GHSA-J977-G5VJ-J27G Cross-Site Scripting in scratch-svg-renderer

This affects the package scratch-svg-renderer before 0.2.0-prerelease.20201019174008. The loadString function does not escape SVG properly, which can be used to inject arbitrary elements into the DOM via the transformMeasurements function...

CVE-2020-28341

An issue was discovered on Samsung mobile devices with Q10.0 Exynos990 chipsets software. The S3K250AF Secure Element CC EAL 5+ chip allows attackers to execute arbitrary code and obtain sensitive information via a buffer overflow. The Samsung ID is SVE-2020-18632 November 2020...

Buffer overflow

An issue was discovered on Samsung mobile devices with Q10.0 Exynos990 chipsets software. The S3K250AF Secure Element CC EAL 5+ chip allows attackers to execute arbitrary code and obtain sensitive information via a buffer overflow. The Samsung ID is SVE-2020-18632 November 2020...

CVE-2020-28341

An issue was discovered on Samsung mobile devices with Q10.0 Exynos990 chipsets software. The S3K250AF Secure Element CC EAL 5+ chip allows attackers to execute arbitrary code and obtain sensitive information via a buffer overflow. The Samsung ID is SVE-2020-18632 November 2020...

CVE-2020-28341: Buffer Copy without Checking Size of Input

An issue was discovered on Samsung mobile devices with Q10.0 Exynos990 chipsets software. The S3K250AF Secure Element CC EAL 5+ chip allows attackers to execute arbitrary code and obtain sensitive information via a buffer overflow. The Samsung ID is SVE-2020-18632 November 2020...

PT-2020-16984

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with Q10.0 Exynos990 chipsets software Description An issue allows attackers to execute arbitrary code and obtain sensitive information via a buffer overflow in the S3K250AF Secure Element CC EAL 5+ chip. Recommendations...

CVE-2020-28249

Joplin 1.2.6 for Desktop allows XSS via a LINK element in a note...

Design/Logic Flaw

Joplin 1.2.6 for Desktop allows XSS via a LINK element in a note...

CVE-2020-28249

Joplin 1.2.6 for Desktop allows XSS via a LINK element in a note...

CVE-2020-28249

Joplin 1.2.6 for Desktop allows XSS via a LINK element in a note...

CVE-2020-28249: Improper Neutralization of Input During Web Page Generation

Joplin 1.2.6 for Desktop allows XSS via a LINK element in a note...

PT-2020-16954

Name of the Vulnerable Software and Affected Versions Joplin version 1.2.6 Description The issue allows for XSS via a LINK element in a note. This can potentially lead to malicious script execution. Recommendations For Joplin version 1.2.6, update to a newer version that contains a fix for this...

Release Information for NetApp Element Plug-In for Veeam Backup & Replication

This plug-in leverages the Veeam Universal Storage API, which enables storage OEMs to allow Veeam Backup & Replication integration to the arrays for backup and replication jobs. Requirements Before installing NetApp Element Plug-In v1.0.13, ensure that you are running Veeam Backup & Replication...

CVE-2020-27955: Uncontrolled Search Path Element

Git LFS 2.12.0 allows Remote Code Execution...

Cisco IOS XE Command Execution Root Privilege

The vulnerability of the Cisco IOS XE operating system’s command-line interface is related to errors that occur during the elimination of certain elements in the operating system’s commands. Exploiting this vulnerability allows an attacker to execute commands with root privileges after the device...

squid: Off-by-one error in addStackElement allows for heap buffer overflow and crash

A flaw was found in squid. When Squid is parsing ESI, it keeps the ESI elements in ESIContext. ESIContext contains a buffer for holding a stack of ESIElements. When a new ESIElement is parsed, it is added via addStackElement. addStackElement has a check for the number of elements in this buffer,...

MediaWiki Cosmos Skin Cross-Site Scripting Vulnerability

MediaWiki is a set of free and freely available web-based Wiki engines from the MediaWiki Wikimedia Foundation in the United States. It can be used to deploy in-house knowledge management and content management systems. A cross-site scripting vulnerability exists in MediaWiki Cosmos Skin version...

CVE-2020-3670

u'Potential out of bounds read while processing downlink NAS transport message due to improper length check of Information ElementIEI NAS message container' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in Agatt...

CVE-2020-3670: Out-of-bounds Read

u'Potential out of bounds read while processing downlink NAS transport message due to improper length check of Information ElementIEI NAS message container' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in Agatt...

CVE-2020-27620

The Cosmos Skin for MediaWiki through 1.35.0 has stored XSS because MediaWiki messages were not being properly escaped. This is related to wfMessage and Html::rawElement, as demonstrated by CosmosSocialProfile::getUserGroups...