2020

A vulnerability in Trend Micro Apex One could allow an unprivileged user to abuse the product installer to reinstall the

Trend Micro Security 2020 (Consumer) contains a vulnerability in the installer package that could be exploited by placin

Trend Micro Security 2020 (Consumer) contains a vulnerability in the installer package that could be exploited by placin

Trend Micro Security 2020 (Consumer) contains a vulnerability in the installer package that could be exploited by placin

A vulnerability in the API of Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote attacker to

A vulnerability in the log subscription subsystem of Cisco AsyncOS for the Cisco Secure Web Appliance (formerly Web Secu

A vulnerability in Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote attacker to view sensit

A vulnerability in the REST API of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attacker

A vulnerability in the SOAP API of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attacker

Code injection in the go command with cgo before Go 1.14.12 and Go 1.15.5 allows arbitrary code execution at build time

Code injection in the go command with cgo before Go 1.14.12 and Go 1.15.5 allows arbitrary code execution at build time

Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.

cxuucms v3 has a SQL injection vulnerability, which can lead to the leakage of all database data via the keywords parame

Trusted Computing Group (TCG) Trusted Platform Module Library Family 2.0 Library Specification Revisions 1.38 through 1.

app\admin\controller\sys\Uploads.php in lemocms 1.8.x allows users to upload files to upload executable files.

httpd on TP-Link TL-WPA4220 devices (versions 2 through 4) allows remote authenticated users to execute arbitrary OS com

A CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability exists in the Web Server

A CWE-787: Out-of-bounds Write vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premi

A CWE-125: Out-of-Bounds Read vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premiu

An improper file permissions vulnerability affects Kata Containers prior to 1.11.5. When using a Kubernetes hostPath vol

An issue was discovered in Aviatrix Controller before R6.0.2483. Multiple executable files, that implement API endpoints

An issue was discovered in Aviatrix Controller before R5.3.1151. Encrypted key values are stored in a readable file.

An issue was discovered in Aviatrix Controller before R5.3.1151. An encrypted file containing credentials to unrelated s

An issue was discovered in Aviatrix Controller before R5.4.1290. The htaccess protection mechanism to prevent requests t

An issue was discovered in Aviatrix Controller before R5.4.1290. There is an insecure sudo rule: a user exists that can

TYPO3 Fluid before versions 2.0.8, 2.1.7, 2.2.4, 2.3.7, 2.4.4, 2.5.11 and 2.6.10 is vulnerable to Cross-Site Scripting.

An Arbitrary File Upload is discovered in SourceCodester Tourism Management System 1.0 allows the user to conduct remote

Path traversal vulnerability in package upload functionality in GitLab CE/EE starting from 12.8 allows an attacker to sa

Cross domain policies in Taskcafe Project Management tool before version 0.1.0 and 0.1.1 allows remote attackers to acce

A vulnerability in Apache OpenOffice scripting events allows an attacker to construct documents containing hyperlinks po

Cleartext Transmission of Sensitive Information vulnerability in BASETech GE-131 BT-1837836 firmware 20180921 exists whi

In BASETech GE-131 BT-1837836 firmware 20180921, the web-server on the system is configured with the option “DocumentRoo

In fastadmin V1.0.0.20191212_beta, when a user with administrator rights has logged in, a malicious parameter can be pas

Improper input validation vulnerability exists in TOBESOFT XPLATFORM which could cause arbitrary .hta file execution whe

The add artwork functionality in ARTWORKS GALLERY IN PHP, CSS, JAVASCRIPT, AND MYSQL 1.0 allows remote attackers to uplo

The edit profile functionality in ARTWORKS GALLERY IN PHP, CSS, JAVASCRIPT, AND MYSQL 1.0 allows remote attackers to upl

The package y18n before 3.2.2, 4.0.1 and 5.0.5, is vulnerable to Prototype Pollution.

Multiple vulnerabilities in the Java deserialization function that is used by Cisco Security Manager could allow an unau

A vulnerability in Cisco Security Manager could allow an unauthenticated, remote attacker to access sensitive informatio

BinaryNights ForkLift 3.4 was compiled with the com.apple.security.cs.disable-library-validation flag enabled which allo

A flaw in ICMP packets in the Linux kernel may allow an attacker to quickly scan open UDP ports. This flaw allows an off

BinaryNights ForkLift 3.x before 3.4 has a local privilege escalation vulnerability because the privileged helper tool i

It was found that Keycloak before version 12.0.0 would permit a user with only view-profile role to manage the resources

In PrestaShop Product Comments before version 4.2.0, an attacker could inject malicious web code into the users' web bro

In PrestaShop before version 1.7.6.9 an attacker is able to list all the orders placed on the website without being logg

An unrestricted file upload issue in HorizontCMS 1.0.0-beta allows an authenticated remote attacker to upload PHP code t

XStream before version 1.4.14 is vulnerable to Remote Code Execution.The vulnerability may allow a remote attacker to ru

Airleader Master and Easy <= 6.21 devices have default credentials that can be used for a denial of service.

In Gila CMS 1.16.0, an attacker can upload a shell to tmp directy and abuse .htaccess through the logs function for exec

There was a local file disclosure vulnerability in AVideo < 8.9 via the proxy streaming. An unauthenticated attacker can