2020

Brocade Fabric OS Versions before v7.4.2f, v8.2.2a, v8.1.2j and v8.2.1d could expose external passwords, common secrets

Brocade Fabric OS Versions before v8.2.2a and v8.2.1d could expose the credentials of the remote ESRS server when these

IBM InfoSphere Information Server 8.1, 8.5, 8.7, 9.1 has a Session Fixation Vulnerability

An ni_dhcp4_parse_response memory leak in openSUSE wicked 0.6.55 and earlier allows network attackers to cause a denial

Multiple relative path traversal vulnerabilities in the oneup/uploader-bundle before 1.9.3 and 2.1.5 allow remote attack

It's been found that multiple functions in ipmitool before 1.8.19 neglect proper checking of the data received from a re

An issue was discovered in Squid before 4.10. It allows a crafted FTP server to trigger disclosure of sensitive informat

An Information Disclosure vulnerability exists in HP SiteScope 11.2 and 11.3 on Windows, Linux and Solaris, HP Asset Man

An issue was discovered in Squid before 4.10. Due to incorrect input validation, the NTLM authentication credentials par

An issue was discovered in Squid before 4.10. Due to incorrect buffer management, a remote client can cause a buffer ove

An issue was discovered in Squid before 4.10. Due to incorrect input validation, it can interpret crafted HTTP requests

A bug in Nextcloud Server 14.0.4 could expose more data in reshared link shares than intended by the sharer.

Prototype pollution vulnerability in dot-prop npm package versions before 4.2.1 and versions 5.x before 5.1.1 allows an

A stack buffer overflow vulnerability exists in the way MiniSNMPD version 1.4 handles multiple connections. A specially

An exploitable out of bounds read vulnerability exists in the way MiniSNMPD version 1.4 parses incoming SNMP packets. A

A bug in Nextcloud Server 17.0.1 causes the workflow rules to depend their behaviour on the file extension when checking

A Command Injection vulnerability exists in FortiManager 5.2.1 and earlier and FortiManager 5.0.10 and earlier via unspe

mysql_install_db in MariaDB 10.4.7 through 10.4.11 allows privilege escalation from the mysql user account to root becau

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0, under specialized conditions, could allow an authenticated user

IBM Security Directory Server 6.4.0 uses incomplete blacklisting for input validation which allows attackers to bypass a

IBM Security Directory Server 6.4.0 uses weaker than expected cryptographic algorithms that could allow an attacker to d

On Samsung mobile devices with O(8.0) and P(9.0) software and an Exynos 8895 chipset, RKP (aka the Samsung Hypervisor EL

Lib/zipfile.py in Python through 3.7.2 allows remote attackers to cause a denial of service (resource consumption) via a

Cisco Linksys E4200 1.0.05 Build 7 routers contain a Local File Include Vulnerability which could allow remote attackers

Brother MFC-9970CDW 1.10 firmware L devices contain an information disclosure vulnerability which allows remote attacker

D-Link DIR-100 4.03B07: cli.cgi CSRF

D-Link DIR-100 4.03B07: cli.cgi security bypass due to failure to check authentication parameters

Joomla! 1.7.1 has core information disclosure due to inadequate error checking.

Joomla! core 1.7.1 allows information disclosure due to weak encryption

SQL Injection in SysJust Syuan-Gu-Da-Shih, versions before 20191223, allowing attackers to perform unwanted SQL queries

The Broadcom wl WiFi driver is vulnerable to a heap buffer overflow. If the vendor information element data length is la

The Broadcom wl WiFi driver is vulnerable to a heap buffer overflow. By supplying a vendor information element with a da

A Cross-origin vulnerability exists in WebKit in Apple Safari before 10.0.1 when processing location attributes, which c

Brother MFC-9970CDW 1.10 firmware L devices contain an information disclosure vulnerability which allows remote attacker

The Web Management of TP-Link TP-SG105E V4 1.0.0 Build 20181120 devices allows an unauthenticated attacker to reboot the

Brother MFC-9970CDW devices with firmware 0D allow cleartext submission of passwords.

TP-LINK TL-WR1043ND V1_120405 devices contain an unspecified denial of service vulnerability.

Global.py in AIL framework 2.8 allows path traversal.

In Unisys Stealth (core) 3.4.108.0, 3.4.209.x, 4.0.027.x and 4.0.114, key material inadvertently logged under certain co

An arbitrary-file-access vulnerability exists in ServiSign security plugin, as long as the attackers learn the specific

A Remote Code Execution(RCE) vulnerability exists in some designated applications in ServiSign security plugin, as long

Heap-based buffer overflow in the getZip64Data function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to exe

Stack-based buffer overflow in the gps_tracker function in airodump-ng.c in Aircrack-ng before 1.2 RC 1 allows local use

Heap-based buffer overflow in the test_compr_eb function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to ex

Heap-based buffer overflow in the CRC32 verification in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execut

The scheduler in HTCondor before 8.2.6 allows remote authenticated users to execute arbitrary code.

Multiple absolute path traversal vulnerabilities in documentconverter in Open-Xchange (OX) AppSuite before 7.4.2-rev10 a

Multiple SQL injection vulnerabilities in ZeusCart 4.x.

Multiple SQL injection vulnerabilities in web2Project 3.1 and earlier allow remote authenticated users to execute arbitr

Eclair through 0.3 allows attackers to trigger loss of funds because of Incorrect Access Control. NOTE: README.md states