CVEs published in November 2020
1,536 vulnerabilities, 172 critical, 12 exploited.
- json8 project json8Prototype Pollution6.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +87 more +89 moreu'When a non standard SIP sigcomp message is received from the network, then there may be chances...9.8 Critical
- qualcomm, inc. snapdragon compute, snapdragon mobile, qualcomm qsm8350 firmware, sc7180 firmware +17 more +19 moreu'Incorrect validation of ring context fetched from host memory can lead to memory overflow' in...7.8 High
- qualcomm qcs603 firmware, qcs605 firmware, sa6145p firmware +11 more +13 moreu'Improper authorization in DSP process could allow unauthorized users to downgrade the library...5.5 Medium
- qualcomm qcs603 firmware, qcs605 firmware, sa6145p firmware +11 more +13 moreu'Out of Bound issue in DSP services while processing received arguments due to improper...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm apq8052 firmware, apq8056 firmware +60 more +62 moreu'Buffer overflow in LibFastCV library due to improper size checks with respect to buffer length'...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm apq8098 firmware, msm8998 firmware +52 more +54 moreu'Possible buffer overflow in Fastrpc while handling received parameters due to lack of...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon mobile, qualcomm qsm8350 firmware, sa6145p firmware +12 more +14 moreu'Possible integer overflow to heap overflow while processing command due to lack of check of...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm qcm6125 firmware, qcs410 firmware +30 more +32 moreu'Buffer overflow/underflow occurs when typecasting the buffer passed by CPU internally in the...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm qcm6125 firmware, qcs410 firmware +26 more +28 moreu'Arbitrary access to DSP memory due to improper check in loaded library for data received from...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +90 more +92 moreu'Integer overflow to buffer overflow occurs while playback of ASF clip having unexpected number...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +90 more +92 moreu'Buffer over read can happen while parsing mkv clip due to improper typecasting of data returned...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon industrial iot, snapdragon mobile, qualcomm qcm4290 firmware, qcs4290 firmware +27 more +29 moreu'Possible buffer overflow will occur in video while parsing mp4 clip with crafted esds atom size...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8009w firmware, msm8909w firmware +29 more +31 moreu'Use after free issue in Bluetooth transport driver when a method in the object is accessed...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +59 more +61 moreu'Null-pointer dereference can occur while accessing data buffer beyond its size that leads to...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8096au firmware +79 more +81 moreu'Buffer over read in boot due to size check ignored before copying GUID attribute from request...7.1 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8009 firmware, apq8053 firmware +12 more +14 moreu'Possible buffer overflow in WMA message processing due to integer overflow occurs when...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon industrial iot, snapdragon mobile, qualcomm qcm4290 firmware, qcs4290 firmware +29 more +31 moreu'Possible buffer overflow in WIFI hal process due to copying data without checking the buffer...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm mdm9205 firmware, qcm4290 firmware +51 more +53 moreu'Integer overflow can cause a buffer overflow due to lack of table length check in the...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +113 more +115 moreu'information disclosure in gatekeeper trustzone implementation as the throttling mechanism to...5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon industrial iot, snapdragon mobile, qualcomm qcm4290 firmware, qcs4290 firmware +29 more +31 moreu'Possible buffer overflow in WIFI hal process due to usage of memcpy without checking length of...7.8 High
- mcafee endpoint security, bitdefender endpoint security for windows +1 moreCross-site Scripting (XSS) in firewall ePO extension of McAfee Endpoint Security (ENS)4.8 Medium
- mcafee endpoint security, bitdefender endpoint security for windows +1 moreCross-Site Request Forgery (CSRF) in firewall ePO extension of McAfee Endpoint Security (ENS)7.0 High
- mcafee endpoint security, mcafee, llc mcafee endpoint security (ens) +1 moreUnquoted service executable path in McAfee Endpoint Security (ENS)7.8 High
apache-commons-compressAlmaLinux,apache-commons-jxpathAlmaLinux,apiguardianAlmaLinux +51 more +53 moreeclipse:rhel8 bug fix updateNo score- nodemailerCommand Injection8.6 High
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers Slow Path Forwarding Denial of Service Vulnerability8.6 High
intel-microcodeUbuntuintel-microcode regressionNo score- palo alto networks pan-osPAN-OS: Authentication bypass vulnerability in GlobalProtect SSL VPN client certificate verification8.2 High
- palo alto networks pan-osPAN-OS: System proxy passwords may be logged in clear text while viewing system state3.3 Low
- palo alto networks pan-osPAN-OS: Panorama session disclosure during context switch into managed device7.5 High
- palo alto networks pan-osPAN-OS: OS command injection and memory corruption vulnerability7.2 High
- palo alto networks pan-osPAN-OS: Threat signatures are evaded by specifically crafted packets5.3 Medium
fluent-bitOSS-FuzzHeap-buffer-overflow in flb_gzip_compressNo score- cacti, debian linux +1 moreA cross-site scripting (XSS) vulnerability exists in templates_import.php (Cacti 1.2.13) due to...5.4 Medium
- nvidia geforce now, geforce now application +1 moreNVIDIA GeForce NOW application software on Windows, all versions prior to 2.0.25.119, contains a...7.8 High
- puncsky touchbase.aiStored Cross Site Scripting in touchbase.ai8.0 High
- puncsky touchbase.aiInformation exposure in touchbase.ai3.5 Low
- puncsky touchbase.aiOpen Redirect in touchbase.ai4.7 Medium
- puncsky touchbase.aiHTML Injection in touchbase.ai8.0 High
- pmmp pocketmine-mpPocketMine-MP before 3.15.4 Denial of Service via InventoryTransaction7.1 High
- lenovo bios, notebook firmware +1 moreA potential vulnerability in the SMI callback function used in the VariableServiceSmm driver in...6.4 Medium
- lenovo desktop and workstation systems, thinkcentre m80s firmware, thinkcentre m80t firmware +12 more +14 morePrior to August 10, 2020, some Lenovo Desktop and Workstation systems were shipped with the...6.7 Medium
- lenovo bios, qitian 4500 firmware, qitian b4550 firmware +14 more +16 moreIn some Lenovo Desktop models, the Configuration Change Detection BIOS setting failed to detect...2.4 Low
- vmware pivotal schedulerScheduler for TAS can transmit privileged UAA token in plaintext8.6 High
- mersive solstice pod firmwareSolstice-Pod up to 5.0.2 WEBRTC server mishandles the format-string specifiers %x; %p; %c and %s...7.5 High
- audi mmi multiplayerOn Audi A7 MMI 2014 vehicles, the Bluetooth stack in Audi A7 MMI Multiplayer with version (N...7.1 High
- ibm cognos controllerA low level user of IBM Cognos Controller 10.3.0, 10.3.1, 10.4.0, 10.4.1, and 10.4.2 who has...8.0 High
- lettreArgument injection in lettre5.3 Medium
- express-validators project express-validatorsRegular Expression Denial of Service (ReDoS)5.3 Medium
- Show moreLoading…