2020

A vulnerability in Juniper Networks SRX Series device configured as a Junos OS Enforcer device may allow a user to acces

On High-End SRX Series devices, in specific configurations and when specific networking events or operator actions occur

A privilege escalation vulnerability in Juniper Networks Junos OS devices configured with dual Routing Engines (RE), Vir

A race condition vulnerability on Juniper Network Junos OS devices may cause the routing protocol daemon (RPD) process t

Juniper Networks Junos OS uses the 128.0.0.0/2 subnet for internal communications between the RE and PFEs. It was discov

A vulnerability in Juniper Networks Junos OS on vMX and MX150 devices may allow an attacker to cause a Denial of Service

A vulnerability in Juniper Networks Junos OS Evolved may allow an attacker to cause a Denial of Service (DoS) by sending

The kernel memory usage represented as "temp" via 'show system virtual-memory' may constantly increase when Integrated R

A local, authenticated user with shell can obtain the hashed values of login passwords and shared secrets via raw objmon

A local, authenticated user with shell can view sensitive configuration information via the ev.ops configuration file. T

A local, authenticated user with shell can obtain the hashed values of login passwords and shared secrets via the EvoSha

A local, authenticated user with shell can obtain the hashed values of login passwords via configd traces. This issue af

A local, authenticated user with shell can obtain the hashed values of login passwords via configd streamer log. This is

A privilege escalation vulnerability in Juniper Networks QFX10K Series, EX9200 Series, MX Series, and PTX Series with Ne

On Juniper Networks EX and QFX Series, an authentication bypass vulnerability may allow a user connected to the console

This issue occurs on Juniper Networks Junos OS devices which do not support Advanced Forwarding Interface (AFI) / Advanc

Due to insufficient server-side login attempt limit enforcement, a vulnerability in the SSH login service of Juniper Net

The factory configuration for vMX installations, as shipped, includes default credentials for the root account. Without

A Use of Hard-coded Credentials vulnerability exists in the NFX250 Series for the vSRX Virtual Network Function (VNF) in

A vulnerability in the BGP FlowSpec implementation may cause a Juniper Networks Junos OS device to terminate an establis

A format string vulnerability in the Varrcvr daemon of PAN-OS on PA-7000 Series devices with a Log Forwarding Card (LFC)

An insecure temporary file vulnerability in Palo Alto Networks Traps allows a local authenticated Windows user to escala

A stack-based buffer overflow vulnerability in the management server component of PAN-OS allows an authenticated user to

An incorrect privilege assignment vulnerability when writing application-specific files in the Palo Alto Networks Global

An unquoted search path vulnerability in the Windows release of Global Protect Agent allows an authenticated local user

An information exposure vulnerability in the logging component of Palo Alto Networks Global Protect Agent allows a local

Improper input validation vulnerability in Secdo allows an authenticated local user with 'create folders or append data'

Incorrect Default Permissions on C:\Programdata\Secdo\Logs folder in Secdo allows local authenticated users to overwrite

Secdo tries to execute a script at a hardcoded path if present, which allows a local authenticated user with 'create fol

TechSupport files generated on Palo Alto Networks VM Series firewalls for Microsoft Azure platform configured with high

GitLab EE/CE 9.0 to 12.9 allows a maintainer to modify other maintainers' pipeline trigger descriptions within the same

GitLab EE/CE 8.0.rc1 to 12.9 is vulnerable to a blind SSRF in the FogBugz integration.

GitLab EE/CE 11.10 to 12.9 is leaking information on restricted CI pipelines metrics to unauthorized users.

GitLab EE/CE 8.11 to 12.9 is leaking information on Issues opened in a public project and then moved to a private projec

GitLab EE/CE 8.5 to 12.9 is vulnerable to a an path traversal when moving an issue between projects.

GitLab EE/CE 8.17 to 12.9 is vulnerable to information leakage when querying a merge request widget.

GitLab EE/CE 10.8 to 12.9 is leaking metadata and comments on vulnerabilities to unauthorized users on the vulnerability

A buffer overflow vulnerability in Code::Blocks 17.12 allows an attacker to execute arbitrary code via a crafted project

Fixed in v1.5.1, Argo version v1.5.0 was vulnerable to a user-enumeration vulnerability which allowed attackers to deter

An issue was discovered on XIAOMI XIAOAI speaker Pro LX06 1.52.4. Attackers can get root shell by accessing the UART int

An issue was discovered on XIAOMI XIAOAI speaker Pro LX06 1.58.10. Attackers can activate the failsafe mode during the b

An issue was discovered on Samsung mobile devices with N(7.x) software. A physically proximate attacker wielding a magne

An issue was discovered on Samsung mobile devices with L(5.x), M(6.0), N(7.x), and O(8.0) software. There is a kernel po

An issue was discovered on Samsung mobile devices with M(6.0), N(7.x), and O(8.0) software. The Contacts application all

An issue was discovered on Samsung mobile devices with M(6.0), N(7.x), and O(8.x) software. There is a Clipboard content

An issue was discovered on Samsung mobile devices with N(7.x) (Exynos8890/8895 chipsets) software. There is information

An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software. The Call+ application can load classe

An issue was discovered on Samsung mobile devices with M(6.x) (Exynos or Qualcomm chipsets) software. There is informati

An issue was discovered on Samsung mobile devices with N(7.x) and O(8.0) (Galaxy S9+, Galaxy S9, Galaxy S8+, Galaxy S8,

An issue was discovered on Samsung mobile devices with M(6.0), N(7.x), and O(8.0) (Exynos chipsets) software. A kernel d