2020

Multiple SQL injection vulnerabilities in TestLink through 1.9.19 allows remote authenticated users to execute arbitrary

Possible Integer underflow in WLAN function due to lack of check of data received from user side in Snapdragon Auto, Sna

Buffer Over-read when WLAN module gets a WMI message for SAR limits with invalid number of limits to be enforced in Snap

Access to the uninitialized variable when the driver tries to unmap the dma buffer of a request which was never mapped i

Unhandled paging request is observed due to dereferencing an already freed object because of race condition between spar

Compromised reset handler may bypass access control due to AC config is being reset if debug path is enabled to collect

Out of bound access in msm routing due to lack of check of size before accessing in Snapdragon Auto, Snapdragon Compute,

Null-pointer dereference can occur while accessing the segment element info when it is not allocated and assigned in Sna

Out-of-bound writes occurs due to lack of check of buffer size will cause buffer overflow only in 32bit architecture. in

Possible out of bound memory access while playing a crafted clip in media player in Snapdragon Auto, Snapdragon Compute,

Memory use after free issue in audio due to lack of resource control in Snapdragon Auto, Snapdragon Compute, Snapdragon

The size of a buffer is determined by addition and multiplications operations that have the potential to overflow due to

Use-after-free in graphics module due to destroying already queued syncobj in error case in Snapdragon Auto, Snapdragon

Buffer overwrite during memcpy due to lack of check on SSID length validation in Snapdragon Auto, Snapdragon Compute, Sn

Buffer overflow due to lack of upper bound check on channel length which is used for a loop. in Snapdragon Compute, Snap

Possible buffer overflow in WLAN WMI handler due to lack of ssid length check when copying data in Snapdragon Auto, Snap

A stack-based buffer overflow exists in the initialization of the identification stage due to lack of check on the numbe

Lack of check that the RX FIFO write index that is read from shared RAM is less than the FIFO size results into memory c

Possibility of heap-buffer-overflow during last iteration of loop while populating image version information in diag com

Use after free issue occurs If the real device interface goes down and a route lookup is performed while sending a raw I

Null pointer dereference can happen when parsing udta atom which is non-standard and having invalid depth in Snapdragon

Stack buffer overflow due to instance id is misplaced inside definition of hardware accelerated effects in makefile in S

Null pointer dereference issue can happen due to improper validation of CSEQ header response received from network in Sn

Possible double free issue in WLAN due to lack of checking memory free condition. in Snapdragon Auto, Snapdragon Compute

An issue was discovered in Zammad 3.0 through 3.2. The WebSocket server crashes when messages in non-JSON format are sen

An issue was discovered in Zammad 3.0 through 3.2. It does not prevent caching of confidential data within browser memor

An issue was discovered in Centreon before 2.8-30, 18.10-8, 19.04-5, and 19.10-2.. It provides sensitive information via

An issue was discovered in Centreon before 2.8-30,18.10-8, 19.04-5, and 19.10-2. It provides sensitive information via a

CNCF Envoy through 1.13.0 may consume excessive amounts of memory when responding internally to pipelined requests.

CNCF Envoy through 1.13.0 may consume excessive amounts of memory when proxying HTTP/1.1 requests or responses with many

HPE OneView Global Dashboard (OVGD) 1.9 has a remote information disclosure vulnerability. HPE OneView Global Dashboard

ARRIS TG1692A devices allow remote attackers to discover the administrator login name and password by reading the /login

The Appointment Booking Calendar plugin before 1.3.35 for WordPress allows user input (in fields such as Description or

A vulnerability in the SSL implementation of the Cisco Intelligent Proximity solution could allow an unauthenticated, re

A vulnerability in the web-based interface of Cisco Prime Network Registrar (CPNR) could allow an unauthenticated, remot

Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Micros

Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Micros

GeniXCMS 1.1.7 is vulnerable to user privilege escalation due to broken access control. This issue exists because of an

A Broken Access Control vulnerability in the D-Link DSL-2680 web administration interface (Firmware EU_1.03) allows an a

A Broken Access Control vulnerability in the D-Link DSL-2680 web administration interface (Firmware EU_1.03) allows an a

A Broken Access Control vulnerability in the D-Link DSL-2680 web administration interface (Firmware EU_1.03) allows an a

A Broken Access Control vulnerability in the D-Link DSL-2680 web administration interface (Firmware EU_1.03) allows an a

An issue was discovered in tools/pass-change/result.php in phpIPAM 1.4. CSRF can be used to change the password of any u

In parser-server before version 4.1.0, you can fetch all the users objects, by using regex in the NoSQL query. Using the

By adding some special fields to the uri ofrouter app function, the user could abuse background app cgi functions withou

OpenBlocks IoT VX2 prior to Ver.4.0.0 (Ver.3 Series) allows an attacker on the same network segment to bypass authentica

OpenBlocks IoT VX2 prior to Ver.4.0.0 (Ver.3 Series) allows an attacker on the same network segment to execute arbitrary

A flaw was found in the pipe lookup plugin of ansible. Arbitrary commands can be run, when the pipe lookup plugin uses s

Reactor Netty HttpServer, versions 0.9.3 and 0.9.4, is exposed to a URISyntaxException that causes the connection to be

Insufficient boundary checks when decoding JSON in TryParse reads out of bounds memory, potentially leading to DOS. This