2020

An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (released in China or India) software.

On NETGEAR GS728TPS devices through 5.3.0.35, a remote attacker having network connectivity to the web-administration pa

An issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120404 in KfeCo10X64.sys fails to valida

An issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120404 in KfeCo10X64.sys fails to valida

An issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120444 in KfeCo10X64.sys fails to valida

There is an improper integrity checking vulnerability on some huawei products. The software of the affected product has

There is a double free vulnerability in some Huawei products. A local attacker with low privilege may perform some opera

There is a logic error vulnerability in several smartphones. The software does not properly restrict certain operation w

VMware Workstation (15.x before 15.5.2) and Horizon Client for Windows (5.x and prior before 5.4.0) contain a denial-of-

A flaw was found in PostgreSQL's "ALTER ... DEPENDS ON EXTENSION", where sub-commands did not perform authorization chec

In cPanel before 82.0.18, Cpanel::Rand::Get can produce a predictable series of numbers (SEC-525).

Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Cont

A flaw was found in Ansible Engine when using Ansible Vault for editing encrypted files. When a user executes "ansible-v

A flaw was found in Ansible Engine when the module package or service is used and the parameter 'use' is not specified.

A flaw was found in Ansible Engine when a file is moved using atomic_move primitive as the file mode cannot be specified

A flaw was found in Ansible 2.7.16 and prior, 2.8.8 and prior, and 2.9.5 and prior when a password is set with the argum

Improper initialization in Intel(R) Graphics Drivers before versions 15.40.44.5107, 15.45.29.5077, and 26.20.100.7000 ma

A spoofing vulnerability exists in Microsoft Visual Studio as it includes a reply URL that is not secured by SSL, aka 'M

Path Traversal in admin/assetmanager/assetmanager.php (vulnerable function saved in admin/assetmanager/functions.php) in

Path Traversal in admin/imagepaster/image-renaming.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to ren

SAP Enable Now, before version 1908, does not invalidate session tokens in a timely manner. The Insufficient Session Exp

In setMasterMute of AudioService.java, there is a missing permission check. This could lead to local silencing of audio

In the WifiConfigManager, there is a possible storage of location history which can only be deleted by triggering a fact

In NetHack before 3.6.6, some out-of-bound values for the hilite_status option can be exploited. NetHack 3.6.6 resolves

NetHack before version 3.6.0 allowed malicious use of escaping of characters in the configuration file (usually .nethack

QEMU 4.1.0 has a memory leak in zrle_compress_data in ui/vnc-enc-zrle.c during a VNC disconnect operation because libz i

IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 allows web pages to be stored locally which can be read by another user on the syst

A UNIX Symbolic Link (Symlink) Following vulnerability in chkstat of SUSE Linux Enterprise Server 12, SUSE Linux Enterpr

This issue was addressed with improved setting propagation. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. Turning

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 13.3.1 and

This issue was addressed with improved checks. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. Users removed from a

A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. T

A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state manageme

An issue was discovered in OpenStack Nova before 18.2.4, 19.x before 19.1.0, and 20.x before 20.1.0. It can leak console

In FreeBSD 12.1-STABLE before r354734, 12.1-RELEASE before 12.1-RELEASE-p2, 12.0-RELEASE before 12.0-RELEASE-p13, 11.3-S

HUAWEI Mate 20 smartphones with versions earlier than 10.0.0.185(C00E74R3P8) have an improper authorization vulnerabilit

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 9

vg_lookup in daemons/lvmetad/lvmetad-core.c in LVM2 2.02 mismanages memory, leading to an lvmetad memory leak, as demons

IBM UrbanCode Deploy (UCD) 7.0.3 and IBM UrbanCode Build 6.1.5 could allow a local user to obtain sensitive information

The Bluetooth stack in Android before 2.3.6 allows a physically proximate attacker to obtain contact information via an

Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability

Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability

Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability

Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability

Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability

Sander Bos discovered Apport's lock file was in a world-writable directory which allowed all users to prevent crash hand

Kevin Backhouse discovered that apport would read a user-supplied configuration file with elevated privileges. By replac

nghttp2 before 1.7.1 allows remote attackers to cause a denial of service (memory exhaustion).

An issue was discovered on Broadcom Wi-Fi client devices. Specifically timed and handcrafted traffic can cause internal

IBM Cloud Automation Manager 3.2.1.0 does not set the secure attribute on authorization tokens or session cookies. Attac