2020

There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A

There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A

There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A

In LocaleList of LocaleList.java, there is a possible forced reboot due to an uncaught exception. This could lead to loc

In Message and toBundle of Notification.java, there is a possible UI slowdown or crash due to improper input validation.

In Message and toBundle of Notification.java, there is a possible resource exhaustion due to improper input validation.

In generatePackageInfo of PackageManagerService.java, there is a possible permissions bypass due to an incorrect permiss

In the AIBinder_Class constructor of ibinder.cpp, there is a possible arbitrary code execution due to uninitialized data

In CellBroadcastReceiver's intent handlers, there is a possible denial of service due to a missing permission check. Thi

In send_vc of res_send.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to

In getPermissionInfosForGroup of Utils.java, there is a logic error. This could lead to local escalation of privilege wi

In create of FileMap.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local e

gdm3 versions before 3.36.2 or 3.38.2 would start gnome-initial-setup if gdm3 can't contact the accountservice service v

Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 has updated a specific critical library that may

Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 stores administrative passwords using a hash that

Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 is vulnerable to an information disclosure vulner

Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 is vulnerable to a server side request forgery vu

Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 is vulnerable to an XML External Entity Processin

Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 is vulnerable to a cross-site request forgery (CS

upnpd on certain NETGEAR devices allows remote (LAN) attackers to execute arbitrary code via a stack-based buffer overfl

An issue was discovered in ReadyTalk Avian 1.2.0 before 2020-10-27. The FileOutputStream.write() method in FileOutputStr

The LDAP authentication method in LdapLoginModule in Hazelcast IMDG Enterprise 4.x before 4.0.3, and Jet Enterprise 4.x

The execute function in in the Atlassian gajira-comment GitHub Action before version 2.0.2 allows remote attackers to ex

The preprocessArgs function in the Atlassian gajira-create GitHub Action before version 2.0.1 allows remote attackers to

IBM FileNet Content Manager 5.5.4 and 5.5.5 is potentially vulnerable to CVS Injection. A remote attacker could execute

IBM Maximo Spatial Asset Management 7.6.0.3, 7.6.0.4, 7.6.0.5, and 7.6.1.0 is vulnerable to cross-site request forgery w

IBM Maximo Spatial Asset Management 7.6.0.3, 7.6.0.4, 7.6.0.5, and 7.6.1.0 allows web pages to be stored locally which c

A stored cross-site scripting (XSS) vulnerability affects the Web UI in Locust before 1.3.2, if the installation violate

CapaSystems CapaInstaller before 6.0.101 does not properly assign, modify, or check privileges for an actor who attempts

An issue was discovered in the MongoDB Simple LDAP plugin through 2020-10-02 for Percona Server when using the SimpleLDA

Microweber 1.1.18 is affected by insufficient session expiration. When changing passwords, both sessions for when a user

Microweber 1.1.18 is affected by broken authentication and session management. Local session hijacking may occur, which

An unrestricted file upload vulnerability was discovered in the Microweber 1.1.18 admin account page. An attacker can up

Microweber v1.1.18 is affected by no session expiry after log-out.

A vulnerability was found in keycloak, where path traversal using URL-encoded path segments in the request is possible b

The Access Control issues include allowing a regular user to view a restricted incident, user role escalation to admin,

There were XSS vulnerabilities discovered and reported in the Dispatch application, affecting name and description param

The implementation of Brave Desktop's privacy-preserving analytics system (P3A) between 1.1 and 1.18.35 logged the times

Prototype pollution vulnerability in json8-merge-patch npm package < 1.0.3 may allow attackers to inject or modify metho

A cryptographic issue in Nextcloud Server 19.0.1 allowed an attacker to downgrade the encryption scheme and break the in

A wrong generation of the passphrase for the encrypted block in Nextcloud Server 19.0.1 allowed an attacker to overwrite

An issue was discovered in ManagedClusterView API, that could allow secrets to be disclosed to users without the correct

Pega Platform before 8.4.0 has a XSS issue via stream rule parameters used in the request header.

Insufficient validation in the Bitdefender Update Server and BEST Relay components of Bitdefender Endpoint Security Tool

The conferencing component on Mitel ShoreTel 19.46.1802.0 devices could allow an unauthenticated attacker to conduct a r

An inaccurate frame deduplication process in ChirpStack Network Server 3.9.0 allows a malicious gateway to perform uplin

Magento versions 2.4.0 and 2.3.5p1 (and earlier) are affected by an unsafe file upload vulnerability that could result i

When in maintenance mode, Magento version 2.4.0 and 2.3.4 (and earlier) are affected by an information disclosure vulner

Magento version 2.4.0 and 2.3.5p1 (and earlier) are affected by an incorrect permissions issue vulnerability in the Inve

Magento version 2.4.0 and 2.3.5p1 (and earlier) are affected by an incorrect permissions vulnerability within the Integr