CVE-2020-26602

An issue was discovered in EthernetNetwork on Samsung mobile devices with O8.1, P9.0, Q10.0, and R11.0 software. PendingIntent allows sdcard access by an unprivileged process. The Samsung ID is SVE-2020-18392 October 2020...

UBUNTU-CVE-2020-13343

An issue has been discovered in GitLab affecting all versions starting from 11.2. Unauthorized Users Can View Custom Project Template...

CVE-2020-5987

NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin in which guest-supplied parameters remain writable by the guest after the plugin has validated them, which may lead to the guest being able to pass invalid parameters to plugin handlers, which may lead to denial of service or...

CVE-2020-5988

NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which allocated memory can be freed twice, which may lead to information disclosure or denial of service. This affects vGPU version 8.x prior to 8.5, version 10.x prior to 10.4 and version 11.0...

CVE-2020-5989

NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which it can dereference a NULL pointer, which may lead to denial of service. This affects vGPU version 8.x prior to 8.5, version 10.x prior to 10.4 and version 11.0...

CVE-2020-5986

NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which an input data size is not validated, which may lead to tampering or denial of service. This affects vGPU version 8.x prior to 8.5, version 10.x prior to 10.4 and version 11.0...

CVE-2020-5984

NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin in which it may have the use-after-free vulnerability while freeing some resources, which may lead to denial of service, code execution, and information disclosure. This affects vGPU version 8.x prior to 8.5, version 10.x prio...

UBUNTU-CVE-2020-13336

An issue has been discovered in GitLab affecting versions from 11.8 before 12.10.13. GitLab was vulnerable to a stored XSS by in the error tracking feature...

PT-2020-13477 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab versions 11.8 through 12.10.13 Description: An issue has been discovered in GitLab, where it was vulnerable to a stored XSS in the error tracking feature. Recommendations: For versions 11.8 through 12.10.13, update to version 12.10.13 ...

SUSE-SU-2020:2767-1 Security update for dpdk

This update for dpdk fixes the following issues: - dpdk was updated to 18.11.9. For a list of fixes check: - CVE-2020-14374,CVE-2020-14375,CVE-2020-14376,CVE-2020-14377,CVE-2020-14378: Fixed multiple issues where a malicious guest could harm the host using vhost crypto, including executing code i...

IBM InfoSphere Information Server Clickjacking Vulnerability

IBM InfoSphere Information Server is a data integration platform that includes a range of products that enable you to understand, cleanse, monitor, transform, and transfer data, as well as collaborate to bridge the gap between business and IT. A clickjacking vulnerability exists in IBM InfoSphere...

Google Android Buffer Overflow Vulnerability (CNVD-2020-54135)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A security vulnerability exists in Android version 11, which stems from a read out-of-bounds vulnerability due to a lack of boundary checking in netd, which can be exploited by an attacker to cau...

Google Android Buffer Overflow Vulnerability (CNVD-2020-54142)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. The Android-11 version has a security vulnerability that stems from the lack of boundary checking in NFC, which can be exploited by an attacker to finally make local information public...

Google Android Buffer Overflow Vulnerability (CNVD-2020-54138)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A security vulnerability exists in Android version 11, which stems from a lack of boundary checking in NFC, and can be exploited by an attacker to remotely obtain information...

Google Android Buffer Overflow Vulnerability (CNVD-2020-54139)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A security vulnerability exists in Android version 11, which stems from a lack of boundary checking in iptables and can be exploited by an attacker to elevate local privileges...

Google Android Buffer Overflow Vulnerability (CNVD-2020-54140)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A security vulnerability exists in Android version 11, which stems from a lack of boundary checking in NFC and can be exploited by an attacker to elevate local privileges...

Google Android Buffer Overflow Vulnerability (CNVD-2020-54136)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A security vulnerability exists in Android version 11, which stems from a lack of boundary checking and out-of-bounds reads in NFC, and can be exploited by an attacker to cause a local message wi...

Google Android Buffer Overflow Vulnerability (CNVD-2020-54303)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A buffer overflow vulnerability exists in Android version 11, which stems from a read out-of-bounds vulnerability due to a lack of boundary checking in Bluetooth, and can be exploited by an...

Google Android elevation of privilege vulnerability (CNVD-2020-53774)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. Android version 11 has a security vulnerability. The vulnerability stems from SurfaceFlinger and can be exploited by an attacker to elevate local privileges...

Google Android elevation of privilege vulnerability (CNVD-2020-53769)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. There is a security vulnerability in Android version 11. The vulnerability stems from PackageInstaller and can be exploited by an attacker to elevate local privileges...