Archive
14 December 2020
Vulnerabilities first published on this day (UTC), newest first.
90 results · Feed
-
Medium 5.3CVE-2020-35460 Public exploit
MPXJ path Traversal vulnerability
common/InputStreamHelper.java in Packwood MPXJ before 8.3.5 allows directory traversal in the zip stream handler flow, leading to the writing of files to arbitrary locations.
-
Unscored —
GNOME GLib before 2.65.3 has an integer overflow, that might lead to an out-of-bounds write, in g_option_group_add_entr…
-
Unscored —
In the Broadcom Nexus firmware, there is an insecure default password. This could lead to local information disclosure …
-
Unscored —
In the Broadcom Nexus firmware, there is an insecure default password. This could lead to local escalation of privilege…
-
Unscored —
There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: …
-
Unscored —
There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: …
-
Unscored —
There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: …
-
Unscored —CVE-2020-0463 Public exploit
In sdp_server_handle_client_req of sdp_server.cc, there is a possible out of bounds read due to a missing bounds check.…
-
Unscored —
In addEscrowToken of LockSettingsService.java, there is a possible loss of the synthetic password due to logic error. T…
-
Unscored —
In onUserStopped of Vpn.java, there is a possible resetting of user preferences due to a logic issue. This could lead t…
-
Unscored —
In extend_frame_highbd of restoration.c, there is a possible out of bounds write due to a heap buffer overflow. This co…
-
Unscored —
In createNameCredentialDialog of CertInstaller.java, there exists the possibility of improperly installed certificates …
-
Unscored —
In various methods of hid-multitouch.c, there is a possible out of bounds write due to a missing bounds check. This cou…
-
Unscored —
In createVirtualDisplay of DisplayManagerService.java, there is a possible way to create a trusted virtual display due …
-
Unscored —CVE-2020-0458 Public exploit
In SPDIFEncoder::writeBurstBufferBytes and related methods of SPDIFEncoder.cpp, there is a possible out of bounds write…
-
Unscored —
In sendConfiguredNetworkChangedBroadcast of WifiConfigManager.java, there is a possible leak of sensitive WiFi configur…
-
Unscored —
In listen() and related functions of TelephonyRegistry.java, there is a possible permissions bypass of location permiss…
-
Unscored —
In audit_free_lsm_field of auditfilter.c, there is a possible bad kfree due to a logic error in audit_data_to_entry. Th…
-
Unscored —
In resolv_cache_lookup of res_cache.cpp, there is a possible side channel information disclosure. This could lead to lo…
-
Unscored —
In do_epoll_ctl and ep_loop_check_proc of eventpoll.c, there is a possible use after free due to a logic error. This co…
-
Unscored —
In addWindow of WindowManagerService.java, there is a possible window overlay attack due to an insecure default value. …
-
Unscored —
A vulnerability has been identified in SICAM A8000 CP-8000 (All versions < V16), SICAM A8000 CP-8021 (All versions < V1…
-
Unscored —
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). The firmware update of…
-
Unscored —
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3), LOGO! Soft Comfort (Al…
-
Unscored —
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). The password used for …
-
Unscored —
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Due to the usage of an…
-
Unscored —
A vulnerability has been identified in SIMATIC ET 200SP Open Controller (incl. SIPLUS variants) (V20.8), SIMATIC S7-150…
-
Unscored —
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). A service available on…
-
Unscored —
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3), LOGO! Soft Comfort (Al…
-
Unscored —
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). The implemented encryp…
-
Unscored —
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Due to the usage of an…
-
Unscored —
A vulnerability has been identified in XHQ (All Versions < 6.1). The web interface could allow Cross-Site Scripting (XS…
-
Unscored —
A vulnerability has been identified in XHQ (All Versions < 6.1). The web interface could allow a Cross-Site Request For…
-
Unscored —
A vulnerability has been identified in XHQ (All Versions < 6.1). The web interface could allow injections that could le…
-
Unscored —
A vulnerability has been identified in XHQ (All Versions < 6.1). The application's web server could expose non-sensitiv…
-
Unscored —
A vulnerability has been identified in XHQ (All Versions < 6.1). The web interface could allow SQL injection attacks if…
-
Unscored —
A vulnerability has been identified in XHQ (All Versions < 6.1). The web interface could allow Cross-Site Scripting (XS…
-
Unscored —
A vulnerability has been identified in XHQ (All Versions < 6.1). The web interface could allow attackers to traverse th…
-
Unscored —
SQL Injection vulnerability in NewPK 1.1 via the title parameter to admin\newpost.php.
-
Unscored —CVE-2020-14368 Public exploit
A flaw was found in Eclipse Che in versions prior to 7.14.0 that impacts CodeReady Workspaces. When configured with coo…