2020

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.2.2 is vulnerable to SQL injection. A remote attacker c

This affects all versions of package osm-static-maps. User input given to the package is passed directly to a template w

On Windows the Veyon Service before version 4.4.2 contains an unquoted service path vulnerability, allowing locally auth

A prototype pollution vulnerability has been found in `object-path` <= 0.11.4 affecting the `set()` method. The vulnerab

An exploitable denial of service vulnerability exists in the ENIP Request Path Logical Segment functionality of Allen-Br

An exploitable denial of service vulnerability exists in the ENIP Request Path Logical Segment functionality of Allen-Br

In platform before version 9.4.4, inline attributes are not properly escaped. If the data that came from users was not e

HUAWEI Mate 30 versions earlier than 10.1.0.150(C00E136R5P3) and HUAWEI P30 version earlier than 10.1.0.160(C00E160R2P11

HUAWEI Mate 20 versions earlier than 10.0.0.188(C00E74R3P8) have a buffer overflow vulnerability in the Bluetooth module

Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have a privilege elevation vulnerability. Due to lack of priv

An issue was discovered in the _send_secure_msg() function of yubihsm-shell through 2.0.2. The function does not validat

An issue was discovered in the yh_create_session() function of yubihsm-shell through 2.0.2. The function does not explic

In JetBrains YouTrack before 2020.2.10514, SSRF is possible because URL filtering can be escaped.

A iccselectrules expression language injection remote code execution vulnerability was discovered in HPE Intelligent Man

A perfaddormoddevicemonitor expression language injection remote code execution vulnerability was discovered in HPE Inte

A ictexpertcsvdownload expression language injection remote code execution vulnerability was discovered in HPE Intellige

A devicethresholdconfig expression language injection remote code execution vulnerability was discovered in HPE Intellig

A devsoftsel expression language injection remote code execution vulnerability was discovered in HPE Intelligent Managem

A deviceselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Manag

A faultflasheventselectfact expression language injectionremote code execution vulnerability was discovered in HPE Intel

A userselectpagingcontent expression language injection remote code execution vulnerability was discovered in HPE Intell

A reportpage index expression language injection remote code execution vulnerability was discovered in HPE Intelligent M

A powershellconfigcontent expression language injection remote code execution vulnerability was discovered in HPE Intell

A tvxlanlegend expression language injection remote code execution vulnerability was discovered in HPE Intelligent Manag

A viewbatchtaskresultdetailfact expression language injection remote code execution vulnerability was discovered in HPE

A forwardredirect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Ma

A sshconfig expression language injection remote code execution vulnerability was discovered in HPE Intelligent Manageme

A smsrulesdownload expression language injection remote code execution vulnerability was discovered in HPE Intelligent M

A ictexpertdownload expression language injection remote code execution vulnerability was discovered in HPE Intelligent

A thirdpartyperfselecttask expression language injection remote code execution vulnerability was discovered in HPE Intel

A mediaforaction expression language injection remote code execution vulnerability was discovered in HPE Intelligent Man

A wmiconfigcontent expression language injection remote code execution vulnerability was discovered in HPE Intelligent M

A viewtaskresultdetailfact expression language injection remote code execution vulnerability was discovered in HPE Intel

A iccselectdymicparam expression language injection remote code execution vulnerability was discovered in HPE Intelligen

A soapconfigcontent expression language injection remote code execution vulnerability was discovered in HPE Intelligent

A actionselectcontent expression language injection remote code execution vulnerability was discovered in HPE Intelligen

A remote operatoronlinelist_content privilege escalation vulnerability was discovered in HPE Intelligent Management Cent

GoPro gpmf-parser 1.5 has a division-by-zero vulnerability in GPMF_ScaledData(). Parsing malicious input can result in a

GoPro gpmf-parser 1.5 has a division-by-zero vulnerability in GPMF_Decompress(). Parsing malicious input can result in a

GoPro gpmf-parser through 1.5 has a stack out-of-bounds write vulnerability in GPMF_ExpandComplexTYPE(). Parsing malicio

An issue was discovered in tcpreplay tcpprep v4.3.3. There is a heap buffer overflow vulnerability in get_l2len() that c

An issue was discovered in tcpreplay tcpprep v4.3.3. There is a heap buffer overflow vulnerability in MemcmpInterceptorC

SolarWinds N-central through 2020.1 allows session hijacking and requires user interaction or physical access. The N-Cen

rConfig 3.9.4 and earlier allows authenticated code execution (of system commands) by sending a forged GET request to li

This affects the package MintegralAdSDK before 6.6.0.0. The SDK distributed by the company contains malicious functional

<p>A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific

<p>A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory.

<p>An elevation of privilege vulnerability exists when Windows Hyper-V on a host server fails to properly handle objects

<p>An elevation of privilege vulnerability exists when Windows Hyper-V on a host server fails to properly handle objects

<p>A remote code execution vulnerability exists in Visual Studio Code when a user is tricked into opening a malicious 'p