2020

Out of Bound issue in DSP services while processing received arguments due to improper validation of length received as

Buffer overflow in LibFastCV library due to improper size checks with respect to buffer length' in Snapdragon Auto, Snap

Possible buffer overflow in Fastrpc while handling received parameters due to lack of validation on input parameters' in

u'Possible integer overflow to heap overflow while processing command due to lack of check of packet length received' in

Buffer overflow/underflow occurs when typecasting the buffer passed by CPU internally in the library which is not aligne

Arbitrary access to DSP memory due to improper check in loaded library for data received from CPU side' in Snapdragon Au

u'Integer overflow to buffer overflow occurs while playback of ASF clip having unexpected number of codec entries' in Sn

u'Buffer over read can happen while parsing mkv clip due to improper typecasting of data returned from atomsize' in Snap

u'Possible buffer overflow will occur in video while parsing mp4 clip with crafted esds atom size.' in Snapdragon Auto,

u'Use after free issue in Bluetooth transport driver when a method in the object is accessed after the object has been d

u'Null-pointer dereference can occur while accessing data buffer beyond its size that leads to access the buffer beyond

u'Buffer over read in boot due to size check ignored before copying GUID attribute from request to response' in Snapdrag

u'Possible buffer overflow in WMA message processing due to integer overflow occurs when processing command received fro

u'Possible buffer overflow in WIFI hal process due to copying data without checking the buffer length' in Snapdragon Aut

u'Integer overflow can cause a buffer overflow due to lack of table length check in the extensible boot Loader during th

u'information disclosure in gatekeeper trustzone implementation as the throttling mechanism to prevent brute force attem

u'Possible buffer overflow in WIFI hal process due to usage of memcpy without checking length of destination buffer' in

This affects the package nodemailer before 6.4.16. Use of crafted recipient email addresses may result in arbitrary comm

A vulnerability in the ingress packet processing function of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation

An authentication bypass vulnerability exists in the GlobalProtect SSL VPN component of Palo Alto Networks PAN-OS softwa

An information exposure through log file vulnerability exists where the password for the configured system proxy server

An information exposure vulnerability exists in Palo Alto Networks Panorama software that discloses the token for the Pa

An OS command injection and memory corruption vulnerability in the PAN-OS management web interface that allows authentic

A vulnerability exists in the Palo Alto Network PAN-OS signature-based threat detection engine that allows an attacker t

NVIDIA GeForce NOW application software on Windows, all versions prior to 2.0.25.119, contains a vulnerability in its op

touchbase.ai before version 2.0 is vulnerable to Cross-Site Scripting (XSS). The vulnerability allows an attacker to sen

toucbase.ai before version 2.0 leaks information by not stripping exif data from images. Anyone with access to the uploa

touchbase.ai before version 2.0 is vulnerable to Open Redirect. Impacts can be many, and vary from theft of information

touchbase.ai before version 2.0 is vulnerable to Cross-Site Scripting. The vulnerability allows an attacker to inject HT

A potential vulnerability in the SMI callback function used in the VariableServiceSmm driver in some Lenovo Notebook mod

Prior to August 10, 2020, some Lenovo Desktop and Workstation systems were shipped with the Embedded Host Based Configur

In some Lenovo Desktop models, the Configuration Change Detection BIOS setting failed to detect SATA configuration chang

Scheduler for TAS prior to version 1.4.0 was permitting plaintext transmission of UAA client token by sending it over a

MoinMoin is a wiki engine. In MoinMoin before version 1.9.11, an attacker with write permissions can upload an SVG file

On Audi A7 MMI 2014 vehicles, the Bluetooth stack in Audi A7 MMI Multiplayer with version (N+R_CN_AU_P0395) mishandles %

Solstice-Pod up to 5.0.2 WEBRTC server mishandles the format-string specifiers %x; %p; %c and %s in the screen_key, disp

A low level user of IBM Cognos Controller 10.3.0, 10.3.1, 10.4.0, 10.4.1, and 10.4.2 who has Administration rights to th

The package grpc before 1.24.4; the package @grpc/grpc-js before 1.1.8 are vulnerable to Prototype Pollution via loadPac

All versions of package express-validators are vulnerable to Regular Expression Denial of Service (ReDoS) when validatin

Server-side request forgery vulnerability in the ePO extension in McAfee MVISION Endpoint prior to 20.11 allows remote a

External entity attack vulnerability in the ePO extension in McAfee MVISION Endpoint prior to 20.11 allows remote attack

Windows Spoofing Vulnerability

Azure DevOps Server and Team Foundation Services Spoofing Vulnerability

Windows Camera Codec Information Disclosure Vulnerability

HEVC Video Extensions Remote Code Execution Vulnerability

HEVC Video Extensions Remote Code Execution Vulnerability

HEVC Video Extensions Remote Code Execution Vulnerability

HEVC Video Extensions Remote Code Execution Vulnerability

HEVC Video Extensions Remote Code Execution Vulnerability

AV1 Video Extension Remote Code Execution Vulnerability