exists via the request URL.

An issue was discovered in Gradle Enterprise 2017.3 - 2020.2.4 and Gradle Enterprise Build Cache Node 1.0 - 9.2. Unrestr

An issue was discovered in Gradle Enterprise before 2020.2.5. The cookie used to convey the CSRF prevention token is not

UNIQLO App for Android versions 7.3.3 and earlier allows remote attackers to lead a user to access an arbitrary website

UNIQLO App for Android versions 7.3.3 and earlier allows remote attackers to lead a user to access an arbitrary website

Cross-site scripting vulnerability in WHR-G54S firmware 1.43 and earlier allows remote attackers to inject arbitrary scr

Directory traversal vulnerability in WHR-G54S firmware 1.43 and earlier allows an attacker to access sensitive informati

A buffer overflow vulnerability exists in the mg_get_http_header function in Cesanta Mongoose 6.18 due to a lack of boun

The paGO Commerce plugin 2.5.9.0 for Joomla! allows SQL Injection via the administrator/index.php?option=com_pago&view=c

An issue was discovered in DotPlant2 before 2020-09-14. In class Pay2PayPayment in payment/Pay2PayPayment.php, there is

SaferVPN before 5.0.3.3 on Windows could allow low-privileged users to create or overwrite arbitrary files, which could

webTareas through 2.1 allows XSS in clients/editclient.php, extensions/addextension.php, administration/add_announcement

webTareas through 2.1 allows files/Default/ Directory Listing.

webTareas through 2.1 allows upload of the dangerous .exe and .shtml file types.

In Helm before versions 2.16.11 and 3.3.2, a Helm plugin can contain duplicates of the same entry, with the last one alw

In Helm before versions 2.16.11 and 3.3.2 plugin names are not sanitized properly. As a result, a malicious plugin autho

In Helm before versions 2.16.11 and 3.3.2, a Helm repository can contain duplicates of the same chart, with the last one

In Helm before versions 2.16.11 and 3.3.2 there is a bug in which the `alias` field on a `Chart.yaml` is not properly sa

In SyncManager, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local informati