CVEs published November 12, 2020
158 CVEs were published on November 12, 2020: 0 critical, 9 high. Browse them by severity, product and exploitation status.
- Published
- 158
- Critical
- 0
- High
- 9
- Medium
- 8
- Low
- 1
- Unrated
- 140
- Now in CISA KEV
- 0
- Fix available
- 14
Most affected products
- Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- 12
- Intel(R) Processors
- 11
- Intel(R) AMT
- 6
- Intel(R) Data Center Manager Console
- 5
- Intel(R) Thunderbolt(TM) DCH drivers for Windows*
- 5
- Palo Alto Networks PAN-OS
- 5
- Intel(R) Ethernet 700 Series Controllers
- 4
- Intel(R) PROSet/Wireless WiFi
- 4
- Intel BIOS platform sample code for some Intel(R) Processors
- 3
- Intel(R) Client SSDs and some Intel(R) Data Center SSDs
- 3
High 9
- CVE-2020-15783A vulnerability has been identified in SIMATIC S7-300 CPU family (incl.Siemens SIMATIC S7-300 CPU family · Siemens SIMATIC TDC… +1
- CVE-2020-25658It was found that python-rsa is vulnerable to Bleichenbacher timing attacks.Sybren A. Stüvel python-rsa · rsa
- CVE-2020-7332Cross-Site Request Forgery (CSRF) in firewall ePO extension of McAfee Endpoint Security (ENS)Mcafee Endpoint Security for Windows
- CVE-2020-7331Unquoted service executable path in McAfee Endpoint Security (ENS)McAfee Endpoint Security
- CVE-2020-7769Command Injectionnodemailer
- CVE-2020-26070Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers Slow Path Forwarding Denial of Service VulnerabilityCisco IOS XR Software
- CVE-2020-2050PAN-OS: Authentication bypass vulnerability in GlobalProtect SSL VPN client certificate verificationPalo Alto Networks PAN-OS
- CVE-2020-2022PAN-OS: Panorama session disclosure during context switch into managed devicePalo Alto Networks PAN-OS
- CVE-2020-2000PAN-OS: OS command injection and memory corruption vulnerabilityPalo Alto Networks PAN-OS
Medium, low and unrated 149
- CVE-2020-7033Avaya Equinox Conferencing XSSAvaya Equinox Conferencing
- CVE-2020-17494Untangle Firewall NG before 16.0 uses MD5 for passwords.
- CVE-2020-24719Exposed Erlang Cookie could lead to Remote Command Execution (RCE) attack.
- CVE-2020-27193A cross-site scripting (XSS) vulnerability in the Color Dialog plugin for CKEditor 4.15.0 allows remote attackers to run arbitrary web…ckeditor4
- CVE-2020-13877SQL Injection issues in various ASPX pages of ResourceXpress Meeting Monitor 4.9 could lead to remote code execution and information…
- CVE-2020-28414A reflected cross-site scripting (XSS) vulnerability exists in the TranzWare Payment Gateway 3.1.12.3.2.
- CVE-2020-28415A reflected cross-site scripting (XSS) vulnerability exists in the TranzWare Payment Gateway 3.1.12.3.2.
