2020

IBM Security Guardium Data Encryption (GDE) 3.0.0.2 is deployed with active debugging code that can create unintended en

IBM Security Guardium Data Encryption (GDE) 3.0.0.2 generates an error message that includes sensitive information about

IBM Security Guardium Data Encryption (GDE) 3.0.0.2 does not require that users should have strong passwords by default,

IBM Security Guardium Data Encryption (GDE) 3.0.0.2 stores user credentials in plain in clear text which can be read by

IBM Security Guardium Data Encryption (GDE) 3.0.0.2 contains hard-coded credentials, such as a password or cryptographic

IBM Security Guardium Data Encryption (GDE) 3.0.0.2 stores user credentials in plain in clear text which can be read by

IBM Security Guardium Data Encryption (GDE) 3.0.0.2 discloses sensitive information to unauthorized users. The informati

IBM Security Guardium Data Encryption (GDE) 3.0.0.2 is vulnerable to cross-site scripting. This vulnerability allows use

IBM Security Guardium Data Encryption (GDE) 3.0.0.2 could allow a remote attacker to obtain sensitive information, cause

IBM Security Guardium Data Encryption (GDE) 3.0.0.2 does not set the secure attribute on authorization tokens or session

IBM Security Guardium Data Encryption (GDE) 3.0.0.2 does not set the secure attribute on authorization tokens or session

IBM Security Guardium 10.5, 10.6, and 11.0 could allow an unauthorized user to obtain sensitive information due to missi

webTareas v2.1 is affected by Cross Site Scripting (XSS) on "Search."

WebPort-v1.19.17121 is affected by Cross Site Scripting (XSS) on the "connections" feature.

PHP-Fusion 9.03.60 is affected by Cross Site Scripting (XSS) via infusions/member_poll_panel/poll_admin.php.

In libIEC61850 before version 1.4.3, when a message with COTP message length field with value < 4 is received an integer

The SAS portal of Mitel MiCollab before 9.1.3 could allow an attacker to access user data by performing a header injecti

The Mitel MiCollab application before 9.1.332 for iOS could allow an unauthorized user to access restricted files and fo

The Web UI component of Mitel MiVoice 6800 and 6900 series SIP Phones with firmware before 5.1.0.SP5 could allow an unau

A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) Software could allow a

A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) Software could allow a

A vulnerability in a specific REST API of Cisco Data Center Network Manager (DCNM) Software could allow an authenticated

A vulnerability in Cisco Data Center Network Manager (DCNM) Software could allow an authenticated, local attacker to obt

A vulnerability in a specific REST API method of Cisco Data Center Network Manager (DCNM) Software could allow an authen

A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) Software could allow a

Multiple vulnerabilities in the Cisco Discovery Protocol implementation for Cisco Video Surveillance 8000 Series IP Came

Multiple vulnerabilities in the Cisco Discovery Protocol implementation for Cisco Video Surveillance 8000 Series IP Came

A vulnerability in the Cisco Discovery Protocol of Cisco Video Surveillance 8000 Series IP Cameras could allow an unauth

A vulnerability in the IPv6 packet processing engine of Cisco Small Business Smart and Managed Switches could allow an u

A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an authentica

A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an authentica

A vulnerability in the role-based access control (RBAC) functionality of the web management software of Cisco Vision Dyn

A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an unauthenti

Multiple vulnerabilities in the web-based management interface of Cisco DNA Center software could allow an unauthenticat

A vulnerability in Cisco Virtual Wide Area Application Services (vWAAS) with Cisco Enterprise NFV Infrastructure Softwar

A vulnerability in Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an authenticated, remote attacker to e

A vulnerability in Cisco Webex Meetings Desktop App for Windows could allow an unauthenticated, remote attacker to overw

A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) Software could allow a

A vulnerability in the installation component of Cisco Hyperflex HX-Series Software could allow an authenticated, local

A vulnerability in Cisco Connected Mobile Experiences (CMX) could allow an authenticated, local attacker with administra

A vulnerability in the CLI of Cisco Connected Mobile Experiences (CMX) could allow an authenticated, local attacker with

NavigateCMS 2.9 is affected by Cross Site Scripting (XSS) on module "Configuration."

NavigateCMS 2.9 is affected by Cross Site Scripting (XSS) on module "Content."

NavigateCMS 2.9 is affected by Cross Site Scripting (XSS) on module "Configuration."

NavigateCMS 2.9 is affected by Cross Site Scripting (XSS) via the module "Shop."

In versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.6, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, BI

In versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, and 14.1.0-14.1.2.6, BIG-IP ASM Configuration utility Stored-Cross Site Sc

In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, and 14.1.0-14.1.2.6, a BIG-IP virtual server with a Session Initiat

In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.6, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.

in BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.6, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6.