2020

An issue was discovered in Idelji Web ViewPoint H01ABO-H01BY and L01ABP-L01ABZ, Web ViewPoint Plus H01AAG-H01AAQ and L01

TP-LINK TL-WR849N 0.9.1 4.16 devices do not require authentication to replace the firmware via a POST request to the cgi

In Zimbra Collaboration before 8.8.15 Patch 1, there is a non-persistent XSS vulnerability.

Zimbra Collaboration before 8.8.15 Patch 1 is vulnerable to a non-persistent XSS via the Admin Console.

Zimbra Collaboration before 8.8.12 Patch 1 has persistent XSS.

An issue was discovered in Neato Botvac Connected 2.2.0. The GenerateRobotPassword function of the NeatoCrypto library g

Zimbra Collaboration before 8.6.0 patch5 has XSS.

Synacor Zimbra Collaboration before 8.0.8 has XSS.

An Untrusted Search Path vulnerability in EPSecurityService.exe as used in Bitdefender Endpoint Security Tools versions

SGI Tempo, as used on SGI ICE-X systems, uses weak permissions for certain files, which allows local users to obtain pas

Cross-site scripting (XSS) vulnerability in Eucalyptus Management Console (EMC) 4.0.x before 4.0.1 allows remote attacke

CRLF injection vulnerability in Zend\Mail (Zend_Mail) in Zend Framework before 1.12.12, 2.x before 2.3.8, and 2.4.x befo

The Scribunto extension for MediaWiki allows remote attackers to obtain the rollback token and possibly other sensitive

PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 allows re

Proxmox VE prior to 3.2: 'AccessControl.pm' User Enumeration Vulnerability

Pinboard 1.0.6 theme for Wordpress has XSS.

NetworkManager 0.9.x does not pin a certificate's subject to an ESSID when 802.11X authentication is used.

An Incorrect Default Permissions vulnerability in the BDLDaemon component of Bitdefender AV for Mac allows an attacker t

An Untrusted Search Path vulnerability in bdserviceshost.exe as used in Bitdefender Total Security 2020 allows an attack

Cross-site scripting vulnerability in F-RevoCRM 6.0 to F-RevoCRM 6.5 patch6 (version 6 series) allows remote attackers t

A Inclusion of Sensitive Information in Log Files vulnerability in yast2-rmt of SUSE Linux Enterprise Server 15; openSUS

Relative Path Traversal vulnerability in obs-service-tar_scm of SUSE Linux Enterprise Server 15; openSUSE Factory allows

A double-free vulnerability in vrend_renderer.c in virglrenderer through 0.8.1 allows attackers to cause a denial of ser

A NULL pointer dereference in vrend_renderer.c in virglrenderer through 0.8.1 allows attackers to cause a denial of serv

In the Linux kernel before 5.3.4, fib6_rule_lookup in net/ipv6/ip6_fib.c mishandles the RT6_LOOKUP_F_DST_NOREF flag in a

htdocs/user/passwordforgotten.php in Dolibarr 10.0.6 allows XSS via the Referer HTTP header.

Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr 10.0.6 allow remote attackers to inject arbitrary web sc

Adive Framework 2.0.8 has admin/user/add userName XSS.

Adive Framework 2.0.8 has admin/user/add userUsername XSS.

A vulnerability in the out of band (OOB) management interface IP table rule programming for Cisco Application Policy Inf

A vulnerability in the web-based management interface of Cisco Jabber Guest could allow an unauthenticated, remote attac

A vulnerability in the zip decompression engine of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could

A vulnerability in the Cisco Webex Teams client for Windows could allow an authenticated, remote attacker to cause the c

A vulnerability in the web-based management interface of Cisco Unity Connection Software could allow an authenticated, r

A vulnerability in the web-based management interface of Cisco Small Business Smart and Managed Switches could allow an

A vulnerability in the implementation of the Intermediate System–to–Intermediate System (IS–IS) routin

A vulnerability in the implementation of the Stream Control Transmission Protocol (SCTP) on Cisco Mobility Management En

A vulnerability in the web-based management interface of Cisco Crosswork Change Automation could allow an unauthenticate

A vulnerability in the implementation of Border Gateway Protocol (BGP) Ethernet VPN (EVPN) functionality in Cisco IOS XR

A vulnerability in the web-based management interface of the Cisco Data Center Analytics Framework application could all

A vulnerability in the web-based GUI of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware could all

A vulnerability in the web-based management interface of Cisco UCS Director could allow an unauthenticated, remote attac

A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker t

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticat

A vulnerability in the web interface for Cisco SD-WAN Solution vManage could allow an authenticated, remote attacker to

Rapid7 Nexpose before 5.5.4 contains a session hijacking vulnerability which allows remote attackers to capture a user's

Novell ZENworks Configuration Management before 11.2.4 allows XSS.

Cross-site scripting in SimpleSAMLphp before version 1.18.4. The www/erroreport.php script allows error reports to be su

Log injection in SimpleSAMLphp before version 1.18.4. The www/erroreport.php script, which receives error reports and se

A spoofing vulnerability exists in the way Microsoft Outlook for Android software parses specifically crafted email mess