2020

Juplink RX4-1500 v1.0.3 allows remote attackers to gain root access to the Linux subsystem via an unsanitized exec call

A potential security vulnerability has been identified in HPE Onboard Administrator. The vulnerability could be remotely

BigBlueButton before 2.2.4 allows XSS via closed captions because dangerouslySetInnerHTML in React is used.

BigBlueButton before 2.2.5 allows remote attackers to obtain sensitive files via Local File Inclusion.

OpenConnect through 8.08 mishandles negative return values from X509_check_ function calls, which might assist attackers

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects R6220 before V1.1

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects EX615

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects JNR1010v2 before

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects JR6150 before 1.0

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects JR6150 before 1.0

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects JNR1010v2 before

Certain NETGEAR devices are affected by authentication bypass. This affects D6220 before 1.0.0.28, D6400 before 1.0.0.60

Certain NETGEAR devices are affected by authentication bypass. This affects R6300v2 before 1.0.4.8, PLW1000v2 before 1.0

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D7800

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200

Certain NETGEAR devices are affected by CSRF. This affects JNR1010v2 before 1.1.0.44, JR6150 before 1.0.1.10, JWNR2010v5

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects EX6200v2 before 1.0.1

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects EX3700 before 1.0.0.6

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects EX3700 before 1.0.0.6

Certain NETGEAR devices are affected by stored XSS. This affects R6400 before 1.0.1.14, R6700 before 1.0.1.22, R6900 bef

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects R6250 before 1.0.

Certain NETGEAR devices are affected by authentication bypass. This affects R6300v2 before 1.0.4.8, R6400 before 1.0.1.2

Certain NETGEAR devices are affected by CSRF. This affects JR6150 before 1.0.1.10, R6050 before 1.0.1.10, R6250 before 1

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R6250 before 1.0.4.8,

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D3600 before 1.0.0.61

paypal-adaptive through 0.4.2 manipulation of JavaScript objects resulting in Prototype Pollution. The PayPal function c

IBM Spectrum Protect 7.1 and 8.1 server is vulnerable to a stack-based buffer overflow, caused by improper bounds checki

IBM MaaS360 6.82 could allow a user with pysical access to the device to crash the application which may enable the user

IBM Tivoli Monitoring 6.3.0 could allow a local attacker to execute arbitrary code on the system. By placing a specially

IBM UrbanCode Deploy (UCD) 7.0.3.0 and 7.0.4.0 could allow an authenticated user to impersonate another user if the serv

A flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user in Amazon S3. This flaw

The Catch Breadcrumb plugin before 1.5.4 for WordPress allows Reflected XSS via the s parameter (a search query). Also a

An issue was discovered in Squid before 5.0.2. A remote attacker can replay a sniffed Digest Authentication nonce to gai

In nDPI through 3.2 Stable, an out-of-bounds read in concat_hash_string in ssh.c can be exploited by a network-positione

In nDPI through 3.2 Stable, the SSH protocol dissector has multiple KEXINIT integer overflows that result in a controlle

In MailStore Outlook Add-in (and Email Archive Outlook Add-in) through 12.1.2, the login process does not validate the v

An issue was discovered in Contiki-NG through 4.3 and Contiki through 3.0. A buffer overflow is present due to an intege

An issue was discovered in Contiki-NG through 4.3 and Contiki through 3.0. An out of bounds write is present in the data

IBM MaaS360 3.96.62 for iOS could allow an attacker with physical access to the device to obtain sensitive information f

IBM UrbanCode Deploy (UCD) 7.0.4.0 stores user credentials in plain in clear text which can be read by a local user. IBM

SHARP AQUOS series (AQUOS SH-M02 build number 01.00.05 and earlier, AQUOS SH-RM02 build number 01.00.04 and earlier, AQU

Beaker before 0.8.9 allows a sandbox escape, enabling system access and code execution. This occurs because Electron con

The mappress-google-maps-for-wordpress plugin before 2.53.9 for WordPress does not correctly implement AJAX functions wi

The data-tables-generator-by-supsystic plugin before 1.9.92 for WordPress lacks CSRF nonce checks for AJAX actions. One

The data-tables-generator-by-supsystic plugin before 1.9.92 for WordPress lacks capability checks for AJAX actions.

The users-customers-import-export-for-wp-woocommerce plugin before 1.3.9 for WordPress allows subscribers to import admi

The responsive-add-ons plugin before 2.2.7 for WordPress has incorrect access control for wp-admin/admin-ajax.php?action

Anchor 0.12.7 allows admins to cause XSS via crafted post content.

Time-of-check Time-of-use Race Condition vulnerability on crash report ownership change in Apport allows for a possible

Apport creates a world writable lock file with root ownership in the world writable /var/lock/apport directory. If the a