2020

This vulnerability allows network adjacent attackers to execute arbitrary code on affected installations of Xiaomi Brows

A CSRF vulnerability exists in the Web Settings of Web File Manager in Rumpus FTP 8.2.9.1. Exploitation of this vulnerab

WordPress plugin wp-cleanfix has Remote Code Execution

A CSRF vulnerability exists in the Web File Manager's Edit Accounts functionality of Rumpus FTP Server 8.2.9.1. By explo

A Command Execution vulnerability exists in Sphider Pro, and Sphider Plus 3.2 due to insufficient sanitization of fwrite

A Command Execution vulnerability exists in Sphider Plus 3.2 due to insufficient sanitization of fwrite to conf.php, whi

A Command Execution vulnerability exists in Sphider Pro 3.2 due to insufficient sanitization of fwrite, which could let

A Command Execution vulnerability exists in Sphider before 1.3.6 due to insufficient sanitization of fwrite to conf.php,

The user-introduction email in MFScripts YetiShare v3.5.2 through v4.5.4 may leak the (system-picked) password if this e

MFScripts YetiShare v3.5.2 through v4.5.4 places sensitive information in the Referer header. If this leaks, then third

payment_manage.ajax.php and various *_manage.ajax.php in MFScripts YetiShare 3.5.2 through 4.5.4 directly insert values

In LXC 2.0, many template scripts download code over cleartext HTTP, and omit a digital-signature check, before running

The CSS parser (khtml/css/cssparser.cpp) in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service

Multiple SQL injection vulnerabilities in NetCracker Resource Management System before 8.2 allow remote authenticated us

Multiple SQL injection vulnerabilities in the Huge-IT Slider (slider-image) plugin before 2.7.0 for WordPress allow remo

MediaWiki before 1.18.5, and 1.19.x before 1.19.2 saves passwords in the local database, (1) which could make it easier

The FailOverHelperServlet (aka FailServlet) servlet in ZOHO ManageEngine Applications Manager before 11.9 build 11912, O

Multiple cross-site request forgery (CSRF) vulnerabilities in Ubiquiti Networks UniFi Controller before 3.2.1 allow remo

Sander Bos discovered Apport mishandled crash dumps originating from containers. This could be used by a local attacker

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0

The CorsairLLAccess64.sys and CorsairLLAccess32.sys drivers in CORSAIR iCUE before 3.25.60 allow local non-privileged us

Netis WF2419 is vulnerable to authenticated Remote Code Execution (RCE) as root through the router Web management page.

A path traversal vulnerability in the Bosch Video Management System (BVMS) NoTouch deployment allows an unauthenticated

It has been found in openshift-enterprise version 3.11 and all openshift-enterprise versions from 4.1 to, including 4.3,

CSRF vulnerability in Smoothwall Express 3.

A File Inclusion vulnerability exists in Railo 4.2.1 and earlier via a specially-crafted URL request to the thumbnail.cf

A CSRF Vulnerability exists in Kemp Load Master before 7.0-18a via unspecified vectors in administrative pages.

TeamViewer Desktop through 14.7.1965 allows a bypass of remote-login access control because the same key is used for dif

A Code Execution vulnerability exists in Android prior to 4.4.0 related to the addJavascriptInterface method and the acc

A privilege escalation in the EdgeSwitch prior to version 1.7.1, an CGI script don't fully sanitize the user input resul

A privilege escalation vulnerability in FortiClient for Linux 6.2.1 and below may allow a user with low privilege to ove

Improper Certificate Validation in Node.js 10, 12, and 13 causes the process to abort when sending a crafted X.509 certi

ISPConfig 3.0.5.2 has Arbitrary PHP Code Execution

Zabbix 2.0.9 has an Arbitrary Command Execution Vulnerability

vTiger CRM 5.3 and 5.4: 'files' Upload Folder Arbitrary PHP Code Execution Vulnerability

WordPress WP Super Cache Plugin 1.2 has Remote PHP Code Execution

Cisco ACE A2(3.6) allows log retention DoS.

LinuxMint as of 2012-03-19 has temporary file creation vulnerabilities in mintUpdate.

LinuxMint as of 2012-03-19 has temporary file creation vulnerabilities in mintNanny.

Possible use after free issue while CRM is accessing the link pointer from device private data due to lack of resource p

Uninitialized stack data gets used If memory is not allocated for blob or if the allocated blob is less than the struct

Possibility of use-after-free and double free because of not marking buffer as NULL after freeing can lead to dangling p

Subsequent additions performed during Module loading while allocating the memory would lead to integer overflow and then

Stage-2 fault will occur while writing to an ION system allocation which has been assigned to non-HLOS memory which is n

Out of bound access while allocating memory for an array in camera due to improper validation of elements parameters in

Out of bound access due to access of uninitialized memory segment in an array of pointers while normal camera open close

During listener modified response processing, a buffer overrun occurs due to lack of buffer size verification when updat