CVEs published November 12, 2020
158 CVEs were published on November 12, 2020: 0 critical, 9 high.
- Published
- 158
- Critical
- 0
- High
- 9
- Medium
- 8
- Low
- 1
- Unrated
- 140
- Now in CISA KEV
- 0
- Fix available
- 14
Most affected products
- Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- 12
- Intel(R) Processors
- 11
- Intel(R) AMT
- 6
- Intel(R) Data Center Manager Console
- 5
- Intel(R) Thunderbolt(TM) DCH drivers for Windows*
- 5
- Palo Alto Networks PAN-OS
- 5
- Intel(R) Ethernet 700 Series Controllers
- 4
- Intel(R) PROSet/Wireless WiFi
- 4
- Intel BIOS platform sample code for some Intel(R) Processors
- 3
- Intel(R) Client SSDs and some Intel(R) Data Center SSDs
- 3
High 9
- CVE-2020-15783A vulnerability has been identified in SIMATIC S7-300 CPU family (incl.Siemens SIMATIC S7-300 CPU family · Siemens SIMATIC TDC… +1
- CVE-2020-25658It was found that python-rsa is vulnerable to Bleichenbacher timing attacks.Sybren A. Stüvel python-rsa · rsa
- CVE-2020-7332Cross-Site Request Forgery (CSRF) in firewall ePO extension of McAfee Endpoint Security (ENS)Mcafee Endpoint Security for Windows
- CVE-2020-7331Unquoted service executable path in McAfee Endpoint Security (ENS)McAfee Endpoint Security
- CVE-2020-7769Command Injectionnodemailer
- CVE-2020-26070Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers Slow Path Forwarding Denial of Service VulnerabilityCisco IOS XR Software
- CVE-2020-2050PAN-OS: Authentication bypass vulnerability in GlobalProtect SSL VPN client certificate verificationPalo Alto Networks PAN-OS
- CVE-2020-2022PAN-OS: Panorama session disclosure during context switch into managed devicePalo Alto Networks PAN-OS
- CVE-2020-2000PAN-OS: OS command injection and memory corruption vulnerabilityPalo Alto Networks PAN-OS
Medium, low and unrated 149
- CVE-2020-7033Avaya Equinox Conferencing XSSAvaya Equinox Conferencing
- CVE-2020-17494Untangle Firewall NG before 16.0 uses MD5 for passwords.
- CVE-2020-24719Exposed Erlang Cookie could lead to Remote Command Execution (RCE) attack.
- CVE-2020-27193A cross-site scripting (XSS) vulnerability in the Color Dialog plugin for CKEditor 4.15.0 allows remote attackers to run arbitrary web scripckeditor4
- CVE-2020-13877SQL Injection issues in various ASPX pages of ResourceXpress Meeting Monitor 4.9 could lead to remote code execution and information disclos
- CVE-2020-28414A reflected cross-site scripting (XSS) vulnerability exists in the TranzWare Payment Gateway 3.1.12.3.2.
- CVE-2020-28415A reflected cross-site scripting (XSS) vulnerability exists in the TranzWare Payment Gateway 3.1.12.3.2.
