2020

Huawei Honor V10 smartphones with versions earlier than 10.0.0.156(C00E156R2P4) has three out of bounds vulnerabilities.

Huawei Honor V10 smartphones with versions earlier than 10.0.0.156(C00E156R2P4) has three out of bounds vulnerabilities.

An issue was discovered where there are multiple externally accessible pages that do not require any sort of authenticat

Valve Source allows local users to gain privileges by writing to the /tmp/hl2_relaunch file, which is later executed in

AMD ATI atillk64.sys 5.11.9.0 allows low-privileged users to interact directly with physical memory by calling one of se

The Apros Evolution, ConsciusMap, and Furukawa provisioning systems through 2.8.1 allow remote code execution because of

The Correos Express addon for PrestaShop 1.6 through 1.7 allows remote attackers to obtain sensitive information, such a

In Rukovoditel 2.5.2, there is a stored XSS vulnerability on the application structure --> user access groups page. Thus

In Rukovoditel 2.5.2, users' passwords and usernames are stored in a cookie with URL encoding, base64 encoding, and hash

In Rukovoditel V2.5.2, attackers can upload an arbitrary file to the server just changing the the content-type value. As

An issue was discovered in OpenVPN 2.4.x before 2.4.9. An attacker can inject a data channel v2 (P_DATA_V2) packet using

An issue was discovered in Sonatype Nexus Repository Manager 2.x before 2.14.17 and 3.x before 3.22.1. Admin users can r

Formula Injection exists in the export feature in SolarWinds WebHelpDesk 12.7.1 via a value (provided by a low-privilege

HTCondor up to and including stable series 8.8.6 and development series 8.9.4 has Incorrect Access Control. It is possib

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects WAC120 before 2.1.7,

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D8500

A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or corrupted files can a

OpenDMARC through 1.3.2 and 1.4.x allows attacks that inject authentication results to provide false information about t

UPS Adapter CS141 before 1.90 allows Directory Traversal. An attacker with Admin or Engineer login credentials could exp

IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information when a detailed technic

OpenDMARC through 1.3.2 and 1.4.x, when used with pypolicyd-spf 2.0.2, allows attacks that bypass SPF and DMARC authenti

In TestLink 1.9.20, the lib/cfields/cfieldsExport.php goback_url parameter causes a security risk because it depends on

In TestLink 1.9.20, a crafted login.php viewer parameter exposes cleartext credentials.

Grafana version < 6.7.3 is vulnerable for annotation popup XSS.

Percona XtraBackup before 2.4.20 unintentionally writes the command line to any resulting backup file output. This may i

An issue was discovered in Percona XtraDB Cluster before 5.7.28-31.41.2. A bundled script inadvertently sets a static tr

The IGMP component in VxWorks 6.8.3 IPNET CVE patches created in 2019 has a NULL Pointer Dereference.

ZOOM International Call Recording 6.3.1 suffers from multiple authenticated stored XSS vulnerabilities via the phoneNumb

A SQL injection issue was found in SFOS 17.0, 17.1, 17.5, and 18.0 before 2020-04-25 on Sophos XG Firewall devices, as e

React Native Bluetooth Scan in Bluezone 1.0.0 uses six-character alphanumeric IDs, which might make it easier for remote

jbig2_image_compose in jbig2_image.c in Artifex jbig2dec before 0.18 has a heap-based buffer overflow.

setMarkdown in Qt before 5.14.2 has a use-after-free related to QTextMarkdownImporter::insertBlock.

The decompress package before 4.2.1 for Node.js is vulnerable to Arbitrary File Write via ../ in an archive member, when

Croogo before 3.0.7 allows XSS via the title to admin/menus/menus or admin/taxonomy/vocabularies.

Avira Antivirus before 5.0.2003.1821 on Windows allows privilege escalation or a denial of service via abuse of a symlin

SAP NetWeaver AS ABAP Business Server Pages Test Application SBSPEXT_PHTMLB, versions 700, 701, 702, 730, 731, 740, 750,

Egypt localized withholding tax reports Clearing of Liabilities and Remittance Statement and Summary in SAP ERP (version

The Advanced Woo Search plugin version through 1.99 for Wordpress suffers from a sensitive information disclosure vulner

Grafana before 6.7.3 allows table-panel XSS via column.title or cellLinkTooltip.

SQL Injection was discovered in Admidio before version 3.3.13. The main cookie parameter is concatenated into a SQL quer

Their is an information disclosure vulnerability in Helm from version 3.1.0 and before version 3.2.0. `lookup` is a Helm

A remote access to sensitive data vulnerability was discovered in HPE IOT + GCP version(s): 1.4.0, 1.4.1, 1.4.2, 1.2.4.2

A unauthorized remote access vulnerability was discovered in HPE IOT + GCP version(s): 1.4.0, 1.4.1, 1.4.2, 1.2.4.2.

A flaw was found in openshift-ansible. OpenShift Container Platform (OCP) 3.11 is too permissive in the way it specified

This document describes a security vulnerability in Blade Maintenance Entity, Integrated Maintenance Entity and Maintena

A malicious Android application could craft an Intent that would have been processed by Firefox for Android and potentia

When following a link that opened an intent://-schemed URL, causing a custom tab to be opened, Firefox for Android could

Mozilla developers Tyson Smith, Bob Clary, and Alexandru Michis reported memory safety bugs present in Firefox 74. Some

Mozilla developers and community members Tyson Smith and Christian Holler reported memory safety bugs present in Firefox

Initially, a user opens a Private Browsing Window and generates a password for a site, then closes the Private Browsing