2020

Stack-based buffer overflow vulnerability in Vigor3900, Vigor2960, and Vigor300B with firmware before 1.5.1.1.

On Draytek Vigor3900, Vigor2960, and Vigor 300B devices before 1.5.1.1, there are some command-injection vulnerabilities

Xiaomi router R3600 ROM before 1.0.50 is affected by a sensitive information leakage caused by an insecure interface get

Xiaomi router R3600 ROM before 1.0.50 is affected by a vulnerability when checking backup file in c_upload interface let

An unsafe configuration of nginx lead to information leak in Xiaomi router R3600 ROM before 1.0.50.

An issue was discovered on Xiaomi Mi Jia ink-jet printer < 3.4.6_0138. Injecting parameters to ippserver through the web

Apache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.10, and 8.0.0 to 8.0.7 is vulnerable to certain types of HTTP/2 HEADE

The version V12.17.20T115 of ZTE U31R20 product is impacted by a design error vulnerability. An attacker could exploit t

VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG),

In Xiaomi router R3600, ROM version<1.0.20, a connect service suffers from an injection vulnerability through the web in

In Xiaomi router R3600, ROM version<1.0.20, the connection service can be injected through the web interface, resulting

The FileExplorer component in GleamTech FileUltimate 6.1.5.0 allows XSS via an SVG document.

An issue was discovered in Navigate CMS 2.9 r1433. There is a stored XSS vulnerability that is executed on the page to v

An issue was discovered in Navigate CMS 2.9 r1433. Sessions, as well as associated information such as CSRF tokens, are

An issue was discovered in Navigate CMS 2.9 r1433. The forgot-password feature allows users to reset their passwords by

An issue was discovered in Navigate CMS 2.9 r1433. When performing a password reset, a user is emailed an activation cod

An issue was discovered in Navigate CMS 2.8 and 2.9 r1433. The query parameter fid on the resource navigate.php does not

An issue was discovered in the acf-to-rest-api plugin through 3.1.0 for WordPress. It allows an insecure direct object r

Bitrix24 through 20.0.975 allows SSRF via an intranet IP address in the services/main/ajax.php?action=attachUrlPreview u

The Web Application Firewall in Bitrix24 through 20.0.0 allows XSS via the items[ITEMS][ID] parameter to the components/

ExpressionEngine before 5.3.2 allows remote attackers to upload and execute arbitrary code in a .php%20 file via Compose

IBM Security Secret Server 10.7 could allow a remote attacker to obtain sensitive information, caused by the failure to

IBM Security Secret Server 10.7 could disclose sensitive information included in installation files to an unauthorized u

IBM Security Secret Server 10.7 could allow a remote attacker to obtain sensitive information when a detailed technical

IBM Security Secret Server 10.7 could allow a remote attacker to obtain sensitive information when a detailed technical

IBM Security Secret Server 10.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrar

IBM Security Secret Server 10.7 could allow a remote attacker to hijack the clicking action of the victim. By persuading

Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows XSS via a name of an a

Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows XSS via a Responsible

Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows remote attackers to ex

In django-basic-auth-ip-whitelist before 0.3.4, a potential timing attack exists on websites where the basic authenticat

playSMS through 1.4.3 is vulnerable to session fixation.

pramodmahato BlogCMS through 2019-12-31 has admin/changepass.php CSRF.

A NULL pointer dereference in SANE Backends before 1.0.30 allows a malicious device connected to the same local network

A heap buffer overflow in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network a

An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as

An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as

An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as

A heap buffer overflow in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as t

In package github.com/sassoftware/go-rpmutils/cpio before version 0.1.0, the CPIO extraction functionality doesn't sanit

GNU Mailman before 2.1.33 allows arbitrary content injection via the Cgi/private.py private archive login page.

A buffer overflow in the M_LoadDefaults function in m_misc.c in id Tech 1 (aka Doom engine) allows arbitrary code execut

Bludit 3.12.0 allows stored XSS via JavaScript code in an SVG document to bl-kernel/ajax/logo-upload.php.

The Apache server on port 80 that host the web interface is vulnerable to a DoS by spamming incomplete HTTP headers, eff

MiR robot controllers (central computation unit) makes use of Ubuntu 16.04.2 an operating system, Thought for desktop us

The BIOS onboard MiR's Computer is not protected by password, therefore, it allows a Bad Operator to modify settings suc

There is no mechanism in place to prevent a bad operator to boot from a live OS image, this can lead to extraction of se

The password for the safety PLC is the default and thus easy to find (in manuals, etc.). This allows a manipulated progr

The access tokens for the REST API are directly derived from the publicly available default credentials for the web inte

The access tokens for the REST API are directly derived (sha256 and base64 encoding) from the publicly available default