alirezaaminzadeh/cve-riskrank huggingface dataset:
CVE-2020-36163 (published 2021-01-06)
An issue was discovered in Veritas NetBackup and OpsCenter through 8.3.0.1. NetBackup processes using Strawberry Perl attempt to load and execute libraries from paths that do not exist by default on the Windows operating system. By default, on Windows systems, users can create directories under C:\. If a low privileged user on the Windows system creates an affected path with a library that NetBackup attempts to load, they can execute arbitrary code as SYSTEM or Administrator. This gives the attacker administrator access on the system, allowing the attacker (by default) to access all data, access all installed applications, etc. This affects NetBackup master servers, media servers, clients, and OpsCenter servers on the Windows platform. The system is vulnerable during an install or upgrade on all systems and post-install on Master, Media, and OpsCenter servers during normal operations.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Affected vendors: microsoft, veritas
Affected products: netbackup, opscenter, windows
CVE-2020-36164 (published 2021-01-06)
An issue was discovered in Veritas Enterprise Vault through 14.0. On start-up, it loads the OpenSSL library. The OpenSSL library then attempts to load the openssl.cnf configuration file (which does not exist) at the following locations in both the System drive (typically C:\) and the product's installation drive (typically not C:\): \Isode\etc\ssl\openssl.cnf (on SMTP Server) or \user\ssl\openssl.cnf (on other affected components). By default, on Windows systems, users can create directories under C:\. A low privileged user can create a openssl.cnf configuration file to load a malicious OpenSSL engine, resulting in arbitrary code execution as SYSTEM when the service starts. This gives the attacker administrator access on the system, allowing the attacker (by default) to access all data, access all installed applications, etc. This vulnerability only affects a server with MTP Server, SMTP Archiving IMAP Server, IMAP Archiving, Vault Cloud Adapter, NetApp File server, or File System Archiving for NetApp as File Server.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Affected vendors: microsoft, veritas
Affected products: enterprise_vault, windows
CVE-2020-36165 (published 2021-01-06)
An issue was discovered in Veritas Desktop and Laptop Option (DLO) before 9.4. On start-up, it loads the OpenSSL library from /ReleaseX64/ssl. This library attempts to load the /ReleaseX64/ssl/openssl.cnf configuration file, which does not exist. By default, on Windows systems, users can create directories under C:\. A low privileged user can create a C:/ReleaseX64/ssl/openssl.cnf configuration file to load a malicious OpenSSL engine, resulting in arbitrary code execution as SYSTEM when the service starts. This gives the attacker administrator access on the system, allowing the attacker (by default) to access all data, access all installed applications, etc. This impacts DLO server and client installations.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Affected vendors: microsoft, veritas
Affected products: desktop_and_laptop_option, windows
CVE-2020-36166 (published 2021-01-06)
An issue was discovered in Veritas InfoScale 7.x through 7.4.2 on Windows, Storage Foundation through 6.1 on Windows, Storage Foundation HA through 6.1 on Windows, and InfoScale Operations Manager (aka VIOM) Windows Management Server 7.x through 7.4.2. On start-up, it loads the OpenSSL library from \usr\local\ssl. This library attempts to load the \usr\local\ssl\openssl.cnf configuration file, which may not exist. On Windows systems, this path could translate to <drive>:\usr\local\ssl\openssl.cnf, where <drive> could be the default Windows installation drive such as C:\ or the drive where a Veritas product is installed. By default, on Windows systems, users can create directories under any top-level directory. A low privileged user can create a <drive>:\usr\local\ssl\openssl.cnf configuration file to load a malicious OpenSSL engine, resulting in arbitrary code execution as SYSTEM when the service starts. This gives the attacker administrator access on the system, allowing the attacker (by default) to access all data, access all installed applications, etc.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Affected vendors: microsoft, veritas
Affected products: infoscale, infoscale_operations_manager, storage_foundation, storage_foundation_and_high_availability, windows
CVE-2020-36167 (published 2021-01-06)
An issue was discovered in the server in Veritas Backup Exec through 16.2, 20.6 before hotfix 298543, and 21.1 before hotfix 657517. On start-up, it loads the OpenSSL library from the Installation folder. This library in turn attempts to load the /usr/local/ssl/openssl.cnf configuration file, which may not exist. On Windows systems, this path could translate to <drive>:\usr\local\ssl\openssl.cnf. A low privileged user can create a :\usr\local\ssl\openssl.cnf configuration file to load a malicious OpenSSL engine, resulting in arbitrary code execution as SYSTEM when the service starts. This gives the attacker administrator access on the system, allowing the attacker (by default) to access all data, access all installed applications, etc. If the system is also an Active Directory domain controller, then this can affect the entire domain.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Weakness: CWE-434
