2020

In lookatme (python/pypi package) versions prior to 2.3.0, the package automatically loaded the built-in "terminal" and

SSMC3.7.0.0 is vulnerable to remote authentication bypass. HPE StoreServ Management Console (SSMC) 3.7.0.0 is an off nod

A remote unauthenticated arbitrary code execution vulnerability was discovered in Aruba Airwave Software version(s): Pri

A remote unauthorized access vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.

A cross-site scripting (XSS) vulnerability AntSword v2.0.7 can remotely execute system commands.

An issue was discovered in illumos before 2020-10-22, as used in OmniOS before r151030by, r151032ay, and r151034y and Sm

An arbitrary command execution vulnerability exists in the fopen() function of file writes of UCMS v1.4.8, where an atta

A SSRF vulnerability exists in the downloadimage interface of CRMEB 3.0, which can remotely download arbitrary files on

Mozilla developers reported memory safety bugs present in Firefox 81. Some of these bugs showed evidence of memory corru

Mozilla developers and community members reported memory safety bugs present in Firefox 81 and Firefox ESR 78.3. Some of

In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length checks. In cases whe

A path handling issue was addressed with improved validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Cat

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6,

admin/src/containers/InputModalStepperProvider/index.js in Strapi before 3.2.5 has unwanted /proxy?url= functionality.

Atmel Advanced Software Framework (ASF) 4 has an Integer Overflow.

This issue was addressed with improved entitlements. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.

A certificate validation issue existed when processing administrator added certificates. This issue was addressed with i

tiki-login.php in Tiki before 21.2 sets the admin password to a blank value after 50 invalid login attempts.

HashiCorp Nomad and Nomad Enterprise version 0.9.0 up to 0.12.5 client file sandbox feature can be subverted using eithe

In Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on content retrieved via H

The Loginizer plugin before 1.6.4 for WordPress allows SQL injection (with resultant XSS), related to loginizer_login_fa

This affects the package scratch-svg-renderer before 0.2.0-prerelease.20201019174008. The loadString function does not e

BigBlueButton through 2.2.28 uses Ghostscript for processing of uploaded EPS documents, and consequently may be subject

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions

Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: User Interface). Supported v

Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supporte

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Pluggable authentication module). Supported ve

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions th

Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Work Provider Administra

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions th

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions th

Vulnerability in the Oracle E-Business Suite Secure Enterprise Search product of Oracle E-Business Suite (component: Sea

OpenSLP as used in VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401-SG, 6.5 before ESXi650-

Local file inclusion vulnerability in OneThird CMS v1.96c and earlier allows a remote unauthenticated attacker to execut

A templateselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Man

A guidatadetail expression language injection remote code execution vulnerability was discovered in HPE Intelligent Mana

A select expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management

A ictexpertcsvdownload expression language injection remote code execution vulnerability was discovered in HPE Intellige

A selectusergroup expression language injection remote code execution vulnerability was discovered in HPE Intelligent Ma

A quicktemplateselect expression language injection remote code execution vulnerability was discovered in HPE Intelligen

A operatorgrouptreeselectcontent expression language injection remote code execution vulnerability was discovered in HPE

A iccselectcommand expression language injection remote code execution vulnerability was discovered in HPE Intelligent M

A operationselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Ma

A navigationto expression language injection remote code execution vulnerability was discovered in HPE Intelligent Manag

A operatorgroupselectcontent expression language injection remote code execution vulnerability was discovered in HPE Int

A reporttaskselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent M

A iccselectdeviceseries expression language injection remote code execution vulnerability was discovered in HPE Intellig

A customtemplateselect expression language injection remote code execution vulnerability was discovered in HPE Intellige

A perfselecttask expression language injection remote code execution vulnerability was discovered in HPE Intelligent Man

A selviewnavcontent expression language injection remote code execution vulnerability was discovered in HPE Intelligent