2020

websitebaker prior to and including 2.8.1 has an authentication error in backup module.

Jara 1.6 has an XSS vulnerability

Jara 1.6 has a SQL injection vulnerability.

Mozilla Firefox prior to 3.6 has a DoS vulnerability due to an issue in the validation of certificates.

Mozilla Firefox through 1.5.0.3 has a vulnerability in processing the content-length header

A remote code execution (RCE) vulnerability exists in qdPM 9.1 and earlier. An attacker can upload a malicious PHP code

Locked regions may be modified through other interfaces in secure boot loader image due to improper access control. in S

Possible buffer overflow issue in error processing due to improper validation of array index value in Snapdragon Auto, S

Use after free while processing eeprom query as there is a chance to not unlock mutex after error occurs in Snapdragon A

Possible stack-use-after-scope issue in NFC usecase for card emulation in Snapdragon Auto, Snapdragon Industrial IOT, Sn

String format issue will occur while processing HLOS data as there is no user input validation to ensure inputs are prop

Heap buffer overflow can occur while parsing invalid MKV clip which is not standard and have invalid vorbis codec data i

Integer overflow occurs while playing the clip which is nonstandard in Snapdragon Auto, Snapdragon Compute, Snapdragon C

Possible buffer overflow when byte array receives incorrect input from reading source as array is not null terminated in

While parsing invalid super index table, elements within super index table may exceed total chunk size and invalid data

The device may enter into error state when some tool or application gets failure at 1st buffer map all and performs 2nd

Possible null pointer dereference issue in location assistance data processing due to missing null check on resources be

Buffer overflow occur while playing the clip which is nonstandard due to lack of offset length check in Snapdragon Auto,

Buffer overflow occur while playing the clip which is nonstandard due to lack of check of size duration in Snapdragon Au

Buffer overflow occurs while processing invalid MKV clip, which has invalid EBML size in Snapdragon Auto, Snapdragon Com

Null pointer exception can happen while parsing invalid MKV clip where cue information is parsed before segment informat

Buffer overflow can occur while processing clip due to lack of check of object size before parsing in Snapdragon Auto, S

Out-of-bound access will occur in USB driver due to lack of check to validate the frame size passed by user in Snapdrago

Potential use-after-free heap error during Validate/Present calls on display HW composer in Snapdragon Auto, Snapdragon

Possible integer overflow happens when mmap find function will increment refcount every time when it invokes and can lea

Use after free issue occurs when camera access sensors data through direct report mode in Snapdragon Auto, Snapdragon Co

Use after free issue due to using of invalidated iterator to delete an object in sensors HAL in Snapdragon Auto, Snapdra

NULL is assigned to local instance of audio device pointer after free instead of global static pointer and can lead to u

Buffer over-read can occur while playing the video clip which is not standard in Snapdragon Auto, Snapdragon Compute, Sn

Null pointer dereference can occur while parsing the clip which is nonstandard in Snapdragon Auto, Snapdragon Compute, S

Improper initialization of local variables which are parameters to sfs api may cause invalid pointer dereference and lea

While transferring data from APPS to DSP, Out of bound in FastRPC HLOS Driver due to the data buffer which can be contro

While trying to obtain datad ipc handle during DPL initialization, Heap use-after-free issue can occur if modem SSR occu

Null-pointer dereference issue can occur while calculating string length when source string length is zero in Snapdragon

An issue was discovered in button_open in login/logind-button.c in systemd before 243. When executing the udevadm trigge

The conversation-watson plugin before 0.8.21 for WordPress has a DOM-based XSS vulnerability that is executed when a cha

SMC D3G0804W 3.5.2.5-LAT_GA devices allow XSS via the SSID field on the WiFi Network Configuration page (after a success

The CSV upload feature in /supervisor/procesa_carga.php on Logaritmo Aware CallManager 2012 devices allows upload of .ph

Gentoo Portage through 2.3.84 allows local users to place a Trojan horse plugin in the /usr/lib64/nagios/plugins directo

Comtech Stampede FX-1010 7.4.3 devices allow remote authenticated administrators to achieve remote code execution by nav

Comtech Stampede FX-1010 7.4.3 devices allow remote authenticated administrators to achieve remote code execution by nav

Comtech Stampede FX-1010 7.4.3 devices allow remote authenticated administrators to achieve remote code execution by nav

The WP Database Backup plugin through 5.5 for WordPress stores downloads by default locally in the directory wp-content/

Meinberg Lantime M300 and M1000 devices allow attackers (with privileges to configure a device) to execute arbitrary OS

An issue was discovered in Gallagher Command Centre 7.x before 7.90.991(MR5), 8.00 before 8.00.1161(MR5), and 8.10 befor

TestLink before 1.9.20 allows XSS via non-lowercase javascript: in the index.php reqURI parameter. NOTE: this issue exis

Cacti 1.2.8 allows Remote Code Execution (by privileged users) via shell metacharacters in the Performance Boost Debug L

UHP UHP-100 3.4.1.15, 3.4.2.4, and 3.4.3 devices allow XSS via cw2?td= (Site Name field of the Site Setup section).

UHP UHP-100 3.4.1.15, 3.4.2.4, and 3.4.3 devices allow XSS via cB3?ta= (profile title).

Ruckus ZoneFlex R310 104.0.0.0.1347 devices allow Stored XSS via the SSID field on the Configuration > Radio 2.4G > Wire