CVEs published in December 2020
1,575 vulnerabilities, 262 critical, 9 exploited.
- google androidIn BitstreamFillCache of bitstream.cpp, there is a possible out of bounds read due to a heap...6.5 Medium
- google androidIn readBlock of MatroskaExtractor.cpp, there is a possible denial of service due to resource...6.5 Medium
- google androidIn floor1_info_unpack of floor1.c, there is a possible out of bounds read due to a missing bounds...6.5 Medium
- google androidIn Parse_data of eas_mdls.c, there is a possible out of bounds write due to a missing bounds...8.8 High
- google androidIn ihevc_inter_pred_chroma_copy_ssse3 of ihevc_inter_pred_filters_ssse3_intr.c, there is a...6.5 Medium
- google androidIn openAssetFileListener of ContactsProvider2.java, there is a possible permission bypass due to...7.8 High
- google androidIn areFunctionsSupported of UsbBackend.java, there is a possible access to tethering from a guest...7.8 High
- google androidIn destroyResources of ComposerClient.h, there is possible memory corruption due to a use after...6.7 Medium
- google androidIn DrmManagerService::~DrmManagerService() of DrmManagerService.cpp, there is a possible memory...6.7 Medium
- google androidIn command of IncidentService.cpp, there is a possible out of bounds read due to an incorrect...4.4 Medium
- google androidIn AndroidManifest.xml, there is a possible permissions bypass. This could lead to local...3.3 Low
- google androidIn callUnchecked of DocumentsProvider.java, there is a possible permissions bypass due to a...7.8 High
- google androidIn callUnchecked of DocumentsProvider.java, there is a possible permissions bypass. This could...7.8 High
- google androidIn extend_frame_lowbd of restoration.c, there is a possible out of bounds write due to a missing...7.8 High
- google androidIn sendLinkConfigurationChangedBroadcast of ClientModeImpl.java, there is a possible information...5.5 Medium
- google androidIn onNotificationRemoved of Assistant.java, there is a possible leak of sensitive information to...4.4 Medium
- google androidIn createInputConsumer of WindowManagerService.java, there is a possible way to block and...7.8 High
- google androidIn HalCamera::requestNewFrame of HalCamera.cpp, there is a possible use-after-free due to a race...7.0 High
- google androidIn updateIncomingFileConfirmNotification of BluetoothOppNotification.java, there is a possible...4.6 Medium
- google androidIn queryInternal of CallLogProvider.java, there is a possible permission bypass due to improper...3.3 Low
- google androidIn nci_proc_ee_management_rsp of nci_hrcv.cc, there is a possible out of bounds read due to a...5.5 Medium
- google androidIn writeBurstBufferBytes of SPDIFEncoder.cpp, there is a possible out of bounds read due to an...5.5 Medium
- egavilanmedia barcodes generatorEGavilan Barcodes generator 1.0 is affected by: Cross Site Scripting (XSS) via the index.php. An...6.1 Medium
- egavilanmedia expense management systemXSS in the Add Expense Component of EGavilan Media Expense Management System 1.0 allows an...6.1 Medium
- s-cartCross-site Scripting (XSS)7.3 High
- s-cartCross-site Scripting (XSS)7.2 High
- google asyloUnchecked buffer overrun in ecall_restore5.3 Medium
- google asyloUnchecked buffer overrun in enc_untrusted_recvfrom5.3 Medium
- google asyloUnchecked buffer overrun in enc_untrusted_read5.3 Medium
- google asyloUnchecked buffer overrun in enc_untrusted_inet_pton5.3 Medium
- google asyloUnchecked buffer overrun in enc_untrusted_recvmsg5.3 Medium
- google asyloOut of Bounds read in Asylo5.3 Medium
- google asyloArbitrary enclave memory location write from untrusted environment5.3 Medium
- google asyloArbitrary enclave memory location write from untrusted environment5.3 Medium
- google asyloArbitrary enclave memory overwrite vulnerability in ECall ecall_restore5.3 Medium
- google asyloAn arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allow an attacker to...5.3 Medium
- ibm tivoli netcool impact, tivoli netcool\/impact +1 moreIBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.19 Interim Fix 7 could allow a remote attacker to...5.3 Medium
- ibm connect\, sterling connect:direct for unix +1 moreIBM Connect:Direct for UNIX 6.1.0, 6.0.0, 4.3.0, and 4.2.0 can allow a local or remote user to...7.4 High
- foxitsoftware foxit reader, phantompdf +1 moreAn issue was discovered in Foxit Reader and PhantomPDF 10.1.0.37527 and earlier. There is a null...5.5 Medium
- js-dataPrototype Pollution7.5 High
- envoyproxy envoyEnvoy before 1.16.1 logs an incorrect downstream address because it considers only the directly...8.8 High
- envoyproxy envoyEnvoy before 1.16.1 mishandles dropped and truncated datagrams, as demonstrated by a segmentation...7.5 High
openh264OSS-FuzzHeap-buffer-overflow in McChromaWithFragMv_cNo score- mozilla firefoxMozilla developers reported memory safety bugs present in Firefox 83. Some of these bugs showed...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers reported memory safety bugs present in Firefox 83 and Firefox ESR 78.5. Some...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreWhen an extension with the proxy permission registered to receive <all_urls>, the proxy.onRequest...4.3 Medium
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.14.x. A bounds check common to most operation time...6.2 Medium
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.14.x. Recording of the per-vCPU control block mapping...6.2 Medium
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.14.x. When they require assistance from the device model...5.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.14.x. Nodes in xenstore have an ownership. In oxenstored...6.0 Medium
- Show moreLoading…