2020

common.php in the Gravity Forms plugin before 2.4.9 for WordPress can leak hashed passwords because user_pass is not con

An issue was discovered in fastecdsa before 2.1.2. When using the NIST P-256 curve in the ECDSA implementation, the poin

In Joomla! before 3.9.19, the default settings of the global textfilter configuration do not block HTML inputs for Guest

In Joomla! before 3.9.19, incorrect input validation of the module tag option in com_modules allows XSS.

In Joomla! before 3.9.19, lack of input validation in the heading tag option of the "Articles - Newsflash" and "Articles

In Joomla! before 3.9.19, missing token checks in com_postinstall lead to CSRF.

websocket-extensions ruby module prior to 0.1.5 allows Denial of Service (DoS) via Regex Backtracking. The extension par

websocket-extensions npm module prior to 0.1.4 allows Denial of Service (DoS) via Regex Backtracking. The extension pars

rust-vmm vm-memory before 0.1.1 and 0.2.x before 0.2.1 allows attackers to cause a denial of service (loss of IP network

GE Grid Solutions Reason RT Clocks, RT430, RT431, and RT434, all firmware versions prior to 08A05. The device’s vulnerab

Spring Cloud Config, versions 2.2.x prior to 2.2.3, versions 2.1.x prior to 2.1.9, and older unsupported versions allow

The MailPoet plugin before 3.23.2 for WordPress allows remote attackers to inject arbitrary web script or HTML using ext

Grafana 5.3.1 has XSS via a link on the "Dashboard > All Panels > General" screen. NOTE: this issue exists because of an

Grafana 5.3.1 has XSS via a column style on the "Dashboard > Table Panel" screen. NOTE: this issue exists because of an

Grafana 5.3.1 has XSS via the "Dashboard > Text Panel" screen. NOTE: this issue exists because of an incomplete fix for

A race condition can occur when using the fastrpc memory mapping API. in Snapdragon Auto, Snapdragon Compute, Snapdragon

Firmware will hit assert in WLAN firmware If encrypted data length in FILS IE of reassoc response is more than 528 bytes

Integer overflow may occur if atom size is less than atom offset as there is improper validation of atom size in Snapdra

Array out of bound may occur while playing mp3 file as no check is there on offset if it is greater than the buffer allo

Possibility of out of bound access while processing the responses from video firmware in Snapdragon Auto, Snapdragon Com

When making query to DSP capabilities, Stack out of bounds occurs due to wrong buffer length configured for DSP attribut

kernel failure due to load failures while running v1 path directly via kernel in Snapdragon Mobile in SM8250, SXR2130

NULL exception due to accessing bad pointer while posting events on RT FIFO in Snapdragon Compute, Snapdragon Mobile, Sn

Buffer overflow in display function due to memory copy without checking length of size using strcpy function in Snapdrag

Valid deauth/disassoc frames is dropped in case if RMF is enabled and some rouge peer keep on sending rogue deauth/disas

Possibility of double free of the drawobj that is added to the drawqueue array of the context during IOCTL commands as t

Ene.sys in Asus Aura Sync through 1.07.71 does not properly validate input to IOCTL 0x80102044, 0x80102050, and 0x801020

Failure in buffer management while accessing handle for HDR blit when color modes not supported by display in Snapdragon

Out of bound memory access while processing qpay due to not validating length of the response buffer provided by User. i

Out of bound memory access while processing ese transmit command due to passing Response buffer received from user in Sn

Using non-time-constant functions like memcmp to compare sensitive data can lead to information leakage through timing s

Integer overflow in calculating estimated output buffer size when getting a list of installed Feature IDs, Serial Number

Improper permissions in XBL_SEC region enable user to update XBL_SEC code and data and divert the RAM dump path to norma

When attempting to create a new XFRM policy, a stack out-of-bounds read will occur if the user provides a template where

Out of bound read in Fingerprint application due to requested data is being used without length check in Snapdragon Auto

Out of bound read in in fingerprint application due to requested data assigned to a local buffer without length check in

Out of bound read in adm call back function due to incorrect boundary check for payload in command response in Snapdrago

Buffer over-read in ADSP parse function due to lack of check for availability of sufficient data payload received in com

IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitra

IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitra

IBM Planning Analytics Local 2.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decr

IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitra

IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitra

hw/pci/msix.c in QEMU 4.2.0 allows guest OS users to trigger an out-of-bounds access via a crafted address in an msi-x m

An issue was discovered in Docker Engine before 19.03.11. An attacker in a container, with the CAP_NET_RAW capability, c

An issue was discovered in Sysax Multi Server 6.90. A session can be hijacked if one observes the sid value in any /scgi

An issue was discovered in Sysax Multi Server 6.90. There is reflected XSS via the /scgi sid parameter.

An issue was discovered in Sysax Multi Server 6.90. An attacker can determine the username (under which the web server i

resources/src/mediawiki.page.ready/ready.js in MediaWiki before 1.35 allows remote attackers to force a logout and exter

address_space_map in exec.c in QEMU 4.2.0 can trigger a NULL pointer dereference related to BounceBuffer.