2020

In areFunctionsSupported of UsbBackend.java, there is a possible access to tethering from a guest account due to a missi

In callUnchecked of DocumentsProvider.java, there is a possible permissions bypass due to a missing permission check. Th

In callUnchecked of DocumentsProvider.java, there is a possible permissions bypass. This could lead to local escalation

In extend_frame_lowbd of restoration.c, there is a possible out of bounds write due to a missing bounds check. This coul

In createInputConsumer of WindowManagerService.java, there is a possible way to block and intercept input events due to

In HalCamera::requestNewFrame of HalCamera.cpp, there is a possible use-after-free due to a race condition. This could l

All versions of package js-data are vulnerable to Prototype Pollution via the deepFillIn function.

Envoy before 1.16.1 mishandles dropped and truncated datagrams, as demonstrated by a segmentation fault for a UDP packet

Envoy before 1.16.1 logs an incorrect downstream address because it considers only the directly connected peer, not the

GNOME GLib before 2.65.3 has an integer overflow, that might lead to an out-of-bounds write, in g_option_group_add_entri

In the Broadcom Nexus firmware, there is an insecure default password. This could lead to local escalation of privilege

In do_epoll_ctl and ep_loop_check_proc of eventpoll.c, there is a possible use after free due to a logic error. This cou

In sdp_server_handle_client_req of sdp_server.cc, there is a possible out of bounds read due to a missing bounds check.

In createNameCredentialDialog of CertInstaller.java, there exists the possibility of improperly installed certificates d

In SPDIFEncoder::writeBurstBufferBytes and related methods of SPDIFEncoder.cpp, there is a possible out of bounds write

In audit_free_lsm_field of auditfilter.c, there is a possible bad kfree due to a logic error in audit_data_to_entry. Thi

In createVirtualDisplay of DisplayManagerService.java, there is a possible way to create a trusted virtual display due t

In addWindow of WindowManagerService.java, there is a possible window overlay attack due to an insecure default value. T

A vulnerability has been identified in SICAM A8000 CP-8000 (All versions < V16), SICAM A8000 CP-8021 (All versions < V16

A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). The password used for a

A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3), LOGO! Soft Comfort (All

A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Due to the usage of an

A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Due to the usage of an

A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). The implemented encrypt

A vulnerability has been identified in SIMATIC ET 200SP Open Controller (incl. SIPLUS variants) (V20.8), SIMATIC S7-1500

A flaw was found in Eclipse Che in versions prior to 7.14.0 that impacts CodeReady Workspaces. When configured with cook

A vulnerability has been identified in XHQ (All Versions < 6.1). The web interface could allow a Cross-Site Request Forg

A vulnerability has been identified in XHQ (All Versions < 6.1). The web interface could allow SQL injection attacks if

curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verificatio

curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcar

An authorised user on a Windows host running Citrix Universal Print Server can perform arbitrary command execution as SY

A security issue was found in EdgePower 24V/54V firmware v1.7.0 and earlier where, due to missing CSRF protections, an a

Improper privilege management on services run by Citrix Gateway Plug-in for Windows, versions before and including 13.0-

Due to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when sending data.

curl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other resources that can lead to

curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial password

OpenAssetDigital Asset Management (DAM) through 12.0.19 does not correctly sanitize user supplied input, incorporating i

Medtronic MyCareLink Smart 25000 is vulnerable to a race condition in the MCL Smart Patient Reader software update sys

Medtronic MyCareLink Smart 25000 is  vulnerable when an authenticated attacker runs a debug command, which can be sent

Medtronic MyCareLink Smart 25000 contains an authentication protocol vulnerability where the method used to authentica

Insecure direct object reference vulnerability in Zyxel’s P1302-T10 v3 with firmware version 2.00(ABBX.3) and earlier al

SQL Injection vulnerability in Enterprise Data Interface of Gallagher Command Centre allows a remote attacker with 'Edit

Type confusion in Gallagher Command Centre Server allows a remote attacker to crash the server or possibly cause remote

Improper Authentication vulnerability in Gallagher Command Centre Server allows an unauthenticated remote attacker to cr

OpenAsset Digital Asset Management (DAM) through 12.0.19 does not correctly verify whether a request made to the applica

OpenAsset Digital Asset Management (DAM) through 12.0.19 does not correctly determine the HTTP request's originating IP

SQL Injection in Classbooking before 2.4.1 via the username field of a CSV file when adding a new user.

Improper check or handling of exceptional conditions in MELSEC iQ-F series FX5U(C) CPU unit firmware version 1.060 and e

Aterm SA3500G firmware versions prior to Ver. 3.5.9 allows an attacker on the adjacent network to send a specially craft

vendor/elfinder/php/connector.minimal.php in the secure-file-manager plugin through 2.5 for WordPress loads elFinder cod