2020

DaviewIndy 8.98.9 and earlier has a Heap-based overflow vulnerability, triggered when the user opens a malformed PDF fil

HP nagios plugin for iLO (nagios-plugins-hpilo v1.50 and earlier) has a php code injection vulnerability.

Insufficient output sanitization in Teltonika firmware TRB2_R_00.02.02 allows a remote, authenticated attacker to conduc

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in Icegram Email Subscribers & News

Cross-site request forgery in Icegram Email Subscribers & Newsletters Plugin for WordPress v4.4.8 allows a remote attack

Grundfos CIM 500 before v06.16.00 responds to unauthenticated requests for password storage files.

HPE has found a potential Remote Access Restriction Bypass in HPE MSE Msg Gw application E-LTU prior to version 3.2 when

Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via SSH. An authen

Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via HTTP. An authe

Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via HTTP. An authe

Grandstream GWN7000 firmware version 1.0.9.4 and below allows authenticated remote users to modify the system's crontab

HCL BigFix WebUI is vulnerable to stored cross-site scripting (XSS) within the Apps->Software module. An attacker can us

In jupyterhub-kubespawner before 0.12, certain usernames will be able to craft particular server names which will grant

In glpi before 9.5.1, there is a SQL injection for all usages of "Clone" feature. This has been fixed in 9.5.1.

There is a possible out of bounds write due to an incorrect bounds check. Product: AndroidVersions: Android SoCAndroid I

There is a possible out of bounds write due to an incorrect bounds check. Product: AndroidVersions: Android SoCAndroid I

There is an improper configuration of recorder related service. Product: AndroidVersions: Android SoCAndroid ID: A-15633

In onCommand of CompanionDeviceManagerService.java, there is a possible permissions bypass due to a missing permission c

In createWithSurfaceParent of Client.cpp, there is a possible out of bounds write due to type confusion. This could lead

In a2dp_vendor_ldac_decoder_decode_packet of a2dp_vendor_ldac_decoder.cc, there is a possible out of bounds write due to

In FastKeyAccumulator::GetKeysSlow of keys.cc, there is a possible out of bounds write due to type confusion. This could

In the permission declaration for com.google.android.providers.gsf.permission.WRITE_GSERVICES in AndroidManifest.xml, th

In getUiccCardsInfo of PhoneInterfaceManager.java, there is a possible permissions bypass due to improper input validati

In Western Digital WD Discovery before 4.0.251.0, a malicious application running with standard user permissions could p

In cdev_get of char_dev.c, there is a possible use-after-free due to a race condition. This could lead to local escalati

In notifyErrorForPendingRequests of QCamera3HWI.cpp, there is a possible out of bounds write due to a heap buffer overfl

"HCL Marketing Platform is vulnerable to cross-site scripting during addition of new users and also while searching for

"HCL Campaign is vulnerable to cross-site scripting when a user provides XSS scripts in Campaign Description field."

When a device running Juniper Networks Junos OS with MPC7, MPC8, or MPC9 line cards installed and the system is configur

On Juniper Networks SRX Series with ICAP (Internet Content Adaptation Protocol) redirect service enabled, processing a m

On Juniper Networks Junos OS devices, a stream of TCP packets sent to the Routing Engine (RE) may cause mbuf leak which

OpenNMS is accessible via port 9443

On Juniper Networks MX series, receipt of a stream of specific Layer 2 frames may cause a memory leak resulting in the p

On Juniper Networks Junos MX Series with service card configured, receipt of a stream of specific packets may crash the

When a device running Juniper Networks Junos OS with MPC7, MPC8, or MPC9 line cards installed and the system is configur

On Juniper Networks Junos OS and Junos OS Evolved devices, processing a specific BGP packet can lead to a routing proces

On Juniper Networks SRX Series with ICAP (Internet Content Adaptation Protocol) redirect service enabled, a double free

On Juniper Networks Junos OS and Junos OS Evolved devices, processing a specific UPDATE for an EBGP peer can lead to a r

When DNS filtering is enabled on Juniper Networks Junos MX Series with one of the following cards MS-PIC, MS-MIC or MS-M

On Juniper Networks Junos OS and Junos OS Evolved devices, the receipt of a specific BGP UPDATE packet causes an interna

Execution of the "show ospf interface extensive" or "show ospf interface detail" CLI commands on a Juniper Networks devi

A Race Condition vulnerability in Juniper Networks Junos OS LLDP implementation allows an attacker to cause LLDP to cras

An improper use of a validation framework when processing incoming genuine BGP packets within Juniper Networks RPD (rout

Graylog before 3.3.3 lacks SSL Certificate Validation for LDAP servers. It allows use of an external user/group database

SonicWall NetExtender Windows client vulnerable to arbitrary file write vulnerability, this allows attacker to overwrite

SonicOS SSLVPN LDAP login request allows remote attackers to cause external service interaction (DNS) due to improper va

jcore/portal/ajaxPortal.jsp in Jalios JCMS 10.0.2 build-20200224104759 allows XSS via the types parameter. Note: It is a

EyeSurfer BflyInstallerX.ocx v1.0.0.16 and earlier versions contain a vulnerability that could allow remote files to be

A vulnerability exists that could allow the execution of operating system commands on systems running MiPlatform 2019.05

GNU LibreDWG before 0.11 allows NULL pointer dereferences via crafted input files.