- CVE-2020-13774An unrestricted file-upload issue in EditLaunchPadDialog.aspx in Ivanti Endpoint Manager 2019.1 and 2020.1 allows an authenticated attacker
- CVE-2020-12927A potential vulnerability in a dynamically loaded AMD driver in AMD VBIOS Flash Tool SDK may allow any authenticated user to escalate privilAMD VBIOS Flash Tool SDK
- CVE-2020-12912A potential vulnerability in the AMD extension to Linux "hwmon" service may allow an attacker to use the Linux-based Running Average Power LAMD extension to Linux "hwmon" for Zen1 platforms
- CVE-2020-12926The Trusted Platform Modules (TPM) reference software may not properly track the number of times a failed shutdown happens.AMD's fTPM implementation
- CVE-2020-24460Incorrect default permissions in the Intel(R) DSA before version 20.8.30.6 may allow an authenticated user to potentially enable denial of sIntel(R) DSA
- CVE-2020-24456Incorrect default permissions in the Intel(R) Board ID Tool version v.1.01 may allow an authenticated user to potentially enable escalation Intel(R) Board ID Tool
- CVE-2020-24454Improper Restriction of XML External Entity Reference in subsystem forIntel(R) Quartus(R) Prime Pro Edition before version 20.3 and Intel(R)Intel(R) Quartus(R) Prime Pro Edition and Intel(R) Quartus(…
- CVE-2020-0572Improper input validation in the firmware for Intel(R) Server Board S2600ST and S2600WF families may allow a privileged user to potentially Intel(R) Server Board S2600ST and S2600WF families
- CVE-2020-12346Improper permissions in the installer for the Intel(R) Battery Life Diagnostic Tool before version 1.0.7 may allow an authenticated user to Intel(R) Battery Life Diagnostic Tool
- CVE-2020-12349Improper input validation in the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated user to potentially enIntel(R) Data Center Manager Console
- CVE-2020-12353Improper permissions in the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated user to potentially enable Intel(R) Data Center Manager Console
- CVE-2020-12345Improper permissions in the installer for the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated user to pIntel(R) Data Center Manager Console
- CVE-2020-8669Improper input validation in the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated user to potentially enIntel(R) Data Center Manager Console
- CVE-2020-12347Improper input validation in the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated user to potentially enIntel(R) Data Center Manager Console
- CVE-2020-12350Improper access control in the Intel(R) XTU before version 6.5.1.360 may allow an authenticated user to potentially enable escalation of priIntel(R) XTU
- CVE-2020-0573Out of bounds read in the Intel CSI2 Host Controller driver may allow an authenticated user to potentially enable information disclosure viaIntel CSI2 Host Controller driver
- CVE-2020-16273In Arm software implementing the Armv8-M processors (all versions), the stack selection mechanism could be influenced by a stack-underflow a
- CVE-2020-26803In Sentrifugo 3.2, users can upload an image under "Assets -> Add" tab.
- CVE-2020-26804In Sentrifugo 3.2, users can share an announcement under "Organization -> Announcements" tab.
- CVE-2020-26805In Sentrifugo 3.2, admin can edit employee's informations via this endpoint --> /sentrifugo/index.php/empadditionaldetails/edit/userid/2.
- CVE-2020-12329Uncontrolled search path in the Intel(R) VTune(TM) Profiler before version 2020 Update 1 may allow an authenticated user to potentially enabIntel(R) VTune(TM) Profiler
- CVE-2020-12326Improper initialization in some Intel(R) Thunderbolt(TM) DCH drivers for Windows* before version 72 may allow an authenticated user to potenIntel(R) Thunderbolt(TM) DCH drivers for Windows*
- CVE-2020-12327Insecure default variable initialization in some Intel(R) Thunderbolt(TM) DCH drivers for Windows* before version 72 may allow a privileged Intel(R) Thunderbolt(TM) DCH drivers for Windows*
- CVE-2020-12328Protection mechanism failure in some Intel(R) Thunderbolt(TM) DCH drivers for Windows* before version 72 may allow a privileged user to poteIntel(R) Thunderbolt(TM) DCH drivers for Windows*
- CVE-2020-27385Incorrect Access Control in the FileEditor (/Admin/Views/FileEditor/) in FlexDotnetCMS before v1.5.11 allows an authenticated remote attacke
- CVE-2020-12324Protection mechanism failure in some Intel(R) Thunderbolt(TM) DCH drivers for Windows* before version 72 may allow an authenticated user to Intel(R) Thunderbolt(TM) DCH drivers for Windows*
- CVE-2020-12325Improper buffer restrictions in some Intel(R) Thunderbolt(TM) DCH drivers for Windows* before version 72 may allow an authenticated user to Intel(R) Thunderbolt(TM) DCH drivers for Windows*
- CVE-2020-12332Improper permissions in the installer for the Intel(R) HID Event Filter Driver, all versions, may allow an authenticated user to potentiallyIntel(R) HID Event Filter Driver
