2020

An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660

An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660

An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660

An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660

An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660

systemd 37-1 does not properly handle non-existent services, which causes a denial of service (failure of login procedur

In Fat-Free Framework 3.7.1, attackers can achieve arbitrary code execution if developers choose to pass user controlled

Technicolor TC7337NET 08.89.17.23.03 devices allow remote attackers to discover passwords by sniffing the network for an

oauth/oauth2/v1/saml/ in Abacus OAuth Login 2019_01_r4_20191021_0000 before prior to R4 (20.11.2019 Hotfix) allows Refle

Missing form token validation in phpBB 3.2.7 allows CSRF in deleting post attachments.

SAP Fiori Launchpad, versions- 753, 754, does not sufficiently encode user-controlled inputs, and hence allowing the att

SAP Disclosure Management, version 10.1, does not perform necessary authorization checks for an authenticated user, allo

SAP Business Objects Business Intelligence Platform (Crystal Reports), versions- 4.1, 4.2, allows an attacker with basic

SAP Solution Manager (User Experience Monitoring), version- 7.2, due to Missing Authentication Check does not perform an

SAP Cloud Platform Integration for Data Services, version 1.0, allows user inputs to be reflected as error or warning ma

SAP NetWeaver AS ABAP Business Server Pages (Smart Forms), SAP_BASIS versions- 7.00, 7.01, 7.02, 7.10, 7.11, 7.30, 7.31,

The selection query in SAP Treasury and Risk Management (Transaction Management) (EA-FINSERV?versions 600, 603, 604, 605

SAP NetWeaver UDDI Server (Services Registry), versions- 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50; allows an attacker to

SAP NetWeaver Application Server Java (User Management Engine), versions- 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50; does

The SAP Commerce (Testweb Extension), versions- 6.6, 6.7, 1808, 1811, 1905, does not sufficiently encode user-controlled

The SAP Commerce (SmartEdit Extension), versions- 6.6, 6.7, 1808, 1811, is vulnerable to client-side angularjs template

The view FIMENAV_COMPCERT in SAP ERP (MENA Certificate Management), EAPPGLO version 607, SAP_FIN versions- 618, 730 and

SAP Solution Manager (Diagnostics Agent), version 720, allows unencrypted connections from unauthenticated sources. This

SAP Enable Now, before version 1908, does not invalidate session tokens in a timely manner. The Insufficient Session Exp

SAP BusinessObjects Mobile (MobileBIService), version 4.2, allows an attacker to generate multiple requests, using which

SAP Enable Now, before version 1911, sends the Session ID cookie value in URL. This might be stolen from the browser his

Ramp AltitudeCDN Altimeter before 2.4.0 allows authenticated Stored XSS via the vdms/ipmapping.jsp location field to the

In getProcessPss of ActivityManagerService.java, there is a possible side channel information disclosure. This could lea

In setBluetoothTethering of PanService.java, there is a possible permission bypass due to a missing permission check. Th

In several functions of NotificationManagerService.java, there are missing permission checks. This could lead to local e

In the netlink driver, there is a possible out of bounds write due to a race condition. This could lead to local escalat

In SurfaceFlinger, it is possible to override UI confirmation screen protected by the TEE. This could lead to local esca

In Euicc, there is a possible information disclosure due to an included test Certificate. This could lead to remote info

In btm_process_inq_results of btm_inq.cc, there is a possible out of bounds read due to a missing bounds check. This cou

In btu_hcif_connection_comp_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. Th

In l2c_link_process_num_completed_pkts of l2c_link.cc, there is a possible out of bounds read due to a missing bounds ch

In WifiNetworkSuggestionsManager of WifiNetworkSuggestionsManager.java, there is a possible permission revocation due to

In convertHidlNanDataPathInitiatorRequestToLegacy, and convertHidlNanDataPathIndicationResponseToLegacy of hidl_struct_u

In smsSelected of AnswerFragment.java, there is a way to send an SMS from the lock screen due to a permissions bypass. T

In onCreate of SettingsHomepageActivity, there is a possible tapjacking attack. This could lead to local escalation of p

In nfa_hciu_send_msg of nfa_hci_utils.cc, there is a possible out of bounds write due to improper input validation. This

In onReadBuffer() of StreamingSource.cpp, there is a possible information disclosure due to uninitialized data. This cou

In onTransact of IAudioFlinger.cpp, there is a possible stack information leak due to uninitialized data. This could lea

In setMasterMute of AudioService.java, there is a missing permission check. This could lead to local silencing of audio

In DrmPlugin::releaseSecureStops of DrmPlugin.cpp, there is a possible out of bounds write due to a heap buffer overflow

In StatsService::command of StatsService.cpp, there is possible memory corruption due to a race condition. This could le

C++ Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the payloa

Java Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the paylo

XXE vulnerability exists in the Metasys family of product Web Services which has the potential to facilitate DoS attacks

A vulnerability has been identified in Spectrum Power™ 5 (All versions < v5.50 HF02). The web server could allow Cross-S