Archive
11 June 2020
Vulnerabilities first published on this day (UTC), newest first.
123 results · Feed
-
Unscored —
In avb_vbmeta_image_verify of avb_vbmeta_image.c there is a possible out of bounds read due to a missing bounds check. …
-
Unscored —CVE-2020-0218 Public exploit
In loadSoundModel and related functions of SoundTriggerHwService.cpp, there is possible out of bounds write due to a ra…
-
Unscored —
In ideint_weave_blk of ideint_utils.c, there is a possible out of bounds write due to a heap buffer overflow. This coul…
-
Unscored —
In dump of RollbackManagerServiceImpl.java, there is a possible backup metadata exposure due to a missing permission ch…
-
Unscored —
In load of ResourceTypes.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to loc…
-
Unscored —
In avb_vbmeta_image_verify of avb_vbmeta_image.c, there is a possible out of bounds read due to a missing bounds check.…
-
Unscored —
In AudioStream::decode of AudioGroup.cpp, there is a possible out of bounds read due to a missing bounds check. This co…
-
Unscored —
In doSendObjectInfo of MtpServer.cpp, there is a possible path traversal attack due to insufficient input validation. T…
-
Unscored —
In hevcd_fmt_conv_420sp_to_420sp_av8 of ihevcd_fmt_conv_420sp_to_420sp.s, there is a possible out of bounds write due t…
-
Unscored —
In removeSharedAccountAsUser of AccountManager.java, there is a possible permissions bypass to a confused deputy. This …
-
Unscored —
In BnAAudioService::onTransact of IAAudioService.cpp, there is a possible out of bounds read due to unsafe deserializat…
-
Unscored —
In ihevcd_parse_slice_header of ihevcd_parse_slice_header.c, there is a possible out of bounds write due to an integer …
-
Unscored —
In BnDrm::onTransact of IDrm.cpp, there is a possible information disclosure due to uninitialized data. This could lead…
-
Unscored —CVE-2020-0209 Public exploit
In multiple functions of AccountManager.java, there is a possible permissions bypass. This could lead to local escalati…
-
Unscored —
In impeg2_fmt_conv_yuv420p_to_yuv420sp_uv of impeg2_format_conv.c, there is a possible out of bounds write due to a mis…
-
Unscored —
In GetOpusHeaderBuffers() of OpusHeader.cpp, there is a possible out of bounds read due to a missing bounds check. This…
-
Unscored —
In addPacket of AMPEG4ElementaryAssembler, there is an out of bounds read due to an integer overflow. This could lead t…
-
Unscored —
In parseChunk of MPEG4Extractor.cpp, there is a possible out of bounds write due to incompletely initialized data. This…
-
Unscored —
In OutputBuffersArray::realloc of CCodecBuffers.cpp, there is a possible heap disclosure due to a race condition. This …
-
Unscored —CVE-2020-0192 Public exploit
In ih264d_decode_slice_thread of ih264d_thread_parse_decode.c, there is a possible out of bounds read due to improper i…
-
Unscored —
In multiple functions in DrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to …
-
Unscored —
In multiple functions of AccountManager.java, there is a possible permissions bypass. This could lead to local escalati…
-
Unscored —CVE-2020-0203 Public exploit
In freeIsolatedUidLocked of ProcessList.java, there is a possible UID reuse due to improper cleanup. This could lead to…
-
Unscored —
In markBootComplete of InstalldNativeService.cpp, there is a possible out of bounds write due to a missing bounds check…
-
Unscored —
In engineSetMode of BaseBlockCipher.java, there is a possible incorrect cryptographic algorithm chosen due to an incomp…
-
Unscored —
In multiple functions of URI.java, there is a possible escalation of privilege due to missing validation in the parceli…
-
Unscored —
An exploitable code execution vulnerability exists in the Web-Based Management (WBM) functionality of WAGO PFC 200 03.0…
-
Unscored —
"HCL Digital Experience is susceptible to Server Side Request Forgery."
-
Unscored —CVE-2020-12712 Public exploit
A vulnerability based on insecure user/password encryption in the JOE (job editor) component of SOS JobScheduler 1.12 a…
-
Medium 5.4
IBM Workload Scheduler 9.3.0.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrar…
-
Unscored —
Zenphoto versions prior to 1.5.7 allows an attacker to conduct PHP code injection attacks by leading a user to upload a…
-
Unscored —
Cross-site scripting vulnerability in Zenphoto versions prior to 1.5.7 allows remote attackers to inject an arbitrary J…
-
Unscored —
Artica Pandora FMS 7.44 allows remote command execution via the events feature.
-
Unscored —CVE-2020-13852 EPSS 28%
Artica Pandora FMS 7.44 allows arbitrary file upload (leading to remote command execution) via the File Manager feature.
-
Unscored —
Artica Pandora FMS 7.44 has persistent XSS in the Messages feature.
-
Unscored —
Artica Pandora FMS 7.44 allows privilege escalation.
-
Unscored —CVE-2020-13855 EPSS 28%
Artica Pandora FMS 7.44 allows arbitrary file upload (leading to remote command execution) via the File Repository Mana…
-
Unscored —
Artica Pandora FMS 7.44 has inadequate access controls on a web folder.
-
High 7.5
Citrix XenApp 6.5, when 2FA is enabled, allows a remote unauthenticated attacker to ascertain whether a user exists on …
-
Unscored —
The following vulnerability applies only to the Pydio Cells Enterprise OVF version 2.0.4. Prior versions of the Pydio C…