2020

IBM Security Secret Server 10.6 could allow a remote attacker to obtain sensitive information when a detailed technical

IBM Security Secret Server 10.6 could allow a remote attacker to obtain sensitive information, caused by the failure to

IBM Security Secret Server 10.6 could allow a remote attacker to conduct phishing attacks, using an open redirect attack

IBM Automation Workstream Services 19.0.3, 20.0.1, 20.0.2, IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM

IBM FileNet Content Manager and IBM Content Navigator 3.0.CD is vulnerable to stored cross-site scripting. This vulnerab

IBM Financial Transaction Manager 3.0.6 and 3.1.0 does not invalidate session after logout which could allow an authenti

Emerson Rosemount X-STREAM Gas AnalyzerX-STREAM enhanced XEGP, XEGK, XEFD, XEXF – all revisions, The affected products a

Buffer overflow in QUIC dissector in Wireshark 3.4.0 to 3.4.1 allows denial of service via packet injection or crafted c

The Jupyter Server provides the backend (i.e. the core services, APIs, and REST endpoints) for Jupyter web applications

The install.c module in the Pengutronix RAUC update client prior to version 1.5 has a Time-of-Check Time-of-Use vulnerab

HCL iNotes is susceptible to a Tabnabbing vulnerability caused by improper sanitization of message content. A remote una

A flaw was found in ovirt-engine 4.4.3 and earlier allowing an authenticated user to read other users' personal informat

tlslite-ng is an open source python library that implements SSL and TLS cryptographic protocols. In tlslite-ng before ve

Incorrect Session Validation in Apache Airflow Webserver versions prior to 1.10.14 with default config allows a maliciou

VMware ESXi (7.0 prior to ESXi70U1c-17325551), VMware Workstation (16.x prior to 16.0 and 15.x prior to 15.5.7), VMware

A signature verification vulnerability exists in crewjam/saml. This flaw allows an attacker to bypass SAML Authenticatio

SolarWinds Web Help Desk 12.7.0 allows CSV Injection, also known as Formula Injection, via a file attached to a ticket.

EgavilanMedia ECM Address Book 1.0 is affected by SQL injection. An attacker can bypass the Admin Login panel through SQ

Coastercms v5.8.18 is affected by cross-site Scripting (XSS). A user can steal a cookie and make the user redirect to an

DotCMS Add Template with admin panel 20.11 is affected by cross-site Scripting (XSS) to gain remote privileges. An attac

EgavilanMedia User Registration & Login System with Admin Panel 1.0 is affected by Cross Site Request Forgery (CSRF) to

Nifty-PM CPE 2.3 is affected by stored HTML injection. The impact is remote arbitrary code execution.

LimitLoginAttempts.php in the limit-login-attempts-reloaded plugin before 2.17.4 for WordPress allows a bypass of (per I

The limit-login-attempts-reloaded plugin before 2.17.4 for WordPress allows wp-admin/options-general.php?page=limit-logi

Affected versions of Atlassian Crucible allow remote attackers to impact the application's availability via a Denial of

tindy2013 subconverter 0.6.4 has a /sub?target=%TARGET%&url=%URL%&config=%CONFIG% API endpoint that accepts an arbitrary

srs2.c in PostSRSd before 1.10 allows remote attackers to cause a denial of service (CPU consumption) via a long timesta

A potential security vulnerability has been identified in HPE iLO Amplifier Pack server version 1.70. The vulnerability

A potential security vulnerability has been identified in the HPE StoreEver MSL2024 Tape Library and HPE StoreEver 1/8 G

A potential security vulnerability has been identified in HPE Systems Insight Manager (SIM) version 7.6. The vulnerabili

HCL iNotes v9, v10 and v11 is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability due to improper handling

A vulnerability in the MIME message handling of the HCL Notes v9 client could potentially be exploited by an unauthentic

HCL Verse v10 and v11 is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability due to improper handling of me

Relative Path Traversal in Marvell QConvergeConsole GUI 5.5.0.74 allows a remote, authenticated attacker to delete arbit

User credentials can be manipulated and stolen by Native CephFS consumers of OpenStack Manila, resulting in potential pr

In the Pulsar manager 0.1.0 version, malicious users will be able to bypass pulsar-manager's admin, permission verificat

A privilege escalation vulnerability exists in Kepware LinkMaster 3.0.94.0. In its default configuration, an attacker ca

In DolphinScheduler 1.2.0 and 1.2.1, with mysql connectorj a remote code execution vulnerability exists when choosing my

A privilege escalation vulnerability exists in the WinRing0x64 Driver IRP 0x9c402088 functionality of NZXT CAM 4.8.0. A

A privilege escalation vulnerability exists in the WinRing0x64 Driver IRP 0x9c40a148 functionality of NZXT CAM 4.8.0. A

A privilege escalation vulnerability exists in the WinRing0x64 Driver Privileged I/O Write IRPs functionality of NZXT CA

A privilege escalation vulnerability exists in the WinRing0x64 Driver Privileged I/O Write IRPs functionality of NZXT CA

A privilege escalation vulnerability exists in the WinRing0x64 Driver Privileged I/O Write IRPs functionality of NZXT CA

ThingsBoard before v3.2 is vulnerable to Host header injection in password-reset emails. This allows an attacker to send

OpenSlides is a free, Web-based presentation and assembly system for managing and projecting agenda, motions, and electi

SQL injection vulnerability in the wp_where function in WeiPHP 5.0.

WeiPHP 5.0 does not properly restrict access to pages, related to using POST.

Eval injection vulnerability in the parserCommom method in the ParserTemplate class in zzz_template.php in zzzphp 1.7.2

There is a XSS in the user login page in zzcms 2019. Users can inject js code by the referer header via user/login.php

There are multiple unauthenticated directory traversal vulnerabilities in different FTP commands in uftpd FTP server ver