Affected vendors: veritas
Affected products: backup_exec
CVE-2020-36168 (published 2021-01-06)
An issue was discovered in Veritas Resiliency Platform 3.4 and 3.5. It leverages OpenSSL on Windows systems when using the Managed Host addon. On start-up, it loads the OpenSSL library. This library may attempt to load the openssl.cnf configuration file, which does not exist. By default, on Windows systems, users can create directories under C:\. A low privileged user can create a C:\usr\local\ssl\openssl.cnf configuration file to load a malicious OpenSSL engine, resulting in arbitrary code execution as SYSTEM when the service starts. This gives the attacker administrator access on the system, allowing the attacker (by default) to access all data, access all installed applications, etc.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Affected vendors: veritas
Affected products: resiliency_platform
CVE-2020-36169 (published 2021-01-06)
An issue was discovered in Veritas NetBackup through 8.3.0.1 and OpsCenter through 8.3.0.1. Processes using OpenSSL attempt to load and execute libraries from paths that do not exist by default on the Windows operating system. By default, on Windows systems, users can create directories under the top level of any drive. If a low privileged user creates an affected path with a library that the Veritas product attempts to load, they can execute arbitrary code as SYSTEM or Administrator. This gives the attacker administrator access on the system, allowing the attacker (by default) to access all data, access all installed applications, etc. This vulnerability affects master servers, media servers, clients, and OpsCenter servers on the Windows platform. The system is vulnerable during an install or upgrade and post-install during normal operations.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Affected vendors: microsoft, veritas
Affected products: netbackup, opscenter, windows
CVE-2020-3617 (published 2020-09-09)
u'Buffer over-read Issue in Q6 testbus framework due to diag packet length is not completely validated before accessing the field and leads to Information disclosure.' in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in Kamorta, Nicobar, QCS605, QCS610, Rennell, SC7180, SDA660, SDM630, SDM636, SDM660, SDM670, SDM710, SM6150, SM7150, SM8150, SXR1130
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Weakness: CWE-20
Affected vendors: qualcomm
Affected products: kamorta, kamorta_firmware, nicobar, nicobar_firmware, qcs605, qcs605_firmware, qcs610, qcs610_firmware, rennell, rennell_firmware, sc7180, sc7180_firmware, sda660, sda660_firmware, sdm630, sdm630_firmware, sdm636, sdm636_firmware, sdm660, sdm660_firmware, sdm670, sdm670_firmware, sdm710, sdm710_firmware, sm6150
CVE-2020-36170 (published 2021-01-06)
The Ultimate Member plugin before 2.1.13 for WordPress mishandles hidden name="timestamp" fields in forms.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Affected vendors: ultimatemember
Affected products: ultimate_member
CVE-2020-36171 (published 2021-01-06)
The Elementor Website Builder plugin before 3.0.14 for WordPress does not properly restrict SVG uploads.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: elementor
Affected products: website_builder
CVE-2020-36172 (published 2021-01-06)
The Advanced Custom Fields plugin before 5.8.12 for WordPress mishandles the escaping of strings in Select2 dropdowns, potentially leading to XSS.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: advancedcustomfields
Affected products: advanced_custom_fields
CVE-2020-36173 (published 2021-01-06)
The Ninja Forms plugin before 3.4.28 for WordPress lacks escaping for submissions-table fields.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Weakness: CWE-116
Affected vendors: ninjaforms
Affected products: ninja_forms
CVE-2020-36174 (published 2021-01-06)
The Ninja Forms plugin before 3.4.27.1 for WordPress allows CSRF via services integration.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)
Weakness: CWE-352
Affected vendors: ninjaforms
Affected products: ninja_forms
CVE-2020-36175 (published 2021-01-06)
The Ninja Forms plugin before 3.4.27.1 for WordPress allows attackers to bypass validation via the email field.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Weakness: CWE-20
Affected vendors: ninjaforms
Affected products: ninja_forms
CVE-2020-36176 (published 2021-01-06)
The iThemes Security (formerly Better WP Security) plugin before 7.7.0 for WordPress does not enforce a new-password requirement for an existing account until the second login occurs.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-287
Affected vendors: ithemes
Affected products: ithemes_security
CVE-2020-36177 (published 2021-01-06)
RsaPad_PSS in wolfcrypt/src/rsa.c in wolfSSL before 4.6.0 has an out-of-bounds write for certain relationships between key size and digest size.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: wolfssl
Affected products: wolfssl
CVE-2020-36178 (published 2021-01-06)
