2020

In multiple functions of AccountManager.java, there is a possible permissions bypass. This could lead to local escalatio

In multiple functions of AccountManager.java, there is a possible permissions bypass. This could lead to local escalatio

In InstallPackage of package.cpp, there is a possible bypass of a signature check due to a Time of Check/Time of Use con

In freeIsolatedUidLocked of ProcessList.java, there is a possible UID reuse due to improper cleanup. This could lead to

In onHandleIntent of TraceService.java, there is a possible bypass of developer settings requirements for capturing syst

In exif_data_load_data_content of exif-data.c, there is a possible UBSAN abort due to an integer overflow. This could le

In ihevcd_parse_slice_header of ihevcd_parse_slice_header.c, there is a possible out of bounds write due to an integer o

In ideint_weave_blk of ideint_utils.c, there is a possible out of bounds write due to a heap buffer overflow. This could

In onCreatePermissionRequest of SettingsSliceProvider.java, there is a possible permissions bypass due to a PendingInten

In handleMessage of BluetoothManagerService, there is an incomplete reset. This could lead to local escalation of privil

In exif_data_load_data_thumbnail of exif-data.c, there is a possible denial of service due to an integer overflow. This

In doSendObjectInfo of MtpServer.cpp, there is a possible path traversal attack due to insufficient input validation. Th

In avdt_msg_prs_rej of avdt_msg.cc, there is a possible out-of-bounds read due to improper input validation. This could

In impeg2_fmt_conv_yuv420p_to_yuv420sp_uv of impeg2_format_conv.c, there is a possible out of bounds write due to a miss

In multiple functions of URI.java, there is a possible escalation of privilege due to missing validation in the parcelin

In setSyncSampleParams of SampleTable.cpp, there is possible resource exhaustion due to a missing bounds check. This cou

In phNxpNciHal_send_ese_hal_cmd of phNxpNciHal_ext.cc, there is a possible out of bounds write due to a missing bounds c

In rw_t3t_message_set_block_list of rw_t3t.cc, there is a possible out of bounds write due to a missing bounds check. Th

In rw_i93_sm_format of rw_i93.c, there is a possible information disclosure due to a missing bounds check. This could le

In rw_i93_sm_detect_ndef of rw_i93.c, there is a possible information disclosure due to a missing bounds check. This cou

In setIPv6AddrGenMode of NetworkManagementService.java, there is a possible bypass of networking permissions due to a mi

In multiple locations of Parcel.cpp, there is a possible out-of-bounds write due to an integer overflow. This could lead

In MockLocationAppPreferenceController.java, it is possible to mock the GPS location of the device due to a permissions

In parseChunk of MPEG4Extractor.cpp, there is a possible out of bounds write due to incompletely initialized data. This

In SetData of btm_ble_multi_adv.cc, there is a possible out-of-bound write due to an incorrect bounds check. This could

In addPacket of AMPEG4ElementaryAssembler, there is an out of bounds read due to an integer overflow. This could lead to

An exploitable code execution vulnerability exists in the Web-Based Management (WBM) functionality of WAGO PFC 200 03.03

A vulnerability based on insecure user/password encryption in the JOE (job editor) component of SOS JobScheduler 1.12 an

Zenphoto versions prior to 1.5.7 allows an attacker to conduct PHP code injection attacks by leading a user to upload a

Artica Pandora FMS 7.44 allows arbitrary file upload (leading to remote command execution) via the File Repository Manag

Artica Pandora FMS 7.44 allows arbitrary file upload (leading to remote command execution) via the File Manager feature.

Artica Pandora FMS 7.44 allows remote command execution via the events feature.

Artica Pandora FMS 7.44 has inadequate access controls on a web folder.

The following vulnerability applies only to the Pydio Cells Enterprise OVF version 2.0.4. Prior versions of the Pydio Ce

An issue was discovered in CipherMail Community Gateway and Professional/Enterprise Gateway 1.0.1 through 4.7.1-0 and Ci

In Indy Node 1.12.2, there is an Uncontrolled Resource Consumption vulnerability. Indy Node has a bug in TAA handling co

An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_sdp_preparse in sdp.c has a NUL

An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_process_incoming_request in jan

An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_sdp_process in sdp.c has a NULL

Select Dell Client Consumer and Commercial platforms include an issue that allows the BIOS Admin password to be changed

Dell Client Consumer and Commercial platforms include an improper authorization vulnerability in the Dell Manageability

phpMussel from versions 1.0.0 and less than 1.6.0 has an unserialization vulnerability in PHP's phar wrapper. Uploading

Mitsubishi MELSEC iQ-R Series PLCs with firmware 33 allow attackers to halt the industrial process by sending an unauthe

A vulnerability exists in Arista’s Cloud EOS VM / vEOS 4.23.2M and below releases in the 4.23.x train, 4.22.4M and below

A flaw was discovered in Undertow in versions before Undertow 2.1.1.Final where certain requests to the "Expect: 100-con

IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000038eb7.

IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000038ed4.

In Liferay Portal before 7.3.2 and Liferay DXP 7.0 before fix pack 92, 7.1 before fix pack 18, and 7.2 before fix pack 6

HashiCorp Vault and Vault Enterprise logged proxy environment variables that potentially included sensitive credentials.

A race condition vulnerability Palo Alto Networks GlobalProtect app on Windows allows a local limited Windows user to ex