|
218131
|
7.5 |
HIGH
Network
|
google
|
android
|
An issue was discovered on Samsung mobile devices with P(9.0) software. One UI HOME logging can leak information. The Samsung ID is SVE-2019-16382 (June 2020).
|
CWE-532
Inclusion of Sensitive Information in Log Files
|
CVE-2020-13830
|
2024-11-21 14:01 |
2020-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218132
|
7.5 |
HIGH
Network
|
google
|
android
|
An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. Attackers can disable the SEAndroid protection mechanism in the RKP. The Samsung ID is SVE-2019-15998 (June 2020).
|
NVD-CWE-noinfo
|
CVE-2020-13829
|
2024-11-21 14:01 |
2020-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218133
|
7.5 |
HIGH
Network
|
foxitsoftware
|
reader phantompdf
|
An issue was discovered in Foxit Reader and PhantomPDF before 9.7.1. It allows stack consumption via a loop of an indirect object reference.
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2020-13815
|
2024-11-21 14:01 |
2020-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218134
|
9.8 |
CRITICAL
Network
|
foxitsoftware
|
reader phantompdf
|
An issue was discovered in Foxit Reader and PhantomPDF before 9.7.1. It has a use-after-free via a document that lacks a dictionary.
|
CWE-416
Use After Free
|
CVE-2020-13814
|
2024-11-21 14:01 |
2020-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218135
|
7.8 |
HIGH
Local
|
foxitsoftware
|
foxit_studio_photo
|
An issue was discovered in Foxit Studio Photo before 3.6.6.922. It allows local users to gain privileges via a crafted DLL in the current working directory when FoxitStudioPhoto366_3.6.6.916.exe is u…
|
CWE-426
Untrusted Search Path
|
CVE-2020-13813
|
2024-11-21 14:01 |
2020-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218136
|
7.8 |
HIGH
Local
|
foxitsoftware
|
foxit_studio_photo
|
An issue was discovered in Foxit Studio Photo before 3.6.6.922. It allows local users to gain privileges via a crafted DLL in the current working directory.
|
CWE-426
Untrusted Search Path
|
CVE-2020-13812
|
2024-11-21 14:01 |
2020-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218137
|
7.8 |
HIGH
Local
|
foxitsoftware
|
foxit_studio_photo
|
An issue was discovered in Foxit Studio Photo before 3.6.6.922. It has an out-of-bounds write via a crafted TIFF file.
|
CWE-787
Out-of-bounds Write
|
CVE-2020-13811
|
2024-11-21 14:01 |
2020-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218138
|
6.0 |
MEDIUM
Local
|
qemu canonical opensuse
|
qemu ubuntu_linux leap
|
ati-vga in hw/display/ati.c in QEMU 4.2.0 allows guest OS users to trigger infinite recursion via a crafted mm_index value during an ati_mm_read or ati_mm_write call.
|
CWE-674
Uncontrolled Recursion
|
CVE-2020-13800
|
2024-11-21 14:01 |
2020-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218139
|
5.5 |
MEDIUM
Local
|
qemu
|
qemu
|
hw/pci/pci.c in QEMU 4.2.0 allows guest OS users to trigger an out-of-bounds access by providing an address near the end of the PCI configuration space.
|
CWE-125
Out-of-bounds Read
|
CVE-2020-13791
|
2024-11-21 14:01 |
2020-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218140
|
5.6 |
MEDIUM
Network
|
qemu canonical debian
|
qemu ubuntu_linux debian_linux
|
rom_copy() in hw/core/loader.c in QEMU 4.0 and 4.1.0 does not validate the relationship between two addresses, which allows attackers to trigger an invalid memory copy operation.
|
CWE-787
Out-of-bounds Write
|
CVE-2020-13765
|
2024-11-21 14:01 |
2020-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|