2020

AppImage libappimage before 1.0.3 allows attackers to trigger an overwrite of a system-installed .desktop file by provid

Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request U

Prototype pollution vulnerability in 'set-in' versions 1.0.0 through 2.0.0 allows attacker to cause a denial of service

Prototype pollution vulnerability in 'keyget' versions 1.0.0 through 2.2.0 allows attacker to cause a denial of service

A flaw was found in hibernate-core in versions prior to and including 5.4.23.Final. A SQL injection in the implementatio

This release fixes a Cross Site Request Forgery vulnerability was found in Red Hat CloudForms which forces end users to

Uncontrolled Resource Consumption can be exploited to cause the Phoenix Contact HMIs BTP 2043W, BTP 2070W and BTP 2102W

Textpattern CMS 4.6.2 allows CSRF via the prefs subsystem.

Multiple cross-site scripting (XSS) vulnerabilities in Papermerge before 1.5.2 allow remote attackers to inject arbitrar

CAPI (Cloud Controller) versions prior to 1.101.0 are vulnerable to a denial-of-service attack in which an unauthenticat

Editors/LogViewerController.cs in Umbraco through 8.9.1 allows a user to visit a logviewer endpoint even if they lack Ap

A security vulnerability has been identified in the HPE Edgeline Infrastructure Manager, also known as HPE Edgeline Infr

Valve's Game Networking Sockets prior to version v1.2.0 improperly handles long encrypted messages in function AES_GCM_D

HCL Notes is susceptible to a Buffer Overflow vulnerability in DXL due to improper validation of user input. A successfu

The elasticsearch-operator does not validate the namespace where kibana logging resource is created and due to that it i

An integer overflow vulnerability exists with the length of websocket frames received via a websocket connection. An att

A reachable assertion issue was found in the USB EHCI emulation code of QEMU. It could occur while processing USB reques

A flaw memory leak in the Linux kernel performance monitoring subsystem was found in the way if using PERF_EVENT_IOC_SET

A flaw was found in the Linux kernel. A use-after-free was found in the way the console subsystem was using ioctls KDGKB

A flaw was found in samba's DNS server. An authenticated user could use this flaw to the RPC server to crash. This RPC s

An out-of-bounds memory write flaw was found in how the Linux kernel’s Voice Over IP H.323 connection tracking functiona

HCL Domino is susceptible to a Buffer Overflow vulnerability in DXL due to improper validation of user input. A successf

software-properties was vulnerable to a person-in-the-middle attack due to incorrect TLS certificate validation in softw

OAuthenticator is an OAuth login mechanism for JupyterHub. In oauthenticator from version 0.12.0 and before 0.12.2, the

An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allo

An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allo

An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allo

An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allo

A heap-based buffer overflow privilege escalation vulnerability in Trend Micro ServerProtect for Linux 3.0 may allow an

An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allo

Kia Motors Head Unit with Software version: SOP.003.30.18.0703, SOP.005.7.181019, and SOP.007.1.191209 may allow an atta

Cross-site Scripting (XSS) vulnerability in SolarWinds Web Help Desk 12.7.0 allows attacker to inject arbitrary web scri

ThinkAdmin version v1 v6 has a stored XSS vulnerability which allows remote attackers to inject an arbitrary web script

We have resolved a security issue in the camera plugin that could have affected certain Cordova (Android) applications.

A ZXELINK wireless controller has a SQL injection vulnerability. A remote attacker does not need to log in. By sending m

A Directory Traversal vulnerability exists in ATX miniCMTS200a Broadband Gateway through 2.0 and Pico CMTS through 2.0.

An issue was discovered on Western Digital My Cloud OS 5 devices before 5.06.115. A NAS Admin authentication bypass vuln

An issue was discovered on Western Digital My Cloud OS 5 devices before 5.06.115. A NAS Admin authentication bypass vuln

On Western Digital My Cloud OS 5 devices before 5.06.115, the NAS Admin dashboard has an authentication bypass vulnerabi

A CWE-330 - Use of Insufficiently Random Values vulnerability exists in Smartlink, PowerTag, and Wiser Series Gateways (

A CWE-284: Improper Access Control vulnerability exists in EcoStruxureª and SmartStruxureª Power Monitoring and SCADA So

A CWE-79: Improper Neutralization of Input During Web Page Generation vulnerability exists in EcoStruxureª and SmartStru

A CWE-284:Improper Access Control vulnerability exists in EcoStruxureª and SmartStruxureª Power Monitoring and SCADA Sof

CWE-287: Improper Authentication vulnerability exists which could cause the execution of commands on the webserver witho

A stack-based buffer-overflow exists in Edimax IP-Camera IC-3116W (v3.06) and IC-3140W (v3.07), which allows an unauthen

WECON PLC Editor Versions 1.3.8 and prior has a heap-based buffer overflow vulnerabilities have been identified that may

WECON PLC Editor Versions 1.3.8 and prior has a stack-based buffer overflow vulnerability has been identified that may a

HCL Domino is susceptible to a lockout policy bypass vulnerability in the ID Vault service. An unauthenticated attacker

Privilege Escalation vulnerability in Microsoft Windows client McAfee Total Protection (MTP) prior to 16.0.29 allows loc

containerd is an industry-standard container runtime and is available as a daemon for Linux and Windows. In containerd b