2020

In DIMO YellowBox CRM before 6.3.4, Path Traversal in images/Apparence (dossier=../) and servletrecuperefichier (documen

Incorrect Access Control in AfficheExplorateurParam() in DIMO YellowBox CRM before 6.3.4 allows a standard authenticated

websitebaker prior to and including 2.8.1 has an authentication error in backup module.

Mozilla Firefox through 1.5.0.3 has a vulnerability in processing the content-length header

A remote code execution (RCE) vulnerability exists in qdPM 9.1 and earlier. An attacker can upload a malicious PHP code

Locked regions may be modified through other interfaces in secure boot loader image due to improper access control. in S

Possible buffer overflow issue in error processing due to improper validation of array index value in Snapdragon Auto, S

Use after free while processing eeprom query as there is a chance to not unlock mutex after error occurs in Snapdragon A

Possible stack-use-after-scope issue in NFC usecase for card emulation in Snapdragon Auto, Snapdragon Industrial IOT, Sn

String format issue will occur while processing HLOS data as there is no user input validation to ensure inputs are prop

The device may enter into error state when some tool or application gets failure at 1st buffer map all and performs 2nd

Possible null pointer dereference issue in location assistance data processing due to missing null check on resources be

Null pointer exception can happen while parsing invalid MKV clip where cue information is parsed before segment informat

Out-of-bound access will occur in USB driver due to lack of check to validate the frame size passed by user in Snapdrago

Potential use-after-free heap error during Validate/Present calls on display HW composer in Snapdragon Auto, Snapdragon

Possible integer overflow happens when mmap find function will increment refcount every time when it invokes and can lea

Use after free issue occurs when camera access sensors data through direct report mode in Snapdragon Auto, Snapdragon Co

Use after free issue due to using of invalidated iterator to delete an object in sensors HAL in Snapdragon Auto, Snapdra

Null pointer dereference can occur while parsing the clip which is nonstandard in Snapdragon Auto, Snapdragon Compute, S

While transferring data from APPS to DSP, Out of bound in FastRPC HLOS Driver due to the data buffer which can be contro

While trying to obtain datad ipc handle during DPL initialization, Heap use-after-free issue can occur if modem SSR occu

The CSV upload feature in /supervisor/procesa_carga.php on Logaritmo Aware CallManager 2012 devices allows upload of .ph

Comtech Stampede FX-1010 7.4.3 devices allow remote authenticated administrators to achieve remote code execution by nav

Comtech Stampede FX-1010 7.4.3 devices allow remote authenticated administrators to achieve remote code execution by nav

Comtech Stampede FX-1010 7.4.3 devices allow remote authenticated administrators to achieve remote code execution by nav

The WP Database Backup plugin through 5.5 for WordPress stores downloads by default locally in the directory wp-content/

Meinberg Lantime M300 and M1000 devices allow attackers (with privileges to configure a device) to execute arbitrary OS

Cacti 1.2.8 allows Remote Code Execution (by privileged users) via shell metacharacters in the Performance Boost Debug L

Evoko Home devices 1.31 through 1.37 allow remote attackers to obtain sensitive information (such as usernames and passw

A Persistent Arbitrary Code Execution vulnerability exists in the Trend Micro Security 2020 (v160 and 2019 (v15) consume

Eclipse Memory Analyzer version 1.9.1 and earlier is subject to a deserialization vulnerability if an index file of a pa

Improper access control in driver for Intel(R) VTune(TM) Amplifier for Windows* before update 8 may allow an authenticat

Improper permissions in the installer for Intel(R) RWC 3 for Windows before version 7.010.009.000 may allow an authentic

Geutebruck IP Cameras G-Code(EEC-2xxx), G-Cam(EBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx): All versions 1.12.0.25 and prior m

Geutebruck IP Cameras G-Code(EEC-2xxx), G-Cam(EBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx): All versions 1.12.0.25 and prior m

An issue was discovered in Maarch RM before 2.5. A privilege escalation vulnerability allows an authenticated user with

The keystone-json-assignment package in SUSE Openstack Cloud 8 before commit d7888c75505465490250c00cc0ef4bb1af662f9f ev

The docker-kubic package in SUSE CaaS Platform 3.0 before 17.09.1_ce-7.6.1 provided access to an insecure API locally on

Intelbras WRN240 devices do not require authentication to replace the firmware via a POST request to the incoming/Firmwa

In Spring Framework, versions 5.2.x prior to 5.2.3, versions 5.1.x prior to 5.1.13, and versions 5.0.x prior to 5.0.16,

A local privilege-escalation vulnerability exists in the Poly Plantronics Hub before 3.14 for Windows client application

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit PDF Reader, version 9.7.0.29435. A

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader, versio

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit PDF Reader, version 9.7.0.29435. A

The WordPress plugin, WP Database Reset through 3.1, contains a flaw that gave any authenticated user, with minimal perm

The Broadcom brcmfmac WiFi driver prior to commit a4176ec356c73a46c07c181c6d04039fafa34a9f is vulnerable to a frame vali

The Broadcom brcmfmac WiFi driver prior to commit 1b5e2423164b3670e8bc9174e4762d297990deff is vulnerable to a heap buffe

GE PACSystems RX3i CPE100/115: All versions prior to R9.85,CPE302/305/310/330/400/410: All versions prior to R9.90,CRU/3

Apache CXF ships with a OpenId Connect JWK Keys service, which allows a client to obtain the public keys in JWK format,