CVE-2017-17374

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. A use-after-free in ext4expandextraisize and ext4xattrsetentry allows an attacker to crash the kernel...

CVE-2020-22276

WeForms Wordpress Plugin 1.4.7 allows CSV injection via a form's entry...

Input validation

WeForms Wordpress Plugin 1.4.7 allows CSV injection via a form's entry...

CVE-2020-22276

WeForms Wordpress Plugin 1.4.7 allows CSV injection via a form's entry...

opensc: Out-of-bounds access of an ASN.1 Octet string in asn1_decode_entry in libopensc/asn1.c

OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Octet string in asn1decodeentry in libopensc/asn1.c...

libexif: out of bounds read due to a missing bounds check in exif_data_save_data_entry function in exif-data.c

In exifdatasavedataentry of exif-data.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0...

libexif: out of bounds read due to a missing bounds check in exif_entry_get_value function in exif-entry.c

In exifentrygetvalue of exif-entry.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android I...

libexif: divide-by-zero in exif_entry_get_value function in exif-entry.c

exifentrygetvalue in exif-entry.c in libexif 0.6.21 has a divide-by-zero error...

PT-2020-1250 · Google +9 · Android +9

Name of the Vulnerable Software and Affected Versions: Android versions 8.0 through 11 Description: The issue is related to a possible out of bounds write due to an integer overflow in the exif entry get value function of the exif-entry.c component. This could lead to remote code execution if a...

Security Bulletin: Version 6.0.2 of Node.js module kind-of included in IBM Netcool Operations Insight 1.6.1.x has a security vulnerability

Summary Security Bulletin: Version 6.0.2 of Node.js module kind-of included in IBM Netcool Operations Insight 1.6.1.x has a security vulnerability Vulnerability Details Third Party Entry: 177376 DESCRIPTION: Node.js kind-of module security bypass CVSS Base score: 5.3 CVSS Temporal Score: See:...

CVE-2020-27670

An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a denial of service data corruption, cause a data leak, or possibly gain privileges because an AMD IOMMU page-table entry can be half-updated...

Security Bulletin: Security Vulnerabilities affect IBM Cloud Pak for Data - Node.js (CVE-2020-8203)

Summary Security Vulnerabilities affect IBM Cloud Pak for Data - Node.js CVE-2020-8203 Vulnerability Details Third Party Entry: 183560 DESCRIPTION: Node.js lodash module denial of service CVSS Base score: 7.5 CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/183560 fo...

libexif: out of bounds read due to a missing bounds check in exif_entry_get_value function in exif-entry.c

In exifentrygetvalue of exif-entry.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android I...

Security Bulletin: Dynamically constructed href attribute in IBM Enterprise Records

Summary The place where this happens is believed to be dead code, but we do not want to just start deleting things in the code without sufficient time to test. Vulnerability Details Third Party Entry: PSIRT-ADV0025106 DESCRIPTION: Created from Advisory: ADV0025106 CVSS Base score: 5.4 CVSS Vector...

Path traversal

A remote code execution RCE vulnerability was discovered in the htmlformentry aka HTML Form Entry module before 3.11.0 for OpenMRS. By leveraging path traversal, a malicious Velocity Template Language file could be written to a directory. This file could then be accessed and executed...

CVE-2020-24621

A remote code execution RCE vulnerability was discovered in the htmlformentry aka HTML Form Entry module before 3.11.0 for OpenMRS. By leveraging path traversal, a malicious Velocity Template Language file could be written to a directory. This file could then be accessed and executed...

Exploit for OS Command Injection in Secudos Domos

CVE-2020-14293 This vulnerablity was discovered and disclosed...

SAP 3D Visual Enterprise Viewer Input Validation Error Vulnerability (CNVD-2020-53164)

SAP 3D Visual Enterprise Viewer is a free 3D visualization viewer for Windows. An input validation error vulnerability exists in SAP 3D Visual Enterprise Viewer 9, which can be exploited by an attacker via a specially crafted RH file to cause the application to crash...

CVE-2020-0435

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-14615. Reason: This candidate is a duplicate of CVE-2018-14615. Notes: All CVE users should reference CVE-2018-14615 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage...