Archive
September 2020
Vulnerabilities first published in this month (UTC), newest first.
2,205 results · Feed
-
Unscored —
In decrypt and decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds read due to a missing bounds check. T…
-
Unscored —
In showLimitedSimFunctionWarningNotification of NotificationMgr.java, there is a possible permission bypass due to an u…
-
Unscored —
In various functions in fscrypt_ice.c and related files in some implementations of f2fs encryption that use encryption …
-
Unscored —
In RunInternal of dumpstate.cpp, there is a possible user consent bypass due to an uncaught exception. This could lead …
-
Unscored —CVE-2020-0245 Public exploit
In DecodeFrameCombinedMode of combined_decode.cpp, there is a possible out of bounds write due to a heap buffer overflo…
-
Unscored —CVE-2020-0401 Public exploit
In setInstallerPackageName of PackageManagerService.java, there is a missing permission check. This could lead to local…
-
Unscored —CVE-2020-0392 Public exploit
In getLayerDebugInfo of SurfaceFlinger.cpp, there is a possible code execution due to a double free. This could lead to…
-
Unscored —
In Parse_ins of eas_mdls.c, there is a possible out of bounds write due to a missing bounds check. This could lead to r…
-
Unscored —
In Parse_insh of eas_mdls.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead …
-
Unscored —
In Parse_art of eas_mdls.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead t…
-
Unscored —CVE-2020-0381 Public exploit
In Parse_wave of eas_mdls.c, there is a possible out of bounds write due to an integer overflow. This could lead to rem…
-
Unscored —
In the Bluetooth service, there is a possible spoofing attack due to a logic error. This could lead to remote informati…
-
Unscored —
There is a possible out of bounds write due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid I…
-
Unscored —CVE-2020-0380 Public exploit
In allocExcessBits of bitalloc.c, there is a possible out of bounds write due to an incorrect bounds check. This could …
-
Unscored —
In verifyIntentFiltersIfNeeded of PackageManagerService.java, there is a possible settings bypass allowing an app to be…
-
Unscored —
In uvc_scan_chain_forward of uvc_driver.c, there is a possible linked list corruption due to an unusual root cause. Thi…
-
Medium 5.3
Improper Input Validation in Xerces
A flaw was found in Wildfly's implementation of Xerces, specifically in the way the XMLSchemaValidator class in the JAXP component of Wildfly enforced the "use-grammar-pool-only" feature. This flaw allows a specially-crafted XML file to manipulate the validat…
-
Medium 6.1CVE-2020-13944 EPSS 25%
Apache Airflow Cross-site Scripting
In Apache Airflow < 1.10.12, the "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit.
-
High 8.8
Apache Superset OS Command Injection
While investigating a bug report on Apache Superset, it was determined that an authenticated user could craft requests via a number of templated text fields in the product that would allow arbitrary access to Python’s `os` package in the web application proce…
-
High 8.8CVE-2020-6113 EPSS 64%
An exploitable vulnerability exists in the object stream parsing functionality of Nitro Software, Inc.’s Nitro Pro 13.1…
-
High 8.8CVE-2020-6112 EPSS 17%
An exploitable code execution vulnerability exists in the JPEG2000 Stripe Decoding functionality of Nitro Software, Inc…
-
High 8.8
An exploitable vulnerability exists in the cross-reference table repairing functionality of Nitro Software, Inc.’s Nitr…
-
High 8.8CVE-2020-6116 EPSS 28%
An arbitrary code execution vulnerability exists in the rendering functionality of Nitro Software, Inc.’s Nitro Pro 13.…
-
Critical 9.3
salt-api is accessible to every user on SUSE Manager Server
A Improper Access Control vulnerability in the configuration of salt of SUSE Linux Enterprise Module for SUSE Manager Server 4.1, SUSE Manager Proxy 4.0, SUSE Manager Retail Branch Server 4.0, SUSE Manager Server 3.2, SUSE Manager Server 4.0 allows local user…
-
Unscored —
Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Info…
-
Unscored —
In create_pinctrl of core.c, there is a possible out of bounds read due to a use after free. This could lead to local i…
-
Unscored —
yWorks yEd Desktop before 3.20.1 allows XXE attacks via an XML or GraphML document.
-
Unscored —
yWorks yEd Desktop before 3.20.1 allows code execution via an XSL Transformation when using an XML file in conjunction …
-
Unscored —
A DNS rebinding vulnerability in the Freebox OS web interface in Freebox Server before 4.2.3.
-
Unscored —
A DNS rebinding vulnerability in the UPnP IGD implementations in Freebox v5 before 1.5.29 and Freebox Server before 4.2…
-
Unscored —
A CSRF vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3.
-
Unscored —
A DNS rebinding vulnerability in Freebox v5 before 1.5.29.
-
Unscored —
A stored XSS vulnerability exists in the Custom Link Attributes control Affect function in Elementor Page Builder 2.9.2…
-
Unscored —
An attacker could send a specially crafted packet that could have CodeMeter (All versions prior to 7.10) send back pack…
-
Unscored —
CodeMeter (All versions prior to 6.81) and the software using it may crash while processing a specifically crafted lice…
-
Unscored —
CodeMeter (All versions prior to 6.90 when using CmActLicense update files with CmActLicense Firm Code) has an issue in…
-
Unscored —
This vulnerability allows an attacker to use the internal WebSockets API for CodeMeter (All versions prior to 7.00 are …
-
Unscored —
Protocol encryption can be easily broken for CodeMeter (All versions prior to 6.90 are affected, including Version 6.90…
-
Unscored —
Multiple memory corruption vulnerabilities exist in CodeMeter (All versions prior to 7.10) where the packet parser mech…
-
High 8.8CVE-2020-6146 EPSS 75%
An exploitable code execution vulnerability exists in the rendering functionality of Nitro Pro 13.13.2.242 and 13.16.2.…