2020

u'Possible out of bound array write in rxdco cal utility due to lack of array bound check' in Snapdragon Compute, Snapdr

u'Possible out of bound access while copying the mask file content into the buffer without checking the buffer size' in

u'Null Pointer exception while playing crafted mkv file as data stream get deleted on secondary invalid configuration' i

u'Calling thread may free the data buffer pointer that was passed to the callback and later when event loop executes the

u'Information exposure issues while processing IE header due to improper check of beacon IE frame' in Snapdragon Auto, S

u'In the lbd service, an external user can issue a specially crafted debug command to overwrite arbitrary files with arb

u'Possible out of bound write while processing association response received from host due to lack of check of IE length

u'Buffer over read occurs while processing information element from beacon due to lack of check of data received from be

u'While processing SMCInvoke asynchronous message header, message count is modified leading to a TOCTOU race condition a

u'Whenever the page list is updated via privileged user, the previous list elements are freed but are not deleted from t

u'Information disclosure issue occurs as in current logic as secure touch is released without clearing the display sessi

u'Keymaster attestation key and device IDs provisioning which is a one time process is incorrectly allowed to be re-prov

u'Heap overflow in diag command handler due to lack of check of packet length received from user' in Snapdragon Auto, Sn

u'Pointer double free in HavenSvc due to not setting the pointer to NULL after freeing it' in Snapdragon Auto, Snapdrago

u'Possible integer overflow in API due to lack of check on large oid range count in cert extension field' in Snapdragon

u'Accessing an uninitialized data structure could result in partially copying of contents and thus incorrect processing'

u'When a new session is created, Object is returned that contains TZ addresses and it get passed to HLOS as an handle to

u'Lack of check for integer overflow for round up and addition operations result into memory corruption and potential in

u'Lack of check that the TX FIFO write and read indices that are read from shared RAM are less than the FIFO size result

u'Lack of integer overflow check for addition of fragment size and remaining size that are read from shared memory can l

u'Lack of check that the current received data fragment size of a particular packet that are read from shared memory are

u'Out of bound memory access if stack push and pop operation are performed without doing a bound check on stack top' in

u'User Process can potentially corrupt kernel virtual page by passing a crafted page in API' in Snapdragon Auto, Snapdra

u'Memory can be potentially corrupted if random index is allowed to manipulate TLB entries in Kernel from user library'

u'Possibility of integer overflow in keymaster 4 while allocating memory due to multiplication of large numcerts value a

u'Improper access control can lead signed process to guess pid of other processes and access their address space' in Sna

u'Improper authentication and signature verification of debug polices in secure boot loader will allow unverified debug

u'SMEM partition can be manipulated in case of any compromise on HLOS, thus resulting in access to memory outside of SME

u'Error in UE due to race condition in EPCO handling' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, S

Versions of add-apt-repository before 0.98.9.2, 0.96.24.32.14, 0.96.20.10, and 0.92.37.8ubuntu0.1~esm1, printed a PPA (p

Tenda AC18 Router through V15.03.05.05_EN and through V15.03.05.19(6318) CN devices could cause a remote code execution

Concrete5 up to and including 8.5.2 allows Unrestricted Upload of File with Dangerous Type such as a .php file via File

An Incorrect Access Control vulnerability exists in /ucms/chk.php in UCMS 1.4.8. This results in information leak via an

The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a C

An Authenticated Persistent XSS vulnerability was discovered in the Best Support System, tested version v3.0.4.

An issue was discovered in GnuTLS before 3.6.15. A server can trigger a NULL pointer dereference in a TLS 1.3 client if

Zoho ManageEngine Applications Manager 14710 and before allows an authenticated admin user to upload a vulnerable jar in

Cleartext Storage of Sensitive Information in Memory vulnerability in Microsoft Windows client in McAfee True Key (TK) p

IBM InfoSphere Information Server 11.7 is vulnerable to stored cross-site scripting. This vulnerability allows users to

IBM InfoSphere Metadata Asset Manager 11.7 is vulnerable to server-side request forgery. By sending a specially crafted

IBM Aspera Connect 3.9.9 could allow a remote attacker to execute arbitrary code on the system, caused by improper loadi

A vulnerability exists in the Aruba Analytics and Location Engine (ALE) web management interface 2.1.0.2 and earlier fir

Bundler prior to 2.1.0 uses a predictable path in /tmp/, created with insecure permissions as a storage location for gem

The package bestzip before 2.1.7 are vulnerable to Command Injection via the options param.

An issue was discovered in Noise-Java through 2020-08-27. AESGCMOnCtrCipherState.encryptWithAd() allows out-of-bounds ac

An issue was discovered in Noise-Java through 2020-08-27. AESGCMFallbackCipherState.encryptWithAd() allows out-of-bounds

An issue was discovered in Noise-Java through 2020-08-27. ChaChaPolyCipherState.encryptWithAd() allows out-of-bounds acc

Insecure Service File Permissions in the bd service in Real Time Logic BarracudaDrive v6.5 allow local attackers to esca

In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can execute arbitrary code via a he

In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can obtain sensitive information fr