oal_ipt_addBridgeIsolationRules on TP-Link TL-WR840N 6_EU_0.9.1_4.16 devices allows OS command injection because a raw string entered from the web interface (an IP address field) is used directly for a call to the system library function (for iptables). NOTE: oal_ipt_addBridgeIsolationRules is not the only function that calls util_execSystem.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: tp-link
Affected products: tl-wr840n, tl-wr840n_firmware
CVE-2020-36179 (published 2021-01-07)
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-502
Affected vendors: debian, fasterxml, netapp, oracle
Affected products: agile_plm, application_testing_suite, autovue_for_agile_product_lifecycle_management, banking_corporate_lending_process_management, banking_credit_facilities_process_management, banking_supply_chain_finance, banking_treasury_management, banking_virtual_account_management, blockchain_platform, cloud_backup, commerce_platform, communications_billing_and_revenue_management, communications_cloud_native_core_policy, communications_cloud_native_core_unified_data_repository, communications_convergent_charging_controller, communications_diameter_signaling_route, communications_element_manager, communications_evolved_communications_application_server, communications_instant_messaging_server, communications_network_charging_and_control, communications_offline_mediation_controller, communications_policy_management, communications_pricing_design_center, communications_services_gatekeeper, communications_session_report_manager
CVE-2020-3618 (published 2020-06-02)
NULL exception due to accessing bad pointer while posting events on RT FIFO in Snapdragon Compute, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in IPQ6018, IPQ8074, QCA8081, SC8180X, SXR2130
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: qualcomm
Affected products: ipq6018, ipq6018_firmware, ipq8074, ipq8074_firmware, qca8081, qca8081_firmware, sc8180x, sc8180x_firmware, sxr2130, sxr2130_firmware
CVE-2020-36180 (published 2021-01-07)
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.cpdsadapter.DriverAdapterCPDS.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-502
Affected vendors: debian, fasterxml, netapp, oracle
Affected products: agile_plm, application_testing_suite, autovue_for_agile_product_lifecycle_management, banking_corporate_lending_process_management, banking_credit_facilities_process_management, banking_extensibility_workbench, banking_supply_chain_finance, banking_treasury_management, banking_virtual_account_management, blockchain_platform, cloud_backup, commerce_platform, communications_billing_and_revenue_management, communications_cloud_native_core_policy, communications_cloud_native_core_unified_data_repository, communications_convergent_charging_controller, communications_diameter_signaling_route, communications_element_manager, communications_evolved_communications_application_server, communications_instant_messaging_server, communications_network_charging_and_control, communications_offline_mediation_controller, communications_policy_management, communications_pricing_design_center, communications_services_gatekeeper
CVE-2020-36181 (published 2021-01-06)
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.cpdsadapter.DriverAdapterCPDS.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-502
Affected vendors: debian, fasterxml, netapp, oracle
Affected products: agile_plm, application_testing_suite, autovue_for_agile_product_lifecycle_management, banking_corporate_lending_process_management, banking_credit_facilities_process_management, banking_extensibility_workbench, banking_supply_chain_finance, banking_treasury_management, banking_virtual_account_management, blockchain_platform, commerce_platform, communications_billing_and_revenue_management, communications_cloud_native_core_policy, communications_cloud_native_core_unified_data_repository, communications_convergent_charging_controller, communications_diameter_signaling_route, communications_element_manager, communications_evolved_communications_application_server, communications_instant_messaging_server, communications_network_charging_and_control, communications_offline_mediation_controller, communications_policy_management, communications_pricing_design_center, communications_services_gatekeeper, communications_session_report_manager
CVE-2020-36182 (published 2021-01-07)
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.cpdsadapter.DriverAdapterCPDS.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-502
Affected vendors: debian, fasterxml, netapp, oracle
Affected products: agile_plm, application_testing_suite, autovue_for_agile_product_lifecycle_management, banking_corporate_lending_process_management, banking_credit_facilities_process_management, banking_extensibility_workbench, banking_supply_chain_finance, banking_treasury_management, banking_virtual_account_management, blockchain_platform, cloud_backup, commerce_platform, communications_billing_and_revenue_management, communications_cloud_native_core_policy, communications_cloud_native_core_unified_data_repository, communications_convergent_charging_controller, communications_diameter_signaling_route, communications_element_manager, communications_evolved_communications_application_server, communications_instant_messaging_server, communications_network_charging_and_control, communications_offline_mediation_controller, communications_policy_management, communications_pricing_design_center, communications_services_gatekeeper
