2020

NaviServer 4.99.4 to 4.99.19 allows denial of service due to the nsd/driver.c ChunkedDecode function not properly valida

The kerberos package before 1.0.0 for Node.js allows arbitrary code execution and privilege escalation via injection of

Cellebrite UFED 5.0 to 7.5.0.845 implements local operating system policies that can be circumvented to obtain a command

A Cross-Site Request Forgery (CSRF) vulnerability was discovered in Subrion CMS 4.2.1 that allows a remote attacker to r

An off-by-one error in the DecodeBlock function in codec/sdl_image.c in VideoLAN VLC media player before 3.0.9 allows re

Use-after-free in libtransmission/variant.c in Transmission before 3.00 allows remote attackers to cause a denial of ser

Honor 20;HONOR 20 PRO;Honor Magic2;HUAWEI Mate 20 X;HUAWEI P30;HUAWEI P30 Pro;Honor View 20 smartphones with versions ea

Opto 22 SoftPAC Project Version 9.6 and prior. SoftPAC does not specify the path of multiple imported .dll files. Theref

In psi_write of psi.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local e

In simulatePackageSuspendBroadcast of NotificationManagerService.java, there is a missing permission check. This could l

In onKeyguardVisibilityChanged of key_store_service.cpp, there is a missing permission check. This could lead to local e

In GattServer::SendResponse of gatt_server.cc, there is a possible out of bounds write due to an incorrect bounds check.

In navigateUpToLocked of ActivityStack.java, there is a possible permission bypass due to a confused deputy. This could

In various methods of PackageManagerService.java, there is a possible permission bypass due to a missing condition for s

In startActivities of ActivityStartController.java, there is a possible escalation of privilege due to a confused deputy

In setImageHeight and setImageWidth of ExifUtils.cpp, there is a possible out of bounds write due to an incorrect bounds

In onCreate of SettingsBaseActivity.java, there is a possible unauthorized setting modification due to a permissions byp

Veritas APTARE versions prior to 10.4 allowed sensitive information to be accessible without authentication.

Veritas APTARE versions prior to 10.4 allowed remote users to access several unintended files on the server. This vulner

Apache Camel's JMX is vulnerable to Rebind Flaw. Apache Camel 2.22.x, 2.23.x, 2.24.x, 2.25.x, 3.0.0 up to 3.1.0 is affec

IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused

IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused

IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused

IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused

IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused

IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused

IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused

IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused b

IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused b

IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused b

IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused b

IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused b

IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused b

IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused b

IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused b

In Fazecast jSerialComm, Version 2.2.2 and prior, an uncontrolled search path element vulnerability could allow a malici

Movable Type series (Movable Type 7 r.4606 (7.2.1) and earlier (Movable Type 7), Movable Type Advanced 7 r.4606 (7.2.1)

Cross-site request forgery (CSRF) vulnerability in Movable Type series (Movable Type 7 r.4606 (7.2.1) and earlier (Movab

In TYPO3 CMS 9.0.0 through 9.5.16 and 10.0.0 through 10.4.1, it has been discovered that the backend user interface and

In TYPO3 CMS 9.0.0 through 9.5.16 and 10.0.0 through 10.4.1, it has been discovered that backend user settings (in $BE_U

In TYPO3 CMS greater than or equal to 9.0.0 and less than 9.5.17 and greater than or equal to 10.0.0 and less than 10.4.

A DOM-Based Cross Site Scripting Vulnerability exists in PAN-OS and Panorama Management Web Interfaces. A remote attacke

A race condition due to insecure creation of a file in a temporary directory vulnerability in PAN-OS allows for root pri

A buffer overflow vulnerability in the PAN-OS management server allows authenticated users to crash system processes or

An OS Command Injection vulnerability in PAN-OS management server allows authenticated users to inject and execute arbit

A cleartext transmission of sensitive information vulnerability in Palo Alto Networks PAN-OS Panorama that discloses an

Improper restriction of XML external entity reference ('XXE') vulnerability in Palo Alto Networks Panorama management se

An improper input validation vulnerability in the configuration daemon of Palo Alto Networks PAN-OS Panorama allows for

An OS command injection vulnerability in PAN-OS management interface allows an authenticated administrator to execute ar

An external control of filename vulnerability in the SD WAN component of Palo Alto Networks PAN-OS Panorama allows an au