2020

Dell Wyse Management Suite versions prior to 1.4.1 contain a stored cross-site scripting vulnerability when unregisterin

Dell Wyse Management Suite versions prior to 1.4.1 contain a stored cross-site scripting vulnerability. A remote authent

Dell EMC XtremIO XMS versions prior to 6.3.0 contain an incorrect permission assignment vulnerability. A malicious local

Dell EMC XtremIO XMS versions prior to 6.3.0 contain an information disclosure vulnerability where OS users’ passwords a

The web application of several Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) was affected by Reflected

Some Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) did not implement any mechanism to avoid CSRF. Succ

The web application of several Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) was affected by Stored XS

Some Xerox printers (such as the Phaser 3320 V53.006.16.000) did not implement any mechanism to avoid CSRF attacks. Succ

Multiple Stored XSS vulnerabilities were found in the Xerox Web Application, used by the Phaser 3320 V53.006.16.000 and

GitLab 12.1 through 12.8.1 allows XSS. A stored cross-site scripting vulnerability was discovered when displaying merge

GitLab 12.5 through 12.8.1 allows HTML Injection. A particular error header was potentially susceptible to injection or

A Blind SQL Injection issue was discovered in Sapplica Sentrifugo 3.2 via the index.php/holidaygroups/add id parameter b

GitLab 12.1 through 12.8.1 allows XSS. A cross-site scripting vulnerability was present in a particular view relating to

GitLab 9.3 through 12.8.1 allows XSS. A cross-site scripting vulnerability was found when viewing particular file types.

GitLab 11.7 through 12.8.1 allows Information Disclosure. Under certain group conditions, group epic information was uni

GitLab 10.4 through 12.8.1 allows Directory Traversal. A particular endpoint was vulnerable to a directory traversal vul

GitLab 12.3.5 through 12.8.1 allows Information Disclosure. A particular view was exposing merge private merge request t

GitLab EE 11.6 through 12.8.1 allows Information Disclosure. Sending a specially crafted request to the vulnerability_fe

GitLab 12.2 through 12.8.1 allows Denial of Service. A denial of service vulnerability impacting the designs for public

GitLab before 12.8.2 has Incorrect Access Control. It was internally discovered that the LFS import process could potent

GitLab 8.3 through 12.8.1 allows Information Disclosure. It was possible for certain non-members to access the Contribut

GitLab 7.10 through 12.8.1 has Incorrect Access Control. Under certain conditions where users should have been required

GitLab 12.1 through 12.8.1 allows XSS. The merge request submission form was determined to have a stored cross-site scri

Zoho ManageEngine Applications Manager before 14600 allows a remote unauthenticated attacker to disclose license related

An XSS vulnerability in the popup-builder plugin before 3.64.1 for WordPress allows remote attackers to inject arbitrary

The popup-builder plugin before 3.64.1 for WordPress allows information disclosure and settings modification, leading to

An improper neutralization of input vulnerability in Fortinet FortiADC 5.3.3 and earlier may allow an attacker to execut

An information exposure vulnerability in Fortinet FortiWeb 6.2.0 CLI and earlier may allow an authenticated user to view

An XSS issue was discovered in tooltip/tooltip.js in PrimeTek PrimeFaces 7.0.11. In a web application using PrimeFaces,

Invision Power Board (aka IPB or IP.Board) 2.x through 3.0.4, when Internet Explorer 5 is used, allows XSS via a .txt at

querymen prior to 2.1.4 allows modification of object properties. The parameters of exported function handler(type, name

GitLab 12.8.x before 12.8.6, when sign-up is enabled, allows remote attackers to bypass email domain restrictions within

Huawei smartphone Honor V30 with versions earlier than OxfordS-AN00A 10.0.1.167(C00E166R4P1) have an improper authentica

An improper neutralization of input vulnerability in the URL Description in Fortinet FortiIsolator version 1.2.2 allows

Load value injection in some Intel(R) Processors utilizing speculative execution may allow an authenticated user to pote

Improper data forwarding in some data cache for some Intel(R) Processors may allow an authenticated user to potentially

An Improper Neutralization of Input vulnerability in the Anomaly Detection Parameter Name in Fortinet FortiWeb 6.0.5, 6.

Opera through 53 on Android allows Address Bar Spoofing. Characters from several languages are displayed in Right-to-Lef

Improper configuration in block design for Intel(R) MAX(R) 10 FPGA all versions may allow an authenticated user to poten

Improper input validation in Intel(R) Graphics Drivers before version 26.20.100.7212 may allow an authenticated user to

Improper input validation in firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of p

bitcoind and Bitcoin-Qt prior to 0.17.1 allow injection of arbitrary data into the debug log via an RPC call.

messagepartthemes/default/defaultrenderer.cpp in messagelib in KDE Applications before 18.12.0 does not properly restric

yidashi yii2cmf 2.0 has XSS via the /search q parameter.

bitcoind and Bitcoin-Qt prior to 0.15.1 have a stack-based buffer overflow if an attacker-controlled SOCKS proxy server

NVIDIA vGPU graphics driver for guest OS contains a vulnerability in which an incorrect resource clean up on a failure p

NVIDIA Virtual GPU Manager contains a vulnerability in the kernel module (nvidia.ko), where a null pointer dereference m

NVIDIA Virtual GPU Manager, all versions, contains a vulnerability in the vGPU plugin in which an input index value is i

Out-of-bounds write in Intel(R) Graphics Drivers before version 15.36.38.5117 may allow an authenticated user to potenti

Improper access control in Intel(R) Graphics Drivers before version 26.20.100.7463 may allow an authenticated user to po