CVE-2020-36183 (published 2021-01-07)
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.docx4j.org.apache.xalan.lib.sql.JNDIConnectionPool.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-502
Affected vendors: debian, fasterxml, netapp, oracle
Affected products: agile_plm, application_testing_suite, autovue_for_agile_product_lifecycle_management, banking_corporate_lending_process_management, banking_credit_facilities_process_management, banking_extensibility_workbench, banking_supply_chain_finance, banking_treasury_management, banking_virtual_account_management, blockchain_platform, cloud_backup, commerce_platform, communications_billing_and_revenue_management, communications_cloud_native_core_policy, communications_cloud_native_core_unified_data_repository, communications_convergent_charging_controller, communications_diameter_signaling_route, communications_element_manager, communications_evolved_communications_application_server, communications_instant_messaging_server, communications_network_charging_and_control, communications_offline_mediation_controller, communications_policy_management, communications_pricing_design_center, communications_services_gatekeeper
CVE-2020-36184 (published 2021-01-06)
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-502
Affected vendors: debian, fasterxml, netapp, oracle
Affected products: agile_plm, application_testing_suite, autovue_for_agile_product_lifecycle_management, banking_corporate_lending_process_management, banking_credit_facilities_process_management, banking_extensibility_workbench, banking_supply_chain_finance, banking_treasury_management, banking_virtual_account_management, blockchain_platform, cloud_backup, commerce_platform, communications_billing_and_revenue_management, communications_cloud_native_core_policy, communications_cloud_native_core_unified_data_repository, communications_convergent_charging_controller, communications_diameter_signaling_route, communications_element_manager, communications_evolved_communications_application_server, communications_instant_messaging_server, communications_network_charging_and_control, communications_offline_mediation_controller, communications_policy_management, communications_pricing_design_center, communications_services_gatekeeper
CVE-2020-36185 (published 2021-01-06)
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.SharedPoolDataSource.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-502
Affected vendors: debian, fasterxml, netapp, oracle
Affected products: agile_plm, application_testing_suite, autovue_for_agile_product_lifecycle_management, banking_corporate_lending_process_management, banking_credit_facilities_process_management, banking_extensibility_workbench, banking_supply_chain_finance, banking_treasury_management, banking_virtual_account_management, blockchain_platform, cloud_backup, commerce_platform, communications_billing_and_revenue_management, communications_cloud_native_core_policy, communications_cloud_native_core_unified_data_repository, communications_convergent_charging_controller, communications_diameter_signaling_route, communications_element_manager, communications_evolved_communications_application_server, communications_instant_messaging_server, communications_network_charging_and_control, communications_offline_mediation_controller, communications_policy_management, communications_pricing_design_center, communications_services_gatekeeper
CVE-2020-36186 (published 2021-01-06)
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-502
Affected vendors: debian, fasterxml, netapp, oracle
Affected products: agile_plm, application_testing_suite, autovue_for_agile_product_lifecycle_management, banking_corporate_lending_process_management, banking_credit_facilities_process_management, banking_extensibility_workbench, banking_supply_chain_finance, banking_treasury_management, banking_virtual_account_management, blockchain_platform, cloud_backup, commerce_platform, communications_billing_and_revenue_management, communications_cloud_native_core_policy, communications_cloud_native_core_unified_data_repository, communications_convergent_charging_controller, communications_diameter_signaling_route, communications_element_manager, communications_evolved_communications_application_server, communications_instant_messaging_server, communications_network_charging_and_control, communications_offline_mediation_controller, communications_policy_management, communications_pricing_design_center, communications_services_gatekeeper
CVE-2020-36187 (published 2021-01-06)
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.SharedPoolDataSource.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-502
Affected vendors: debian, fasterxml, netapp, oracle
