2020

ZPanel through 10.1.0 has Remote Command Execution

Commerce Skrill (Formerly Moneybookers) has an Access bypass vulnerability in all versions prior to 7.x-1.2

Improper connection handling in the base connection handler in IKTeam BearFTP before v0.3.1 allows a remote attacker to

Istio versions 1.2.10 (End of Life) and prior, 1.3 through 1.3.7, and 1.4 through 1.4.3 allows authentication bypass. Th

Jenkins RadarGun Plugin 1.7 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary typ

Jenkins Google Kubernetes Engine Plugin 0.8.0 and earlier does not configure its YAML parser to prevent the instantiatio

Jenkins FitNesse Plugin 1.30 and earlier does not configure the XML parser to prevent XML external entity (XXE) attacks.

A cross-site request forgery vulnerability in Jenkins Pipeline GitHub Notify Step Plugin 1.0.4 and earlier allows attack

Jenkins NUnit Plugin 0.25 and earlier does not configure the XML parser to prevent XML external entity (XXE) attacks.

Jenkins S3 publisher Plugin 0.11.4 and earlier transmits configured credentials in plain text as part of the global Jenk

Sandbox protection in Jenkins Script Security Plugin 1.69 and earlier could be circumvented during the script compilatio

Sandbox protection in Jenkins Pipeline: Groovy Plugin 2.78 and earlier can be circumvented through default parameter exp

runc through 1.0.0-rc9 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfs_

The Bluetooth Low Energy Secure Manager Protocol (SMP) implementation on Telink Semiconductor BLE SDK versions before No

Integer overflow in the LZO algorithm variant in Oberhumer liblzo2 and lzo-2 before 2.07 on 32-bit platforms might allow

The PhonerLite phone before 2.15 provides hashed credentials in a response to an invalid authentication challenge, which

The SIP implementation on the Linksys SPA2102 phone adapter provides hashed credentials in a response to an invalid auth

The SIP implementation on the Gizmo5 software phone provides hashed credentials in a response to an invalid authenticati

Heap-based buffer overflow in the bmp_decode_rle function in libnsbmp.c in Libnsbmp 0.1.2 allows context-dependent attac

Multiple format string vulnerabilities in the python module in RRDtool, as used in Zenoss Core before 4.2.5 and other pr

The WebView class and use of the WebView.addJavascriptInterface method in the Boat Browser application 8.0 and 8.0.1 for

An issue was discovered in MISP before 2.4.121. The Galaxy view contained an incorrectly sanitized search string in app/

An issue was discovered in MISP before 2.4.121. It did not consider the HTTP PUT method when trying to block a brute-for

An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory,

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory,

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obje

An elevation of privilege vulnerability exists when Windows improperly handles Secure Socket Shell remote commands, aka

An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, aka

An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, aka

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka

An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in

An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in

An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations,

An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory,

An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in

An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in

An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in

An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in

An elevation of privilege vulnerability exists in the way that the dssvc.dll handles file creation allowing for a file o

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media

An elevation of privilege vulnerability exists in the way that the tapisrv.dll handles objects in memory, aka 'Windows E

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka

A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious se

An elevation of privilege vulnerability exists when the Windows Malicious Software Removal Tool (MSRT) improperly handle

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in

An elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) improperly handles symlin

A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file

An elevation of privilege vulnerability exists when the Connected User Experiences and Telemetry Service improperly hand

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in