2020

In Java network APIs, there is possible access to sensitive network state due to a missing permission check. This could

In PackageManager, there is a missing permission check. This could lead to local information disclosure across users wit

In PackageManager, there is a missing permission check. This could lead to local information disclosure across users wit

In PackageManager, there is a missing permission check. This could lead to local information disclosure across user boun

In libmkvextractor, there is a possible resource exhaustion due to a missing bounds check. This could lead to remote den

In the AAC parser, there is a possible out of bounds read due to a missing bounds check. This could lead to remote infor

In NetworkPolicyManagerService, there is a possible permissions bypass due to a missing permission check. This could lea

In MediaProvider, there is a possible way to access ContentResolver and MediaStore entries the app shouldn't have access

In the OMX parser, there is a possible information disclosure due to a returned raw pointer. This could lead to local in

In tremolo, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information

In WindowManager, there is a possible launch of an unexpected app due to a confused deputy. This could lead to local esc

In factory reset protection, there is a possible FRP bypass due to a missing permission check. This could lead to local

In libstagefright, there is a possible out of bounds write due to an integer overflow. This could lead to remote code ex

In screencap, there is a possible command injection due to improper input validation. This could lead to local escalatio

In mediadrm, there is a possible out of bounds read due to a missing bounds check. This could lead to local information

SoyCMS 3.0.2 and earlier is affected by Reflected Cross-Site Scripting (XSS) which leads to Remote Code Execution (RCE)

The SOY Inquiry component of SOY CMS is affected by Cross-site Request Forgery (CSRF) and Remote Code Execution (RCE). T

A vulnerability in the web-based management interface of RAD SecFlow-1v through 2020-05-21 could allow an authenticated

yWorks yEd Desktop before 3.20.1 allows code execution via an XSL Transformation when using an XML file in conjunction w

yWorks yEd Desktop before 3.20.1 allows XXE attacks via an XML or GraphML document.

FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, rela

In Pixel's use of the Catpipe library, there is possible memory corruption due to a use after free. This could lead to l

In blk_mq_queue_tag_busy_iter of blk-mq-tag.c, there is a possible use after free due to improper locking. This could le

In skb_to_mamac of networking.c, there is a possible out of bounds write due to an integer overflow. This could lead to

In kbd_keycode of keyboard.c, there is a possible out of bounds write due to a missing bounds check. This could lead to

In skb_headlen of /include/linux/skbuff.h, there is a possible out of bounds read due to memory corruption. This could l

In l2tp_session_delete and related functions of l2tp_core.c, there is possible memory corruption due to a use after free

In CamX code, there is a possible use after free due to a race condition. This could lead to local escalation of privile

In create_pinctrl of core.c, there is a possible out of bounds read due to a use after free. This could lead to local in

In the FPC TrustZone fingerprint App, there is a possible invalid command handler due to an exposed test feature. This c

In manifest files of the SmartSpace package, there is a possible tapjacking vector due to a missing permission check. Th

ZoneMinder before 1.34.21 has XSS via the connkey parameter to download.php or export.php.

A heap overflow in Sqreen PyMiniRacer (aka Python Mini Racer) before 0.3.0 allows remote attackers to potentially exploi

A memory corruption vulnerability in Objective Open CBOR Run-time (oocborrt) in versions before 2020-08-12 could allow a

Stored XSS (Cross-Site Scripting) exists in the SolarWinds Orion Platform before before 2020.2.1 on multiple forms and p

An issue was discovered in the DBI module before 1.643 for Perl. The hv_fetch() documentation requires checking for NULL

The Reset Password add-on before 1.2.0 for Alfresco has a broken algorithm (involving an increment) that allows a malici

The Reset Password add-on before 1.2.0 for Alfresco suffers from CMIS-SQL Injection, which allows a malicious user to in

Lack of cryptographic signature verification in the Sqreen PHP agent daemon before 1.16.0 makes it easier for remote att

A sandbox escape issue was discovered in TitanHQ SpamTitan Gateway 7.07. It limits the admin user to a restricted shell,

A sandbox escape issue was discovered in TitanHQ SpamTitan Gateway 7.07. It limits the admin user to a restricted shell,

An issue was discovered in Titan SpamTitan 7.07. Due to improper sanitization of the parameter quid, used in the page ma

An issue was discovered in Titan SpamTitan 7.07. Improper sanitization of the parameter jaction when interacting with th

An issue was discovered in Titan SpamTitan 7.07. Improper sanitization of the parameter fname, used on the page certs-x.

An issue was discovered in Titan SpamTitan 7.07. Improper validation of the parameter fname on the page certs-x.php woul

An issue was discovered in Titan SpamTitan 7.07. Improper input sanitization of the parameter community on the page snmp

In various functions in fscrypt_ice.c and related files in some implementations of f2fs encryption that use encryption h

In uvc_scan_chain_forward of uvc_driver.c, there is a possible linked list corruption due to an unusual root cause. This

In setInstallerPackageName of PackageManagerService.java, there is a missing permission check. This could lead to local

In showLimitedSimFunctionWarningNotification of NotificationMgr.java, there is a possible permission bypass due to an un