Affected products: agile_plm, application_testing_suite, autovue_for_agile_product_lifecycle_management, banking_corporate_lending_process_management, banking_credit_facilities_process_management, banking_extensibility_workbench, banking_supply_chain_finance, banking_treasury_management, banking_virtual_account_management, blockchain_platform, cloud_backup, commerce_platform, communications_billing_and_revenue_management, communications_cloud_native_core_policy, communications_cloud_native_core_unified_data_repository, communications_convergent_charging_controller, communications_diameter_signaling_route, communications_element_manager, communications_evolved_communications_application_server, communications_instant_messaging_server, communications_network_charging_and_control, communications_offline_mediation_controller, communications_policy_management, communications_pricing_design_center, communications_services_gatekeeper
CVE-2020-36188 (published 2021-01-06)
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-502
Affected vendors: debian, fasterxml, netapp, oracle
Affected products: agile_plm, application_testing_suite, autovue_for_agile_product_lifecycle_management, banking_corporate_lending_process_management, banking_credit_facilities_process_management, banking_extensibility_workbench, banking_supply_chain_finance, banking_treasury_management, banking_virtual_account_management, blockchain_platform, cloud_backup, commerce_platform, communications_billing_and_revenue_management, communications_cloud_native_core_policy, communications_cloud_native_core_unified_data_repository, communications_convergent_charging_controller, communications_diameter_signaling_route, communications_element_manager, communications_evolved_communications_application_server, communications_instant_messaging_server, communications_network_charging_and_control, communications_offline_mediation_controller, communications_policy_management, communications_pricing_design_center, communications_services_gatekeeper
CVE-2020-36189 (published 2021-01-06)
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-502
Affected vendors: debian, fasterxml, netapp, oracle
Affected products: agile_plm, application_testing_suite, autovue_for_agile_product_lifecycle_management, banking_platform, banking_treasury_management, banking_virtual_account_management, blockchain_platform, cloud_backup, commerce_platform, communications_billing_and_revenue_management, communications_cloud_native_core_policy, communications_cloud_native_core_unified_data_repository, communications_convergent_charging_controller, communications_diameter_signaling_router, communications_evolved_communications_application_server, communications_instant_messaging_server, communications_interactive_session_recorder, communications_messaging_server, communications_network_charging_and_control, communications_offline_mediation_controller, communications_pricing_design_center, communications_services_gatekeeper, communications_session_route_manager, communications_unified_inventory_management, debian_linux
CVE-2020-3619 (published 2020-09-08)
u'Non-secure memory is touched multiple times during TrustZone\u2019s execution and can lead to privilege escalation or memory corruption' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8098, IPQ8074, Kamorta, MDM9150, MDM9206, MDM9607, MDM9650, MSM8905, MSM8909, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8998, QCA8081, QCS404, QCS605, QCS610, QM215, Rennell, SA415M, SC7180, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX24, SM6150, SM7150, SM8150, SXR1130
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-367
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8017, apq8017_firmware, apq8053, apq8053_firmware, apq8098, apq8098_firmware, ipq8074, ipq8074_firmware, kamorta, kamorta_firmware, mdm9150, mdm9150_firmware, mdm9206, mdm9206_firmware, mdm9607, mdm9607_firmware, mdm9650, mdm9650_firmware, msm8905, msm8905_firmware, msm8909, msm8909_firmware, msm8917
CVE-2020-36190 (published 2021-01-12)
RailsAdmin (aka rails_admin) before 1.4.3 and 2.x before 2.0.2 allows XSS via nested forms.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: rails_admin_project
Affected products: rails_admin
CVE-2020-36191 (published 2021-01-13)
JupyterHub 1.1.0 allows CSRF in the admin panel via a request that lacks an _xsrf field, as demonstrated by a /hub/api/user request (to add or remove a user account).
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N)
Weakness: CWE-352
Affected vendors: jupyter
Affected products: jupyterhub
CVE-2020-36192 (published 2021-01-18)
An issue was discovered in the Source Integration plugin before 2.4.1 for MantisBT. An attacker can gain access to the Summary field of private Issues (either marked as Private, or part of a private Project), if they are attached to an existing Changeset. The information is visible on the view.php page, as well as on the list.php page (a pop-up on the Affected Issues id hyperlink). Additionally, if the attacker has "Update threshold" in the plugin's configuration (set to the "updater" access level by default), then they can link any Issue to a Changeset by entering the Issue's Id, even if they do not have access to it.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Affected vendors: mantisbt
Affected products: source_integration
CVE-2020-36193 (published 2021-01-18)
Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-22
Affected vendors: debian, drupal, fedoraproject, php
Affected products: archive_tar, debian_linux, drupal, fedora
Added to CISA KEV catalog: 2022-08-25
KEV required action: Apply updates per vendor instructions.
