2020

Prototype pollution vulnerability in 'object-hierarchy-access' versions 0.2.0 through 0.32.0 allows attacker to cause a

Prototype pollution vulnerability in 'field' versions 0.0.1 through 1.0.1 allows attacker to cause a denial of service a

The lettre library through 0.10.0-alpha for Rust allows arbitrary sendmail option injection via transport/sendmail/mod.r

BAB TECHNOLOGIE GmbH eibPort V3 prior to 3.8.3 devices allow denial of service (Uncontrolled Resource Consumption) via r

Various components in Ivanti Endpoint Manager through 2020.1.1 rely on Windows search order when loading a (nonexistent)

Several services are accessing named pipes in Ivanti Endpoint Manager through 2020.1.1 with default or overly permissive

Out-of-bounds read in subsystem in Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may all

Authentication bypass by capture-replay in RPMB protocol message authentication subsystem in Intel(R) TXE versions befor

Incorrect default permissions in Windows(R) installer in Intel(R) AMT SDK versions before 14.0.0.1 may allow an authenti

Improper input validation in some Intel(R) Wireless Bluetooth(R) products before version 21.110 may allow an unauthentic

Improper buffer restriction in some Intel(R) Wireless Bluetooth(R) products before version 21.110 may allow an unauthent

Insufficient control flow management in some Intel(R) PROSet/Wireless WiFi products before version 21.110 may allow an u

Protection mechanism failure in some Intel(R) PROSet/Wireless WiFi products before version 21.110 may allow an authentic

Improper buffer restriction in some Intel(R) PROSet/Wireless WiFi products before version 21.110 may allow an unauthenti

Improper input validation in some Intel(R) PROSet/Wireless WiFi products before version 21.110 may allow an unauthentica

Improper buffer restrictions in the Intel(R) Stratix(R) 10 FPGA firmware provided with the Intel(R) Quartus(R) Prime Pro

Insufficient control flow managementin firmware in some Intel(R) Client SSDs and some Intel(R) Data Center SSDs may allo

Insufficient control flow managementin firmware in some Intel(R) Client SSDs and some Intel(R) Data Center SSDs may allo

Insufficiently protected credentialsin subsystem in some Intel(R) Client SSDs and some Intel(R) Data Center SSDs may all

Improper access control for the Intel(R) Computing Improvement Program before version 2.4.5982 may allow an unprivileged

Improper permissions in some Intel(R) High Definition Audio drivers before version 9.21.00.4561 may allow an authenticat

Incorrect default permissions in the Intel(R) RealSense(TM) D400 Series Dynamic Calibration Tool before version 2.11, ma

Improper access control in Installer for Intel(R) DAL SDK before version 2.1 for Windows may allow an authenticated user

Use after free in DAL subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.1

Improper access control in Installer for Intel(R) CSME Driver for Windows versions before 11.8.80, 11.12.80, 11.22.80, 1

Improper buffer restrictions in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially en

Out of bounds write in BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable

Improper buffer restrictions in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially en

Improper input validation in BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially e

Improper conditions check in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enabl

Improper conditions check in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enabl

Buffer overflow in firmware for Intel(R) SSD DC P4800X and P4801X Series, Intel(R) Optane(TM) SSD 900P and 905P Series m

Improper buffer restrictions in the Intel(R) Unite Client for Windows* before version 4.2.13064 may allow an authenticat

Apache Batik is vulnerable to server-side request forgery, caused by improper input validation by the "xlink:href" attri

Improper file permissions in the installer for the Intel(R) Media SDK for Windows before version 2019 R1 may allow an au

Adobe Connect version 11.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an atta

Adobe Connect version 11.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an atta

Adobe Acrobat Reader for Android version 20.6.2 (and earlier) does not properly restrict access to directories created b

FusionCompute versions 8.0.0 have an insecure encryption algorithm vulnerability. Attackers with high permissions can ex

An unauthenticated SQL Injection vulnerability in Good Layers LMS Plugin <= 2.1.4 exists due to the usage of "wp_ajax_no

A cross-site scripting (XSS) vulnerability exists in templates_import.php (Cacti 1.2.13) due to Improper escaping of err

It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA d

By default, Apache CXF creates a /services page containing a listing of the available endpoint names and addresses. This

This affects the package json8 before 1.0.3. The function adds in the target object the property specified in the path,

Cross site scripting vulnerability in the firewall ePO extension of McAfee Endpoint Security (ENS) prior to 10.7.0 Novem

Cross Site Request Forgery vulnerability in the firewall ePO extension of McAfee Endpoint Security (ENS) prior to 10.7.0

Unquoted service executable path in McAfee Endpoint Security (ENS) prior to 10.7.0 November 2020 Update allows local use

u'When a non standard SIP sigcomp message is received from the network, then there may be chances of using more UDVM cyc

u'Incorrect validation of ring context fetched from host memory can lead to memory overflow' in Snapdragon Compute, Snap

Improper authorization in DSP process could allow unauthorized users to downgrade the library versions in SD820, SD821,