2020

A denial of service vulnerability exists in Fastify v2.14.1 and v3.0.0-rc.4 that allows a malicious user to trigger reso

IBM Security Guardium 10.5, 10.6, and 11.1 could disclose sensitive information on the login page that could aid in furt

IBM Security Guardium 10.5, 10.6, and 11.1 uses weaker than expected cryptographic algorithms that could allow an attack

There's an issue with grub2 in all versions before 2.06 when handling squashfs filesystems containing a symbolic link wi

A flaw was found in grub2, prior to version 2.06. An attacker may use the GRUB 2 flaw to hijack and tamper the GRUB veri

Use after free issue while processing error notification from camx driver due to not properly releasing the sequence dat

Possible out of bounds read due to a missing bounds check and could lead to local information disclosure in the wifi dri

Possible out of bound access while processing assoc response from host due to improper length check before copying into

Out of bound write while QoS DSCP mapping due to improper input validation for data received from association response f

Possible buffer overflow while parsing mp4 clip with corrupted sample atoms due to improper validation of index in Snapd

Use-after-free issue could occur due to dangling pointer when generating a frame buffer in OpenGL ES in Snapdragon Compu

Memory corruption can occurs in trusted application if offset size from HLOS is more than actual mapped buffer size in S

Memory failure in content protection module due to not having pointer within the scope in Snapdragon Auto, Snapdragon Co

Possible buffer overflow and over read possible due to missing bounds checks for fixed limits if we consider widevine HL

Out of bounds read can happen in diag event set mask command handler when user provided length in the command request is

Register write via debugfs is disabled by default to prevent register writing via debugfs. in Snapdragon Auto, Snapdrago

Device misbehavior may be observed when incorrect offset, length or number of buffers is passed by user space in Snapdra

Array out of bound access can occur in display module due to lack of bound check on input parcel received in Snapdragon

Close and bind operations done on a socket can lead to a Use-After-Free condition. in Snapdragon Auto, Snapdragon Comput

When kernel thread unregistered listener, Use after free issue happened as the listener client`s private data has been a

This affects the package express-fileupload before 1.1.8. If the parseNested option is enabled, sending a corrupt HTTP r

Global TechStream (GTS) for TOYOTA dealers version 15.10.032 and earlier allows an attacker to cause a denial-of-service

The seafile-client client 7.0.8 for Seafile is vulnerable to DLL hijacking because it loads exchndl.dll from the current

libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if ssh_buffer_new returns NULL.

In grub2 versions before 2.06 the grub memory allocator doesn't check for possible arithmetic overflows on the requested

beroNet VoIP Gateways before 3.0.16 have a PHP script that allows downloading arbitrary files, including ones with crede

Grandstream HT800 series firmware version 1.0.17.5 and below contain a backdoor in the SSH service. An authenticated rem

Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to a denial of service attack against the TR-

Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to CPU exhaustion due to an infinite loop in

Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to an OS command injection vulnerability. Una

A flaw was found in kubevirt 0.29 and earlier. Virtual Machine Instances (VMIs) can be used to gain access to the host's

In GNOME Balsa before 2.6.0, a malicious server operator or man in the middle can trigger a NULL pointer dereference and

In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with a NULL pointer derefere

Integer overflows were discovered in the functions grub_cmd_initrd and grub_initrd_init in the efilinux component of GRU

GRUB2 contains a race condition in grub_script_function_create() leading to a use-after-free vulnerability which can be

GRUB2 fails to validate kernel signature when booted directly without shim, allowing secure boot to be bypassed. This on

An issue was discovered in the client side of Zoho ManageEngine Desktop Central 10.0.552.W. An attacker-controlled serve

On Aspire-derived NEC PBXes, including all versions of SV8100 devices, a set of documented, static login credentials may

An attacker with access to an InMail voicemail box equipped with the find me/follow me feature on Aspire-derived NEC PBX

NEC UM8000, UM4730 and prior non-InMail voicemail systems with all known software versions may permit an infinite number

An attacker with knowledge of the modem access number on a NEC UM8000 voicemail system may use SSH tunneling or standard

An exploitable privilege escalation vulnerability exists in the WebPro functionality of Aspire-derived NEC PBXes, includ

Aspire-derived NEC PBXes operating InMail software, including all versions of SV8100, SV9100, SL1100 and SL2100 devices

Aspire-derived NEC PBXes, including the SV8100, SV9100, SL1100 and SL2100 with software releases 7.0 or higher contain t

The WebPro interface in NEC SV9100 software releases 7.0 or higher allows unauthenticated remote attackers to reset all

Certain builds of NEC SV9100 software could allow an unauthenticated, remote attacker to log into a device running an af

In auth0 (npm package) versions before 2.27.1, a DenyList of specific keys that should be sanitized from the request obj

In TYPO3 CMS greater than or equal to 9.0.0 and less than 9.5.20, and greater than or equal to 10.0.0 and less than 10.4

In TYPO3 CMS greater than or equal to 9.0.0 and less than 9.5.20, and greater than or equal to 10.0.0 and less than 10.4

In TYPO3 installations with the "mediace" extension from version 7.6.2 and before version 7.6.5, it has been discovered