CVE-2020-36194 (published 2021-07-01)
An XSS vulnerability has been reported to affect QNAP NAS running QTS and QuTS hero. If exploited, this vulnerability allows attackers to inject malicious code. This issue affects: QNAP Systems Inc. QTS versions prior to 4.5.2.1566 Build 20210202. QNAP Systems Inc. QuTS hero versions prior to h4.5.2.1638 build 20210414. This issue does not affect: QNAP Systems Inc. QTS 4.5.3.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: qnap
Affected products: qts, quts_hero
CVE-2020-36195 (published 2021-04-17)
An SQL injection vulnerability has been reported to affect QNAP NAS running Multimedia Console or the Media Streaming add-on. If exploited, the vulnerability allows remote attackers to obtain application information. QNAP has already fixed this vulnerability in the following versions of Multimedia Console and the Media Streaming add-on. QTS 4.3.3: Media Streaming add-on 430.1.8.10 and later QTS 4.3.6: Media Streaming add-on 430.1.8.8 and later QTS 4.4.x and later: Multimedia Console 1.3.4 and later We have also fixed this vulnerability in the following versions of QTS 4.3.3 and QTS 4.3.6, respectively: QTS 4.3.3.1624 Build 20210416 or later QTS 4.3.6.1620 Build 20210322 or later
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: qnap
Affected products: media_streaming_add-on, multimedia_console, qts
CVE-2020-36196 (published 2021-07-01)
A stored XSS vulnerability has been reported to affect QNAP NAS running QuLog Center. If exploited, this vulnerability allows attackers to inject malicious code. This issue affects: QNAP Systems Inc. QuLog Center versions prior to 1.2.0.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-80
Affected vendors: qnap
Affected products: qulog_center
CVE-2020-36197 (published 2021-05-13)
An improper access control vulnerability has been reported to affect earlier versions of Music Station. If exploited, this vulnerability allows attackers to compromise the security of the software by gaining privileges, reading sensitive information, executing commands, evading detection, etc. This issue affects: QNAP Systems Inc. Music Station versions prior to 5.3.16 on QTS 4.5.2; versions prior to 5.2.10 on QTS 4.3.6; versions prior to 5.1.14 on QTS 4.3.3; versions prior to 5.3.16 on QuTS hero h4.5.2; versions prior to 5.3.16 on QuTScloud c4.5.4.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-284
Affected vendors: qnap
Affected products: music_station, qts, quts_hero, qutscloud
CVE-2020-36198 (published 2021-05-13)
A command injection vulnerability has been reported to affect certain versions of Malware Remover. If exploited, this vulnerability allows remote attackers to execute arbitrary commands. This issue affects: QNAP Systems Inc. Malware Remover versions prior to 4.6.1.0. This issue does not affect: QNAP Systems Inc. Malware Remover 3.x.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-77
Affected vendors: qnap
Affected products: malware_remover
CVE-2020-36199 (published 2021-01-26)
TinyCheck before commits 9fd360d and ea53de8 was vulnerable to command injection due to insufficient checks of input parameters in several places.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: kaspersky
Affected products: tinycheck
CVE-2020-3620 (published 2020-09-08)
u'Lack of check of integer overflow while doing a round up operation for data read from shared memory for G-link SMEM transport can lead to corruption and potential information leak' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, Bitra, IPQ6018, IPQ8074, Kamorta, MDM9150, MDM9205, MDM9206, MDM9607, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8909, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar, QCA8081, QCM2150, QCN7605, QCS404, QCS405, QCS605, QCS610, QM215, Rennell, SA415M, SA6155P, Saipan, SC7180, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-190
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8053, apq8053_firmware, apq8096au, apq8096au_firmware, apq8098, apq8098_firmware, bitra, bitra_firmware, ipq8074, ipq8074_firmware, kamorta, kamorta_firmware, mdm9150, mdm9150_firmware, mdm9205, mdm9205_firmware, mdm9206, mdm9206_firmware, mdm9607, mdm9607_firmware, mdm9640, mdm9640_firmware, mdm9645
CVE-2020-36200 (published 2021-01-26)
TinyCheck before commits 9fd360d and ea53de8 allowed an authenticated attacker to send an HTTP GET request to the crafted URLs.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-918
Affected vendors: kaspersky
Affected products: tinycheck
CVE-2020-36201 (published 2021-01-26)
An issue was discovered in certain Xerox WorkCentre products. They do not properly encrypt passwords. This affects 3655, 3655i, 58XX, 58XXi 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-327
Affected vendors: xerox
Affected products: workcentre_3655, workcentre_3655_firmware, workcentre_3655i, workcentre_3655i_firmware, workcentre_5865, workcentre_5865_firmware, workcentre_5865i, workcentre_5865i_firmware, workcentre_5875, workcentre_5875_firmware, workcentre_5875i, workcentre_5875i_firmware, workcentre_5890, workcentre_5890_firmware, workcentre_5890i, workcentre_5890i_firmware, workcentre_5945, workcentre_5945_firmware, workcentre_5945i, workcentre_5945i_firmware, workcentre_5955, workcentre_5955_firmware, workcentre_5955i, workcentre_5955i_firmware, workcentre_6655
