Integer overflow

Integer overflow in diag command handler when user inputs a large value for number of tasks field in the request packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT...

CVE-2019-14080

Out of bound write can happen due to lack of check of array index value while parsing SDP attribute for SAR in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8053, APQ8096AU, Kamorta, MDM9607, MDM9640, MDM9650...

CISOfy Lynis Competitive Conditions Issue Vulnerability

CISOfy Lynis is a system security auditing tool from CISOfy Netherlands that supports multiple platforms. A Competing Conditions Issue vulnerability exists in CISOfy Lynis versions prior to 3.0.0. An attacker could exploit the vulnerability to bypass symbolic link checks and manipulate data in lo...

EulerOS 2.0 SP2 : coreutils (EulerOS-SA-2020-1663)

According to the versions of the coreutils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The keycomparemb function in sort.c in sort in GNU Coreutils through 8.23 on 64-bit platforms performs a size calculation without considering...

CVE-2020-5363

Dell CVE-2020-5363 affects select Dell Client Client Consumer and Commercial platforms, where the BIOS Admin password can be changed through Dell’s manageability interface without the current password. This could allow an attacker with physical access or OS administrator privileges to gain privil...

CVE-2020-5362

CVE-2020-5362 affects Dell Client Client Consumer and Commercial platforms, where an improper authorization in the Dell Manageability interface allows an attacker with local OS administrator privileges to bypass BIOS Administrator authentication and restore BIOS Setup to default values. The NVD e...

PT-2020-18427

Name of the Vulnerable Software and Affected Versions Dell Client Consumer and Commercial platforms affected versions not specified Description The issue concerns an improper authorization vulnerability in the Dell Manageability interface. An unauthorized actor with local system access and OS...

PT-2020-18428

Name of the Vulnerable Software and Affected Versions Dell Client Consumer and Commercial platforms affected versions not specified Description The issue allows the BIOS Admin password to be changed through Dell's manageability interface without knowledge of the current BIOS Admin password. This...

Multiple vulnerabilities exist in operating systems such as Mac OS X, iOS, tvOS, watchOS, the browser Safari, the multimedia player iTunes for Windows, and the iCloud service for Windows. These vulnerabilities involve the use of memory after it has been freed, allowing an attacker to execute arbitrary code.

Multiple vulnerabilities exist in operating systems such as Mac OS X, iOS, tvOS, watchOS, the browser Safari, the multimedia player iTunes for Windows, and the iCloud service for Windows. These vulnerabilities are related to the use of memory after it is freed. Exploitation of these vulnerabiliti...

The vulnerability of the Cisco One Platform Kit (onePK) component in operating systems such as Cisco IOS, Cisco IOS XE, and Cisco NX-OS allows a attacker to execute arbitrary code or cause service interruptions.

The vulnerability of the Cisco One Platform Kit onePK for Cisco IOS, Cisco IOS XE, and Cisco NX-OS is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger service failures...

CVE-2020-5362: Improper Authorization

Dell Client Consumer and Commercial platforms include an improper authorization vulnerability in the Dell Manageability interface for which an unauthorized actor, with local system access with OS administrator privileges, could bypass the BIOS Administrator authentication to restore BIOS Setup...

CVE-2020-8337

An unquoted search path vulnerability was reported in versions prior to 1.0.83.0 of the Synaptics Smart Audio UWP app associated with the DCHU audio drivers on Lenovo platforms that could allow an administrative user to execute arbitrary code...

Design/Logic Flaw

An unquoted search path vulnerability was reported in versions prior to 1.0.83.0 of the Synaptics Smart Audio UWP app associated with the DCHU audio drivers on Lenovo platforms that could allow an administrative user to execute arbitrary code...

CVE-2020-8337

CVE-2020-8337 concerns an unquoted search path vulnerability in the Synaptics Smart Audio UWP app (DCHU drivers) on Lenovo platforms, affecting versions prior to 1.0.83.0. The issue is exploitable locally by an administrative user and could allow arbitrary code execution without user interaction....

CVE-2020-9852

An integer overflow was addressed through improved input validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. A malicious application may be able to execute arbitrary code with kernel privileges...

CVE-2020-9837

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5. A remote attacker may be able to leak memory...

CVE-2020-9842

An entitlement parsing issue was addressed with improved parsing. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. A malicious application could interact with system processes to access private information and perform privileged actions...

CVE-2020-9839

A race condition was addressed with improved state handling. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. An application may be able to gain elevated privileges...

CVE-2020-9814

A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. A malicious application may be able to execute arbitrary code with kernel privileges...

DEBIAN-CVE-2020-9803

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web content may lead to...