2020

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Deskt

This vulnerability allows local attackers to disclose information on affected installations of Parallels Desktop 15.1.3-

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.3-4

This vulnerability allows local attackers to disclose information on affected installations of Parallels Desktop 15.1.3-

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.2-4

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConso

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConso

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConso

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConso

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConso

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConso

This vulnerability allows remote attackers to execute arbitrary code on affected installations of installations of Marve

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Marvell QConve

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Marvell QConve

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConso

A vulnerability in the web-based management interface of iPECS could allow an authenticated, remote attacker to get admi

In Sonatype Nexus Repository 3.26.1, an S3 secret key can be exposed by an admin user.

Advantech iView, Versions 5.7 and prior. The affected product is vulnerable to path traversal vulnerabilities that could

An issue was discovered in Octopus Deploy 3.4. A deployment target can be configured with an Account or Certificate that

FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, rela

TechKshetra Info Solutions Pvt. Ltd Savsoft Quiz 5.5 and earlier has XSS which can result in an attacker injecting the X

** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** A Cross Site Scripting (XSS) vulnerability was found in Codiad v1.7.8 and late

Fossil before 2.10.2, 2.11.x before 2.11.2, and 2.12.x before 2.12.1 allows remote authenticated users to execute arbitr

In Netwide Assembler (NASM) 2.15rc10, SEGV can be triggered in tok_text in asm/preproc.c by accessing READ memory.

In Netwide Assembler (NASM) 2.15rc10, there is heap use-after-free in saa_wbytes in nasmlib/saa.c.

GNU Bison before 3.7.1 has a use-after-free in _obstack_free in lib/obstack.c (called from gram_lex) when a '\0' byte is

Softing Industrial Automation all versions prior to the latest build of version 4.47.0, The affected product is vulnerab

Softing Industrial Automation all versions prior to the latest build of version 4.47.0, The affected product is vulnerab

GateManager versions prior to 9.2c, The affected product uses a weak hash type, which may allow an attacker to view user

GateManager versions prior to 9.2c, The affected product contains a hard-coded credential for telnet, allowing an unpriv

GateManager versions prior to 9.2c, The affected product is vulnerable to an off-by-one error, which may allow an attack

Secomea GateManager all versions prior to 9.2c, An attacker can send a negative value and overwrite arbitrary data.

Cellopoint CelloOS v4.1.10 Build 20190922 does not validate URL inputted properly. With cookie of an authenticated user,

Cellopoint CelloOS v4.1.10 Build 20190922 does not validate URL inputted properly, which allows unauthorized user to lau

Cellopoint CelloOS v4.1.10 Build 20190922 does not validate URL inputted properly. With the cookie of the system adminis

Cross-site scripting vulnerability in Exment prior to v3.6.0 allows remote authenticated attackers to inject arbitrary s

Cross-site scripting vulnerability in Exment prior to v3.6.0 allows remote authenticated attackers to inject arbitrary s

Open redirect vulnerability in CyberMail Ver.6.x and Ver.7.x allows remote attackers to redirect users to arbitrary site

Cross-site scripting vulnerability in CyberMail Ver.6.x and Ver.7.x allows remote attackers to inject arbitrary script o

wolfSSL before 4.5.0 mishandles TLS 1.3 server data in the WAIT_CERT_CR state, within SanityCheckTls13MsgReceived() in t

An issue was discovered in the selinux-policy (aka Reference Policy) package 3.14 through 2020-08-24 because the .config

An issue was discovered in includes/webconsole.php in RaspAP 2.5. With authenticated access, an attacker can use a misco

The Metasploit Framework module "auxiliary/admin/http/telpho10_credential_dump" module is affected by a relative path tr

The Metasploit Framework module "post/osx/gather/enum_osx module" is affected by a relative path traversal vulnerability

openSIS Community Edition version 7.3 is vulnerable to SQL injection via the USERNAME parameter of index.php.

MineTime through 1.8.5 allows arbitrary command execution via the notes field in a meeting. Could lead to RCE via meetin

This affects the package MintegralAdSDK from 0.0.0. The SDK distributed by the company contains malicious functionality

Squid before 4.13 and 5.x before 5.0.4 allows a trusted peer to perform Denial of Service by consuming all available CPU

An Open redirect vulnerability was found in ovirt-engine versions 4.4 and earlier, where it allows remote attackers to r

IBM Security Guardium Insights 2.0.1 could allow a remote attacker to conduct phishing attacks, using an open redirect a