2020

BSS Continuity CMS 4.2.22640.0 has a Remote Denial Of Service vulnerability

Publify before 8.0.1 is vulnerable to a Denial of Service attack

Broadcom based cable modems across multiple vendors are vulnerable to a buffer overflow, which allows a remote attacker

Ansible prior to 1.5.4 mishandles the evaluation of some strings.

Ming (aka libming) 0.4.8 has a heap-based buffer over-read in the function decompile_SWITCH() in decompile.c.

jhead through 3.04 has a heap-based buffer over-read in Get32s when called from ProcessGpsInfo in gpsinfo.c.

jhead through 3.04 has a heap-based buffer over-read in process_DQT in jpgqguess.c.

stb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_get_index.

stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__buf_peek8.

stb stb_truetype.h through 1.22 has a heap-based buffer over-read in ttUSHORT.

stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__buf_get8.

stb stb_truetype.h through 1.22 has an assertion failure in stbtt__buf_seek.

stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__find_table.

stb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_int.

Snare for Linux before 1.7.0 has password disclosure because the rendered page contains the field RemotePassword.

Mozilla developers reported memory safety bugs present in Firefox 71. Some of these bugs showed evidence of memory corru

Mozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3. Some of these bugs showed evi

When Python was installed on Windows, a python file being served with the MIME type of text/plain could be executed by P

Due to a missing case handling object types, a type confusion vulnerability could occur, resulting in a crash. We presum

During the initialization of a new content process, a pointer offset can be manipulated leading to memory corruption and

If an image had not loaded correctly (such as when it is not actually an image), it could be dragged and dropped cross-d

Mozilla developers reported memory safety bugs present in Firefox 70. Some of these bugs showed evidence of memory corru

Mozilla developers reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2. Some of these bugs showed evi

Under certain conditions, when retrieving a document from a DocShell in the antitracking code, a race condition could ca

Under certain conditions, when checking the Resist Fingerprinting preference during device orientation checks, a race co

When running, the updater service wrote status and log files to an unrestricted location; potentially allowing an unpriv

When using nested workers, a use-after-free could occur during worker destruction. This resulted in a potentially exploi

The plain text serializer used a fixed-size array for the number of <ol> elements it could process; however it was possi

GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bfr_read in decode.c.

GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bit_search_sentinel in bits.c.

GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in copy_compressed_bytes in decode_r2007.c.

GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in read_pages_map in decode_r2007.c.

Mozilla developers and community members reported memory safety bugs present in Firefox 69 and Firefox ESR 68.1. Some of

A fixed-size stack buffer could overflow in nrappkit when doing WebRTC signaling. This resulted in a potentially exploit

An attacker could have caused 4 bytes of HMAC output to be written past the end of a buffer stored on the stack. This co

Mozilla community member Philipp reported a memory safety bug present in Firefox 68 when 360 Total Security was installe

When following the value's prototype chain, it was possible to retain a reference to a locale, delete it, and subsequent

Improper refcounting of soft token session objects could cause a use-after-free and crash (likely limited to a denial of

When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the block size, a sm

In ih264d_init_decoder of ih264d_api.c, there is a possible out of bounds write due to a use after free. This could lead

In getProcessRecordLocked of ActivityManagerService.java isolated apps are not handled correctly. This could lead to loc

PHPGurukul Small CRM v2.0 was found vulnerable to authentication bypass via SQL injection when logging into the administ

FTPGetter Professional 5.97.0.223 is vulnerable to a memory corruption bug when a user sends a specially crafted string

CA Automic Dollar Universe 5.3.3 contains a vulnerability, related to the uxdqmsrv binary being setuid root, that allows

A Bash script injection vulnerability exists in Kemp Load Master 7.1-16 and earlier due to a failure to sanitize input i

A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially c

A code-execution vulnerability exists during startup in jhi.dll and otpiha.dll in Symantec VIP Access Desktop before 2.2

A security bypass vulnerability exists in Symantec Norton App Lock 1.0.3.186 and earlier if application pinning is enabl

A privilege escalation vulnerability exists when loading DLLs during boot up and reboot in Symantec IT Management Suite

In Teradici PCoIP Agent before 19.08.1 and PCoIP Client before 19.08.3, an unquoted service path can cause execution of