2020

JetBrains YouTrack before 2020.3.5333 was vulnerable to SSRF.

In JetBrains YouTrack before 2020.3.888, notifications might have mentioned inaccessible issues.

JetBrains YouTrack before 2020.3.888 was vulnerable to SSRF.

Chronoforeum 2.0.11 allows Stored XSS vulnerabilities when inserting a crafted payload into a post. If any user sees the

In JetBrains YouTrack before 2020.3.7955, an attacker could access workflow rules without appropriate access grants.

A weak robustness vulnerability exists in the AWS Encryption SDKs for Java, Python, C and Javalcript prior to versions 2

This affects the package markdown-it-highlightjs before 3.3.1. It is possible insert malicious JavaScript as a value of

This affects the package @firebase/util before 0.3.4. This vulnerability relates to the deepExtend function within the D

Stored cross-site scripting vulnerability in XooNIps 3.49 and earlier allows remote authenticated attackers to inject ar

Reflected cross-site scripting vulnerability in XooNIps 3.49 and earlier allows remote authenticated attackers to inject

The update functionality of the Discover Media infotainment system in Volkswagen Polo 2019 vehicles allows physically pr

The WPBakery plugin before 6.4.1 for WordPress allows XSS because it calls kses_remove_filters to disable the standard W

Insufficient protection of the server-side encryption keys in Nextcloud Server 19.0.1 allowed an attacker to replace the

An authentication bypass in the debug interface in Mercedes-Benz HERMES 2.1 allows an attacker with physical access to d

An authentication bypass in the debug interface in Mercedes-Benz HERMES 1.5 allows an attacker with physical access to d

An authentication bypass in the debug interface in Mercedes-Benz HERMES 1 allows an attacker with physical access to dev

Opera Touch for iOS before version 2.4.5 is vulnerable to an address bar spoofing attack. The vulnerability allows a mal

Improper access control in the PMC for some Intel(R) Processors may allow a privileged user to potentially enable escala

An issue was discovered in One Identity Password Manager 5.8. An attacker could enumerate valid answers for a user. It i

Element Software versions prior to 12.2 and HCI versions prior to 1.8P1 are susceptible to a vulnerability which could a

HUAWEI Mate 30 versions earlier than 10.1.0.159(C00E159R7P2) have a vulnerability of improper buffer operation. Due to i

Some Huawei products have a command injection vulnerability. Due to insufficient input validation, an attacker with high

SAP Fiori Launchpad (News tile Application), versions - 750,751,752,753,754,755, allows an unauthorized attacker to use

An XML external entity (XXE) vulnerability in Avaya WebLM admin interface allows authenticated users to read arbitrary f

A Cross Site Scripting (XSS) Vulnerability on the Unified Portal Client (web client) used in Avaya Equinox Conferencing

A cross-site scripting (XSS) vulnerability in the Color Dialog plugin for CKEditor 4.15.0 allows remote attackers to run

Untangle Firewall NG before 16.0 uses MD5 for passwords.

A reflected cross-site scripting (XSS) vulnerability exists in the TranzWare Payment Gateway 3.1.12.3.2. A remote unauth

A reflected cross-site scripting (XSS) vulnerability exists in the TranzWare Payment Gateway 3.1.12.3.2. A remote unauth

The Trusted Platform Modules (TPM) reference software may not properly track the number of times a failed shutdown happe

A potential vulnerability in the AMD extension to Linux "hwmon" service may allow an attacker to use the Linux-based Run

Improper input validation in the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated us

Incorrect default permissions in the Intel(R) DSA before version 20.8.30.6 may allow an authenticated user to potentiall

Improper permissions in the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated user to

Improper input validation in the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated us

Improper buffer restrictions in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escala

Protection mechanism failure in some Intel(R) Thunderbolt(TM) DCH drivers for Windows* before version 72 may allow a pri

Insecure default variable initialization in some Intel(R) Thunderbolt(TM) DCH drivers for Windows* before version 72 may

Improper initialization in some Intel(R) Thunderbolt(TM) DCH drivers for Windows* before version 72 may allow an authent

Improper input validation in the Intel(R) ADAS IE before version ADAS_IE_1.0.766 may allow a privileged user to potentia

Insufficiently protected credentials in the Intel(R) EMA before version 1.3.3 may allow an authorized user to potentiall

Out of bounds read in the Intel CSI2 Host Controller driver may allow an authenticated user to potentially enable inform

Improper input validation in the firmware for Intel(R) Server Board S2600ST and S2600WF families may allow a privileged

Uncaught exception in the Intel(R) 50GbE IP Core for Intel(R) Quartus Prime before version 20.2 may allow an authenticat

Improper conditions check in the Intel(R) SGX DCAP software before version 1.6 may allow an unauthenticated user to pote

Improper access control in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable

Inadequate encryption strength in subsystem for Intel(R) CSME versions before 13.0.40 and 13.30.10 may allow an unauthen

Out-of-bounds read in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may al

Improper input validation in subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.4

Race condition in subsystem for Intel(R) CSME versions before 12.0.70 and 14.0.45, Intel(R) SPS versions before E5_04.01