- CVE-2020-13774An unrestricted file-upload issue in EditLaunchPadDialog.aspx in Ivanti Endpoint Manager 2019.1 and 2020.1 allows an authenticated…
- CVE-2020-12927A potential vulnerability in a dynamically loaded AMD driver in AMD VBIOS Flash Tool SDK may allow any authenticated user to escalate…AMD VBIOS Flash Tool SDK
- CVE-2020-12912A potential vulnerability in the AMD extension to Linux "hwmon" service may allow an attacker to use the Linux-based Running Average Power…AMD extension to Linux "hwmon" for Zen1 platforms
- CVE-2020-12926The Trusted Platform Modules (TPM) reference software may not properly track the number of times a failed shutdown happens.AMD's fTPM implementation
- CVE-2020-24460Incorrect default permissions in the Intel(R) DSA before version 20.8.30.6 may allow an authenticated user to potentially enable denial of…Intel(R) DSA
- CVE-2020-24456Incorrect default permissions in the Intel(R) Board ID Tool version v.1.01 may allow an authenticated user to potentially enable…Intel(R) Board ID Tool
- CVE-2020-24454Improper Restriction of XML External Entity Reference in subsystem forIntel(R) Quartus(R) Prime Pro Edition before version 20.3 and…Intel(R) Quartus(R) Prime Pro Edition and Intel(R) Quartus(…
- CVE-2020-0572Improper input validation in the firmware for Intel(R) Server Board S2600ST and S2600WF families may allow a privileged user to…Intel(R) Server Board S2600ST and S2600WF families
- CVE-2020-12346Improper permissions in the installer for the Intel(R) Battery Life Diagnostic Tool before version 1.0.7 may allow an authenticated user…Intel(R) Battery Life Diagnostic Tool
- CVE-2020-12349Improper input validation in the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated user to potentially…Intel(R) Data Center Manager Console
- CVE-2020-12353Improper permissions in the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated user to potentially…Intel(R) Data Center Manager Console
- CVE-2020-12345Improper permissions in the installer for the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated user to…Intel(R) Data Center Manager Console
- CVE-2020-8669Improper input validation in the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated user to potentially…Intel(R) Data Center Manager Console
- CVE-2020-12347Improper input validation in the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated user to potentially…Intel(R) Data Center Manager Console
- CVE-2020-12350Improper access control in the Intel(R) XTU before version 6.5.1.360 may allow an authenticated user to potentially enable escalation of…Intel(R) XTU
- CVE-2020-0573Out of bounds read in the Intel CSI2 Host Controller driver may allow an authenticated user to potentially enable information disclosure…Intel CSI2 Host Controller driver
- CVE-2020-16273In Arm software implementing the Armv8-M processors (all versions), the stack selection mechanism could be influenced by a stack-underflow…
- CVE-2020-26803In Sentrifugo 3.2, users can upload an image under "Assets -> Add" tab.
Show all 149 entriesShow fewer entries
- CVE-2020-26804In Sentrifugo 3.2, users can share an announcement under "Organization -> Announcements" tab.
- CVE-2020-26805In Sentrifugo 3.2, admin can edit employee's informations via this endpoint --> /sentrifugo/index.php/empadditionaldetails/edit/userid/2.
- CVE-2020-12329Uncontrolled search path in the Intel(R) VTune(TM) Profiler before version 2020 Update 1 may allow an authenticated user to potentially…Intel(R) VTune(TM) Profiler
- CVE-2020-12326Improper initialization in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 72 may allow an authenticated user to…Intel(R) Thunderbolt(TM) DCH drivers for Windows*
- CVE-2020-12327Insecure default variable initialization in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 72 may allow a privileged…Intel(R) Thunderbolt(TM) DCH drivers for Windows*
- CVE-2020-12328Protection mechanism failure in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 72 may allow a privileged user to…Intel(R) Thunderbolt(TM) DCH drivers for Windows*
- CVE-2020-27385Incorrect Access Control in the FileEditor (/Admin/Views/FileEditor/) in FlexDotnetCMS before v1.5.11 allows an authenticated remote…
- CVE-2020-12324Protection mechanism failure in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 72 may allow an authenticated user to…Intel(R) Thunderbolt(TM) DCH drivers for Windows*
- CVE-2020-12325Improper buffer restrictions in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 72 may allow an authenticated user to…Intel(R) Thunderbolt(TM) DCH drivers for Windows*
- CVE-2020-12332Improper permissions in the installer for the Intel(R) HID Event Filter Driver, all versions, may allow an authenticated user to…Intel(R) HID Event Filter Driver
