Security Vulnerabilities - CVEs Published In 2020
OX App Suite through 7.10.3 allows XXE attacks.
CVSS Score
6.5
EPSS Score
0.01
Published
2020-06-16
OX App Suite through 7.10.3 allows XSS.
CVSS Score
5.4
EPSS Score
0.012
Published
2020-06-16
OX App Suite through 7.10.3 has Improper Input Validation.
CVSS Score
7.5
EPSS Score
0.02
Published
2020-06-16
OX App Suite through 7.10.3 allows SSRF.
CVSS Score
6.5
EPSS Score
0.011
Published
2020-06-16
Netflix Titus uses Java Bean Validation (JSR 380) custom constraint validators. When building custom constraint violation error messages, different types of interpolation are supported, including Java EL expressions. If an attacker can inject arbitrary data in the error message template being passed to ConstraintValidatorContext.buildConstraintViolationWithTemplate() argument, they will be able to run arbitrary Java code.
CVSS Score
9.8
EPSS Score
0.017
Published
2020-06-16
Cross Site Scripting (XSS) vulnerability in Micro Focus ArcSight Enterprise Security Manager (ESM) product, Affecting versions 7.0.x, 7.2 and 7.2.1 . The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting (XSS) or information disclosure.
CVSS Score
6.1
EPSS Score
0.006
Published
2020-06-16
On the Cypress CYW20735 evaluation board, any data that exceeds 384 bytes is copied and causes an overflow. This is because the maximum BLOC buffer size for sending and receiving data is set to 384 bytes, but everything else is still configured to the usual size of 1092 (which was used for everything in the previous CYW20719 and later CYW20819 evaluation board). To trigger the overflow, an attacker can either send packets over the air or as unprivileged local user. Over the air, the minimal PoC is sending "l2ping -s 600" to the target address prior to any pairing. Locally, the buffer overflow is immediately triggered by opening an ACL or SCO connection to a headset. This occurs because, in WICED Studio 6.2 and 6.4, BT_ACL_HOST_TO_DEVICE_DEFAULT_SIZE and BT_ACL_DEVICE_TO_HOST_DEFAULT_SIZE are set to 384.
CVSS Score
7.8
EPSS Score
0.003
Published
2020-06-16
This is an unbounded write into kernel global memory, via a user-controlled buffer size.Product: AndroidVersions: Android kernelAndroid ID: A-135130450
CVSS Score
9.8
EPSS Score
0.004
Published
2020-06-16
Function abc_pcie_issue_dma_xfer_sync creates a transfer object, adds it to the session object then continues to work with it. A concurrent thread could retrieve created transfer object from the session object and delete it using abc_pcie_dma_user_xfer_clean. If this happens, abc_pcie_start_dma_xfer and abc_pcie_wait_dma_xfer in the original thread will trigger UAF when working with the transfer object.Product: AndroidVersions: Android kernelAndroid ID: A-151453714
CVSS Score
9.8
EPSS Score
0.004
Published
2020-06-16
In crus_afe_get_param of msm-cirrus-playback.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-148189280
CVSS Score
7.8
EPSS Score
0.002
Published
2020-06-16