2020

This affects the package systeminformation before 4.30.2. The attacker can overwrite the properties and functions of an

A heap overflow vulnerability exists within FactoryTalk Linx Version 6.11 and prior. This vulnerability could allow a re

A flaw exists in the Ingress/Egress checks routine of FactoryTalk Linx Version 6.11 and prior. This vulnerability could

scan.c in x11vnc 0.9.16 uses IPC_CREAT|0777 in shmget calls, which allows access by actors other than the current user.

Affected versions of Atlassian Fisheye/Crucible allow remote attackers to achieve Regex Denial of Service via user-suppl

Affected versions of Atlassian Fisheye/Crucible allow remote attackers to impact the application's availability via a De

Nanopb is a small code-size Protocol Buffers implementation. In Nanopb before versions 0.4.4 and 0.3.9.7, decoding speci

GLPI stands for Gestionnaire Libre de Parc Informatique and it is a Free Asset and IT Management Software package, that

Cron-utils is a Java library to parse, validate, migrate crons as well as get human readable descriptions for them. In c

An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 9716

An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 9716

An issue was discovered on TOTOLINK A850R-V1 through 1.0.1-B20150707.1612 and F1-V2 through 1.1-B20150708.1646 devices.

An ACL bypass flaw was found in pacemaker. An attacker having a local account on the cluster and in the haclient group c

Barco wePresent WiPG-1600W devices have Improper Access Control. Affected Version(s): 2.5.1.8. The Barco wePresent WiPG-

Fastweb FASTGate GPON FGA2130FWB devices through 2020-05-26 allow CSRF via the router administration web panel, leading

An issue was discovered in Xen through 4.14.x allowing x86 HVM guest OS users to cause a denial of service (stack corrup

The SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3, 3.4.x prior to 3.4.4, and 4.0.x prior to 4.0.1 handles system parameter

The SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3, 3.4.x prior to 3.4.4, and 4.0.x prior to 4.0.1 allows for executing fil

The SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3 and 3.4.x prior to 3.4.4 allows an access to set arbitrary authorization

An unauthenticated client can trigger denial of service by issuing specially crafted wire protocol messages, which cause

Untrusted search path vulnerability in the installers of multiple SEIKO EPSON products allows an attacker to gain privil

Matrix Synapse before 1.20.0 erroneously permits non-standard NaN, Infinity, and -Infinity JSON values in fields of m.ro

A flaw was found in the psql interactive terminal of PostgreSQL in versions before 13.1, before 12.5, before 11.10, befo

A flaw was found in the Cephx authentication protocol in versions before 15.2.6 and before 14.2.14, where it does not ve

TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 9.5.23 and 10.4.10 user sessio

Playground Sessions v2.5.582 (and earlier) for Windows, stores the user credentials in plain text allowing anyone with a

In Jingyun Antivirus v2.4.2.39, the driver file (ZySandbox.sys) allows local users to cause a denial of service (BSOD) o

In Jingyun Antivirus v2.4.2.39, the driver file (ZySandbox.sys) allows local users to cause a denial of service (BSOD) o

In Jingyun Antivirus v2.4.2.39, the driver file (ZySandbox.sys) allows local users to cause a denial of service (BSOD) o

In Jingyun Antivirus v2.4.2.39, the driver file (ZySandbox.sys) allows local users to cause a denial of service (BSOD) o

In Jingyun Antivirus v2.4.2.39, the driver file (hookbody.sys) allows local users to cause a denial of service (BSOD) or

October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework. In October CMS from version

Specially crafted API calls may allow an authenticated user who holds Organization Owner privilege to obtain an API key

Scratch Addons is a WebExtension that supports both Chrome and Firefox. Scratch Addons before version 1.3.2 is vulnerabl

Improper input validation in BlueZ may allow an unauthenticated user to potentially enable escalation of privilege via a

Use after free vulnerability in EDK II may allow an authenticated user to potentially enable escalation of privilege, in

Logic issue in DxeImageVerificationHandler() for EDK II may allow an authenticated user to potentially enable escalation

Integer truncation in EDK II may allow an authenticated user to potentially enable escalation of privilege via local acc

This affects all versions of package jsen. If an attacker can control the schema file, it could run arbitrary JavaScript

CA Unified Infrastructure Management 20.1 and earlier contains a vulnerability in the robot (controller) component that

Uncontrolled resource consumption in EDK II may allow an unauthenticated user to potentially enable denial of service vi

Incorrect validation of user input in the role name parser may lead to use of uninitialized memory allowing an unauthent

Security Onion v2 prior to 2.3.10 has an incorrect sudo configuration, which allows the administrative user to obtain ro

svm_predict_values in svm.cpp in Libsvm v324, as used in scikit-learn 0.23.2 and other products, allows attackers to cau

HCL Notes is susceptible to a Denial of Service vulnerability caused by improper validation of user-supplied input. A re

HCL Domino is susceptible to a Denial of Service vulnerability due to improper validation of user-supplied input, potent

HCL Domino is susceptible to a Denial of Service vulnerability caused by improper validation of user-supplied input. A r

The affected product is vulnerable to five post-authentication buffer overflows, which may allow a logged in user to rem

VMware ESXi (7.0 before ESXi70U1b-17168206, 6.7 before ESXi670-202011101-SG, 6.5 before ESXi650-202011301-SG) contains a

VMware ESXi (7.0 before ESXi70U1b-17168206, 6.7 before ESXi670-202011101-SG, 6.5 before ESXi650-202011301-SG), Workstati