2020

An issue was discovered in Centreon before 2.8.30, 18.10.8, 19.04.5, and 19.10.2. SQL Injection exists via the include/m

An issue was discovered in Centreon before 18.10.8, 19.04.5, and 19.10.2. It provides sensitive information via an unaut

Spring Cloud Config, versions 2.2.x prior to 2.2.2, versions 2.1.x prior to 2.1.7, and older unsupported versions allow

HCL Connections 6.5 is vulnerable to possible information leakage. Connections could disclose sensitive information via

The HCL Connections 5.5 help system is vulnerable to cross-site scripting, caused by improper validation of user-supplie

The ESET AV parsing engine allows virus-detection bypass via a crafted BZ2 Checksum field in an archive. This affects ve

QEMU 4.1.0 has a memory leak in zrle_compress_data in ui/vnc-enc-zrle.c during a VNC disconnect operation because libz i

A vulnerability was found in business-central, as shipped in rhdm-7.5.1 and rhpam-7.5.1, where encoded passwords are sto

In PrestaShop before version 1.7.6.4, when a customer edits their address, they can freely change the id_address in the

An issue was discovered in Centreon before 2.8.31, 18.10.9, 19.04.6, and 19.10.3. It provides sensitive information via

An issue was discovered in Centreon before 18.10.8, 19.10.1, and 19.04.2. It allows CSRF with resultant remote command e

An untrusted search path vulnerability in the installer of PDFescape Desktop version 4.0.22 and earlier allows an attack

An issue was discovered on XIAOMI AI speaker MDZ-25-DT 1.34.36, and 1.40.14. Attackers can get root shell by accessing t

IBM Platform LSF 9.1 and 10.1, IBM Spectrum LSF Suite 10.2, and IBM Spectrum Suite for HPA 10.2 could allow a local user

init_tmp in TeeJee.FileSystem.vala in Timeshift before 20.03 unsafely reuses a preexisting temporary directory in the pr

An issue was discovered on D-Link DSL-2640B E1 EU_1.01 devices. The administrative interface doesn't perform authenticat

Django 1.11 before 1.11.29, 2.2 before 2.2.11, and 3.0 before 3.0.4 allows SQL Injection if untrusted data is used as a

Comtrend VR-3033 DE11-416SSG-C01_R02.A2pvI042j1.d26m devices have Multiple Authenticated Command Injection vulnerabiliti

D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Upgrade Firmwa

D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Save Configura

D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Restore Config

IPTV Smarters WEB TV PLAYER through 2020-02-22 allows attackers to execute OS commands by uploading a script.

HUMAX HGA12R-02 BRGCAA 1.1.53 devices allow Session Hijacking.

PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS, as demonstrated by the ExpenseItem or ExpenseCo

PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to SQL injection, as demonstrated by the email parameter in in

Multiple SQL injection vulnerabilities in TestLink through 1.9.19 allows remote authenticated users to execute arbitrary

The secret key used to make the Initial Sequence Number in the TCP SYN packet could be brute forced and therefore can be

Possible buffer overflow in WLAN handler due to lack of validation of destination buffer size before copying it in Snapd

Possible buffer overflow in WLAN handler due to lack of validation of destination buffer size before copying into it in

Possible buffer overflow in data offload handler due to lack of check of keydata length when copying data in Snapdragon

Possible buffer overflow in WLAN Parser due to lack of length check when copying data in Snapdragon Auto, Snapdragon Com

Buffer overflow occurs while processing LMP packet in which name length parameter exceeds value specified in BT-specific

Possible integer overflow while checking the length of frame which is a 32 bit integer and is added to another 32 bit in

Possible Integer underflow in WLAN function due to lack of check of data received from user side in Snapdragon Auto, Sna

While parsing Service Descriptor Extended Attribute received as part of SDF frame, there is a possibility that incorrect

Potential buffer over-read due to lack of bound check of memory offset passed in WLAN firmware in Snapdragon Compute, Sn

Buffer Over-read when WLAN module gets a WMI message for SAR limits with invalid number of limits to be enforced in Snap

Access to the uninitialized variable when the driver tries to unmap the dma buffer of a request which was never mapped i

Unhandled paging request is observed due to dereferencing an already freed object because of race condition between spar

Compromised reset handler may bypass access control due to AC config is being reset if debug path is enabled to collect

Out of bound access in msm routing due to lack of check of size before accessing in Snapdragon Auto, Snapdragon Compute,

Null-pointer dereference can occur while accessing the segment element info when it is not allocated and assigned in Sna

Out-of-bound writes occurs due to lack of check of buffer size will cause buffer overflow only in 32bit architecture. in

Possible out of bound memory access while playing a crafted clip in media player in Snapdragon Auto, Snapdragon Compute,

Possible buffer overflow while processing clientlog and serverlog due to lack of validation of data received in logs in

Memory use after free issue in audio due to lack of resource control in Snapdragon Auto, Snapdragon Compute, Snapdragon

Buffer overflow can occur while parsing RSN IE containing list of PMK ID`s which are more than the buffer size in Snapdr

The size of a buffer is determined by addition and multiplications operations that have the potential to overflow due to

Use-after-free in graphics module due to destroying already queued syncobj in error case in Snapdragon Auto, Snapdragon

Buffer overwrite during memcpy due to lack of check on SSID length validation in Snapdragon Auto, Snapdragon Compute, Sn