2020

Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as demonstrated by the httputil.Rev

evolution-data-server (eds) through 3.36.3 has a STARTTLS buffering issue that affects SMTP and POP3. When a server send

In Go before 1.13.13 and 1.14.x before 1.14.5, Certificate.Verify may lack a check on the VerifyOptions.KeyUsages EKU re

The kramdown gem before 2.3.0 for Ruby processes the template option inside Kramdown documents by default, which allows

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 traditional could allow a remote attacker to execute arbitrary c

This affects all versions of package react-native-fast-image. When an image with source={{uri: "...", headers: { host: "

This affects all versions of package rollup-plugin-serve. There is no path sanitization in readFile operation.

Zabbix before 3.0.32rc1, 4.x before 4.0.22rc1, 4.1.x through 4.4.x before 4.4.10rc1, and 5.x before 5.0.2rc1 allows stor

In Python 3.8.4, sys.path restrictions specified in a python38._pth file are ignored, allowing code to be loaded from ar

Adobe Download Manager version 2.0.0.518 have a command injection vulnerability. Successful exploitation could lead to a

Adobe Creative Cloud Desktop Application versions 5.1 and earlier have a symlink vulnerability vulnerability. Successful

Adobe ColdFusion 2016 update 15 and earlier versions, and ColdFusion 2018 update 9 and earlier versions have a dll searc

Adobe ColdFusion 2016 update 15 and earlier versions, and ColdFusion 2018 update 9 and earlier versions have a dll searc

Adobe Creative Cloud Desktop Application versions 5.1 and earlier have an insecure file permissions vulnerability. Succe

Adobe Creative Cloud Desktop Application versions 5.1 and earlier have a symlink vulnerability vulnerability. Successful

Adobe Creative Cloud Desktop Application versions 5.1 and earlier have a lack of exploit mitigations vulnerability. Succ

Adobe Media Encoder versions 14.2 and earlier have an out-of-bounds write vulnerability. Successful exploitation could l

Adobe Media Encoder versions 14.2 and earlier have an out-of-bounds read vulnerability. Successful exploitation could le

Adobe Media Encoder versions 14.2 and earlier have an out-of-bounds write vulnerability. Successful exploitation could l

An issue was found in Apache Airflow versions 1.10.10 and below. A stored XSS vulnerability was discovered in the Chart

An issue was found in Apache Airflow versions 1.10.10 and below. It was discovered that many of the admin management scr

An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecutor, if an attack can connect to

An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecutor, if an attacker can connect t

An issue was found in Apache Airflow versions 1.10.10 and below. A remote code/command injection vulnerability was disco

A specially crafted communication packet sent to the affected systems could cause a denial-of-service condition due to i

A specially crafted WCF client that interfaces to the may allow the execution of certain arbitrary SQL commands remotely

A specially crafted communication packet sent to the affected devices could allow remote code execution and a denial-of-

A specially crafted communication packet sent to the affected device could cause a denial-of-service condition due to a

"BigFix Platform is storing clear text credentials within the system's memory. An attacker who is able to gain administr

userfiles/modules/users/controller/controller.php in Microweber before 1.1.20 allows an unauthenticated user to disclose

A specially crafted communication packet sent to the affected systems could cause a denial-of-service condition or allow

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, rem

A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an authentica

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, rem

A vulnerability in the web-based management interface of the Cisco SD-WAN vManage Software could allow an authenticated,

A vulnerability in the web UI of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain rea

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, rem

A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to inject arbit

A vulnerability in Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to execute code with root

A vulnerability in the deep packet inspection (DPI) engine of Cisco SD-WAN vEdge Routers could allow an unauthenticated,

A vulnerability in the web management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote at

A vulnerability in the CLI of Cisco Data Center Network Manager (DCNM) could allow an authenticated, local attacker to e

A vulnerability in Cisco SD-WAN Solution Software could allow an authenticated, local attacker to elevate privileges to

A vulnerability in the web-based management interface for Cisco SD-WAN vManage Software could allow an authenticated, re

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, rem

A vulnerability in URL filtering of Cisco Content Security Management Appliance (SMA) could allow an unauthenticated, re

A vulnerability in the deep packet inspection (DPI) engine of Cisco SD-WAN vEdge Routers could allow an unauthenticated,

A vulnerability in the Secure Sockets Layer (SSL) VPN feature for Cisco Small Business RV VPN Routers could allow an una

A vulnerability in the Secure Sockets Layer (SSL) VPN feature of Cisco Small Business RV340, RV340W, RV345, and RV345P D

A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, remote attacker to cause a denial of s