2020

AxECM.cab(ActiveX Control) in Inogard Ebiz4u contains a vulnerability that could allow remote files to be downloaded and

Pega Platform before version 8.2.6 is affected by a Reflected Cross-Site Scripting vulnerability in the "ActionStringID"

The Richtext Editor in Pega Platform before 8.2.6 is affected by a Stored Cross-Site Scripting (XSS) vulnerability.

ActiveX Control(HShell.dll) in Handy Groupware 1.7.3.1 for Windows 7, 8, and 10 allows an attacker to execute arbitrary

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that ar

The ene.sys driver in G.SKILL Trident Z Lighting Control through 1.00.08 exposes mapping and un-mapping of physical memo

An issue was discovered in Gigamon GigaVUE 5.5.01.11. The upload functionality allows an arbitrary file upload for an au

An issue was discovered in Gigamon GigaVUE 5.5.01.11. The upload functionality allows an authenticated user to change th

Cerner medico 26.00 has a Local Buffer Overflow (issue 3 of 3).

Cerner medico 26.00 has a Local Buffer Overflow (issue 2 of 3).

Cerner medico 26.00 has a Local Buffer Overflow (issue 1 of 3).

Cerner medico 26.00 allows variable reuse, possibly causing data corruption.

ESET Antivirus and Antispyware Module module 1553 through 1560 allows a user with limited access rights to create hard l

An XSS vulnerability resides in the hostname field of the diag_ping.php page in pfsense before 2.4.5 version. After pass

IBM Maximo Anywhere 7.6.2.0, 7.6.2.1, 7.6.3.0, and 7.6.3.1 could disclose highly senstiive user information to an authen

IBM Maximo Anywhere 7.6.2.0, 7.6.2.1, 7.6.3.0, and 7.6.3.1 could disclose highly senstiive user information to an authen

An issue was discovered in LG Bridge before April 2019 on Windows. DLL Hijacking can occur.

An application plugin in Genius Bytes Genius Server (Genius CDDS) 3.2.2 allows remote authenticated users to gain admin

re2c before 2.0 has uncontrolled recursion that causes stack consumption in find_fixed_tags.

Certain NETGEAR devices are affected by debugging command execution. This affects FS752TP 5.4.2.19 and earlier, GS108Tv2

NETGEAR ReadyNAS devices before 6.6.1 are affected by command injection.

NETGEAR WNR854T devices before 1.5.2 are affected by command execution.

NETGEAR ReadyNAS 6.6.1 and earlier is affected by command injection.

Certain NETGEAR devices are affected by password recovery and file access. This affects D8500 1.0.3.27 and earlier, DGN2

Beeline Smart Box 2.0.38 routers allow "Advanced settings > Other > Diagnostics" OS command injection via the Ping ping_

In the Linux kernel 4.19 through 5.6.7 on the s390 platform, code execution may occur because of a race condition, as de

SUAP V2 allows XSS during the update of user information.

The BPM component in Genius Bytes Genius Server (Genius CDDS) 3.2.2 allows remote authenticated users to execute arbitra

OpenSC before 0.20.0 has a double free in coolkey_free_private_data because coolkey_add_object in libopensc/card-coolkey

ESXi 6.5 without patch ESXi650-201912104-SG and ESXi 6.7 without patch ESXi670-202004103-SG do not properly neutralize s

A Local File Inclusion (LFI) issue on Onkyo TX-NR585 1000-0000-000-0008-0000 devices allows remote unauthenticated users

A directory traversal vulnerability in SharpZipLib used in the upgrade service in B&R Automation Studio versions 4.0.x,

A missing secure communication definition and an incomplete TLS validation in the upgrade service in B&R Automation Stud

A privilege escalation vulnerability in the upgrade service in B&R Automation Studio versions 4.0.x, 4.1.x, 4.2.x, < 4.3

Insufficient protection of the inter-process communication functions in ABB System 800xA Information Management (all pub

Insufficient protection of the inter-process communication functions in ABB System 800xA Batch Management (all published

Insufficient protection of the inter-process communication functions in ABB System 800xA Base (all published versions) e

Insufficient protection of the inter-process communication functions in ABB System 800xA RNRP (all published versions) e

Insufficient protection of the inter-process communication functions in ABB System 800xA for MOD 300 (all published vers

Insufficient protection of the inter-process communication functions in ABB System 800xA for DCI (all published versions

For ABB products ABB Ability™ System 800xA and related system extensions versions 5.1, 6.0 and 6.1, Compact HMI versions

For the Central Licensing Server component used in ABB products ABB Ability™ System 800xA and related system extensions

Insufficient protection of the inter-process communication functions in ABB System 800xA products OPC Server for AC 800M

For the Central Licensing Server component used in ABB products ABB Ability™ System 800xA and related system extensions

For the Central Licensing Server component used in ABB products ABB Ability™ System 800xA and related system extensions

For the Central Licensing Server component used in ABB products ABB Ability™ System 800xA and related system extensions

BigBlueButton before 2.2.6 allows remote attackers to read arbitrary files because the presfilename (lowercase) value ca

Insufficient folder permissions used by system functions in ABB System 800xA Base (version 6.1 and earlier) allow low pr

Insufficient folder permissions used by system functions in ABB System 800xA products OPCServer for AC800M (versions 6.0

In FreeBSD 12.1-STABLE before r359021, 12.1-RELEASE before 12.1-RELEASE-p3, 11.3-STABLE before r359020, and 11.3-RELEASE