2020

Improper authentication in Citrix StoreFront Server < 1912.0.1000 allows an attacker who is authenticated on the same Mi

Prototype pollution vulnerability in the TypeORM package < 0.2.25 may allow attackers to add or modify Object properties

Unauthorized escalation of local privileges vulnerability on Micro Focus Operation Agent, affecting all versions prior t

Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have a use-after-free (UAF) vulnerability. An authenticated,

A flaw was found in RESTEasy client in all versions of RESTEasy up to 4.5.6.Final. It may allow client users to obtain t

All version of Ewon Flexy and Cosy prior to 14.1 use wildcards such as (*) under which domains can request resources. An

Local registry credentials were included directly in the CD4PE deployment definition, which could expose these credentia

InstallBuilder for Qt Windows (versions prior to 20.7.0) installers look for plugins at a predictable location at initia

An issue was discovered in MISP before 2.4.132. It can perform an unwanted action because of a POST operation on a form

Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, exposes a resource to the wrong control sphere, p

Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, does not properly control the allocation and maint

When an attacker claims to have a given identity, Philips Clinical Collaboration Platform, Versions 12.2.1 and prior,

SOY CMS 3.0.2 and earlier is affected by Remote Code Execution (RCE) using Unrestricted File Upload. Cross-Site Scriptin

The Alfresco Reset Password add-on before version 1.2.0 relies on untrusted inputs in a security decision. Intruders can

Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, does not neutralize or incorrectly neutralizes user-

Philips Clinical Collaboration Platform, Versions 12.2.1 and prior. The product receives input or data, but it does not

A flaw was found in the Linux kernel in versions before 5.9-rc6. When changing screen size, an out-of-bounds memory writ

An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. The RSS To SMS module processes XML files in an unsafe m

An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. The ASP.net SMS module can be used to read and validate

A potential security vulnerability has been identified in Hewlett Packard Enterprise Universal API Framework. The vulner

SOY CMS 3.0.2.327 and earlier is affected by Unauthenticated Remote Code Execution (RCE). The allows remote attackers to

In NetworkStackNotifier, there is a possible permissions bypass due to an unsafe implicit PendingIntent. This could lead

In netd, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of servi

In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information discl

In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disc

In iptables, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalati

In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

In Settings, there is a possible permissions bypass. This could lead to local information disclosure of the device's IME

In core networking, there is a missing permission check. This could lead to local information disclosure of app network

In NFC, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privil

In NFC, there is a missing bounds check. This could lead to local information disclosure with System execution privilege

In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

In Telephony, there is a missing permission check. This could lead to local information disclosure of radio data with no

In Zen Mode, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information

In NotificationManagerService, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to

In InputManagerService, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local i

In Settings, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information

In the Bluetooth server, there is a possible out of bounds write due to an integer overflow. This could lead to local es

In Settings, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information

In Settings, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information

In Settings, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information

In NFC, there is a possible out of bounds read due to uninitialized data. This could lead to remote information disclosu

In Bluetooth, there is a possible spoofing of bluetooth device metadata due to a missing permission check. This could le

In Bluetooth, there is a possible control over Bluetooth enabled state due to a missing permission check. This could lea

In Telecom, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information d

In bindWallpaperComponentLocked of WallpaperManagerService.java, there is a possible permission bypass due to an unsafe

In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information

In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information