2020

Out of Bound issue in DSP services while processing received arguments due to improper validation of length received as

Buffer overflow in LibFastCV library due to improper size checks with respect to buffer length' in Snapdragon Auto, Snap

Possible buffer overflow in Fastrpc while handling received parameters due to lack of validation on input parameters' in

u'Possible integer overflow to heap overflow while processing command due to lack of check of packet length received' in

Buffer overflow/underflow occurs when typecasting the buffer passed by CPU internally in the library which is not aligne

Arbitrary access to DSP memory due to improper check in loaded library for data received from CPU side' in Snapdragon Au

u'Use after free issue in Bluetooth transport driver when a method in the object is accessed after the object has been d

u'Buffer over read in boot due to size check ignored before copying GUID attribute from request to response' in Snapdrag

u'Possible buffer overflow in WMA message processing due to integer overflow occurs when processing command received fro

u'Possible buffer overflow in WIFI hal process due to copying data without checking the buffer length' in Snapdragon Aut

u'Integer overflow can cause a buffer overflow due to lack of table length check in the extensible boot Loader during th

u'Possible buffer overflow in WIFI hal process due to usage of memcpy without checking length of destination buffer' in

This affects the package nodemailer before 6.4.16. Use of crafted recipient email addresses may result in arbitrary comm

A vulnerability in the ingress packet processing function of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation

An authentication bypass vulnerability exists in the GlobalProtect SSL VPN component of Palo Alto Networks PAN-OS softwa

An information exposure vulnerability exists in Palo Alto Networks Panorama software that discloses the token for the Pa

An OS command injection and memory corruption vulnerability in the PAN-OS management web interface that allows authentic

NVIDIA GeForce NOW application software on Windows, all versions prior to 2.0.25.119, contains a vulnerability in its op

touchbase.ai before version 2.0 is vulnerable to Cross-Site Scripting (XSS). The vulnerability allows an attacker to sen

touchbase.ai before version 2.0 is vulnerable to Cross-Site Scripting. The vulnerability allows an attacker to inject HT

MoinMoin is a wiki engine. In MoinMoin before version 1.9.11, an attacker with write permissions can upload an SVG file

On Audi A7 MMI 2014 vehicles, the Bluetooth stack in Audi A7 MMI Multiplayer with version (N+R_CN_AU_P0395) mishandles %

Solstice-Pod up to 5.0.2 WEBRTC server mishandles the format-string specifiers %x; %p; %c and %s in the screen_key, disp

A low level user of IBM Cognos Controller 10.3.0, 10.3.1, 10.4.0, 10.4.1, and 10.4.2 who has Administration rights to th

The package grpc before 1.24.4; the package @grpc/grpc-js before 1.1.8 are vulnerable to Prototype Pollution via loadPac

Server-side request forgery vulnerability in the ePO extension in McAfee MVISION Endpoint prior to 20.11 allows remote a

External entity attack vulnerability in the ePO extension in McAfee MVISION Endpoint prior to 20.11 allows remote attack

HEVC Video Extensions Remote Code Execution Vulnerability

HEVC Video Extensions Remote Code Execution Vulnerability

HEVC Video Extensions Remote Code Execution Vulnerability

HEVC Video Extensions Remote Code Execution Vulnerability

HEVC Video Extensions Remote Code Execution Vulnerability

AV1 Video Extension Remote Code Execution Vulnerability

Visual Studio Code JSHint Extension Remote Code Execution Vulnerability

HEIF Image Extensions Remote Code Execution Vulnerability

Microsoft Teams Remote Code Execution Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows Kernel Local Elevation of Privilege Vulnerability

Raw Image Extension Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Raw Image Extension Remote Code Execution Vulnerability

Raw Image Extension Remote Code Execution Vulnerability

Raw Image Extension Remote Code Execution Vulnerability

Windows Update Stack Elevation of Privilege Vulnerability

Windows Update Orchestrator Service Elevation of Privilege Vulnerability

Windows USO Core Worker Elevation of Privilege Vulnerability

Windows Update Orchestrator Service Elevation of Privilege Vulnerability

Windows Update Orchestrator Service Elevation of Privilege Vulnerability

Windows Update Medic Service Elevation of Privilege Vulnerability

Windows GDI+ Remote Code Execution Vulnerability