CVE-2020-36202 (published 2021-01-26)
An issue was discovered in the async-h1 crate before 2.3.0 for Rust. Request smuggling can occur when used behind a reverse proxy.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: rust-lang
Affected products: async-h1
CVE-2020-36203 (published 2021-01-26)
An issue was discovered in the reffers crate through 2020-12-01 for Rust. ARefss can contain a !Send,!Sync object, leading to a data race and memory corruption.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-362
Affected vendors: reffers_project
Affected products: reffers
CVE-2020-36204 (published 2021-01-26)
An issue was discovered in the im crate through 2020-11-09 for Rust. Because TreeFocus does not have bounds on its Send trait or Sync trait, a data race can occur.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: im_project
Affected products: im
CVE-2020-36205 (published 2021-01-26)
An issue was discovered in the xcb crate through 2020-12-10 for Rust. base::Error does not have soundness. Because of the public ptr field, a use-after-free or double-free can occur.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-415
Affected vendors: xcb_project
Affected products: xcb
CVE-2020-36206 (published 2021-01-26)
An issue was discovered in the rusb crate before 0.7.0 for Rust. Because of a lack of Send and Sync bounds, a data race and memory corruption can occur.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-662
Affected vendors: rusb_project
Affected products: rusb
CVE-2020-36207 (published 2021-01-26)
An issue was discovered in the aovec crate through 2020-12-10 for Rust. Because Aovec<T> does not have bounds on its Send trait or Sync trait, a data race and memory corruption can occur.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-662
Affected vendors: aovec_project
Affected products: aovec
CVE-2020-36208 (published 2021-01-26)
An issue was discovered in the conquer-once crate before 0.3.2 for Rust. Thread crossing can occur for a non-Send but Sync type, leading to memory corruption.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-662
Affected vendors: conquer-once_project
Affected products: conquer-once
CVE-2020-36209 (published 2021-01-26)
An issue was discovered in the late-static crate before 0.4.0 for Rust. Because Sync is implemented for LateStatic with T: Send, a data race can occur.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: late-static_project
Affected products: late-static
CVE-2020-3621 (published 2020-09-08)
u'Lack of check to ensure that the TX read index & RX write index that are read from shared memory are less than the FIFO size results into memory corruption and potential information leakage' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, Bitra, IPQ6018, IPQ8074, Kamorta, MDM9150, MDM9205, MDM9206, MDM9607, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8909, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar, QCA8081, QCM2150, QCN7605, QCS404, QCS405, QCS605, QCS610, QM215, Rennell, SA415M, SA6155P, Saipan, SC7180, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-20
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8053, apq8053_firmware, apq8096au, apq8096au_firmware, apq8098, apq8098_firmware, bitra, bitra_firmware, ipq8074, ipq8074_firmware, kamorta, kamorta_firmware, mdm9150, mdm9150_firmware, mdm9205, mdm9205_firmware, mdm9206, mdm9206_firmware, mdm9607, mdm9607_firmware, mdm9640, mdm9640_firmware, mdm9645
CVE-2020-36210 (published 2021-01-26)
An issue was discovered in the autorand crate before 0.2.3 for Rust. Because of impl Random on arrays, uninitialized memory can be dropped when a panic occurs, leading to memory corruption.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: autorand_project
Affected products: autorand
CVE-2020-36211 (published 2021-01-26)
An issue was discovered in the gfwx crate before 0.3.0 for Rust. Because ImageChunkMut does not have bounds on its Send trait or Sync trait, a data race and memory corruption can occur.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-662
Affected vendors: devolutions
Affected products: gfwx
CVE-2020-36212 (published 2021-01-26)
An issue was discovered in the abi_stable crate before 0.9.1 for Rust. DrainFilter lacks soundness because of a double drop.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: abi_stable_project
Affected products: abi_stable
CVE-2020-36213 (published 2021-01-26)
An issue was discovered in the abi_stable crate before 0.9.1 for Rust. A retain call can create an invalid UTF-8 string, violating soundness.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: abi_stable_project
Affected products: abi_stable
CVE-2020-36214 (published 2021-01-26)
An issue was discovered in the multiqueue2 crate before 0.1.7 for Rust. Because a non-Send type can be sent to a different thread, a data race can occur.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: multiqueue2_project