- CVE-2020-12333Insufficiently protected credentials in the Intel(R) QAT for Linux before version 1.7.l.4.10.0 may allow an authenticated user to potentiallIntel(R) QAT for Linux
- CVE-2020-12335Improper permissions in the installer for the Intel(R) Processor Identification Utility before version 6.4.0603 may allow an authenticated uIntel(R) Processor Identification Utility
- CVE-2020-12331Improper access controls in Intel Unite(R) Cloud Service client before version 4.2.12212 may allow an authenticated user to potentially enabIntel Unite(R) Cloud Service client
- CVE-2020-12334Improper permissions in the installer for the Intel(R) Advisor tools before version 2020 Update 2 may allow an authenticated user to potentiIntel(R) Advisor tools
- CVE-2020-12330Improper permissions in the installer for the Intel(R) Falcon 8+ UAS AscTec Thermal Viewer, all versions, may allow an authenticated user toall versions
- CVE-2020-12323Improper input validation in the Intel(R) ADAS IE before version ADAS_IE_1.0.766 may allow a privileged user to potentially enable escalatioIntel(R) ADAS IE
- CVE-2020-24525Insecure inherited permissions in firmware update tool for some Intel(R) NUCs may allow an authenticated user to potentially enable escalatiIntel(R) NUCs
- CVE-2020-12337Improper buffer restrictions in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege viIntel(R) NUCs
- CVE-2020-12336Insecure default variable initialization in firmware for some Intel(R) NUCs may allow an authenticated user to potentially enable escalationIntel(R) NUCs
- CVE-2020-12320Uncontrolled search path in Intel(R) SCS Add-on for Microsoft* SCCM before version 2.1.10 may allow an authenticated user to potentially enaIntel(R) SCS Add-on for Microsoft* SCCM
- CVE-2020-27386An unrestricted file upload issue in FlexDotnetCMS before v1.5.9 allows an authenticated remote attacker to upload and execute arbitrary fil
- CVE-2020-12316Insufficiently protected credentials in the Intel(R) EMA before version 1.3.3 may allow an authorized user to potentially enable informationIntel(R) EMA
- CVE-2020-12315Path traversal in the Intel(R) EMA before version 1.3.3 may allow an unauthenticated user to potentially enable escalation of privilege via Intel(R) EMA
- CVE-2020-12308Improper access control for the Intel(R) Computing Improvement Program before version 2.4.5982 may allow an unprivileged user to potentiallyIntel(R) Computing Improvement Program
- CVE-2020-12307Improper permissions in some Intel(R) High Definition Audio drivers before version 9.21.00.4561 may allow an authenticated user to potentialIntel(R) High Definition Audio drivers
- CVE-2020-12306Incorrect default permissions in the Intel(R) RealSense(TM) D400 Series Dynamic Calibration Tool before version 2.11, may allow an authenticIntel(R) RealSense(TM) D400 Series Dynamic Calibration Tool
- CVE-2020-12322Improper input validation in some Intel(R) Wireless Bluetooth(R) products before version 21.110 may allow an unauthenticated user to potentiIntel(R) Wireless Bluetooth
- CVE-2020-12321Improper buffer restriction in some Intel(R) Wireless Bluetooth(R) products before version 21.110 may allow an unauthenticated user to potenIntel(R) Wireless Bluetooth
- CVE-2020-12319Insufficient control flow management in some Intel(R) PROSet/Wireless WiFi products before version 21.110 may allow an unauthenticated user Intel(R) PROSet/Wireless WiFi
- CVE-2020-12317Improper buffer restriction in some Intel(R) PROSet/Wireless WiFi products before version 21.110 may allow an unauthenticated user to potentIntel(R) PROSet/Wireless WiFi
- CVE-2020-12318Protection mechanism failure in some Intel(R) PROSet/Wireless WiFi products before version 21.110 may allow an authenticated user to potentiIntel(R) PROSet/Wireless WiFi
- CVE-2020-12314Improper input validation in some Intel(R) PROSet/Wireless WiFi products before version 21.110 may allow an unauthenticated user to potentiaIntel(R) PROSet/Wireless WiFi
- CVE-2020-8767Uncaught exception in the Intel(R) 50GbE IP Core for Intel(R) Quartus Prime before version 20.2 may allow an authenticated user to potentialIntel(R) 50GbE IP Core for Intel(R) Quartus Prime
- CVE-2020-8766Improper conditions check in the Intel(R) SGX DCAP software before version 1.6 may allow an unauthenticated user to potentially enable deniaIntel(R) SGX DCAP software
- CVE-2020-8749Out-of-bounds read in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticatIntel(R) AMT
- CVE-2020-8746Integer overflow in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticatedIntel(R) AMT
- CVE-2020-12356Out-of-bounds read in subsystem in Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow a privileged userIntel(R) AMT
