Browse CVEs

CRITICAL 9.8 CVE-2020-15007 A buffer overflow in the M_LoadDefaults function in m_misc.c in id Tech 1 (aka Doom engine) allows arbitrary code execution via an unsafe usage of fs… Tech 1 671+ Fix from $2,3002020-06-24 HIGH 8.8 CVE-2020-11068 In LoRaMac-node before 4.4.4, a reception buffer overflow can happen due to the received buffer size not being checked. This has been fixed in 4.4.4. Loramac Node 4.4.4+ Fix from $1,9502020-06-23 CRITICAL 9.8 CVE-2020-14983 The server in Chocolate Doom 3.0.0 and Crispy Doom 5.8.0 doesn't validate the user-controlled num_players value, leading to a buffer overflow. A mali… Chocolate Doom Patch available Fix from $2,3002020-06-22 CRITICAL 9.8 CVE-2020-3661 Buffer overflow will happen while parsing mp4 clip with corrupted sample atoms values which exceeds MAX_UINT32 range due to lack of validation checks… Apq8009 Firmware Mitigation only Fix from $2,3002020-06-22 CRITICAL 9.8 CVE-2020-3662 Buffer overflow can occur while parsing eac3 header while playing the clip which is nonstandard in Snapdragon Auto, Snapdragon Compute, Snapdragon Co… Apq8009 Firmware Mitigation only Fix from $2,3002020-06-22 CRITICAL 9.8 CVE-2019-14062 Buffer overflows while decoding setup message from Network due to lack of check of IE message length received from network in Snapdragon Auto, Snapdr… Apq8009 Firmware Mitigation only Fix from $2,3002020-06-22 HIGH 7.8 CVE-2019-14076 Buffer overflow occurs while processing an subsample data length out of range due to lack of user input validation in Snapdragon Auto, Snapdragon Com… Apq8009 Firmware Mitigation only Fix from $1,9502020-06-22 CRITICAL 9.8 CVE-2020-3614 Possible buffer overflow while copying the frame to local buffer due to lack of check of length before copying in Snapdragon Auto, Snapdragon Compute… Apq8009 Firmware Mitigation only Fix from $2,3002020-06-22 HIGH 7.5 CVE-2019-20839 libvncclient/sockets.c in LibVNCServer before 0.9.13 has a buffer overflow via a long socket filename. Ubuntu Linux 3.2.1.0+ Fix from $1,9502020-06-17 HIGH 8.8 CVE-2020-13224 TP-LINK NC200 devices through 2.1.10 build 200401, NC210 devices through 1.0.10 build 200401, NC220 devices through 1.3.1 build 200401, NC230 devices… Nc200 Firmware after 2.1.10 Fix from $1,9502020-06-17 CRITICAL 9.8 CVE-2020-14033 An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_streaming_rtsp_parse_sdp in plugins/janus_streaming.c has a … Janus after 0.10.0 Fix from $2,3002020-06-15 CRITICAL 9.8 CVE-2020-14034 An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_get_codec_from_pt in utils.c has a Buffer Overflow via long … Janus after 0.10.0 Fix from $2,3002020-06-15 HIGH 7.5 CVE-2020-4434 Certain IBM Aspera applications are vulnerable to buffer overflow based on the product configuration and valid authentication, which could allow an a… Aspera Application Platform On Demand after 3.9.10 Fix from $1,9502020-06-10 HIGH 7.5 CVE-2020-4436 Certain IBM Aspera applications are vulnerable to buffer overflow after valid authentication, which could allow an attacker with intimate knowledge o… Aspera Application Platform On Demand after 3.9.10 Fix from $1,9502020-06-10 HIGH 7.5 CVE-2020-13432EPSS 31% rejetto HFS (aka HTTP File Server) v2.3m Build #300, when virtual files or folders are used, allows remote attackers to trigger an invalid-pointer wr… Http File Server Patch available Fix from $1,9502020-06-08 CRITICAL 9.8 CVE-2020-10071 The Zephyr MQTT parsing code performs insufficient checking of the length field on publish messages, allowing a buffer overflow and potentially remot… Zephyr after 2.2.0 Fix from $2,3002020-06-05 CRITICAL 9.8 CVE-2020-10070 In the Zephyr Project MQTT code, improper bounds checking can result in memory corruption and possibly remote code execution. NCC-ZEP-031 This issue … Zephyr after 2.2.0 Fix from $2,3002020-06-05 HIGH 7.5 CVE-2020-12723EPSS 6% regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls. Perl 5.30.3+ Fix from $1,9502020-06-05 CRITICAL 9.8 CVE-2020-13839 An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 (MTK chipsets). Code execution can occur via a custom AT comman… Android Mitigation only Fix from $2,3002020-06-05 CRITICAL 9.8 CVE-2020-13840 An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 (MTK chipsets). Code execution can occur via an MTK AT command … Android Mitigation only Fix from $2,3002020-06-05 HIGH 7.5 CVE-2019-20823 An issue was discovered in Foxit PhantomPDF before 8.3.11. It has a buffer overflow because a looping correction does not occur after JavaScript upda… Phantompdf 8.3.11+ Fix from $1,9502020-06-04 HIGH 7.5 CVE-2019-20828 An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has a buffer overflow because a looping correction does not occur after JavaScr… Phantompdf 9.6+ Fix from $1,9502020-06-04 HIGH 7.8 CVE-2020-3616 Buffer overflow in display function due to memory copy without checking length of size using strcpy function in Snapdragon Auto, Snapdragon Compute, … Apq8017 Firmware Mitigation only Fix from $1,9502020-06-02 HIGH 7.8 CVE-2020-3625 When making query to DSP capabilities, Stack out of bounds occurs due to wrong buffer length configured for DSP attributes in Snapdragon Auto, Snapdr… Sm8250 Firmware Mitigation only Fix from $1,9502020-06-02 CRITICAL 9.8 CVE-2020-13389 An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42_multi, AC15 V1.0 V15.03.05.1… Ac6 Firmware No fix yet Fix from $2,3002020-05-22 CRITICAL 9.8 CVE-2020-13390 An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42_multi, AC15 V1.0 V15.03.05.1… Ac6 Firmware No fix yet Fix from $2,3002020-05-22 CRITICAL 9.8 CVE-2020-13391 An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42_multi, AC15 V1.0 V15.03.05.1… Ac6 Firmware No fix yet Fix from $2,3002020-05-22 CRITICAL 9.8 CVE-2020-13392 An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42_multi, AC15 V1.0 V15.03.05.1… Ac6 Firmware No fix yet Fix from $2,3002020-05-22 CRITICAL 9.8 CVE-2020-13393 An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42_multi, AC15 V1.0 V15.03.05.1… Ac6 Firmware No fix yet Fix from $2,3002020-05-22 CRITICAL 9.8 CVE-2020-13394 An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42_multi, AC15 V1.0 V15.03.05.1… Ac6 Firmware No fix yet Fix from $2,3002020-05-22