2020

u'Use after free while installing new security rule in ipcrtr as old one is deleted and this rule could still be in use

u'Use out of range pointer issue can occur due to incorrect buffer range check during the execution of qseecom' in Snapd

u'Use out of range pointer issue can occur due to incorrect buffer range check during the execution of qseecom.' in Snap

u'Possible buffer overflow while updating output buffer for IMEI and Gateway Address due to lack of check of input valid

u'Due to an incorrect SMMU configuration, the modem crypto engine can potentially compromise the hypervisor' in Snapdrag

u'QSEE reads the access permission policy for the SMEM TOC partition from the SMEM TOC contents populated by XBL Loader

u'A buffer overflow could occur if the API is improperly used due to UIE init does not contain a buffer size a param' in

u'Buffer overflow can happen as part of SIP message packet processing while storing values in array due to lack of check

u'Potential out of bounds read while processing downlink NAS transport message due to improper length check of Informati

u'Remote code execution can happen by sending a carefully crafted POST query when Device configuration is accessed from

u'Buffer overflow occurs while processing SIP message packet due to lack of check of index validation before copying int

u'An Unaligned address or size can propagate to the database due to improper page permissions and can lead to improper a

u'Array index underflow issue in adsp driver due to improper check of channel id before used as array index.' in Snapdra

u'Two threads running simultaneously from user space can lead to race condition in fastRPC driver' in Snapdragon Auto, S

u'fscanf reads a string from a file and stores its contents on a statically allocated stack memory which leads to stack

u'Buffer over-read while processing received L2CAP packet due to lack of integer overflow check' in Snapdragon Auto, Sna

u'Third-party app may also call the broadcasts in Perfdump and cause privilege escalation issue due to improper access c

u'Possible buffer overflow in MHI driver due to lack of input parameter validation of EOT events received from MHI devic

u'Lack of handling unexpected control messages while encryption was in progress can terminate the connection and thus le

u'Buffer over-read issue in Bluetooth estack due to lack of check for invalid length of L2cap packet received from peer

u'Buffer overflow while processing PDU packet in bluetooth due to lack of check of buffer length before copying into it.

u'Buffer overflow while processing a crafted PDU data packet in bluetooth due to lack of check of buffer size before cop

u'Out of bound memory access while processing GATT data received due to lack of check of pdu data length and leads to re

u'Buffer over-read issue in Bluetooth estack due to lack of check for invalid length of L2cap configuration request rece

u'Out of bound access can happen in MHI command process due to lack of check of channel id value received from MHI devic

u'Bluetooth devices does not properly restrict the L2CAP payload length allowing users in radio range to cause a buffer

MailGates and MailAudit products contain Command Injection flaw, which can be used to inject and execute system commands

Single Sign-On for Vmware Tanzu all versions prior to 1.11.3 ,1.12.x versions prior to 1.12.4 and 1.13.x prior to 1.13.1

There is no input validation on the Locale property in an apt transaction. An unprivileged user can supply a full path t

NVIDIA CUDA Toolkit, all versions prior to 11.1.1, contains a vulnerability in the NVJPEG library in which an out-of-bou

baserCMS before version 4.4.1 is vulnerable to Cross-Site Scripting. Arbitrary JavaScript may be executed by entering a

baserCMS before version 4.4.1 is vulnerable to Cross-Site Scripting. The issue affects the following components: Edit fe

baserCMS before version 4.4.1 is affected by Remote Code Execution (RCE). Code may be executed by logging in as a system

vBulletin 5.5.4 through 5.6.2 allows remote command execution via crafted subWidgets data in an ajax/render/widget_tabbe

IBM i2 iBase 8.9.13 could allow an attacker to upload arbitrary executable files which, when executed by an unsuspecting

IBM i2 iBase 8.9.13 could allow a remote attacker to obtain sensitive information when a detailed technical error messag

This affects the package codemirror before 5.58.2; the package org.apache.marmotta.webjars:codemirror before 5.58.2. The

The package pimcore/pimcore from 6.7.2 and before 6.8.3 are vulnerable to SQL Injection in data classification functiona

Trend Micro Antivirus for Mac 2020 (Consumer) contains an Error Message Information Disclosure vulnerability that if exp

Trend Micro Antivirus for Mac 2020 (Consumer) contains a race condition vulnerability in the Web Threat Protection Block

Cross-Site Scripting (XSS) vulnerability on WSO2 API Manager 3.1.0. By exploiting a Cross-site scripting vulnerability t

Sal is a multi-tenanted reporting dashboard for Munki with the ability to display information from Facter. In Sal throug

A flaw was found in Ansible Collection community.crypto. openssl_privatekey_info exposes private key in logs. This direc

A null pointer dereference flaw was found in samba's Winbind service in versions before 4.11.15, before 4.12.9 and befor

An issue was discovered in EyesOfNetwork 5.3 through 5.3-8. An authenticated web user with sufficient privileges could a

An issue was discovered in EyesOfNetwork eonweb 5.3-7 through 5.3-8. The eonweb web interface is prone to a SQL injectio

An issue was discovered in FastReport before 2020.4.0. It lacks a ScriptSecurity feature and therefore may mishandle (fo

An issue was discovered in SmartStoreNET before 4.0.1. It does not properly consider the need for a CustomModelPartAttri

An issue was discovered in Click Studios Passwordstate 8.9 (Build 8973).If the user of the system has assigned himself a

SQL Injection in Zoho ManageEngine Applications Manager 14 before 14560 allows an attacker to execute commands on the se