- CVE-2020-8755Race condition in subsystem for Intel(R) CSME versions before 12.0.70 and 14.0.45, Intel(R) SPS versions before E5_04.01.04.400 and E3_05.01Intel(R) CSME, Intel(R) SPS
- CVE-2020-8747Out-of-bounds read in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticatIntel(R) AMT
- CVE-2020-8761Inadequate encryption strength in subsystem for Intel(R) CSME versions before 13.0.40 and 13.30.10 may allow an unauthenticated user to poteIntel(R) CSME
- CVE-2020-8754Out-of-bounds read in subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow anIntel(R) AMT, Intel(R) ISM
- CVE-2020-8751Insufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, Intel(R) TXE versions before 3.1.80 may allow aIntel(R) CSME, Intel(R) TXE
- CVE-2020-12355Authentication bypass by capture-replay in RPMB protocol message authentication subsystem in Intel(R) TXE versions before 4.0.30 may allow aIntel(R) TXE
- CVE-2020-8760Integer overflow in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 14.0.45 may allow a privileged user to Intel(R) AMT
- CVE-2020-8756Improper input validation in subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow a privilIntel(R) CSME
- CVE-2020-8757Out-of-bounds read in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow a privileged useIntel(R) AMT
- CVE-2020-12354Incorrect default permissions in Windows(R) installer in Intel(R) AMT SDK versions before 14.0.0.1 may allow an authenticated user to potentIntel(R) AMT SDK
- CVE-2020-12303Use after free in DAL subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.Intel(R) CSME, Intel(R) TXE
- CVE-2020-8750Use after free in Kernel Mode Driver for Intel(R) TXE versions before 3.1.80 and 4.0.30 may allow an authenticated user to potentially enablIntel(R) TXE
- CVE-2020-8705Insecure default initialization of resource in Intel(R) Boot Guard in Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13Intel(R) Boot Guard, Intel(R) CSME, Intel(R) TXE, Intel(R)…
- CVE-2020-8744Improper initialization in subsystem for Intel(R) CSME versions before12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE versionsIntel(R) CSME versions, Intel(R) TXE, Intel(R) SPS
- CVE-2020-8745Insufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10,Intel(R) CSME, Intel(R) TXE
- CVE-2020-12304Improper access control in Installer for Intel(R) DAL SDK before version 2.1 for Windows may allow an authenticated user to potentially enabIntel(R) DAL SDK
- CVE-2020-12297Improper access control in Installer for Intel(R) CSME Driver for Windows versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.Intel(R) CSME, Intel TXE
- CVE-2020-8753Out-of-bounds read in DHCP subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allIntel(R) AMT, Intel(R) ISM versions
- CVE-2020-8752Out-of-bounds write in IPv6 subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 14.0.45 may allowIntel(R) AMT, Intel(R) ISM versions
- CVE-2020-8739Use of potentially dangerous function in Intel BIOS platform sample code for some Intel(R) Processors may allow an authenticated user to potIntel BIOS platform sample code for some Intel(R) Processors
- CVE-2020-8740Out of bounds write in Intel BIOS platform sample code for some Intel(R) Processors may allow a privileged user to potentially enable escalaIntel BIOS platform sample code for some Intel(R) Processors
- CVE-2020-8738Improper conditions check in Intel BIOS platform sample code for some Intel(R) Processors before may allow a privileged user to potentially Intel BIOS platform sample code for some Intel(R) Processors
- CVE-2020-8764Improper access control in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilIntel(R) Processors
- CVE-2020-28247The lettre library through 0.10.0-alpha for Rust allows arbitrary sendmail option injection via transport/sendmail/mod.rs.lettre
- CVE-2020-8695Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to potentially enable information discIntel(R) Processors
- CVE-2020-8694Insufficient access control in the Linux kernel driver for some Intel(R) Processors may allow an authenticated user to potentially enable inIntel(R) Processors
- CVE-2020-12312Improper buffer restrictions in the Intel(R) Stratix(R) 10 FPGA firmware provided with the Intel(R) Quartus(R) Prime Pro software before verIntel(R) Stratix(R) 10 FPGA firmware provided with the Inte…
- CVE-2020-8737Improper buffer restrictions in the Intel(R) Stratix(R) 10 FPGA firmware provided with the Intel(R) Quartus(R) Prime Pro software before verIntel(R) Stratix(R) 10 FPGA firmware provided with the Inte…
- CVE-2020-8696Improper removal of sensitive information before storage or transfer in some Intel(R) Processors may allow an authenticated user to potentiaIntel(R) Processors
- CVE-2020-8698Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosIntel(R) Processors
