2020

Certain NETGEAR devices are affected by SQL injection. This affects D3600 before 1.0.0.68, D6000 before 1.0.0.68, D6200

**VERSION NOT SUPPORTED WHEN ASSIGNED** A legacy support account in the TriStation software version v4.9.0 and earlier c

The Aviatrix OpenVPN client through 2.5.7 on Linux, macOS, and Windows is vulnerable when OpenSSL parameters are altered

A vulnerability exists allowing attackers, when present in the same network segment as ClearPass' management interface,

It was noticed that Apache Heron 0.20.2-incubating, Release 0.20.1-incubating, and Release v-0.20.0-incubating does not

Rukovoditel 2.5.2 is affected by a SQL injection vulnerability because of improper handling of the entities_id parameter

In Rukovoditel 2.5.2, an attacker may inject an arbitrary .php file location instead of a language file and thus achieve

Rukovoditel 2.5.2 is affected by a SQL injection vulnerability because of improper handling of the reports_id (POST) par

In Rukovoditel 2.5.2, attackers can upload arbitrary file to the server by just changing the content-type value. As a re

Rukovoditel 2.5.2 is affected by a SQL injection vulnerability because of improper handling of the filters[0][value] or

In qdPM 9.1, an attacker can upload a malicious .php file to the server by exploiting the Add Profile Photo capability w

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects GS105Ev2 before 1

Possible buffer over-read in windows wlan driver function due to lack of check of length of variable received from users

Possible buffer over-read issue in windows x86 wlan driver function while processing beacon or request frame due to lack

Possible out of bound access in WLAN handler when the received value of length in rx path is shorter than the expected v

Buffer over-write when this 0-byte buffer is typecasted to some other structure and hence memory corruption in Snapdrago

Out of bound write can occur in radio measurement request if STA receives multiple invalid rrm measurement request from

Possible buffer overflow while playing mkv clip due to lack of validation of atom size buffer in Snapdragon Auto, Snapdr

Buffer overflow in WLAN firmware while parsing GTK IE containing GTK key having length more than the buffer size in Snap

Buffer overflow can occur in In WLAN firmware while unwraping data using CCMP cipher suite during parsing of EAPOL hands

Potential buffer overflow while processing CBF frames due to lack of check of buffer length before copy in Snapdragon Au

Possible buffer overflow while handling NAN reception of NMF in Snapdragon Auto, Snapdragon Compute, Snapdragon Connecti

Buffer overflow can occur in function wlan firmware while copying association frame content if frame length is more than

Multiple Read overflows issue due to improper length check while decoding tau reject/tau accept/detach request/attach re

Multiple Read overflows issue due to improper length check while decoding dedicated_eps_bearer_req/ act_def_context_req/

Multiple Read overflows issue due to improper length check while decoding RAU accept/PDN disconnect Rej/Modify EPS ctxt

Multiple Read overflows issue due to improper length check while decoding 3G attach accept/ SMS/ pdn connection reject/

Out of bound memory access can happen while parsing ADSP message due to lack of check of size of payload received from u

Possible buffer over read when trying to process SDP message Video media line with frame-size attribute in video Media l

Out of bound write can happen due to lack of check of array index value while calculating it. in Snapdragon Auto, Snapdr

Lack of length check of response buffer can lead to buffer over-flow while GP command response buffer handling in Snapdr

Copying RTCP messages into the output buffer without checking the destination buffer size which could lead to a remote s

String error while processing non standard SIP messages received can lead to buffer overread and then denial of service

Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a r

Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a r

Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a r

Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a r

CA API Developer Portal 4.3.1 and earlier handles shared secret keys in an insecure manner, which allows attackers to by

A vulnerability in the web server for Cisco IP Phones could allow an unauthenticated, remote attacker to execute code wi

NETGEAR MR1100 devices before 12.06.08.00 are affected by lack of access control at the function level.

An issue was discovered in Squid through 4.7. When handling the tag esi:when when ESI is enabled, Squid calls ESIExpress

Triangle MicroWorks DNP3 Outstation LibrariesDNP3 Outstation .NET Protocol components and DNP3 Outstation ANSI C source

Z-Cron 5.6 Build 04 allows an unprivileged attacker to elevate privileges by modifying a privileged user's task. This ca

Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers to e

An issue was discovered in Squid through 4.7. When handling requests from users, Squid checks its rules to see if the re

NETGEAR R7800 devices before 1.0.2.68 are affected by remote code execution by unauthenticated attackers.

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects R6400v2 before 1.

NETGEAR RAX40 devices before 1.0.3.64 are affected by disclosure of administrative credentials.

An issue was discovered in DAViCal Andrew's Web Libraries (AWL) through 0.60. Long-term session cookies, uses to provide

A Security Feature Bypass vulnerability exists in the MSR JavaScript Cryptography Library that is caused by multiple bug