2020

An issue was discovered in chat.php in LiveZilla Live Chat 8.0.1.3 (Helpdesk). A blind JavaScript injection lies in the

BWA DiREX-Pro 1.2181 devices allow remote attackers to execute arbitrary OS commands via shell metacharacters in the PKG

Lexmark Markvision Enterprise (MVE) before 2.4.1 allows remote attackers to execute arbitrary commands by uploading file

SQL Injection exists in Advanced Newsletter Magento extension before 2.3.5 via the /store/advancednewsletter/index/subsc

service/krashrpt.php in Quest KACE K1000 Systems Management Appliance before 6.4 SP3 (6.4.120822) allows a remote attack

In version 4.8.0 and earlier of The Sleuth Kit (TSK), there is a heap-based buffer over-read in ntfs_dinode_lookup in fs

In version 4.8.0 and earlier of The Sleuth Kit (TSK), there is a stack buffer overflow vulnerability in the YAFFS file t

An unauthenticated file upload vulnerability has been identified in admin/gallery.php in PHPGurukul Job Portal 1.0. The

An unauthenticated file upload vulnerability has been identified in admin_add.php in PHPGurukul Online Book Store 1.0. T

An issue was discovered in rConfig through 3.9.4. The web interface is prone to a SQL injection via the commands.inc.php

upload.php in Responsive FileManager 9.13.4 and 9.14.0 allows SSRF via the url parameter because file-extension blocking

Dell EMC Isilon OneFS versions prior to 8.2.0 contain an unauthorized access vulnerability due to a lack of thorough aut

GitLab 10.7 and later through 12.7.2 has Incorrect Access Control.

Zoho ManageEngine Desktop Central before 10.0.474 allows remote code execution because of deserialization of untrusted d

utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes or

An issue was discovered in Centreon before 2.8.30, 18.10.8, 19.04.5, and 19.10.2. SQL Injection exists via the include/m

The ESET AV parsing engine allows virus-detection bypass via a crafted BZ2 Checksum field in an archive. This affects ve

IPTV Smarters WEB TV PLAYER through 2020-02-22 allows attackers to execute OS commands by uploading a script.

HUMAX HGA12R-02 BRGCAA 1.1.53 devices allow Session Hijacking.

PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to SQL injection, as demonstrated by the email parameter in in

The secret key used to make the Initial Sequence Number in the TCP SYN packet could be brute forced and therefore can be

Possible buffer overflow in WLAN handler due to lack of validation of destination buffer size before copying it in Snapd

Possible buffer overflow in WLAN handler due to lack of validation of destination buffer size before copying into it in

Possible buffer overflow in data offload handler due to lack of check of keydata length when copying data in Snapdragon

Possible buffer overflow in WLAN Parser due to lack of length check when copying data in Snapdragon Auto, Snapdragon Com

Buffer overflow occurs while processing LMP packet in which name length parameter exceeds value specified in BT-specific

Possible integer overflow while checking the length of frame which is a 32 bit integer and is added to another 32 bit in

While parsing Service Descriptor Extended Attribute received as part of SDF frame, there is a possibility that incorrect

Potential buffer over-read due to lack of bound check of memory offset passed in WLAN firmware in Snapdragon Compute, Sn

Possible buffer overflow while processing clientlog and serverlog due to lack of validation of data received in logs in

Buffer overflow can occur while parsing RSN IE containing list of PMK ID`s which are more than the buffer size in Snapdr

UTCB object has a function pointer called by the reaper to deallocate its memory resources and this address can potentia

Stack overflow can occur when SDP is received with multiple payload types in the FMTP attribute of a video M line in Sna

Buffer overflow can occur when processing non standard SDP video Image attribute parameter in a VILTE\VOLTE call in Snap

Possible Stack overflow can occur when processing a large SDP body or non standard SDP body without right delimiters in

Filling media attribute tag names without validating the destination buffer size which can result in the buffer overflow

Improper input validation while processing SIP URI received from the network will lead to buffer over-read and then to d

Multiple Read overflows issue due to improper length check while decoding Identity Request in CSdomain/Authentication Re

Multiple Read overflows due to improper length checks while decoding authentication in Cs domain/RAU Reject and TC cmd i

Multiple Buffer Over-read issue can happen due to improper length checks while decoding Service Reject/RAU Reject/PTMSI

Buffer Over-read when UE is trying to process the message received form the network without zero termination in Snapdrag

Buffer overflow can occur in WLAN firmware while parsing beacon/probe_response frames during roaming in Snapdragon Auto,

Out of bound write in WLAN driver due to NULL character not properly placed after SSID name in Snapdragon Auto, Snapdrag

Multiple ZyXEL network-attached storage (NAS) devices running firmware version 5.21 contain a pre-authentication command

Rubetek SmartHome 2020 devices use unencrypted 433 MHz communication between controllers and beacons, allowing an attack

An issue was discovered on HUMAX HGA12R-02 BRGCAA 1.1.53 devices. A vulnerability in the authentication functionality in

An issue was discovered in UNCTAD ASYCUDA World 2001 through 2020. The Java RMI Server has an Insecure Default Configura

The SEOmatic component before 3.3.0 for Craft CMS allows Server-Side Template Injection that leads to RCE via malformed

Naver Cloud Explorer before 2.2.2.11 allows the system to download an arbitrary file from the attacker's server and exec

WebKitGTK through 2.26.4 and WPE WebKit through 2.26.4 (which are the versions right before 2.28.0) contains a memory co