2020

In the Zephyr Project MQTT code, improper bounds checking can result in memory corruption and possibly remote code execu

In the Zephyr project Bluetooth subsystem, certain duplicate and back-to-back packets can cause incorrect behavior, resu

A remote adversary with the ability to send arbitrary CoAP packets to be parsed by Zephyr is able to cause a denial of s

An off-by-one error in the Zephyr project MQTT packet length decoder can result in memory corruption and possible remote

Improper handling of the full-buffer case in the Zephyr Bluetooth implementation can result in memory corruption. This i

The Kubernetes kube-controller-manager in versions v1.0-1.14, versions prior to v1.15.12, v1.16.9, v1.17.5, and version

A vulnerability in the improper handling of symbolic links in Bitdefender Antivirus Free can allow an unprivileged user

IBM WebSphere Application Server 8.5 and 9.0 traditional could allow a remote attacker to execute arbitrary code on the

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 traditional could allow a remote attacker to obtain sensitive in

IBM WebSphere Application Server Network Deployment 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to execute arbi

IBM Worklight/MobileFoundation 8.0.0.0 does not properly invalidate session cookies when a user logs out of a session, w

A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5.1 and iPadOS 13.

Huawei Smartphones HONOR 20 PRO;Honor View 20;HONOR 20 have an improper handling of exceptional condition Vulnerability.

Huawei products NIP6800;Secospace USG6600;USG9500 have a memory leak vulnerability. An attacker with high privileges exp

regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_c

Apache Unomi allows conditions to use OGNL scripting which offers the possibility to call static Java classes from the J

An issue was discovered in Docker Desktop through 2.2.0.5 on Windows. If a local attacker sets up their own named pipe p

Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situation. A craft

Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers

Pydio Cells 2.0.4 allows any user to upload a profile image to the web application, including standard and shared user r

In Pydio Cells 2.0.4, once an authenticated user shares a file selecting the create a public link option, a hidden share

An issue was discovered on LG mobile devices with Android OS software before 2020-06-01. Local users can cause a denial

An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 (MTK chipsets). A dangerous AT com

An issue was discovered on LG mobile devices with Android OS 9 and 10 (MTK chipsets). An AT command handler allows attac

An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 (MTK chipsets). Code execution can

An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 (MTK chipsets). Code execution can

The MQTT protocol 3.1.1 requires a server to set a timeout value of 1.5 times the Keep-Alive value specified by a client

In MiniShare before 1.4.2, there is a stack-based buffer overflow via an HTTP PUT request, which allows an attacker to a

Portable UPnP SDK (aka libupnp) 1.12.1 and earlier allows remote attackers to cause a denial of service (crash) via a cr

Pydio Cells 2.0.4 allows XSS. A malicious user can either upload or create a new file that contains potentially maliciou

The update feature for Pydio Cells 2.0.4 allows an administrator user to set a custom update URL and the public RSA key

Pydio Cells 2.0.4 allows an authenticated user to write or overwrite existing files in another user’s personal and cells

Pydio Cells 2.0.4 web application offers an administrative console named “Cells Console” that is available to users with

Castel NextGen DVR v1.0.0 is vulnerable to CSRF in all state-changing request. A __RequestVerificationToken is set by th

Castel NextGen DVR v1.0.0 stores and displays credentials for the associated SMTP server in cleartext. Low privileged us

Castel NextGen DVR v1.0.0 is vulnerable to authorization bypass on all administrator functionality. The application fail

Castel NextGen DVR v1.0.0 is vulnerable to privilege escalation through the Adminstrator/Users/Edit/:UserId functionalit

all versions of url-regex are vulnerable to Regular Expression Denial of Service. An attacker providing a very long stri

An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. The DeX Lockscreen feature does not

An issue was discovered on Samsung mobile devices with Q(10.0) software. The Lockscreen feature does not block Quick Pan

An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. HWRResProvider allows path

An issue was discovered on Samsung mobile devices with O(8.x) (with TEEGRIS) software. The Gatekeeper Trustlet allows a

An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (with TEEGRIS) software. Secure Folde

An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. The system area allows arbi

An issue was discovered on Samsung mobile devices with Q(10.0) (with TEEGRIS on Exynos chipsets) software. The Widevine

An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (Exynos 7570 chipsets) software. The Trustonic

An issue was discovered on Samsung mobile devices with P(9.0) software. One UI HOME logging can leak information. The Sa

An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. Attackers can disable the SEAndroid

A flaw was found in QEMU in the implementation of the Pointer Authentication (PAuth) support for ARM introduced in versi

An issue was discovered in Foxit Reader and PhantomPDF before 9.5. It allows signature validation bypass via a modified