2020

In Octopus Deploy 2020.3.x before 2020.3.4 and 2020.4.x before 2020.4.1, if an authenticated user creates a deployment o

A flaw was found in the Linux kernel's implementation of some networking protocols in IPsec, such as VXLAN and GENEVE tu

A flaw was found in JBossWeb in versions before 7.5.31.Final-redhat-3. The fix for CVE-2020-13935 was incomplete in JBos

SAP Marketing (Servlet), version-130,140,150, allows an authenticated attacker to invoke certain functions that are rest

A Remote Code Execution vulnerability exists in the SAP NetWeaver (ABAP Server, up to release 7.40) and ABAP Platform (>

SAP Commerce versions 6.7, 1808, 1811, 1905, 2005 contains the jSession ID in the backoffice URL when the application is

Improper Access Control vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Updat

Out of bound access can happen in MHI command process due to lack of check of command channel id value received from MHI

u'Buffer over-read Issue in Q6 testbus framework due to diag packet length is not completely validated before accessing

u'Reachable assertion when wrong data size is returned by parser for ape clips' in Snapdragon Auto, Snapdragon Consumer

u'During the error occurrence in capture request, the buffer is freed and later accessed causing the camera APP to fail

u'Possible use-after-free while accessing diag client map table since list can be reallocated due to exceeding max clien

u'Out of bounds memory access during memory copy while processing Host command' in Snapdragon Auto, Snapdragon Compute,

u'Possible out of bound write in DSP driver code due to lack of check of data received from user' in Snapdragon Auto, Sn

u'Potential buffer overflow when accessing npu debugfs node "off"/"log" with large buffer size' in Snapdragon Compute, S

u'Buffer overflow seen as the destination buffer size is lesser than the source buffer size in video application' in Sna

u'Resizing the usage table header before passing all the checks leads to the function exiting with a usage table in inva

u'Out of bound writes happen when accessing usage_table header entry beyond the memory allocated for the header' in Snap

u'Stack out of bound issue occurs when making query to DSP capabilities due to wrong assumption was made on determining

u'A potential buffer overflow exists due to integer overflow when parsing handler options due to wrong data type usage i

u'Channel name string which has been read from shared memory is potentially subjected to string manipulations but not va

u'Non-secure memory is touched multiple times during TrustZone\u2019s execution and can lead to privilege escalation or

u'XBL SEC clears only ZI region when loading Qualcomm-signed segments can lead to improper access issue' in Snapdragon C

u'Null pointer dereference in HP OfficeJet Pro 8210 jbig2 filter due to lack of check of PDF font array leads to denial

u'Possible out of bound array write in rxdco cal utility due to lack of array bound check' in Snapdragon Compute, Snapdr

u'Possible out of bound access while copying the mask file content into the buffer without checking the buffer size' in

u'Calling thread may free the data buffer pointer that was passed to the callback and later when event loop executes the

u'Information exposure issues while processing IE header due to improper check of beacon IE frame' in Snapdragon Auto, S

u'Buffer over read occurs while processing information element from beacon due to lack of check of data received from be

u'While processing SMCInvoke asynchronous message header, message count is modified leading to a TOCTOU race condition a

u'Whenever the page list is updated via privileged user, the previous list elements are freed but are not deleted from t

u'Keymaster attestation key and device IDs provisioning which is a one time process is incorrectly allowed to be re-prov

u'Heap overflow in diag command handler due to lack of check of packet length received from user' in Snapdragon Auto, Sn

u'Pointer double free in HavenSvc due to not setting the pointer to NULL after freeing it' in Snapdragon Auto, Snapdrago

u'Possible integer overflow in API due to lack of check on large oid range count in cert extension field' in Snapdragon

u'Lack of check for integer overflow for round up and addition operations result into memory corruption and potential in

u'Lack of check that the TX FIFO write and read indices that are read from shared RAM are less than the FIFO size result

u'Lack of integer overflow check for addition of fragment size and remaining size that are read from shared memory can l

u'Lack of check that the current received data fragment size of a particular packet that are read from shared memory are

u'Out of bound memory access if stack push and pop operation are performed without doing a bound check on stack top' in

u'User Process can potentially corrupt kernel virtual page by passing a crafted page in API' in Snapdragon Auto, Snapdra

u'Memory can be potentially corrupted if random index is allowed to manipulate TLB entries in Kernel from user library'

u'Possibility of integer overflow in keymaster 4 while allocating memory due to multiplication of large numcerts value a

u'Improper access control can lead signed process to guess pid of other processes and access their address space' in Sna

u'Improper authentication and signature verification of debug polices in secure boot loader will allow unverified debug

u'SMEM partition can be manipulated in case of any compromise on HLOS, thus resulting in access to memory outside of SME

u'Error in UE due to race condition in EPCO handling' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, S

Concrete5 up to and including 8.5.2 allows Unrestricted Upload of File with Dangerous Type such as a .php file via File

The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a C

An issue was discovered in GnuTLS before 3.6.15. A server can trigger a NULL pointer dereference in a TLS 1.3 client if