2020

In Wireshark 3.2.0 to 3.2.7, the GQUIC dissector could crash. This was addressed in epan/dissectors/packet-gquic.c by co

Dr.Fone 3.0.0 allows local users to gain privileges via a Trojan horse DriverInstall.exe because %PROGRAMFILES(X86)%\Won

A vulnerability exists in the Origin Client that could allow a non-Administrative user to elevate their access to either

Foxit Reader before 10.0 allows Remote Command Execution via the app.opencPDFWebPage JavsScript API. An attacker can exe

An issue was discovered in IPFS (aka go-ipfs) 0.4.23. An attacker can generate ephemeral identities (Sybils) and leverag

If exploited, this SQL injection vulnerability could allow remote attackers to obtain application information. This issu

u'While processing invalid connection request PDU which is nonstandard (interval or timeout is 0) from central device ma

u'Use after free while installing new security rule in ipcrtr as old one is deleted and this rule could still be in use

u'Use out of range pointer issue can occur due to incorrect buffer range check during the execution of qseecom' in Snapd

u'Use out of range pointer issue can occur due to incorrect buffer range check during the execution of qseecom.' in Snap

u'Due to an incorrect SMMU configuration, the modem crypto engine can potentially compromise the hypervisor' in Snapdrag

u'QSEE reads the access permission policy for the SMEM TOC partition from the SMEM TOC contents populated by XBL Loader

u'A buffer overflow could occur if the API is improperly used due to UIE init does not contain a buffer size a param' in

u'An Unaligned address or size can propagate to the database due to improper page permissions and can lead to improper a

u'Array index underflow issue in adsp driver due to improper check of channel id before used as array index.' in Snapdra

u'Two threads running simultaneously from user space can lead to race condition in fastRPC driver' in Snapdragon Auto, S

u'Third-party app may also call the broadcasts in Perfdump and cause privilege escalation issue due to improper access c

u'Possible buffer overflow in MHI driver due to lack of input parameter validation of EOT events received from MHI devic

u'Lack of handling unexpected control messages while encryption was in progress can terminate the connection and thus le

u'Buffer over-read issue in Bluetooth estack due to lack of check for invalid length of L2cap packet received from peer

u'Buffer overflow while processing PDU packet in bluetooth due to lack of check of buffer length before copying into it.

u'Buffer overflow while processing a crafted PDU data packet in bluetooth due to lack of check of buffer size before cop

u'Buffer over-read issue in Bluetooth estack due to lack of check for invalid length of L2cap configuration request rece

u'Out of bound access can happen in MHI command process due to lack of check of channel id value received from MHI devic

u'Bluetooth devices does not properly restrict the L2CAP payload length allowing users in radio range to cause a buffer

MailGates and MailAudit products contain Command Injection flaw, which can be used to inject and execute system commands

Single Sign-On for Vmware Tanzu all versions prior to 1.11.3 ,1.12.x versions prior to 1.12.4 and 1.13.x prior to 1.13.1

NVIDIA CUDA Toolkit, all versions prior to 11.1.1, contains a vulnerability in the NVJPEG library in which an out-of-bou

baserCMS before version 4.4.1 is vulnerable to Cross-Site Scripting. Arbitrary JavaScript may be executed by entering a

baserCMS before version 4.4.1 is vulnerable to Cross-Site Scripting. The issue affects the following components: Edit fe

baserCMS before version 4.4.1 is affected by Remote Code Execution (RCE). Code may be executed by logging in as a system

IBM i2 iBase 8.9.13 could allow an attacker to upload arbitrary executable files which, when executed by an unsuspecting

IBM i2 iBase 8.9.13 could allow a remote attacker to obtain sensitive information when a detailed technical error messag

Sal is a multi-tenanted reporting dashboard for Munki with the ability to display information from Facter. In Sal throug

A flaw was found in Ansible Collection community.crypto. openssl_privatekey_info exposes private key in logs. This direc

An issue was discovered in EyesOfNetwork 5.3 through 5.3-8. An authenticated web user with sufficient privileges could a

An issue was discovered in SmartStoreNET before 4.0.1. It does not properly consider the need for a CustomModelPartAttri

In CommCell in Commvault before 14.68, 15.x before 15.58, 16.x before 16.44, 17.x before 17.29, and 18.x before 18.13, D

On BIG-IP LTM 15.1.0-15.1.0.5, 14.1.0-14.1.2.7, 13.1.0-13.1.3.4, and 12.1.0-12.1.5.1, the Traffic Management Microkernel

On versions 15.1.0-15.1.0.5, 14.1.0-14.1.2.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, when a BIG-IP syste

On BIG-IP 15.1.0-15.1.0.5, 14.1.0-14.1.2.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, Virtual servers with

IBM i2 Analyst Notebook 9.2.0 and 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by

IBM i2 Analyst Notebook 9.2.0 and 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by

IBM i2 Analyst Notebook 9.2.0 and 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by

IBM i2 Analyst Notebook 9.2.0 and 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by

Rapid7's Metasploit msfvenom framework handles APK files in a way that allows for a malicious user to craft and publish

On BIG-IP AFM 15.1.0-15.1.0.5, the Traffic Management Microkernel (TMM) may produce a core file while processing layer 4

Synology Router Manager (SRM) before 1.2.4-8081 does not include the HTTPOnly flag in a Set-Cookie header for the sessio

Algorithm downgrade vulnerability in QuickConnect in Synology Router Manager (SRM) before 1.2.4-8081 allows man-in-the-m

Algorithm downgrade vulnerability in QuickConnect in Synology DiskStation Manager (DSM) before 6.2.3-25426-2 allows man-