2020

A vulnerability in the Telnet service of Cisco Small Business RV110W Wireless-N VPN Firewall Routers could allow an unau

A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers

A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, RV130 VPN Router, RV1

A vulnerability in the web management interface of Cisco Prime License Manager (PLM) Software could allow an unauthentic

An issue was discovered in GNU LibreDWG through 0.9.3. There is a NULL pointer dereference in the function dwg_encode_co

ConnectWise Automate through 2020.x has insufficient validation on certain authentication paths, allowing authentication

MIT Lifelong Kindergarten Scratch scratch-vm before 0.2.0-prerelease.20200714185213 loads extension URLs from untrusted

IRC5 exposes an ftp server (port 21). Upon attempting to gain access you are challenged with a request of username and p

The IRC5 family with UAS service enabled comes by default with credentials that can be found on publicly available manua

The authentication implementation on the xArm controller has very low entropy, making it vulnerable to a brute-force att

XXE injection can occur in i-net Clear Reports 2019 19.0.287 (Designer), as used in i-net HelpDesk and other products, w

LibreHealth EMR v2.0.0 is vulnerable to XSS that results in the ability to force arbitrary actions on behalf of other us

No authentication is required to control the robot inside the network, moreso the latest available user manual shows an

Vulnerability in the Oracle GoldenGate product of Oracle GoldenGate (component: Process Management). The supported versi

Vulnerability in the Oracle SD-WAN Aware product of Oracle Communications Applications (component: User Interface). The

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions th

Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Invoice). Supported versions

Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supporte

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions th

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions th

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions th

Vulnerability in the Oracle SD-WAN Edge product of Oracle Communications Applications (component: User Interface). Suppo

Vulnerability in the Oracle CRM Gateway for Mobile Devices product of Oracle E-Business Suite (component: Setup of Mobil

Vulnerability in the Oracle CRM Gateway for Mobile Devices product of Oracle E-Business Suite (component: Setup of Mobil

Insufficient input validation in npm package `jison` <= 0.4.18 may lead to OS command injection attacks.

Malicious operation of the crafted web browser cookie may cause a stack-based buffer overflow in the system web server o

Advantech iView, versions 5.6 and prior, has an improper input validation vulnerability. Successful exploitation of this

Advantech iView, versions 5.6 and prior, has an improper authentication for critical function (CWE-306) issue. Successfu

Advantech iView, versions 5.6 and prior, is vulnerable to multiple path traversal vulnerabilities that could allow an at

Advantech iView, versions 5.6 and prior, has an improper neutralization of special elements used in a command (“command

Advantech iView, versions 5.6 and prior, contains multiple SQL injection vulnerabilities that are vulnerable to the use

A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle req

A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate inpu

A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate inpu

A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate inpu

A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate inpu

A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate inpu

A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate inpu

An elevation of privilege vulnerability exists when Microsoft SharePoint Server and Skype for Business Server improperly

Netflix Titus, all versions prior to version v0.1.1-rc.274, uses Java Bean Validation (JSR 380) custom constraint valida

SuperWebMailer 7.21.0.01526 is susceptible to a remote code execution vulnerability in the Language parameter of mailing

A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (V1.81.01 - V1.81.03), LOGO! 8 BM (incl. SIPLU

This vulnerability can affect all Dubbo users stay on version 2.7.6 or lower. An attacker can send RPC requests with unr

The bubblewrap sandbox of WebKitGTK and WPE WebKit, prior to 2.28.3, failed to properly block access to CLONE_NEWUSER an

An issue was discovered on Rittal PDU-3C002DEC through 5.17.10 and CMCIII-PU-9333E0FB through 3.17.10 devices. There is

A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions

A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions

SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, does not perform an authentication c

Kylin concatenates and executes a Hive SQL in Hive CLI or beeline when building a new segment; some part of the HQL is f

Similar to CVE-2020-1956, Kylin has one more restful API which concatenates the API inputs into OS commands and then exe