2020

Jenkins Parasoft Findings Plugin 10.4.3 and earlier does not configure its XML parser to prevent XML external entity (XX

Users can lock their notes with a password in Memono version 3.8. Thus, users needs to know a password to read notes. Ho

In Dolibarr 10.0.6, forms are protected with a CSRF token against CSRF attacks. The problem is any CSRF token in any use

In Rukovoditel 2.5.2 has a form_session_token value to prevent CSRF attacks. This protection mechanism can be bypassed w

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.76,

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.76,

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.76,

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.76,

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7800 before 1.0.2.60 a

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7800 before 1.0.2.60 a

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.76,

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.76,

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.76,

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.76,

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.76,

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects GS728

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects WAC505 before V5.6.8.3 and WAC

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects SRK60 before 2.3.5.106, SRR60

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects GS728TP before 6.0.0.48, GS728

Certain NETGEAR devices are affected by CSRF. This affects D3600 before 1.0.0.72, D6000 before 1.0.0.72, EX3700 before 1

Certain NETGEAR devices are affected by authentication bypass. This affects D6200 before 1.1.00.30, D7000 before 1.0.1.6

Certain NETGEAR devices are affected by denial of service. This affects D6200 before 1.1.00.34, D7000 before 1.0.1.70, J

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D6200 before 1.1.

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D3600

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D3600

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D3600

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D3600

An issue was found in Arista EOS. Specific malformed ARP packets can impact the software forwarding of VxLAN packets. Th

IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could be subject to attacks based on privilege escalation due to

IBM MQ 9.0 and 9.1 is vulnerable to a denial of service attack due to an error in the Channel processing function. IBM X

Active command timeout since WM status change cmd is not removed from active queue if peer sends multiple deauth frames.

Possible integer overflow to buffer overflow in WLAN while parsing nonstandard NAN IE messages. in Snapdragon Auto, Snap

Memory failure in SKB if it fails to to add the requested padding to the skb in low memory targets or targets with major

Privilege escalation by using an altered debug policy image can occur as the XPU protecting the debug policy regions are

Kernel was reading the CSL defined reserved field as uint16 instead of uint32 which could lead to memory overflow in Sna

Slab-out-of-bounds access can occur if the context pointer is invalid due to lack of null check on pointer before access

Possible use after free issue in pcm volume controls due to race condition exist in private data used in mixer controls

Error occurs While extracting the ipv6_header having an invalid length due to lack of length check in Snapdragon Auto, S

Possible buffer overrun when processing EFS filename and payload sent over diag interface due to lack of check for filen

Possible out of bound array access as there is no check on carrier index passed in Snapdragon Auto, Snapdragon Compute,

Possibility of null pointer deference as the array of video codecs from media info is referenced without null checking w

Out of bound memory access while processing TZ command handler due to improper input validation on response length recei

Wrong public key usage from existing oem_keystore for hash generation in Snapdragon Auto, Snapdragon Consumer IOT, Snapd

Out of bound access in diag services when DCI command buffer reallocation is not done properly with required capacity in

While handling the vendor command there is an integer truncation issue that could yield a buffer overflow due to int dat

Possible integer overflow can happen in host driver while processing user controlled string due to improper validation o

Use after free issue when MAP and UNMAP calls at same time as data structure used my MAP may be freed by UNMAP function

Kernel memory error in debug module due to improper check of user data length before copying into memory in Snapdragon A

Wlan binary which is not signed with OEMs RoT is working on secure device without authentication failure in Snapdragon C

Lack of boundary checks for data offsets received from HLOS can lead to out-of-bound read in Snapdragon Auto, Snapdragon