Archive
September 2020
Vulnerabilities first published in this month (UTC), newest first.
2,205 results · Feed
-
Medium 4.3
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated SKP file received from untrusted source…
-
Medium 4.3
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated HPGL file received from untrusted sourc…
-
Medium 4.4
It was found that cifs-utils' mount.cifs was invoking a shell when requesting the Samba password, which could be used t…
-
Medium 5.5
Privilege Escalation vulnerability in MVISION Endpoint
Privilege Escalation vulnerability in McAfee MVISION Endpoint prior to 20.9 Update allows local users to access files which the user otherwise would not have access to via manipulating symbolic links to redirect McAfee file operations to an unintended file.
-
Medium 6.1
Improper Access Control vulnerability in MVISION Endpoint
Improper Access Control vulnerability in McAfee MVISION Endpoint prior to 20.9 Update allows local users to bypass security mechanisms and deny access to the SYSTEM folder via incorrectly applied permissions.
-
Medium 6.9
Authentication Protection Bypass vulnerability in ENS for Windows
Authentication Protection Bypass vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows physical local users to bypass the Windows lock screen via triggering certain detection events while the computer screen …
-
Medium 4.7
Exposure of Sensitive Information in ENS for Windows
Information Disclosure Vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows local users to gain access to sensitive information via incorrectly logging of sensitive information in debug logs.
-
High 8.8
Improper Access Control Vulnerability in ENS for Windows
Improper Access Control vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows local users to access files which the user otherwise would not have access to via manipulating symbolic links to redirect McAfee f…
-
Medium 6.7
Protection Mechanism Failure in ENS for Windows
Protection Mechanism Failure vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows local administrator to temporarily reduce the detection capability allowing otherwise detected malware to run via stopping ce…
-
Unscored —
Yodobashi App for Android versions 1.8.7 and earlier allows remote attackers to lead a user to access an arbitrary webs…
-
Unscored —
u'During execution after Address Space Layout Randomization is turned on for QTEE, part of code is still mapped at know…
-
Unscored —
Information can leak into userspace due to improper transfer of data from kernel to userspace in Snapdragon Auto, Snapd…
-
Unscored —
u'Multiple Read overflows issue due to improper length check while decoding Generic NAS transport/EMM info' in Snapdrag…
-
Unscored —
Out of bound access can happen in MHI command process due to lack of check of command channel id value received from MH…
-
Unscored —
u'Buffer over-read Issue in Q6 testbus framework due to diag packet length is not completely validated before accessing…
-
Unscored —
u'Reachable assertion when wrong data size is returned by parser for ape clips' in Snapdragon Auto, Snapdragon Consumer…
-
Unscored —
u'During the error occurrence in capture request, the buffer is freed and later accessed causing the camera APP to fail…
-
Unscored —
u'Possible use-after-free while accessing diag client map table since list can be reallocated due to exceeding max clie…
-
Critical 10.0
The File Manager (wp-file-manager) plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitr…
KEV Nov 3, 2021 -
Medium 6.4
IBM Business Process Manager 8.5, 8.6 and IBM Business Automation Workflow 18.0, 19.0, and 20.0 are vulnerable to store…
-
Medium 5.4
IBM Business Process Manager 8.5, 8.6 and IBM Business Automation Workflow 18.0, 19.0, and 20.0 are vulnerable to cross…
-
Unscored —
u'Specifically timed and handcrafted traffic can cause internal errors in a WLAN device that lead to improper layer 2 W…
-
Unscored —
u'Potential integer underflow while parsing Service Info and IPv6 link-local TLVs that comes as part of NDPE attribute'…
-
Unscored —
u'Buffer Overflow issue in WLAN tcp ip verification due to usage of out of range pointer offset' in Snapdragon Auto, Sn…
-
Unscored —
u'Buffer Overflow in mic calculation for WPA due to copying data into buffer without validating the length of buffer' i…
-
Unscored —
u'Buffer overflow while parsing PMF enabled MCBC frames due to frame length being lesser than what is expected while pa…
-
Unscored —
u'Out of bounds memory access during memory copy while processing Host command' in Snapdragon Auto, Snapdragon Compute,…
-
Unscored —
u'Possible out of bound write in DSP driver code due to lack of check of data received from user' in Snapdragon Auto, S…
-
Unscored —
u'Potential buffer overflow when accessing npu debugfs node "off"/"log" with large buffer size' in Snapdragon Compute, …
-
Unscored —
u'Buffer overflow seen as the destination buffer size is lesser than the source buffer size in video application' in Sn…
-
Unscored —
u'Information disclosure issue occurs as in current logic Secure Touch session is released without terminating display …
-
Unscored —
u'Information disclosure issue can occur due to partial secure display-touch session tear-down' in Snapdragon Auto, Sna…
-
Unscored —
u'Resizing the usage table header before passing all the checks leads to the function exiting with a usage table in inv…
-
Unscored —
u'Stack out of bound issue occurs when making query to DSP capabilities due to wrong assumption was made on determining…
-
Unscored —
u'Out of bound writes happen when accessing usage_table header entry beyond the memory allocated for the header' in Sna…
-
Unscored —
u'Channel name string which has been read from shared memory is potentially subjected to string manipulations but not v…
-
Unscored —
u'A potential buffer overflow exists due to integer overflow when parsing handler options due to wrong data type usage …
-
Unscored —
u'Lack of check to ensure that the TX read index & RX write index that are read from shared memory are less than the FI…
-
Unscored —
u'Non-secure memory is touched multiple times during TrustZone\u2019s execution and can lead to privilege escalation or…
-
Unscored —
u'Lack of check of integer overflow while doing a round up operation for data read from shared memory for G-link SMEM t…