2020

The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit the

The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit the

A sensitive information disclosure vulnerability in Tableau Server 10.5, 2018.x, 2019.x, 2020.x released before June 26,

Symantec Endpoint Detection And Response, prior to 4.4, may be susceptible to an information disclosure issue, which is

Server-Side Template Injection and arbitrary file disclosure on Camel templating components

A security vulnerability in HPE IceWall SSO Dfw and Dgfw (Domain Gateway Option) could be exploited remotely to cause a

MX Player Android App versions prior to v1.24.5, are vulnerable to a directory traversal vulnerability when user is usin

The VeloCloud Orchestrator does not apply correct input validation which allows for blind SQL-injection. A malicious act

Elevation of privilege and/or unauthorized access vulnerability in Micro Focus Identity Manager. Affecting versions prio

Buffer overflow exists in Geovision Door Access Control device family, an unauthenticated remote attacker can execute ar

An issue was discovered in CMSUno before 1.6.1. uno.php allows CSRF to change the admin password.

A memory leak in Openthread's wpantund versions up to commit 0e5d1601febb869f583e944785e5685c6c747be7, when used in an e

Victor CMS through 2019-02-28 allows XSS via the register.php user_firstname or user_lastname field.

SQL injection with start and length parameters in Records.php for phpzag live add edit delete data tables records with a

SQL injection in order and column parameters in Records.php for phpzag live add edit delete data tables records with aja

SQL injection with the search parameter in Records.php for phpzag live add edit delete data tables records with ajax php

A SQLi exists in the probe code of all Connectwise Automate versions before 2020.7 or 2019.12. A SQL Injection in the pr

Gossipsub 1.0 does not properly resist invalid message spam, such as an eclipse attack or a sybil attack.

Code42 environments with on-premises server versions 7.0.4 and earlier allow for possible remote code execution. When an

Versions of the npm CLI prior to 6.14.6 are vulnerable to an information exposure vulnerability through log files. The C

WebChess 1.0 allows SQL injection via the messageFrom, gameID, opponent, messageID, or to parameter.

RIOT 2020.04 has a buffer overflow in the base64 decoder. The decoding function base64_decode() uses an output buffer es

The turn extension through 0.3.2 for TYPO3 allows Remote Code Execution.

NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary Ja

NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary Ja

NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary Ja

NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary Ja

NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary Ja

NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary Ja

NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary Ja

NeDi 1.9C is vulnerable to a cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary

The O2 Business application 1.2.0 for Android exposes the canvasm.myo2.SplashActivity activity to other applications. Th

Froala Editor before 3.2.3 allows XSS.

NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary Ja

NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary Ja

"HCL AppScan Enterprise is susceptible to Cross-Site Scripting while importing a specially crafted test policy."

"HCL AppScan Enterprise advisory API documentation is susceptible to clickjacking, which could allow an attacker to embe

An issue was discovered on Samsung mobile devices with Q(10.0) software. Attackers can trigger an out-of-bounds access a

An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. StickerProvider allows dire

An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (Exynos 7885 chipsets) software. The Bluetooth

An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. The kernel logging feature

An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. Attackers can bypass Factor

An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. Attackers can bypass Factor

An issue was discovered on Samsung mobile devices with O(8.x) software. FactoryCamera does not properly restrict runtime

An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. Cameralyzer allows attackers to writ

SolarWinds Serv-U File Server before 15.2.1 allows information disclosure via an HTTP response.

SolarWinds Serv-U File Server before 15.2.1 allows XSS as demonstrated by Tenable Scan, aka Case Number 00484194.

SolarWinds Serv-U File Server before 15.2.1 mishandles the Same-Site cookie attribute, aka Case Number 00331893.

SolarWinds Serv-U File Server before 15.2.1 has a "Cross-script vulnerability," aka Case Numbers 00041778 and 00306421.

GitLab EE 11.3 through 13.1.2 has Incorrect Access Control because of the Maven package upload endpoint.