- CVE-2020-12333Insufficiently protected credentials in the Intel(R) QAT for Linux before version 1.7.l.4.10.0 may allow an authenticated user to…Intel(R) QAT for Linux
- CVE-2020-12335Improper permissions in the installer for the Intel(R) Processor Identification Utility before version 6.4.0603 may allow an authenticated…Intel(R) Processor Identification Utility
- CVE-2020-12331Improper access controls in Intel Unite(R) Cloud Service client before version 4.2.12212 may allow an authenticated user to potentially…Intel Unite(R) Cloud Service client
- CVE-2020-12334Improper permissions in the installer for the Intel(R) Advisor tools before version 2020 Update 2 may allow an authenticated user to…Intel(R) Advisor tools
- CVE-2020-12330Improper permissions in the installer for the Intel(R) Falcon 8+ UAS AscTec Thermal Viewer, all versions, may allow an authenticated user…all versions
- CVE-2020-12323Improper input validation in the Intel(R) ADAS IE before version ADAS_IE_1.0.766 may allow a privileged user to potentially enable…Intel(R) ADAS IE
- CVE-2020-24525Insecure inherited permissions in firmware update tool for some Intel(R) NUCs may allow an authenticated user to potentially enable…Intel(R) NUCs
- CVE-2020-12337Improper buffer restrictions in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege…Intel(R) NUCs
- CVE-2020-12336Insecure default variable initialization in firmware for some Intel(R) NUCs may allow an authenticated user to potentially enable…Intel(R) NUCs
- CVE-2020-12320Uncontrolled search path in Intel(R) SCS Add-on for Microsoft SCCM before version 2.1.10 may allow an authenticated user to potentially…Intel(R) SCS Add-on for Microsoft* SCCM
- CVE-2020-27386An unrestricted file upload issue in FlexDotnetCMS before v1.5.9 allows an authenticated remote attacker to upload and execute arbitrary…
- CVE-2020-12316Insufficiently protected credentials in the Intel(R) EMA before version 1.3.3 may allow an authorized user to potentially enable…Intel(R) EMA
- CVE-2020-12315Path traversal in the Intel(R) EMA before version 1.3.3 may allow an unauthenticated user to potentially enable escalation of privilege…Intel(R) EMA
- CVE-2020-12308Improper access control for the Intel(R) Computing Improvement Program before version 2.4.5982 may allow an unprivileged user to…Intel(R) Computing Improvement Program
- CVE-2020-12307Improper permissions in some Intel(R) High Definition Audio drivers before version 9.21.00.4561 may allow an authenticated user to…Intel(R) High Definition Audio drivers
- CVE-2020-12306Incorrect default permissions in the Intel(R) RealSense(TM) D400 Series Dynamic Calibration Tool before version 2.11, may allow an…Intel(R) RealSense(TM) D400 Series Dynamic Calibration Tool
- CVE-2020-12322Improper input validation in some Intel(R) Wireless Bluetooth(R) products before version 21.110 may allow an unauthenticated user to potentiIntel(R) Wireless Bluetooth
- CVE-2020-12321Improper buffer restriction in some Intel(R) Wireless Bluetooth(R) products before version 21.110 may allow an unauthenticated user to potenIntel(R) Wireless Bluetooth
- CVE-2020-12319Insufficient control flow management in some Intel(R) PROSet/Wireless WiFi products before version 21.110 may allow an unauthenticated…Intel(R) PROSet/Wireless WiFi
- CVE-2020-12317Improper buffer restriction in some Intel(R) PROSet/Wireless WiFi products before version 21.110 may allow an unauthenticated user to…Intel(R) PROSet/Wireless WiFi
- CVE-2020-12318Protection mechanism failure in some Intel(R) PROSet/Wireless WiFi products before version 21.110 may allow an authenticated user to…Intel(R) PROSet/Wireless WiFi
- CVE-2020-12314Improper input validation in some Intel(R) PROSet/Wireless WiFi products before version 21.110 may allow an unauthenticated user to…Intel(R) PROSet/Wireless WiFi
- CVE-2020-8767Uncaught exception in the Intel(R) 50GbE IP Core for Intel(R) Quartus Prime before version 20.2 may allow an authenticated user to…Intel(R) 50GbE IP Core for Intel(R) Quartus Prime
- CVE-2020-8766Improper conditions check in the Intel(R) SGX DCAP software before version 1.6 may allow an unauthenticated user to potentially enable…Intel(R) SGX DCAP software
- CVE-2020-8749Out-of-bounds read in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an…Intel(R) AMT
- CVE-2020-8746Integer overflow in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an…Intel(R) AMT
- CVE-2020-12356Out-of-bounds read in subsystem in Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow a privileged…Intel(R) AMT
- CVE-2020-8755Race condition in subsystem for Intel(R) CSME versions before 12.0.70 and 14.0.45, Intel(R) SPS versions before E5_04.01.04.400 and…Intel(R) CSME, Intel(R) SPS
