2020

AdRem NetCrunch 10.6.0.4587 has Improper Credential Storage since the internal user database is readable by low-privileg

BigFix Inventory up to v10.0.2 does not set the secure flag for the session cookie in an https session, which can cause

An issue was discovered in p11-kit 0.21.1 through 0.23.21. A heap-based buffer over-read has been discovered in the RPC

An issue was discovered in SolarWinds N-Central 12.3.0.670. The SSH component does not restrict the Communication Channe

osquery is a SQL powered operating system instrumentation, monitoring, and analytics framework. In osquery before versio

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.15, is vulnerable to

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.15, a Server-Side Fo

SolarWinds Database Performance Analyzer (DPA) 11.1.468 and 12.0.3074 have several persistent XSS vulnerabilities, relat

Multiple cross-site scripting (XSS) vulnerabilities exist in PHPJabbers Appointment Scheduler 2.3, in the index.php admi

Pega Platform through 8.4.x is affected by Cross Site Scripting (XSS) via the ConnectionID parameter, as demonstrated by

A flaw was found in Keycloak before 13.0.0 where an external identity provider, after successful authentication, redirec

A flaw was found in Keycloak before 13.0.0, where it is possible to force the server to call out an unverified URL using

An issue was discovered in Xen through 4.14.x. Nodes in xenstore have an ownership. In oxenstored, a owner could give a

An issue was discovered in Xen 4.6 through 4.14.x. When acting upon a guest XS_RESET_WATCHES request, not all tracking i

An issue was discovered in Xen through 4.14.x. When a Xenstore watch fires, the xenstore client that registered the watc

An issue was discovered in Xen through 4.14.x. Xenstored and guests communicate via a shared memory page using a specifi

An issue was discovered in Xen through 4.14.x. A guest may access xenstore paths via absolute paths containing a full pa

The REST API component of TIBCO Software Inc.'s TIBCO PartnerExpress contains a vulnerability that theoretically allows

An issue was discovered in Xen through 4.14.x. A bounds check common to most operation time functions specific to FIFO e

An issue was discovered in Xen through 4.14.x. Recording of the per-vCPU control block mapping maintained by Xen and tha

An issue was discovered in Xen through 4.14.x. Some OSes (such as Linux, FreeBSD, and NetBSD) are processing watch event

An issue was discovered in Xen 4.14.x. When moving IRQs between CPUs to distribute the load of IRQ handling, IRQ vectors

An issue was discovered in Xen through 4.14.x. When they require assistance from the device model, x86 HVM guests must b

A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On a locked down (usually

In the l2tp subsystem, there is a possible use after free due to a race condition. This could lead to local escalation o

In xfrm6_tunnel_free_spi of net/ipv6/xfrm6_tunnel.c, there is a possible use after free due to improper locking. This co

In broadcastWifiCredentialChanged of ClientModeImpl.java, there is a possible location permission bypass due to a missin

In ce_t4t_update_binary of ce_t4t.cc, there is a possible out of bounds read due to a missing bounds check. This could l

In nfc_ncif_proc_ee_action of nfc_ncif.cc, there is a possible out of bounds read due to a missing bounds check. This co

In nfc_enabled of nfc_main.cc, there is a possible out of bounds read due to an incorrect increment. This could lead to

In showProvisioningNotification of ConnectivityService.java, there is an unsafe PendingIntent. This could lead to local

In phNxpNciHal_core_initialized of phNxpNciHal.cc, there is a possible out of bounds read due to a missing bounds check.

In postNotification of ServiceRecord.java, there is a possible permission bypass due to an unsafe PendingIntent. This co

In process of C2SoftVorbisDec.cpp, there is a possible resource exhaustion due to a memory leak. This could lead to remo

In phNxpNciHal_core_initialized of phNxpNciHal.cc, there is a possible out of bounds read due to a missing bounds check.

In phNxpNciHal_send_ext_cmd of phNxpNciHal_ext.cc, there is a possible out of bounds write due to a missing bounds check

EGavilan Barcodes generator 1.0 is affected by: Cross Site Scripting (XSS) via the index.php. An Attacker is able to inj

XSS in the Add Expense Component of EGavilan Media Expense Management System 1.0 allows an attacker to permanently store

In priorLinearAllocation of C2AllocatorIon.cpp, there is a possible use-after-free due to improper locking. This could l

In createSimSelectNotification of SimSelectNotification.java, there is a possible permission bypass due to an unsafe Pen

In nfc_ncif_proc_get_routing of nfc_ncif.cc, there is a possible out of bounds read due to a missing bounds check. This

In getRadioAccessFamily of PhoneInterfaceManager.java, there is a possible read of privileged data due to a missing perm

In nfc_data_event of nfc_ncif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead

In TextView of TextView.java, there is a possible app hang due to improper input validation. This could lead to remote d

In filter_incoming_event of hci_layer.cc, there is a possible out of bounds read due to a missing bounds check. This cou

In nfc_ncif_proc_get_routing of nfc_ncif.cc, there is a possible out of bounds read due to a missing bounds check. This

During boot, the device unlock interface behaves differently depending on if a fingerprint registered to the device is p

In EapFailureNotifier.java and SimRequiredNotifier.java, there is a possible permission bypass due to an unsafe PendingI

In setErrorPlaybackState of BluetoothMediaBrowserService.java, there is a possible permission bypass due to an unsafe Pe

In avrc_ctrl_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible out of bounds read due to a missing bounds check. T