- CVE-2020-8691A logic issue in the firmware of the Intel(R) Ethernet 700 Series Controllers may allow a privileged user to potentially enable escalation oIntel(R) Ethernet 700 Series Controllers
- CVE-2020-8690Protection mechanism failure in Intel(R) Ethernet 700 Series Controllers before version 7.3 may allow a privileged user to potentially enablIntel(R) Ethernet 700 Series Controllers
- CVE-2020-8692Insufficient access control in the firmware of the Intel(R) Ethernet 700 Series Controllers before version 7.3 may allow a privileged user tIntel(R) Ethernet 700 Series Controllers
- CVE-2020-8693Improper buffer restrictions in the firmware of the Intel(R) Ethernet 700 Series Controllers may allow a privileged user to potentially enabIntel(R) Ethernet 700 Series Controllers
- CVE-2020-8677Improper access control in the Intel(R) Visual Compute Accelerator 2, all versions, may allow a privileged user to potentially enable denialversions
- CVE-2020-8676Improper access control in the Intel(R) Visual Compute Accelerator 2, all versions, may allow a privileged user to potentially enable escalaversions
- CVE-2020-0584Buffer overflow in firmware for Intel(R) SSD DC P4800X and P4801X Series, Intel(R) Optane(TM) SSD 900P and 905P Series may allow an unauthenIntel(R) SSD DC P4800X and P4801X Series, Intel(R) Optane(T…
- CVE-2020-12311Insufficient control flow managementin firmware in some Intel(R) Client SSDs and some Intel(R) Data Center SSDs may allow an unauthenticatedIntel(R) Client SSDs and some Intel(R) Data Center SSDs
- CVE-2020-12310Insufficient control flow managementin firmware in some Intel(R) Client SSDs and some Intel(R) Data Center SSDs may allow an unauthenticatedIntel(R) Client SSDs and some Intel(R) Data Center SSDs
- CVE-2020-12309Insufficiently protected credentialsin subsystem in some Intel(R) Client SSDs and some Intel(R) Data Center SSDs may allow an unauthenticateIntel(R) Client SSDs and some Intel(R) Data Center SSDs
- CVE-2020-0592Out of bounds write in BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilIntel(R) Processors
- CVE-2020-0588Improper conditions check in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privIntel(R) Processors
- CVE-2020-0593Improper buffer restrictions in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of pIntel(R) Processors
- CVE-2020-0591Improper buffer restrictions in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of pIntel(R) Processors
- CVE-2020-0587Improper conditions check in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privIntel(R) Processors
- CVE-2020-0590Improper input validation in BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of Intel(R) Processors
- CVE-2020-0575Improper buffer restrictions in the Intel(R) Unite Client for Windows* before version 4.2.13064 may allow an authenticated user to potentialIntel(R) Unite Client for Windows*
- CVE-2019-11121Improper file permissions in the installer for the Intel(R) Media SDK for Windows before version 2019 R1 may allow an authenticated user to Intel(R) Media SDK for Windows
- CVE-2020-24573BAB TECHNOLOGIE GmbH eibPort V3 prior to 3.8.3 devices allow denial of service (Uncontrolled Resource Consumption) via requests to the light
- CVE-2020-13770Several services are accessing named pipes in Ivanti Endpoint Manager through 2020.1.1 with default or overly permissive security attributes
- CVE-2020-7472An authorization bypass and PHP local-file-include vulnerability in the installation component of SugarCRM before 8.0, 8.0 before 8.0.7, 9.0
- CVE-2020-28271Prototype pollution vulnerability in 'deephas' versions 1.0.0 through 1.0.5 allows attacker to cause a denial of service and may lead to remdeephas
- CVE-2020-28270Prototype pollution vulnerability in 'object-hierarchy-access' versions 0.2.0 through 0.32.0 allows attacker to cause a denial of service anobject-hierarchy-access
- CVE-2020-28269Prototype pollution vulnerability in 'field' versions 0.0.1 through 1.0.1 allows attacker to cause a denial of service and may lead to remotfield
- CVE-2020-13771Various components in Ivanti Endpoint Manager through 2020.1.1 rely on Windows search order when loading a (nonexistent) library file, allow
- CVE-2020-24441Improper Access Control in Adobe Acrobat Reader for AndroidAdobe Acrobat Reader
- CVE-2020-24443Reflected Cross-Site Scripting (XSS) in Adobe ConnectAdobe Connect
- CVE-2020-24442Reflected Cross-Site Scripting (XSS) in Adobe ConnectAdobe Connect
- CVE-2020-9128FusionCompute versions 8.0.0 have an insecure encryption algorithm vulnerability.FusionCompute
- CVE-2020-27481An unauthenticated SQL Injection vulnerability in Good Layers LMS Plugin <= 2.1.4 exists due to the usage of "wp_ajax_nopriv" call in WordPr
- CVE-2020-13954Apache CXF Reflected XSS in the services listing page via the styleSheetPathApache Software Foundation Apache CXF · org.apache.cxf:a… +1
- CVE-2020-7770Prototype Pollutionjson8
