Archive
June 2020
Vulnerabilities first published in this month (UTC), newest first.
108 results · Clear filters · Feed
-
High 8.1CVE-2020-14195 Public exploit
Deserialization of untrusted data in Jackson Databind
FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to org.jsecurity.realm.jndi.JndiRealmFactory (aka org.jsecurity).
-
Unscored —
Lansweeper 6.0.x through 7.2.x has a default installation in which the admin password is configured for the admin accou…
-
Unscored —CVE-2020-0201 Public exploit
In showSecurityFields of WifiConfigController.java there is a possible credential leak due to a confused deputy. This c…
-
Unscored —CVE-2020-0219 Public exploit
In onCreate of SliceDeepLinkSpringBoard.java there is a possible insecure Intent. This could lead to local elevation of…
-
Unscored —CVE-2020-0215 Public exploit
In onCreate of ConfirmConnectActivity.java, there is a possible leak of Bluetooth information due to a permissions bypa…
-
Unscored —CVE-2020-0188 Public exploit
In onCreatePermissionRequest of SettingsSliceProvider.java, there is a possible permissions bypass due to a PendingInte…
-
Unscored —CVE-2020-0183 Public exploit
In handleMessage of BluetoothManagerService, there is an incomplete reset. This could lead to local escalation of privi…
-
Unscored —CVE-2020-0155 Public exploit
In phNxpNciHal_send_ese_hal_cmd of phNxpNciHal_ext.cc, there is a possible out of bounds write due to a missing bounds …
-
Unscored —CVE-2020-0138 Public exploit
In get_element_attr_rsp of btif_rc.cc, there is a possible out of bounds write due to a missing bounds check. This coul…
-
Unscored —CVE-2020-0162 Public exploit
In parseSampleAuxiliaryInformationOffsets of MPEG4Extractor.cpp, there is possible resource exhaustion due to improper …
-
Unscored —CVE-2020-0181 Public exploit
In exif_data_load_data_thumbnail of exif-data.c, there is a possible denial of service due to an integer overflow. This…
-
Unscored —CVE-2020-0198 Public exploit
In exif_data_load_data_content of exif-data.c, there is a possible UBSAN abort due to an integer overflow. This could l…
-
Unscored —CVE-2020-0137 Public exploit
In setIPv6AddrGenMode of NetworkManagementService.java, there is a possible bypass of networking permissions due to a m…
-
Unscored —CVE-2020-0160 Public exploit
In setSyncSampleParams of SampleTable.cpp, there is possible resource exhaustion due to a missing bounds check. This co…
-
Unscored —CVE-2020-0136 Public exploit
In multiple locations of Parcel.cpp, there is a possible out-of-bounds write due to an integer overflow. This could lea…
-
Unscored —CVE-2020-0218 Public exploit
In loadSoundModel and related functions of SoundTriggerHwService.cpp, there is possible out of bounds write due to a ra…
-
Unscored —CVE-2020-0209 Public exploit
In multiple functions of AccountManager.java, there is a possible permissions bypass. This could lead to local escalati…
-
Unscored —CVE-2020-0192 Public exploit
In ih264d_decode_slice_thread of ih264d_thread_parse_decode.c, there is a possible out of bounds read due to improper i…
-
Unscored —CVE-2020-0203 Public exploit
In freeIsolatedUidLocked of ProcessList.java, there is a possible UID reuse due to improper cleanup. This could lead to…
-
Unscored —CVE-2020-12712 Public exploit
A vulnerability based on insecure user/password encryption in the JOE (job editor) component of SOS JobScheduler 1.12 a…
-
Unscored —
Artica Pandora FMS 7.44 allows remote command execution via the events feature.
-
Low 3.8CVE-2020-2023 Public exploit
Kata Containers - Containers have access to the guest root filesystem device
Kata Containers doesn't restrict containers from accessing the guest's root filesystem device. Malicious containers can exploit this to gain code execution on the guest and masquerade as the kata-agent. This issue affects Kata Containers 1.11 versions earlier…
-
Unscored —CVE-2020-0113 Public exploit
In sendCaptureResult of Camera3OutputUtils.cpp, there is a possible out of bounds read due to a use after free. This co…
-
Unscored —CVE-2020-0121 Public exploit
In updateUidProcState of AppOpsService.java, there is a possible permission bypass due to a logic error. This could lea…
-
Unscored —CVE-2020-0114 Public exploit
In onCreateSliceProvider of KeyguardSliceProvider.java, there is a possible confused deputy due to a PendingIntent erro…
-
Unscored —
A Directory Traversal vulnerability in the web conference component of Mitel MiCollab AWV before 8.1.2.4 and 9.x before…
-
Unscored —CVE-2020-13996 Public exploit
The J2Store plugin before 3.3.13 for Joomla! allows a SQL injection attack by a trusted store manager.
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file ope…
-
Unscored —
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 (SMBv1) server hand…
-
Unscored —CVE-2020-1283 Public exploit
A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Serv…
-
Unscored —
An information disclosure vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protoco…
-
Unscored —
The affected product lacks proper validation of user-supplied data, which can result in deserialization of untrusted da…
-
Unscored —
The affected product lacks proper authentication required to query the server on the Ignition 8 Gateway (versions prior…
-
Unscored —
AnyDesk before 5.5.3 on Linux and FreeBSD has a format string vulnerability that can be exploited for remote code execu…
-
Unscored —
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, w…
-
Unscored —CVE-2020-9856 Public exploit
This issue was addressed with improved checks. This issue is fixed in macOS Catalina 10.15.5. An application may be abl…
-
Unscored —CVE-2020-9839 Public exploit
A race condition was addressed with improved state handling. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Cat…
-
High 8.8CVE-2020-9802 Public exploit
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, w…
-
Unscored —CVE-2020-9801 Public exploit
A logic issue was addressed with improved restrictions. This issue is fixed in Safari 13.1.1. A malicious process may c…
-
Unscored —CVE-2020-10757 Public exploit
A flaw was found in the Linux Kernel in versions after 4.5-rc1 in the way mremap handled DAX Huge Pages. This flaw allo…