Affected products: multiqueue2
CVE-2020-36215 (published 2021-01-26)
An issue was discovered in the hashconsing crate before 1.1.0 for Rust. Because HConsed does not have bounds on its Send trait or Sync trait, memory corruption can occur.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-662
Affected vendors: hashconsing_project
Affected products: hashconsing
CVE-2020-36216 (published 2021-01-26)
An issue was discovered in Input<R> in the eventio crate before 0.5.1 for Rust. Because a non-Send type can be sent to a different thread, a data race and memory corruption can occur.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-662
Affected vendors: petabi
Affected products: eventio
CVE-2020-36217 (published 2021-01-26)
An issue was discovered in the may_queue crate through 2020-11-10 for Rust. Because Queue does not have bounds on its Send trait or Sync trait, memory corruption can occur.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-662
Affected vendors: may_queue_project
Affected products: may_queue
CVE-2020-36218 (published 2021-01-26)
An issue was discovered in the buttplug crate before 1.0.4 for Rust. ButtplugFutureStateShared does not properly consider (!Send|!Sync) objects, leading to a data race.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: nonpolynomial
Affected products: buttplug
CVE-2020-36219 (published 2021-01-26)
An issue was discovered in the atomic-option crate through 2020-10-31 for Rust. Because AtomicOption<T> implements Sync unconditionally, a data race can occur.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: atomic-option_project
Affected products: atomic-option
CVE-2020-3622 (published 2020-09-08)
u'Channel name string which has been read from shared memory is potentially subjected to string manipulations but not validated for NULL termination can results into memory corruption' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, Bitra, IPQ6018, IPQ8074, Kamorta, MDM9150, MDM9205, MDM9206, MDM9607, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8909, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar, QCA8081, QCM2150, QCN7605, QCS404, QCS405, QCS605, QCS610, QM215, Rennell, SA415M, SA6155P, Saipan, SC7180, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8017, apq8017_firmware, apq8053, apq8053_firmware, apq8096au, apq8096au_firmware, apq8098, apq8098_firmware, bitra, bitra_firmware, ipq6018, ipq6018_firmware, ipq8074, ipq8074_firmware, kamorta, kamorta_firmware, mdm9150, mdm9150_firmware, mdm9205, mdm9205_firmware, mdm9206, mdm9206_firmware, mdm9607
CVE-2020-36220 (published 2021-01-26)
An issue was discovered in the va-ts crate before 0.0.4 for Rust. Because Demuxer<T> omits a required T: Send bound, a data race and memory corruption can occur.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-662
Affected vendors: va-ts_project
Affected products: va-ts
CVE-2020-36221 (published 2021-01-26)
An integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in the Certificate Exact Assertion processing, resulting in denial of service (schema_init.c serialNumberAndIssuerCheck).
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-191
Affected vendors: apple, debian, openldap
Affected products: debian_linux, mac_os_x, macos, openldap
CVE-2020-36222 (published 2021-01-26)
A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-617
Affected vendors: apple, debian, openldap
Affected products: debian_linux, mac_os_x, macos, openldap
CVE-2020-36223 (published 2021-01-26)
A flaw was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Values Return Filter control handling, resulting in denial of service (double free and out-of-bounds read).
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-125
Affected vendors: apple, debian, openldap
Affected products: debian_linux, mac_os_x, macos, openldap
CVE-2020-36224 (published 2021-01-26)
A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the saslAuthzTo processing, resulting in denial of service.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-763
Affected vendors: apple, debian, openldap
Affected products: debian_linux, mac_os_x, macos, openldap
CVE-2020-36225 (published 2021-01-26)
A flaw was discovered in OpenLDAP before 2.4.57 leading to a double free and slapd crash in the saslAuthzTo processing, resulting in denial of service.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-415
Affected vendors: apple, debian, openldap
Affected products: debian_linux, macos, openldap
CVE-2020-36226 (published 2021-01-26)
A flaw was discovered in OpenLDAP before 2.4.57 leading to a memch->bv_len miscalculation and slapd crash in the saslAuthzTo processing, resulting in denial of service.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: apple, debian, openldap
Affected products: debian_linux, mac_os_x, macos, openldap
CVE-2020-36227 (published 2021-01-26)
A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the cancel_extop Cancel operation, resulting in denial of service.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-835
Affected vendors: apple, debian, openldap
Affected products: debian_linux, macos, openldap