- CVE-2020-8747Out-of-bounds read in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an…Intel(R) AMT
- CVE-2020-8761Inadequate encryption strength in subsystem for Intel(R) CSME versions before 13.0.40 and 13.30.10 may allow an unauthenticated user to…Intel(R) CSME
- CVE-2020-8754Out-of-bounds read in subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow…Intel(R) AMT, Intel(R) ISM
- CVE-2020-8751Insufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, Intel(R) TXE versions before 3.1.80 may allow…Intel(R) CSME, Intel(R) TXE
- CVE-2020-12355Authentication bypass by capture-replay in RPMB protocol message authentication subsystem in Intel(R) TXE versions before 4.0.30 may allow…Intel(R) TXE
- CVE-2020-8760Integer overflow in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 14.0.45 may allow a privileged user…Intel(R) AMT
- CVE-2020-8756Improper input validation in subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow a…Intel(R) CSME
- CVE-2020-8757Out-of-bounds read in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow a privileged…Intel(R) AMT
- CVE-2020-12354Incorrect default permissions in Windows(R) installer in Intel(R) AMT SDK versions before 14.0.0.1 may allow an authenticated user to…Intel(R) AMT SDK
- CVE-2020-12303Use after free in DAL subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and…Intel(R) CSME, Intel(R) TXE
- CVE-2020-8750Use after free in Kernel Mode Driver for Intel(R) TXE versions before 3.1.80 and 4.0.30 may allow an authenticated user to potentially…Intel(R) TXE
- CVE-2020-8705Insecure default initialization of resource in Intel(R) Boot Guard in Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70…Intel(R) Boot Guard, Intel(R) CSME, Intel(R) TXE, Intel(R)…
- CVE-2020-8744Improper initialization in subsystem for Intel(R) CSME versions before12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE…Intel(R) CSME versions, Intel(R) TXE, Intel(R) SPS
- CVE-2020-8745Insufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40…Intel(R) CSME, Intel(R) TXE
- CVE-2020-12304Improper access control in Installer for Intel(R) DAL SDK before version 2.1 for Windows may allow an authenticated user to potentially…Intel(R) DAL SDK
- CVE-2020-12297Improper access control in Installer for Intel(R) CSME Driver for Windows versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40…Intel(R) CSME, Intel TXE
- CVE-2020-8753Out-of-bounds read in DHCP subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may…Intel(R) AMT, Intel(R) ISM versions
- CVE-2020-8752Out-of-bounds write in IPv6 subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 14.0.45 may…Intel(R) AMT, Intel(R) ISM versions
- CVE-2020-8739Use of potentially dangerous function in Intel BIOS platform sample code for some Intel(R) Processors may allow an authenticated user to…Intel BIOS platform sample code for some Intel(R) Processors
- CVE-2020-8740Out of bounds write in Intel BIOS platform sample code for some Intel(R) Processors may allow a privileged user to potentially enable…Intel BIOS platform sample code for some Intel(R) Processors
- CVE-2020-8738Improper conditions check in Intel BIOS platform sample code for some Intel(R) Processors before may allow a privileged user to…Intel BIOS platform sample code for some Intel(R) Processors
- CVE-2020-8764Improper access control in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of…Intel(R) Processors
- CVE-2020-28247The lettre library through 0.10.0-alpha for Rust allows arbitrary sendmail option injection via transport/sendmail/mod.rs.lettre
- CVE-2020-8695Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to potentially enable information…Intel(R) Processors
- CVE-2020-8694Insufficient access control in the Linux kernel driver for some Intel(R) Processors may allow an authenticated user to potentially enable…Intel(R) Processors
- CVE-2020-12312Improper buffer restrictions in the Intel(R) Stratix(R) 10 FPGA firmware provided with the Intel(R) Quartus(R) Prime Pro software before…Intel(R) Stratix(R) 10 FPGA firmware provided with the Inte…
- CVE-2020-8737Improper buffer restrictions in the Intel(R) Stratix(R) 10 FPGA firmware provided with the Intel(R) Quartus(R) Prime Pro software before…Intel(R) Stratix(R) 10 FPGA firmware provided with the Inte…
- CVE-2020-8696Improper removal of sensitive information before storage or transfer in some Intel(R) Processors may allow an authenticated user to…Intel(R) Processors
- CVE-2020-8698Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information…Intel(R) Processors
