2020

In OctoberCMS before version 1.0.468, encrypted cookie values were not tied to the name of the cookie the value belonged

An information disclosure vulnerability has been identified in FlexNet Publisher lmadmin.exe 11.14.0.2. The web portal l

In tgstation-server 4.4.0 and 4.4.1, an authenticated user with permission to download logs can download any file on the

HUAWEI P30 smartphones with versions earlier than 10.1.0.160(C00E160R2P11) have a denial of service vulnerability. A mod

Huawei FusionComput 8.0.0 have an improper authorization vulnerability. A module does not verify some input correctly an

The affected product is vulnerable to an information leak, which may allow an attacker to obtain sensitive information o

A data exposure flaw was found in Tower, where sensitive data was revealed from the HTTP return error codes. This flaw a

A flaw was found in Red Hat Satellite 6 which allows privileged attacker to read cache files. These cache credentials co

A flaw was found in the nova_libvirt container provided by the Red Hat OpenStack Platform 16, where it does not have SEL

Authenticated and encrypted payload MMEs can be forged and remotely sent to any HPAV2 system using a jailbreak key recov

A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an authent

A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthe

A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthe

A vulnerability in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remot

A vulnerability in specific REST API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated,

A vulnerability in the archive utility of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote

A vulnerability in the REST API of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attac

A vulnerability in the Device Manager application of Cisco Data Center Network Manager (DCNM) could allow an authenticat

A vulnerability in the Device Manager application of Cisco Data Center Network Manager (DCNM) could allow an unauthentic

A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, remote attacker to cause a buffer over

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, rem

The Linux kernel through 5.7.11 allows remote attackers to make observations that help to obtain sensitive information a

The DAO/DTO implementation in SpringBlade through 2.7.1 allows SQL Injection in an ORDER BY clause. This is related to t

A potential security vulnerability has been identified in HPE Intelligent Provisioning, Service Pack for ProLiant, and H

An issue was discovered in RIPE NCC RPKI Validator 3.x through 3.1-2020.07.06.14.28. It allows remote attackers to bypas

An issue was discovered in RIPE NCC RPKI Validator 3.x before 3.1-2020.07.06.14.28. RRDP fetches proceed even with a lac

An issue was discovered in RIPE NCC RPKI Validator 3.x through 3.1-2020.07.06.14.28. Missing validation checks on CRL pr

In Traefik before versions 1.7.26, 2.2.8, and 2.3.0-rc3, there exists a potential open redirect vulnerability in Traefik

A Stored XSS vulnerability exists in Nagios Log Server before 2.1.7 via the Notification Methods -> Email Users menu.

In SLP Validate (npm package slp-validate) before version 1.2.2, there is a vulnerability to false-positive validation o

In SLPJS (npm package slpjs) before version 0.27.4, there is a vulnerability to false-positive validation outcomes for t

DaviewIndy 8.98.4 and earlier version contain Heap-based overflow vulnerability, triggered when the user opens a malform

DaviewIndy 8.98.4 and earlier version contain Heap-based overflow vulnerability, triggered when the user opens a malform

DaviewIndy 8.98.7 and earlier version contain Use-After-Free vulnerability, triggered when the user opens a malformed sp

An issue was discovered in DP3T-Backend-SDK before 1.1.1 for Decentralised Privacy-Preserving Proximity Tracing (DP3T).

HashiCorp Terraform Enterprise up to v202006-1 contained a default signup page that allowed user registration even when

An issue was discovered in Pi-Hole through 5.0. The local www-data user has sudo privileges to execute the pihole core s

The ABUS Secvest FUMO50110 hybrid module does not have any security mechanism that ensures confidentiality or integrity

Pi-hole 4.4 allows a user able to write to /etc/pihole/dns-servers.conf to escalate privileges through command injection

A path traversal vulnerability exists in Pulse Connect Secure <9.1R8 that allowed an authenticated attacker via the admi

A path traversal vulnerability exists in Pulse Connect Secure <9.1R8 which allows an authenticated attacker to read arbi

A denial of service vulnerability exists in Pulse Connect Secure <9.1R8 that allows an authenticated attacker to perform

An insufficient permission check vulnerability exists in Pulse Connect Secure <9.1R8 that allows an attacker to change t

A code injection vulnerability exists in Pulse Connect Secure <9.1R8 that allows an attacker to crafted a URI to perform

A cross site scripting (XSS) vulnerability in Pulse Connect Secure <9.1R8 allowed attackers to exploit in the URL used f

An information disclosure vulnerability in meeting of Pulse Connect Secure <9.1R8 allowed an authenticated end-users to

An information exposure vulnerability exists in UniFi Protect before v1.13.4-beta.5 that allowed unauthenticated attacke

An improper authentication vulnerability exists in Pulse Connect Secure <9.1RB that allows an attacker with a users prim

A cross site scripting (XSS) vulnerability exists in Pulse Connect Secure <9.1R5 on the PSAL Page.

Improper check of inputs in Nextcloud Preferred Providers app v1.6.0 allowed to perform a denial of service attack when