- CVE-2020-3632u'Incorrect validation of ring context fetched from host memory can lead to memory overflow' in Snapdragon Compute, Snapdragon Mobile in QSMQualcomm Snapdragon Compute, Snapdragon Mobile
- CVE-2020-3639u'When a non standard SIP sigcomp message is received from the network, then there may be chances of using more UDVM cycle or memory overfloQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11207Buffer overflow in LibFastCV library due to improper size checks with respect to buffer length' in Snapdragon Auto, Snapdragon Compute, SnapQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11208Out of Bound issue in DSP services while processing received arguments due to improper validation of length received as an argument' in SD82Qualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…
- CVE-2020-11209Improper authorization in DSP process could allow unauthorized users to downgrade the library versions in SD820, SD821, SD820, QCS603, QCS60Qualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…
- CVE-2020-11205u'Possible integer overflow to heap overflow while processing command due to lack of check of packet length received' in Snapdragon Auto, SnQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Mo…
- CVE-2020-11206Possible buffer overflow in Fastrpc while handling received parameters due to lack of validation on input parameters' in Snapdragon Auto, SnQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11201Arbitrary access to DSP memory due to improper check in loaded library for data received from CPU side' in Snapdragon Auto, Snapdragon CompuQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11202Buffer overflow/underflow occurs when typecasting the buffer passed by CPU internally in the library which is not aligned with the actual siQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11193u'Buffer over read can happen while parsing mkv clip due to improper typecasting of data returned from atomsize' in Snapdragon Auto, SnapdraQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11196u'Integer overflow to buffer overflow occurs while playback of ASF clip having unexpected number of codec entries' in Snapdragon Auto, SnapdQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11168u'Null-pointer dereference can occur while accessing data buffer beyond its size that leads to access the buffer beyond its range' in SnapdrQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11175u'Use after free issue in Bluetooth transport driver when a method in the object is accessed after the object has been deleted due to impropQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11184u'Possible buffer overflow will occur in video while parsing mp4 clip with crafted esds atom size.' in Snapdragon Auto, Snapdragon Compute, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon In…
- CVE-2020-11131u'Possible buffer overflow in WMA message processing due to integer overflow occurs when processing command received from user space' in SnaQualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…
- CVE-2020-11132u'Buffer over read in boot due to size check ignored before copying GUID attribute from request to response' in Snapdragon Auto, Snapdragon Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11127u'Integer overflow can cause a buffer overflow due to lack of table length check in the extensible boot Loader during the validation of secuQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11130u'Possible buffer overflow in WIFI hal process due to copying data without checking the buffer length' in Snapdragon Auto, Snapdragon ComputQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon In…
- CVE-2020-11121u'Possible buffer overflow in WIFI hal process due to usage of memcpy without checking length of destination buffer' in Snapdragon Auto, SnaQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon In…
- CVE-2020-11123u'information disclosure in gatekeeper trustzone implementation as the throttling mechanism to prevent brute force attempts at getting user`Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-7333Cross-site Scripting (XSS) in firewall ePO extension of McAfee Endpoint Security (ENS)Mcafee Endpoint Security for Windows
- CVE-2020-2048PAN-OS: System proxy passwords may be logged in clear text while viewing system statePalo Alto Networks PAN-OS
- CVE-2020-1999PAN-OS: Threat signatures are evaded by specifically crafted packetsPalo Alto Networks PAN-OS
- CVE-2019-17566Apache Batik is vulnerable to server-side request forgery, caused by improper input validation by the "xlink:href" attributes.Apache Batik · org.apache.xmlgraphics:batik
- CVE-2020-25706A cross-site scripting (XSS) vulnerability exists in templates_import.php (Cacti 1.2.13) due to Improper escaping of error message during teThe Cacti Group cacti