2020

Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. In Geth before version 1.9.18, t

Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. This is a Consensus vulnerabilit

Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. An ethash mining DAG generation

_get_flag_ip_localdb in server/mhn/ui/utils.py in Modern Honey Network (MHN) through 2020-11-23 allows attackers to caus

Highlight.js is a syntax highlighter written in JavaScript. Highlight.js versions before 9.18.2 and 10.1.2 are vulnerabl

In Rust time crate from version 0.2.7 and before version 0.2.23, unix-like operating systems may segfault due to derefer

An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 9716

Jupyter Server before version 1.0.6 has an Open redirect vulnerability. A maliciously crafted link to a jupyter server c

HRSALE 2.0.0 allows XSS via the admin/project/projects_calendar set_date parameter.

Barco wePresent WiPG-1600W devices have Unprotected Transport of Credentials. Affected Version(s): 2.5.1.8. An attacker

A flaw was discovered in WildFly before 21.0.0.Final where, Resource adapter logs plain text JMS password at warning lev

In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source characte

Open redirect in SeedDMS 6.0.13 via the dropfolderfileform1 parameter to out/out.AddDocument.php.

A Server-Side Request Forgery (SSRF) affecting the PDF generation in MicroStrategy 10.4, 2019 before Update 6, and 2020

An information-disclosure flaw was found in the way Heketi before 10.1.0 logs sensitive information. This flaw allows an

An information-disclosure flaw was found in the way that gluster-block before 0.5.1 logs the output from gluster-block C

VMware SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3, 3.4.x prior to 3.4.4, and 4.0.x prior to 4.0.1 was found to be vulne

The SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3 and 3.4.x prior to 3.4.4 does not apply correct input validation which a

SimplePHPscripts News Script PHP Pro 2.3 is affected by a Cross Site Scripting (XSS) vulnerability via the editor_name p

SimplePHPscripts News Script PHP Pro 2.3 does not properly set the HttpOnly Flag from Session Cookies.

SimplePHPscripts News Script PHP Pro 2.3 is affected by a Cross Site Request Forgery (CSRF) vulnerability, which allows

Cross-site request forgery (CSRF) vulnerability in GS108Ev3 firmware version 2.06.10 and earlier allows remote attackers

The PollNY extension for MediaWiki through 1.35 allows XSS via an answer option for a poll question, entered during Spec

includes/CologneBlueTemplate.php in the CologneBlue skin for MediaWiki through 1.35 allows XSS via a qbfind message supp

HashiCorp Nomad and Nomad Enterprise 0.9.0 up to 0.12.7 client Docker file sandbox feature may be subverted when not exp

In Ortus TestBox 2.4.0 through 4.1.0, unvalidated query string parameters to test-browser/index.cfm allow directory trav

October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework. A bypass of CVE-2020-15247

TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 9.5.23 and 10.4.10 the system

The Linux kernel before version 5.8 is vulnerable to a NULL pointer dereference in drivers/tty/serial/8250/8250_core.c:s

Use-after-free vulnerability in fs/block_dev.c in the Linux kernel before 5.8 allows local users to gain privileges or c

There is a Stored XSS in Magicpin v2.1 in the User Registration section. Each time an admin visits the manage user secti

October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework. In October CMS from version

October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework. In October CMS from version

Mutt before 2.0.2 and NeoMutt before 2020-11-20 did not ensure that $ssl_force_tls was processed if an IMAP server's ini

A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which

A user authorized to perform database queries may trigger a read overrun and access arbitrary memory by issuing speciall

IBM Spectrum Protect Plus 10.1.0 through 10.1.6 could allow a remote attacker to obtain sensitive information, caused by

IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.10.and 7.1.0.000 through 7.1.11 could allow a remote attack

Improper access control in BlueZ may allow an unauthenticated user to potentially enable information disclosure via adja

Out of bounds write in Intel(R) PROSet/Wireless WiFi products on Windows 10 may allow an authenticated user to potential

Logic issue EDK II may allow an unauthenticated user to potentially enable denial of service via adjacent access.

When OTRS uses multiple backends for user authentication (with LDAP), agents are able to login even if the account is se

A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which

A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which

A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries which t

A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which

Integer overflow in DxeImageVerificationHandler() EDK II may allow an authenticated user to potentially enable denial of

Improper authentication in EDK II may allow a privileged user to potentially enable information disclosure via network a

A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which

A user authorized to perform database queries may trigger denial of service by issuing specially crafted applyOps invoca