2020

Buffer overflow due to lack of upper bound check on channel length which is used for a loop. in Snapdragon Compute, Snap

Possible buffer overflow in WLAN WMI handler due to lack of ssid length check when copying data in Snapdragon Auto, Snap

A stack-based buffer overflow exists in the initialization of the identification stage due to lack of check on the numbe

Lack of check that the RX FIFO write index that is read from shared RAM is less than the FIFO size results into memory c

Possibility of null pointer access if the SPDM commands are executed in the non-standard way in TZ. in Snapdragon Auto,

UTCB object has a function pointer called by the reaper to deallocate its memory resources and this address can potentia

Possibility of heap-buffer-overflow during last iteration of loop while populating image version information in diag com

Use after free issue occurs If the real device interface goes down and a route lookup is performed while sending a raw I

Stack overflow can occur when SDP is received with multiple payload types in the FMTP attribute of a video M line in Sna

Buffer overflow can occur when processing non standard SDP video Image attribute parameter in a VILTE\VOLTE call in Snap

Null pointer dereference can happen when parsing udta atom which is non-standard and having invalid depth in Snapdragon

Possible Stack overflow can occur when processing a large SDP body or non standard SDP body without right delimiters in

Filling media attribute tag names without validating the destination buffer size which can result in the buffer overflow

Improper input validation while processing SIP URI received from the network will lead to buffer over-read and then to d

Stack buffer overflow due to instance id is misplaced inside definition of hardware accelerated effects in makefile in S

Multiple Read overflows issue due to improper length check while decoding Identity Request in CSdomain/Authentication Re

Multiple Read overflows due to improper length checks while decoding authentication in Cs domain/RAU Reject and TC cmd i

Multiple Buffer Over-read issue can happen due to improper length checks while decoding Service Reject/RAU Reject/PTMSI

Buffer Over-read when UE is trying to process the message received form the network without zero termination in Snapdrag

Null pointer dereference issue can happen due to improper validation of CSEQ header response received from network in Sn

Buffer overflow can occur in WLAN firmware while parsing beacon/probe_response frames during roaming in Snapdragon Auto,

Out of bound write in WLAN driver due to NULL character not properly placed after SSID name in Snapdragon Auto, Snapdrag

Possible double free issue in WLAN due to lack of checking memory free condition. in Snapdragon Auto, Snapdragon Compute

An issue was discovered in Zammad 3.0 through 3.2. It returns source code of static resources when submitting an OPTIONS

An issue was discovered in Zammad 3.0 through 3.2. After authentication, it transmits sensitive information to the user

An XSS issue was discovered in Zammad 3.0 through 3.2. Malicious code can be provided by a low-privileged user through t

An issue was discovered in Zammad 3.0 through 3.2. The Forgot Password functionality is implemented in a way that would

An issue was discovered in Zammad 3.0 through 3.2. The WebSocket server crashes when messages in non-JSON format are sen

An issue was discovered in Zammad 3.0 through 3.2. It allows for users to view ticket customer details associated with s

An XSS issue was discovered in Zammad 3.0 through 3.2. Malicious code can be provided by a low-privileged user through t

An XSS issue was discovered in Zammad 3.0 through 3.2. Malicious code can be provided by a low-privileged user through t

An issue was discovered in Zammad 3.0 through 3.2. It may respond with verbose error messages that disclose internal app

An issue was discovered in Zammad 3.0 through 3.2. It does not prevent caching of confidential data within browser memor

CNCF Envoy through 1.13.0 TLS inspector bypass. TLS inspector could have been bypassed (not recognized as a TLS client)

An issue was discovered in Centreon before 2.8-30, 18.10-8, 19.04-5, and 19.10-2.. It provides sensitive information via

An issue was discovered in Centreon before 2.8-30,18.10-8, 19.04-5, and 19.10-2. It provides sensitive information via a

CNCF Envoy through 1.13.0 has incorrect Access Control when using SDS with Combined Validation Context. Using the same s

CNCF Envoy through 1.13.0 may consume excessive amounts of memory when responding internally to pipelined requests.

CNCF Envoy through 1.13.0 may consume excessive amounts of memory when proxying HTTP/1.1 requests or responses with many

HPE OneView Global Dashboard (OVGD) 1.9 has a remote information disclosure vulnerability. HPE OneView Global Dashboard

Multiple ZyXEL network-attached storage (NAS) devices running firmware version 5.21 contain a pre-authentication command

Rubetek SmartHome 2020 devices use unencrypted 433 MHz communication between controllers and beacons, allowing an attack

An issue was discovered on HUMAX HGA12R-02 BRGCAA 1.1.53 devices. A vulnerability in the authentication functionality in

ARRIS TG1692A devices allow remote attackers to discover the administrator login name and password by reading the /login

The Appointment Booking Calendar plugin before 1.3.35 for WordPress allows user input (in fields such as Description or

Stored XSS exists in the Appointment Booking Calendar plugin before 1.3.35 for WordPress. In the cpabc_appointments.php

A vulnerability in the web-based management interface of Cisco Prime Collaboration Provisioning could allow an unauthent

A vulnerability in the web-based management interface of Cisco Prime Collaboration Provisioning could allow an unauthent

A vulnerability in the IPsec packet processor of Cisco IOS XR Software could allow an unauthenticated remote attacker to

A vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS) could allow an authen