Monthly Archive: July 2020

Array out of bound access can occur in display module due to lack of bound check on input parcel received in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon...

Close and bind operations done on a socket can lead to a Use-After-Free condition. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon...

When kernel thread unregistered listener, Use after free issue happened as the listener client`s private data has been already freed in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon...

A path traversal vulnerability exists in Pulse Connect Secure

A path traversal vulnerability exists in Pulse Connect Secure

A denial of service vulnerability exists in Pulse Connect Secure

An insufficient permission check vulnerability exists in Pulse Connect Secure

A code injection vulnerability exists in Pulse Connect Secure

A cross site scripting (XSS) vulnerability in Pulse Connect Secure

An information disclosure vulnerability in meeting of Pulse Connect Secure

An information exposure vulnerability exists in UniFi Protect before v1.13.4-beta.5 that allowed unauthenticated attackers access to valid usernames for the UniFi Protect web application via HTTP response code and response timing. Date published :...

An improper authentication vulnerability exists in Pulse Connect Secure

A cross site scripting (XSS) vulnerability exists in Pulse Connect Secure

Improper check of inputs in Nextcloud Preferred Providers app v1.6.0 allowed to perform a denial of service attack when using a very long password. Date published : 2020-07-30 https://hackerone.com/reports/840598 https://nextcloud.com/security/advisory/?id=NC-SA-2020-028