2020

Jenkins Valgrind Plugin 0.28 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Jenkins Build Failure Analyzer Plugin 1.27.0 and earlier does not escape matching text in a form validation response, re

Jenkins Cadence vManager Plugin 3.0.4 and earlier does not escape build descriptions in tooltips, resulting in a stored

A missing permission check in Jenkins database Plugin 1.6 and earlier allows attackers with Overall/Read access to Jenki

A cross-site request forgery (CSRF) vulnerability in Jenkins database Plugin 1.6 and earlier allows attackers to connect

A cross-site request forgery (CSRF) vulnerability in Jenkins database Plugin 1.6 and earlier allows attackers to execute

Jenkins Parameterized Remote Trigger Plugin 3.1.3 and earlier stores a secret unencrypted in its global configuration fi

Jenkins Git Parameter Plugin 0.9.12 and earlier does not escape the repository field on the 'Build with Parameters' page

The redirect module in Liferay Portal before 7.3.3 does not limit the number of URLs resulting in a 404 error that is re

All trailer Power Line Communications are affected. PLC bus traffic can be sniffed reliably via an active antenna up to

An issue was discovered in Django 2.2 before 2.2.16, 3.0 before 3.0.10, and 3.1 before 3.1.1 (when Python 3.7+ is used).

An issue was discovered in Django 2.2 before 2.2.16, 3.0 before 3.0.10, and 3.1 before 3.1.1 (when Python 3.7+ is used).

A acceptance of Extraneous Untrusted Data With Trusted Data vulnerability in the start script of openldap2 of SUSE Enter

A Externally Controlled Reference to a Resource in Another Sphere vulnerability in obs-service-download_files of openSUS

All versions of package gedi are vulnerable to Prototype Pollution via the set function.

All versions of package safe-object2 are vulnerable to Prototype Pollution via the setter function.

All versions of package worksmith are vulnerable to Prototype Pollution via the setValue function.

All versions of package tiny-conf are vulnerable to Prototype Pollution via the set function.

All versions of package promisehelpers are vulnerable to Prototype Pollution via the insert function.

All versions of package nodee-utils are vulnerable to Prototype Pollution via the deepSet function.

All versions of package node-oojs are vulnerable to Prototype Pollution via the setPath function.

The package node-forge before 0.10.0 is vulnerable to Prototype Pollution via the util.setPath function. Note: Version 0

Versions of package locutus before 2.0.12 are vulnerable to prototype Pollution via the php.strings.parse_str function.

All versions of package gammautils are vulnerable to Prototype Pollution via the deepSet and deepMerge functions.

All versions of package dot-notes are vulnerable to Prototype Pollution via the create function.

All versions of package deeps are vulnerable to Prototype Pollution via the set function.

All versions of package deep-get-set are vulnerable to Prototype Pollution via the main function.

All versions of package confucious are vulnerable to Prototype Pollution via the set function.

All versions of package arr-flatten-unflatten are vulnerable to Prototype Pollution via the constructor.

Openfind Mail2000 contains Broken Access Control vulnerability, which can be used to execute unauthorized commands after

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate project keys via an Infor

NETGEAR R8300 devices before 1.0.2.134 are affected by command injection by an unauthenticated attacker.

The modprobe child process in the ./debian/patches/load_ppp_generic_if_needed patch file incorrectly handled module load

An issue was discovered on LG mobile devices with Android OS 4.4, 5.0, 5.1, 6.0, 7.0, 7.1, 8.0, 8.1, 9.0, and 10 softwar

An issue was discovered on LG mobile devices with Android OS 4.4, 5.0, 5.1, 6.0, 7.0, 7.1, 8.0, 8.1, 9.0, and 10 softwar

An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software. An application crash can

An issue was discovered on LG mobile devices with Android OS 9 and 10 software. LGTelephonyProvider allows a bypass of i

An issue was discovered on LG mobile devices with Android OS 9 and 10 software on the VZW network. lge_property allows p

An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software. Local users can gain pri

An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software. A service crash may occu

An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9, and 10 software. The network_management servic

An issue was discovered on LG mobile devices with Android OS 10 software. MDMService does not properly restrict APK inst

An issue was discovered on Samsung mobile devices with Q(10.0) (Galaxy S20) software. Because HAL improperly checks vers

An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. The persona service allows

An issue was discovered on Samsung mobile devices with software through 2020-04-02 (Exynos modem chipsets). There is a h

An issue was discovered on Samsung mobile devices with Q(10.0) (exynos9830 chipsets) software. RKP allows arbitrary code

An issue was discovered on Samsung mobile devices with Q(10.0) (exynos9830 chipsets) software. H-Arx allows attackers to

An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. Attackers can bypass Factory Reset P

An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. The CMC service allows attackers to

An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. StatusBarService has insufficient DE