2020

SAP NetWeaver (Knowledge Management), version-7.30,7.31,7.40,7.50, allows an authenticated attacker to create malicious

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated 3DM file received from untrusted sources

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated U3D file received from untrusted sources

SAP Marketing (Servlet), version-130,140,150, allows an authenticated attacker to invoke certain functions that are rest

A Remote Code Execution vulnerability exists in the SAP NetWeaver (ABAP Server, up to release 7.40) and ABAP Platform (>

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated HPGL file received from untrusted source

SAP NetWeaver Application Server JAVA(XML Forms) versions 7.30, 7.31, 7.40, 7.50 does not sufficiently encode user contr

SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), versions - 4.1, 4.2, allows an att

SAP Commerce versions 6.7, 1808, 1811, 1905, 2005 contains the jSession ID in the backoffice URL when the application is

SAP Business Objects Business Intelligence Platform (Web Intelligence HTML interface) allows an attacker with edit docum

SAP Fiori Launchpad does not sufficiently encode user controlled inputs, and hence allowing the attacker to inject the m

It was found that cifs-utils' mount.cifs was invoking a shell when requesting the Samba password, which could be used to

Privilege Escalation vulnerability in McAfee MVISION Endpoint prior to 20.9 Update allows local users to access files wh

Improper Access Control vulnerability in McAfee MVISION Endpoint prior to 20.9 Update allows local users to bypass secur

Authentication Protection Bypass vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2

Information Disclosure Vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update

Protection Mechanism Failure vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020

Improper Access Control vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Updat

Yodobashi App for Android versions 1.8.7 and earlier allows remote attackers to lead a user to access an arbitrary websi

u'During execution after Address Space Layout Randomization is turned on for QTEE, part of code is still mapped at known

Information can leak into userspace due to improper transfer of data from kernel to userspace in Snapdragon Auto, Snapdr

Out of bound access can happen in MHI command process due to lack of check of command channel id value received from MHI

u'Multiple Read overflows issue due to improper length check while decoding Generic NAS transport/EMM info' in Snapdrago

u'Buffer over-read Issue in Q6 testbus framework due to diag packet length is not completely validated before accessing

u'Reachable assertion when wrong data size is returned by parser for ape clips' in Snapdragon Auto, Snapdragon Consumer

u'During the error occurrence in capture request, the buffer is freed and later accessed causing the camera APP to fail

u'Possible use-after-free while accessing diag client map table since list can be reallocated due to exceeding max clien

IBM Business Process Manager 8.5, 8.6 and IBM Business Automation Workflow 18.0, 19.0, and 20.0 are vulnerable to stored

IBM Business Process Manager 8.5, 8.6 and IBM Business Automation Workflow 18.0, 19.0, and 20.0 are vulnerable to cross-

u'Specifically timed and handcrafted traffic can cause internal errors in a WLAN device that lead to improper layer 2 Wi

u'Potential integer underflow while parsing Service Info and IPv6 link-local TLVs that comes as part of NDPE attribute'

u'Buffer Overflow issue in WLAN tcp ip verification due to usage of out of range pointer offset' in Snapdragon Auto, Sna

u'Buffer overflow while parsing PMF enabled MCBC frames due to frame length being lesser than what is expected while par

u'Buffer Overflow in mic calculation for WPA due to copying data into buffer without validating the length of buffer' in

u'Out of bounds memory access during memory copy while processing Host command' in Snapdragon Auto, Snapdragon Compute,

u'Possible out of bound write in DSP driver code due to lack of check of data received from user' in Snapdragon Auto, Sn

u'Potential buffer overflow when accessing npu debugfs node "off"/"log" with large buffer size' in Snapdragon Compute, S

u'Buffer overflow seen as the destination buffer size is lesser than the source buffer size in video application' in Sna

u'Information disclosure issue occurs as in current logic Secure Touch session is released without terminating display s

u'Information disclosure issue can occur due to partial secure display-touch session tear-down' in Snapdragon Auto, Snap

u'Resizing the usage table header before passing all the checks leads to the function exiting with a usage table in inva

u'Out of bound writes happen when accessing usage_table header entry beyond the memory allocated for the header' in Snap

u'Stack out of bound issue occurs when making query to DSP capabilities due to wrong assumption was made on determining

u'A potential buffer overflow exists due to integer overflow when parsing handler options due to wrong data type usage i

u'Channel name string which has been read from shared memory is potentially subjected to string manipulations but not va

u'Lack of check to ensure that the TX read index & RX write index that are read from shared memory are less than the FIF

u'Lack of check of integer overflow while doing a round up operation for data read from shared memory for G-link SMEM tr

u'Non-secure memory is touched multiple times during TrustZone\u2019s execution and can lead to privilege escalation or

u'XBL SEC clears only ZI region when loading Qualcomm-signed segments can lead to improper access issue' in Snapdragon C

u'Null pointer dereference in HP OfficeJet Pro 8210 jbig2 filter due to lack of check of PDF font array leads to denial