2020

graph_realtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in a

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-26

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-13

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Samsung Galaxy S10 Fir

Certain Xerox WorkCentre printers before 073.xxx.000.02300 do not require the user to reenter or validate LDAP bind cred

Gogs through 0.11.91 allows attackers to violate the admin-specified repo-creation policy due to an internal/db/repo.go

In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference and segmentation fault

In the JetBrains Scala plugin before 2019.2.1, some artefact dependencies were resolved over unencrypted connections.

OX App Suite through 7.10.2 allows SSRF.

The init script in the Debian x11-common package before 1:7.6+12 is vulnerable to a symlink attack that can lead to a pr

The HTTPS protocol, as used in unspecified web applications, can encrypt compressed data without properly obfuscating th

Information-disclosure vulnerability in Netsurf through 2.8 due to a world-readable cookie jar.

Heap-based buffer overflow in Xchat-WDK before 1499-4 (2012-01-18) xchat 2.8.6 on Maemo architecture could allow remote

Multiple unspecified vulnerabilities in Autonomy KeyView IDOL before 10.16, as used in Symantec Mail Security for Micros

D-Link DCH-M225 1.05b01 and earlier devices allow remote authenticated admins to execute arbitrary OS commands via shell

D-Link DCH-M225 1.05b01 and earlier devices allow remote attackers to execute arbitrary OS commands via shell metacharac

Atos Unify OpenScape UC Web Client V9 before version V9 R4.31.0 and V10 before version V10 R0.6.0 allows remote attacker

Atos Unify OpenScape UC Application V9 before version V9 R4.31.0 and V10 before version V10 R0.6.0 allows XSS. An attack

Kernel/Modules/AgentTicketWatcher.pm in Open Ticket Request System (OTRS) 3.0.x before 3.0.21, 3.1.x before 3.1.17, and

Kernel/Modules/AgentTicketPhone.pm in Open Ticket Request System (OTRS) 3.0.x before 3.0.20, 3.1.x before 3.1.16, and 3.

Insecure plugin update mechanism in tucan through 0.3.10 could allow remote attackers to perform man-in-the-middle attac

Affected Dell Client platforms contain a BIOS Setup configuration authentication bypass vulnerability in the pre-boot In

Dell Client Consumer and Commercial Platforms contain an Arbitrary File Overwrite Vulnerability. The vulnerability is li

A buffer overflow was found in Patriot Viper RGB through 1.1 when processing IoControlCode 0x80102040. Local attackers (

Aterm WG2600HS firmware Ver1.3.2 and earlier allows an authenticated attacker on the same network segment to execute arb

Cross-site scripting vulnerability in Aterm WG2600HS firmware Ver1.3.2 and earlier allows remote attackers to inject arb

Aterm series (Aterm WF1200C firmware Ver1.2.1 and earlier, Aterm WG1200CR firmware Ver1.2.1 and earlier, Aterm WG2600HS

Aterm series (Aterm WF1200C firmware Ver1.2.1 and earlier, Aterm WG1200CR firmware Ver1.2.1 and earlier, Aterm WG2600HS

Curl before 7.49.1 in Apple OS X before macOS Sierra prior to 10.12 allows remote or local attackers to execute arbitrar

btif/src/btif_dm.c in Android before 5.1 does not properly enforce the temporary nature of a Bluetooth pairing, which al

uap-core before 0.7.3 is vulnerable to a denial of service attack when processing crafted User-Agent strings. Some regex

Western Digital mycloud.com before Web Version 2.2.0-134 allows XSS.

Trend Micro Vulnerability Protection 2.0 is affected by a vulnerability that could allow an attack to use the product in

openHAB before 2.5.2 allow a remote attacker to use REST calls to install the EXEC binding or EXEC transformation servic

The Trend Micro Security 2019 (15.0.0.1163 and below) consumer family of products is vulnerable to a denial of service (

Trend Micro has repackaged installers for several Trend Micro products that were found to utilize a version of an instal

Avira AV Engine before 8.3.54.138 allows virus-detection bypass via a crafted ISO archive. This affects versions before

Arista DCS-7050QX-32S-R 4.20.9M, DCS-7050CX3-32S-R 4.20.11M, and DCS-7280SRAM-48C6-R 4.22.0.1F devices (and possibly oth

A stored XSS vulnerability exists in the Modula Image Gallery plugin before 2.2.5 for WordPress. Successful exploitation

Western Digital My Cloud Home before 3.6.0 and ibi before 3.6.0 allow Session Fixation.

An issue was discovered in Open Network Operating System (ONOS) 1.14. In the Ethernet VPN application (org.onosproject.e

An issue was discovered in Open Network Operating System (ONOS) 1.14. In the virtual tenant network application (org.ono

An issue was discovered in Open Network Operating System (ONOS) 1.14. In the access control application (org.onosproject

An issue was discovered in Open Network Operating System (ONOS) 1.14. In the mobility application (org.onosproject.mobil

An issue was discovered in Open Network Operating System (ONOS) 1.14. In the virtual broadband network gateway applicati

An issue was discovered in Open Network Operating System (ONOS) 1.14. In the P4 tutorial application (org.onosproject.p4

Authentication Bypass by Spoofing in org.onosproject.acl (access control) and org.onosproject.mobility (host mobility) i

Red Gate SQL Monitor 9.0.13 through 9.2.14 allows an administrative user to perform a SQL injection attack by configurin

A restricted desktop environment escape vulnerability exists in the Kiosk Mode functionality of affected devices. Specia

Honeywell INNCOM INNControl 3 allows workstation users to escalate application user privileges through the modification