2020

GNOME Geary before 3.36.3 mishandles pinned TLS certificate verification for IMAP and SMTP services using invalid TLS ce

An issue was discovered on Dr Trust ECG Pen 2.00.08 devices. Because the Bluetooth LE support is implemented without a r

An issue was discovered on Nescomed Multipara Monitor M1000 devices. The physical UART debug port provides a shell, with

An issue was discovered on Nescomed Multipara Monitor M1000 devices. The device enables an unencrypted TELNET service by

An issue was discovered in HiveMQ Broker Control Center 4.3.2. A crafted clientid parameter in an MQTT packet (sent to t

In BIG-IP APM versions 12.1.0-12.1.5.1 and 11.6.1-11.6.5.2, RADIUS authentication leaks memory when the username for aut

In BIG-IP versions 15.0.0-15.1.0.4, 14.1.0-14.1.2.6, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1 and BIG-IQ ve

In BIG-IP versions 15.0.0-15.1.0.4, 14.1.0-14.1.2.6, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.2, iControl RES

In versions 15.0.0-15.1.0.5, 14.1.0-14.1.2.7, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, a vulnerability in

In versions 15.1.0-15.1.0.4, rendering of certain session variables by BIG-IP APM UI-based agents in an access profile c

In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.

In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6.

In BIG-IP versions 15.1.0-15.1.0.4 and 15.0.0-15.0.1.3 the Certificate Administrator user role and higher privileged rol

In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.

In BIG-IP ASM versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-1

In versions 15.0.0-15.1.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.2, the BIG-IP Client o

In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.

HashiCorp Vault and Vault Enterprise versions 0.8.3 and newer, when configured with the GCP GCE auth method, may be vuln

HashiCorp Vault and Vault Enterprise versions 0.7.1 and newer, when configured with the AWS IAM auth method, may be vuln

An issue was discovered on Nescomed Multipara Monitor M1000 devices. The internal storage of the underlying Linux system

An issue was discovered in MoscaJS Aedes 0.42.0. lib/write.js does not properly consider exceptions during the writing o

WP Plugin Rednumber Admin Menu v1.1 and lower does not sanitize the value of the "role" GET parameter before echoing it

Vinoj Cardoza WordPress Poll Plugin v36 and lower executes SQL statement passed in via the pollid POST parameter due to

Umanni RH 1.0 has a user enumeration vulnerability. This issue occurs during password recovery, where a difference in me

Umanni RH 1.0 does not limit the number of authentication attempts. An unauthenticated user may exploit this vulnerabili

Halo blog 1.2.0 allows users to submit comments on blog posts via /api/content/posts/comments. The javascript code suppl

HMS Industrial Networks AB eCatcher all versions prior to 6.5.5 is vulnerable to a stack-based buffer overflow, which ma

Enterprise Access Client Auto-Updater allows for Remote Code Execution prior to version 2.0.1.

Fahad Mahmood RSS Feed Widget Plugin v2.7.9 and lower does not sanitize the value of the "t" GET parameter before echoin

Etoile Web Design Ultimate Appointment Booking & Scheduling WordPress Plugin v1.1.9 and lower does not sanitize the valu

mndpsingh287 WP File Manager v6.4 and lower fails to restrict external access to the fm_backups directory with a .htacce

An issue was discovered on ASUS RT-AC1900P routers before 3.0.0.4.385_20253. They allow XSS via spoofed Release Notes on

An issue was discovered on ASUS RT-AC1900P routers before 3.0.0.4.385_20253. The router accepts an arbitrary server cert

osTicket before 1.14.3 allows XSS because include/staff/banrule.inc.php has an unvalidated echo $info['notes'] call.

Cross Site Scripting vulnerability in ePO extension in McAfee Application Control (MAC) prior to 8.3.1 allows administra

Maltego before 4.2.12 allows XXE attacks.

secure-store in Expo through 2.16.1 on iOS provides the insecure kSecAttrAccessibleAlwaysThisDeviceOnly policy when WHEN

A flaw was found in the solaris_zone module from the Ansible Community modules. When setting the name for the zone on th

zrlog v2.1.0 has a vulnerability with the permission check. If admin account is logged in, other unauthorized users can

An issue was discovered in the Maven Extension plugin before 1.6 for Gradle Enterprise. The extension uses a socket conn

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Deskt

This vulnerability allows local attackers to disclose sensitive informations on affected installations of Parallels Desk

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4.

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4.

This vulnerability allows local attackers to disclose information on affected installations of Parallels Desktop 15.1.4.

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4.

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4.

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4.