- CVE-2020-8691A logic issue in the firmware of the Intel(R) Ethernet 700 Series Controllers may allow a privileged user to potentially enable escalation…Intel(R) Ethernet 700 Series Controllers
- CVE-2020-8690Protection mechanism failure in Intel(R) Ethernet 700 Series Controllers before version 7.3 may allow a privileged user to potentially…Intel(R) Ethernet 700 Series Controllers
- CVE-2020-8692Insufficient access control in the firmware of the Intel(R) Ethernet 700 Series Controllers before version 7.3 may allow a privileged user…Intel(R) Ethernet 700 Series Controllers
- CVE-2020-8693Improper buffer restrictions in the firmware of the Intel(R) Ethernet 700 Series Controllers may allow a privileged user to potentially…Intel(R) Ethernet 700 Series Controllers
- CVE-2020-8677Improper access control in the Intel(R) Visual Compute Accelerator 2, all versions, may allow a privileged user to potentially enable…versions
- CVE-2020-8676Improper access control in the Intel(R) Visual Compute Accelerator 2, all versions, may allow a privileged user to potentially enable…versions
- CVE-2020-0584Buffer overflow in firmware for Intel(R) SSD DC P4800X and P4801X Series, Intel(R) Optane(TM) SSD 900P and 905P Series may allow an…Intel(R) SSD DC P4800X and P4801X Series, Intel(R) Optane(T…
- CVE-2020-12311Insufficient control flow managementin firmware in some Intel(R) Client SSDs and some Intel(R) Data Center SSDs may allow an…Intel(R) Client SSDs and some Intel(R) Data Center SSDs
- CVE-2020-12310Insufficient control flow managementin firmware in some Intel(R) Client SSDs and some Intel(R) Data Center SSDs may allow an…Intel(R) Client SSDs and some Intel(R) Data Center SSDs
- CVE-2020-12309Insufficiently protected credentialsin subsystem in some Intel(R) Client SSDs and some Intel(R) Data Center SSDs may allow an…Intel(R) Client SSDs and some Intel(R) Data Center SSDs
- CVE-2020-0592Out of bounds write in BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of…Intel(R) Processors
- CVE-2020-0588Improper conditions check in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of…Intel(R) Processors
- CVE-2020-0593Improper buffer restrictions in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of…Intel(R) Processors
- CVE-2020-0591Improper buffer restrictions in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of…Intel(R) Processors
- CVE-2020-0587Improper conditions check in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of…Intel(R) Processors
- CVE-2020-0590Improper input validation in BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation…Intel(R) Processors
- CVE-2020-0575Improper buffer restrictions in the Intel(R) Unite Client for Windows before version 4.2.13064 may allow an authenticated user to…Intel(R) Unite Client for Windows*
- CVE-2019-11121Improper file permissions in the installer for the Intel(R) Media SDK for Windows before version 2019 R1 may allow an authenticated user…Intel(R) Media SDK for Windows
- CVE-2020-24573BAB TECHNOLOGIE GmbH eibPort V3 prior to 3.8.3 devices allow denial of service (Uncontrolled Resource Consumption) via requests to the…
- CVE-2020-13770Several services are accessing named pipes in Ivanti Endpoint Manager through 2020.1.1 with default or overly permissive security…
- CVE-2020-7472An authorization bypass and PHP local-file-include vulnerability in the installation component of SugarCRM before 8.0, 8.0 before 8.0.7…
- CVE-2020-28271Prototype pollution vulnerability in 'deephas' versions 1.0.0 through 1.0.5 allows attacker to cause a denial of service and may lead to…deephas
- CVE-2020-28270Prototype pollution vulnerability in 'object-hierarchy-access' versions 0.2.0 through 0.32.0 allows attacker to cause a denial of service…object-hierarchy-access
- CVE-2020-28269Prototype pollution vulnerability in 'field' versions 0.0.1 through 1.0.1 allows attacker to cause a denial of service and may lead to…field
- CVE-2020-13771Various components in Ivanti Endpoint Manager through 2020.1.1 rely on Windows search order when loading a (nonexistent) library file…
- CVE-2020-24441Improper Access Control in Adobe Acrobat Reader for AndroidAdobe Acrobat Reader
- CVE-2020-24443Reflected Cross-Site Scripting (XSS) in Adobe ConnectAdobe Connect
- CVE-2020-24442Reflected Cross-Site Scripting (XSS) in Adobe ConnectAdobe Connect
- CVE-2020-9128FusionCompute versions 8.0.0 have an insecure encryption algorithm vulnerability.FusionCompute
- CVE-2020-27481An unauthenticated SQL Injection vulnerability in Good Layers LMS Plugin <= 2.1.4 exists due to the usage of "wp_ajax_nopriv" call in…
- CVE-2020-13954Apache CXF Reflected XSS in the services listing page via the styleSheetPathApache Software Foundation Apache CXF · org.apache.cxf:a… +1
- CVE-2020-7770Prototype Pollutionjson8
