2020

In BnCrypto::onTransact of ICrypto.cpp, there is a possible information disclosure due to uninitialized data. This could

In onTransact of IHDCP.cpp, there is a possible out of bounds read due to incorrect error handling. This could lead to l

In navigateUpToLocked of ActivityStack.java, there is a possible permission bypass due to a confused deputy. This could

In various methods of PackageManagerService.java, there is a possible permission bypass due to a missing condition for s

In startActivities of ActivityStartController.java, there is a possible escalation of privilege due to a confused deputy

In setImageHeight and setImageWidth of ExifUtils.cpp, there is a possible out of bounds write due to an incorrect bounds

In exif_data_save_data_entry of exif-data.c, there is a possible out of bounds read due to a missing bounds check. This

In setHideSensitive of NotificationStackScrollLayout.java, there is a possible disclosure of sensitive notification cont

In mnld, an incorrect configuration in driver_cfg of mnld for meta factory mode.Product: AndroidVersions: Android SoCAnd

An improper authorization in the receiver component of Email.Product: AndroidVersions: Android SoCAndroid ID: A-14981304

An improper authorization in the receiver component of the Android Suite Daemon.Product: AndroidVersions: Android SoCAnd

An improper authorization while processing the provisioning data.Product: AndroidVersions: Android SoCAndroid ID: A-1498

In onCreate of SettingsBaseActivity.java, there is a possible unauthorized setting modification due to a permissions byp

Veritas APTARE versions prior to 10.4 allowed sensitive information to be accessible without authentication.

Veritas APTARE versions prior to 10.4 allowed remote users to access several unintended files on the server. This vulner

Veritas APTARE versions prior to 10.4 did not perform adequate authorization checks. An authenticated user could gain un

Veritas APTARE versions prior to 10.4 included code that bypassed the normal login process when specific authentication

Spring Security versions 5.3.x prior to 5.3.2, 5.2.x prior to 5.2.4, 5.1.x prior to 5.1.10, 5.0.x prior to 5.0.16 and 4.

An issue was discovered in Progress MOVEit Automation Web Admin. A Web Admin application endpoint failed to adequately s

A vulnerability in Apache Flink (1.1.0 to 1.1.5, 1.2.0 to 1.2.1, 1.3.0 to 1.3.3, 1.4.0 to 1.4.2, 1.5.0 to 1.5.6, 1.6.0 t

In Apache ActiveMQ 5.0.0 to 5.15.11, the webconsole admin GUI is open to XSS, in the view that lists the contents of a q

Apache Camel Netty enables Java deserialization by default. Apache Camel 2.22.x, 2.23.x, 2.24.x, 2.25.0, 3.0.0 up to 3.1

Apache Camel RabbitMQ enables Java deserialization by default. Apache Camel 2.22.x, 2.23.x, 2.24.x, 2.25.0, 3.0.0 up to

Apache Camel's JMX is vulnerable to Rebind Flaw. Apache Camel 2.22.x, 2.23.x, 2.24.x, 2.25.x, 3.0.0 up to 3.1.0 is affec

In Apache RocketMQ 4.2.0 to 4.6.0, when the automatic topic creation in the broker is turned on by default, an evil topi

A buffer overflow vulnerability has been found in the baremetal component of Apache CloudStack. This applies to all vers

An issue was discovered in all versions of Bond JetSelect. Within the JetSelect Application, the web interface hides RAD

Bond JetSelect (all versions) has an issue in the Java class (ENCtool.jar) and corresponding password generation algorit

The administrative passwords for all versions of Bond JetSelect are stored within an unprotected file on the filesystem,

IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused

IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused

IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused

IBM WebSphere Application Server 8.5 is vulnerable to server-side request forgery. By sending a specially crafted reques

IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.3.1 could expose sensitive information to a user throug

IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused

IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused

IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused

IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused b

IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused b

IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused b

IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused b

IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused b

IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused b

IBM Sterling File Gateway 2.2.0.0 through 6.0.3.1 could allow an authenticated user could manipulate cookie information

IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused b

IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused b

Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system propert

In Fazecast jSerialComm, Version 2.2.2 and prior, an uncontrolled search path element vulnerability could allow a malici

Default installations of Zoho ManageEngine ServiceDesk Plus 10.0 before 10500 are vulnerable to XSS injected by a workst