2020

Firefox did not block execution of scripts with incorrect MIME types when the response was intercepted and cached throug

OneCRL was non-functional in the new Firefox for Android due to a missing service initialization. This could result in a

In some cases, removing HTML elements during sanitization would keep existing SVG event handlers and therefore lead to X

When a user downloaded a file in Firefox for Android, if a cookie is set, it would have been re-sent during a subsequent

When accepting a malicious intent from other installed apps, Firefox for Android accepted manifests from arbitrary file

It was possible to cause the browser to enter fullscreen mode without displaying the security UI; thus making it possibl

Incorrect bookkeeping of functions inlined during JIT compilation could have led to memory corruption and a potentially

A parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire, even after sanitizati

In certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions resulting in an exploitable

The moodlenetprofile user profile field required extra sanitizing to prevent a stored XSS risk. This affects versions 3.

The Microsoft Teams online service contains a stored cross-site scripting vulnerability in the displayName parameter tha

AnyDesk for macOS versions 6.0.2 and older have a vulnerability in the XPC interface that does not properly validate cli

Red Discord Bot Dashboard is an easy-to-use interactive web dashboard to control your Redbot. In Red Discord Bot before

Opencast before versions 8.9 and 7.9 disables HTTPS hostname verification of its HTTP client used for a large portion of

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.0, iOS 14.0 and iP

Prototype pollution vulnerability in 'deepref' versions 1.1.1 through 1.2.1 allows attacker to cause a denial of service

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.0.1, watch

A path handling issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.0.1. A remote atta

A flaw was found in the memory management API of QEMU during the initialization of a memory region cache. This issue cou

A flaw was found in ImageMagick in coders/txt.c. An attacker who submits a crafted file that is processed by ImageMagick

A floating point math calculation in ScaleAnyToQuantum() of /MagickCore/quantum-private.h could lead to undefined behavi

In ParseMetaGeometry() of MagickCore/geometry.c, image height and width calculations can lead to divide-by-zero conditio

in SetImageExtent() of /MagickCore/image.c, an incorrect image depth size can cause a memory leak because the code which

In IntensityCompare() of /magick/quantize.c, there are calls to PixelPacketIntensity() which could return overflowed val

There are several memory leaks in the MIFF coder in /coders/miff.c due to improper image depth values, which can be trig

A flaw was found in ImageMagick in MagickCore/quantum-private.h. An attacker who submits a crafted file that is processe

A flaw was found in ImageMagick in MagickCore/quantum-export.c. An attacker who submits a crafted file that is processed

A flaw was found in ImageMagick in MagickCore/colorspace-private.h and MagickCore/quantum.h. An attacker who submits a c

Fast-csv is an npm package for parsing and formatting CSVs or any other delimited value file in node. In fast-cvs before

In CatromWeights(), MeshInterpolate(), InterpolatePixelChannel(), InterpolatePixelChannels(), and InterpolatePixelInfo()

In the CropImage() and CropImageToTiles() routines of MagickCore/transform.c, rounding calculations performed on unconst

WriteOnePNGImage() from coders/png.c (the PNG coder) has a for loop with an improper exit condition that can allow an ou

A memory initialization issue was addressed. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watch

A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.0.1, watchOS

A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, wat

A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. T

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.0.1, i

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.2 and iPadOS 14.2. P

An issue existed in the handling of incoming calls. The issue was addressed with additional state checks. This issue is

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.0.1, watch

An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, iOS 14

An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchO

An integer overflow was addressed through improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchO

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.2 and iPadOS 14.2, tvO

Multiple integer overflows were addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1. A

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 14.2 and iPadOS 14.2,

A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue is f

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Big Sur 11.0.1. An application ma

An authentication issue was addressed with improved state management. This issue is fixed in iOS 14.2 and iPadOS 14.2. A