- CVE-2020-3632u'Incorrect validation of ring context fetched from host memory can lead to memory overflow' in Snapdragon Compute, Snapdragon Mobile in…Qualcomm Snapdragon Compute, Snapdragon Mobile
- CVE-2020-3639u'When a non standard SIP sigcomp message is received from the network, then there may be chances of using more UDVM cycle or memory…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11207Buffer overflow in LibFastCV library due to improper size checks with respect to buffer length' in Snapdragon Auto, Snapdragon Compute…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11208Out of Bound issue in DSP services while processing received arguments due to improper validation of length received as an argument' in…Qualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…
- CVE-2020-11209Improper authorization in DSP process could allow unauthorized users to downgrade the library versions in SD820, SD821, SD820, QCS603…Qualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…
- CVE-2020-11205u'Possible integer overflow to heap overflow while processing command due to lack of check of packet length received' in Snapdragon Auto…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Mo…
- CVE-2020-11206Possible buffer overflow in Fastrpc while handling received parameters due to lack of validation on input parameters' in Snapdragon Auto…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11201Arbitrary access to DSP memory due to improper check in loaded library for data received from CPU side' in Snapdragon Auto, Snapdragon…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11202Buffer overflow/underflow occurs when typecasting the buffer passed by CPU internally in the library which is not aligned with the actual…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11193u'Buffer over read can happen while parsing mkv clip due to improper typecasting of data returned from atomsize' in Snapdragon Auto…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11196u'Integer overflow to buffer overflow occurs while playback of ASF clip having unexpected number of codec entries' in Snapdragon Auto…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11168u'Null-pointer dereference can occur while accessing data buffer beyond its size that leads to access the buffer beyond its range' in…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11175u'Use after free issue in Bluetooth transport driver when a method in the object is accessed after the object has been deleted due to…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11184u'Possible buffer overflow will occur in video while parsing mp4 clip with crafted esds atom size.' in Snapdragon Auto, Snapdragon…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon In…
- CVE-2020-11131u'Possible buffer overflow in WMA message processing due to integer overflow occurs when processing command received from user space' in…Qualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…
- CVE-2020-11132u'Buffer over read in boot due to size check ignored before copying GUID attribute from request to response' in Snapdragon Auto…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11127u'Integer overflow can cause a buffer overflow due to lack of table length check in the extensible boot Loader during the validation of…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11130u'Possible buffer overflow in WIFI hal process due to copying data without checking the buffer length' in Snapdragon Auto, Snapdragon…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon In…
- CVE-2020-11121u'Possible buffer overflow in WIFI hal process due to usage of memcpy without checking length of destination buffer' in Snapdragon Auto…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon In…
- CVE-2020-11123u'information disclosure in gatekeeper trustzone implementation as the throttling mechanism to prevent brute force attempts at getting…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-7333Cross-site Scripting (XSS) in firewall ePO extension of McAfee Endpoint Security (ENS)Mcafee Endpoint Security for Windows
- CVE-2020-2048PAN-OS: System proxy passwords may be logged in clear text while viewing system statePalo Alto Networks PAN-OS
- CVE-2020-1999PAN-OS: Threat signatures are evaded by specifically crafted packetsPalo Alto Networks PAN-OS
- CVE-2019-17566Apache Batik is vulnerable to server-side request forgery, caused by improper input validation by the "xlink:href" attributes.Apache Batik · org.apache.xmlgraphics:batik
- CVE-2020-25706A cross-site scripting (XSS) vulnerability exists in templates_import.php (Cacti 1.2.13) due to Improper escaping of error message during…The Cacti Group cacti