2020

iscsi_aio_ioctl_cb in block/iscsi.c in QEMU 4.1.0 has a heap-based buffer over-read that may disclose unrelated informat

Nokogiri is a Rubygem providing HTML, XML, SAX, and Reader parsers with XPath and CSS selector support. In Nokogiri befo

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35.1.

If exploited, this vulnerability could allow attackers to gain sensitive information via generation of error messages. Q

An issue was discovered in Treck IPv6 before 6.0.1.68. Improper input validation in the IPv6 component when handling a p

Buffer overflow in QUIC dissector in Wireshark 3.4.0 to 3.4.1 allows denial of service via packet injection or crafted c

An incorrect access control implementation in Tangro Business Workflow before 1.18.1 allows an attacker to download docu

The Ignite portal in Mitel MiContact Center Business before 9.3.0.0 could allow a local attacker to view system informat

IBM Security Key Lifecycle Manager 3.0.1 and 4.0 could allow a remote attacker to obtain sensitive information when a de

IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 allows web pages to be stored locally whic

The installer of the macOS Sensor for VMware Carbon Black Cloud (prior to 3.5.1) handles certain files in an insecure wa

An issue was discovered in Xen through 4.14.x. Neither xenstore implementation does any permission checks when reporting

In getGpuStatsGlobalInfo and getGpuStatsAppInfo of GpuService.cpp, there is a possible permission bypass due to a missin

In SELinux policies of mls, there is a missing permission check. This could lead to local information disclosure of pack

In AndroidManifest.xml, there is a possible permissions bypass. This could lead to local escalation of privilege allowin

In queryInternal of CallLogProvider.java, there is a possible permission bypass due to improper input validation. This c

In sendConfiguredNetworkChangedBroadcast of WifiConfigManager.java, there is a possible leak of sensitive WiFi configura

A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP add

Memory leak in RTPS protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injecti

Memory leak in the dissection engine in Wireshark 3.4.0 allows denial of service via packet injection or crafted capture

Memory leak in Kafka protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet inject

Cross Site Request Forgery (CSRF) in CART option in OpenCart Ltd. Opencart CMS 3.0.3.6 allows attacker to add cart items

Removed group members were able to use the To-Do functionality to retrieve updated information on confidential epics sta

A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine

An information leak vulnerability exists in Gerrit versions prior to 2.14.22, 2.15.21, 2.16.25, 3.0.15, 3.1.10, 3.2.5 wh

An information leak vulnerability exists in Gerrit versions prior to 2.15.21, 2.16.25, 3.0.15, 3.1.10, 3.2.5 where a mis

Sympa before 6.2.59b.2 allows remote attackers to obtain full SOAP API access by sending any arbitrary string (except on

Various memory and file descriptor leaks were found in apt-python files python/arfile.cc, python/tag.cc, python/tarfile.

Windows Digital Media Receiver Elevation of Privilege Vulnerability

The aptdaemon DBus interface disclosed file existence disclosure by setting Terminal/DebconfSocket properties, aka GHSL-

A flaw was found in ImageMagick in coders/txt.c. An attacker who submits a crafted file that is processed by ImageMagick

A floating point math calculation in ScaleAnyToQuantum() of /MagickCore/quantum-private.h could lead to undefined behavi

in SetImageExtent() of /MagickCore/image.c, an incorrect image depth size can cause a memory leak because the code which

In IntensityCompare() of /magick/quantize.c, there are calls to PixelPacketIntensity() which could return overflowed val

A flaw was found in ImageMagick in MagickCore/quantum-export.c. An attacker who submits a crafted file that is processed

In the CropImage() and CropImageToTiles() routines of MagickCore/transform.c, rounding calculations performed on unconst

An information disclosure issue existed in the transition of program state. This issue was addressed with improved state

There are 4 places in HistogramCompare() in MagickCore/histogram.c where an integer overflow is possible during simple m

A flaw was found in the check_chunk_name() function of pngcheck-2.4.0. An attacker able to pass a malicious file to be p

A flaw was found in ImageMagick in MagickCore/gem-private.h. An attacker who submits a crafted file that is processed by

A flaw was found in ImageMagick in coders/bmp.c. An attacker who submits a crafted file that is processed by ImageMagick

A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by I

A flaw was found in ImageMagick in MagickCore/quantum.h. An attacker who submits a crafted file that is processed by Ima

A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by I

In RestoreMSCWarning() of /coders/pdf.c there are several areas where calls to GetPixelIndex() could result in values ou

A flaw was found in ImageMagick in MagickCore/quantum.h. An attacker who submits a crafted file that is processed by Ima

A flaw was found in ImageMagick in MagickCore/segment.c. An attacker who submits a crafted file that is processed by Ima

An issue was discovered in Play Framework 2.8.0 through 2.8.4. Carefully crafted JSON payloads sent as a form field lead

In /MagickCore/statistic.c, there are several areas in ApplyEvaluateOperator() where a size_t cast should have been a ss

A flaw was found in ImageMagick in MagickCore/resize.c. An attacker who submits a crafted file that is processed by Imag