2020

Apache Ignite uses H2 database to build SQL distributed execution engine. H2 provides SQL functions which could be used

GE Grid Solutions Reason RT Clocks, RT430, RT431, and RT434, all firmware versions prior to 08A05. The device’s vulnerab

Integer overflow may occur if atom size is less than atom offset as there is improper validation of atom size in Snapdra

Array out of bound may occur while playing mp3 file as no check is there on offset if it is greater than the buffer allo

Valid deauth/disassoc frames is dropped in case if RMF is enabled and some rouge peer keep on sending rogue deauth/disas

admin.php?page=projects in Lexiglot through 2014-11-20 allows command injection via username and password fields.

Lexiglot through 2014-11-20 allows SQL injection via an admin.php?page=users&from_id= or admin.php?page=history&limit= U

FarLinX X25 Gateway through 2014-09-25 allows attackers to write arbitrary data to fsUI.xyz via fsSaveUIPersistence.php.

FarLinX X25 Gateway through 2014-09-25 allows command injection via shell metacharacters to sysSaveMonitorData.php, fsx2

There is an improper Neutralization of Special Elements used in an SQL Command (SQL Injection) vulnerability in php file

Incorrect Authorization vulnerability in Micro Focus Container Deployment Foundation component affects products: - Hybri

An open port used for debugging in SWARCOs CPU LS4000 Series with versions starting with G4... grants root access to the

An unauthenticated privilege-escalation issue exists in the bbPress plugin before 2.6.5 for WordPress when New User Regi

An access bypass vulnerability exists when the experimental Workspaces module in Drupal 8 core is enabled. This can be m

A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to bypass authent

In AEgir greater than or equal to 21.7.0 and less than 21.10.1, aegir publish and aegir build may leak secrets from envi

Improper Access Control in the Kiosk Mode functionality of Bosch Recording Station allows a local unauthenticated attack

A buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. This could have led to memory corruptio

Incorrect origin serialization of URLs with IPv6 addresses could lead to incorrect security checks. This vulnerability a

The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox escape. *Note

The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox escape. *Note

Mozilla developers and community members reported memory safety bugs present in Firefox 75. Some of these bugs showed ev

Mozilla developers and community members reported memory safety bugs present in Firefox 75 and Firefox ESR 68.7. Some of

We have recently released new version of AirMax AirOS firmware v6.3.0 for TI, XW and XM boards that fixes vulnerabilitie

The Knock Knock plugin before 1.2.8 for Craft CMS allows IP Whitelist bypass via an X-Forwarded-For HTTP header.

A Remote code execution vulnerability exists in DEXT5Upload in DEXT5 through 2.7.1402870. An attacker can upload a PHP f

Cybozu Desktop for Windows 2.0.23 to 2.2.40 allows remote code execution via unspecified vectors.

Jason2605 AdminPanel 4.0 allows SQL Injection via the editPlayer.php hidden parameter.

An Elevation of Privilege issue was discovered in Aviatrix VPN Client before 2.10.7, because of an incomplete fix for CV

An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42

An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42

An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42

An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42

An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42

An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42

An exploitable vulnerability exists in the configuration-loading functionality of the jw.util package before 2.3 for Pyt

An exploitable authentication bypass vulnerability exists in the ESPON Web Control functionality of Epson EB-1470Ui MAIN

A vulnerability in the Java Remote Management Interface of Cisco Unified Contact Center Express (Unified CCX) could allo

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obje

Jodd before 5.0.4 performs Deserialization of Untrusted JSON Data when setClassMetadataName is set.

An issue was discovered in AnchorFree VPN SDK before 1.3.3.218. The VPN SDK service takes certain executable locations o

An issue was discovered in libexif before 0.6.22. Several buffer over-reads in EXIF MakerNote handling could lead to inf

During installation or upgrade to Software House C•CURE 9000 v2.70 and American Dynamics victor Video Management System

Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convin

Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convin

Use after free in media in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had compromised the rendere

Use after free in reader mode in Google Chrome on Android prior to 83.0.4103.61 allowed a remote attacker who had compro

Use after free in task scheduling in Google Chrome prior to 81.0.4044.129 allowed a remote attacker who had compromised

Use after free in storage in Google Chrome prior to 81.0.4044.129 allowed a remote attacker who had compromised the rend

Use after free in speech recognizer in Google Chrome prior to 81.0.4044.113 allowed a remote attacker to potentially per