Archive
May 2020
Vulnerabilities first published in this month (UTC), newest first.
1,032 results · Feed
-
Unscored —
The VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled memory space.
-
Unscored —
XSS in the admin help system admin/help.html and admin/quicklinks.html in Interchange 4.7.0 through 5.11.x allows remot…
-
Unscored —
libfreerdp/core/update.c in FreeRDP versions > 1.1 through 2.0.0-rc4 has an Out-of-bounds Read.
-
Unscored —
libfreerdp/cache/bitmap.c in FreeRDP versions > 1.0 through 2.0.0-rc4 has an Out of bounds read.
-
Unscored —CVE-2020-12834 EPSS 11%
eQ-3 Homematic Central Control Unit (CCU)2 through 2.51.6 and CCU3 through 3.51.6 allow Remote Code Execution in the JS…
-
Unscored —
libfreerdp/codec/interleaved.c in FreeRDP versions > 1.0 through 2.0.0-rc4 has an Out-of-bounds Write.
-
Unscored —
libfreerdp/gdi/region.c in FreeRDP versions > 1.0 through 2.0.0-rc4 has an Integer Overflow.
-
Unscored —
libfreerdp/gdi/gdi.c in FreeRDP > 1.0 through 2.0.0-rc4 has an Out-of-bounds Read.
-
Unscored —
libfreerdp/codec/planar.c in FreeRDP version > 1.0 through 2.0.0-rc4 has an Out-of-bounds Write.
-
Unscored —
Use-after-free in libtransmission/variant.c in Transmission before 3.00 allows remote attackers to cause a denial of se…
-
Medium 4.4
Estsoft ALSong DOM-Based XSS Vulnerability
ALSong 3.46 and earlier version contain a Document Object Model (DOM) based cross-site scripting vulnerability caused by improper validation of user input. A remote attacker could exploit this vulnerability by tricking the victim to open ALSong Album(sab) fil…
-
Unscored —
Huawei P20 smartphones with versions earlier than 10.0.0.156(C00E156R1P4) have an improper authentication vulnerability…
-
Unscored —
Honor 20;HONOR 20 PRO;Honor Magic2;HUAWEI Mate 20 X;HUAWEI P30;HUAWEI P30 Pro;Honor View 20 smartphones with versions e…
-
Medium 5.0
Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible
An incomplete fix was found for the fix of the flaw CVE-2020-1733 ansible: insecure temporary directory when running become_user from become directive. The provided fix is insufficient to prevent the race condition on systems using ACLs and FUSE filesystems. …
-
Unscored —
Missing input validation in the ar/tar implementations of APT before version 2.1.2 could result in denial of service wh…
-
Critical 9.0
Incomplete validation in detection code in Bitdefender Engines (VA-8589)
Improper Input Validation vulnerability in the cevakrnl.rv0 module as used in the Bitdefender Engines allows an attacker to trigger a denial of service while scanning a specially-crafted sample. This issue affects: Bitdefender Bitdefender Engines versions pri…
-
Unscored —CVE-2020-12882 Public exploit
Submitty through 20.04.01 allows XSS via upload of an SVG document, as demonstrated by an attack by a Student against a…
-
Low 3.3
Ubuntu modifications to pulseaudio to provide snap security enforcement could be unloaded
An Ubuntu-specific modification to Pulseaudio to provide security mediation for Snap-packaged applications was found to have a bypass of intended access restriction for snaps which plugs any of pulseaudio, audio-playback or audio-record via unloading the puls…
-
Unscored —
Opto 22 SoftPAC Project Version 9.6 and prior. SoftPAC communication does not include any credentials. This allows an a…
-
Unscored —
Opto 22 SoftPAC Project Version 9.6 and prior. SoftPAC does not specify the path of multiple imported .dll files. There…
-
Unscored —
Opto 22 SoftPAC Project Version 9.6 and prior. SoftPACAgent communicates with SoftPACMonitor over network Port 22000. H…
-
Unscored —
Opto 22 SoftPAC Project Version 9.6 and prior. SoftPAC’s firmware files’ signatures are not verified upon firmware upda…
-
Unscored —
An issue was discovered in CODESYS Development System before 3.5.16.0. CODESYS WebVisu and CODESYS Remote TargetVisu ar…
-
Unscored —
Opto 22 SoftPAC Project Version 9.6 and prior. Paths specified within the zip files used to update the SoftPAC firmware…
-
Unscored —
Airbrush FW's scratch memory allocator is susceptible to numeric overflow. When the overflow occurs, the next allocatio…
-
Unscored —
In crus_afe_callback of msm-cirrus-playback.c, there is a possible out of bounds write due to a missing bounds check. T…
-
Unscored —
In onTransact of IHDCP.cpp, there is a possible out of bounds read due to incorrect error handling. This could lead to …
-
Unscored —
An improper authorization while processing the provisioning data.Product: AndroidVersions: Android SoCAndroid ID: A-149…
-
Unscored —
An improper authorization in the receiver component of the Android Suite Daemon.Product: AndroidVersions: Android SoCAn…
-
Unscored —
An improper authorization in the receiver component of Email.Product: AndroidVersions: Android SoCAndroid ID: A-1498130…
-
Unscored —
In mnld, an incorrect configuration in driver_cfg of mnld for meta factory mode.Product: AndroidVersions: Android SoCAn…
-
Unscored —
In exif_data_save_data_entry of exif-data.c, there is a possible out of bounds read due to a missing bounds check. This…
-
Unscored —
In getCellLocation of PhoneInterfaceManager.java, there is a possible permission bypass due to a missing SDK version ch…
-
Unscored —
In setImageHeight and setImageWidth of ExifUtils.cpp, there is a possible out of bounds write due to an incorrect bound…
-
Unscored —
In psi_write of psi.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local …
-
Unscored —
In a2dp_aac_decoder_cleanup of a2dp_aac_decoder.cc, there is a possible invalid free due to memory corruption. This cou…
-
Unscored —
In simulatePackageSuspendBroadcast of NotificationManagerService.java, there is a missing permission check. This could …
-
Unscored —
In various methods of PackageManagerService.java, there is a possible permission bypass due to a missing condition for …
-
Unscored —CVE-2020-0096 Public exploit
In startActivities of ActivityStartController.java, there is a possible escalation of privilege due to a confused deput…
-
Unscored —
In setHideSensitive of NotificationStackScrollLayout.java, there is a possible disclosure of sensitive notification con…