2020

An authorization bypass exists in Lenovo XClarity Controller (XCC) versions prior to 3.08 CDI340V, 3.01 TEI392O, 1.71 PS

An XML External Entity (XXE) processing vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prio

An information disclosure vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.6.6 tha

Lenovo was notified of a potential denial of service vulnerability, affecting various versions of BIOS for Lenovo Deskto

The Synergy Systems & Solutions PLC & RTU system has a vulnerability in HUSKY RTU 6049-E70 firmware versions 5.0 and pri

The Synergy Systems & Solutions PLC & RTU system has a vulnerability in HUSKY RTU 6049-E70 firmware versions 5.0 and pri

HashiCorp Sentinel up to 0.10.1 incorrectly parsed negation in certain policy expressions. Fixed in 0.10.2.

A vulnerability in the web interface of Lenovo EZ Media & Backup Center, ix2 & ix2-dl version 4.1.406.34763 and prior co

An internal product security audit of Lenovo XClarity Administrator (LXCA) discovered a Document Object Model (DOM) base

Gateways/Gateway.php in Heartland & Global Payments PHP SDK before 2.0.0 does not enforce SSL certificate validations.

A vulnerability in Hitachi Command Suite prior to 8.6.2-00, Hitachi Automation Director prior to 8.6.2-00 and Hitachi In

A vulnerability in Hitachi Command Suite prior to 8.7.1-00 and Hitachi Automation Director prior to 8.5.0-00 allow authe

Improper access control vulnerability in Configuration Tool in McAfee Mcafee Endpoint Security (ENS) Prior to 10.6.1 Feb

ilbo App (ilbo App for Android prior to version 1.1.8 and ilbo App for iOS prior to version 1.2.01) allows an attacker o

An out-of-bounds read was discovered in PCRE before 10.34 when the pattern \X is JIT compiled and used to match speciall

ext4_protect_reserved_inode in fs/ext4/block_validity.c in the Linux kernel through 5.5.3 allows attackers to cause a de

vg_lookup in daemons/lvmetad/lvmetad-core.c in LVM2 2.02 mismanages memory, leading to an lvmetad memory leak, as demons

RiskNet Acquirer before hotfix 6.0 b7+ADHOC-443 ApplicationServiceBean contains a service information disclosure.

Cross-site Scripting (XSS) in EasyXDM before 2.4.18 allows remote attackers to inject arbitrary web script or html via t

PrestaShop before 1.4.11 allows logout CSRF.

PrestaShop before 1.4.11 allows Logistician, translators and other low level profiles/accounts to inject a persistent XS

MobileIron VSP < 5.9.1 and Sentry < 5.0 has an insecure encryption scheme.

Belkin n750 routers have a buffer overflow.

OpenConnect VPN client with GnuTLS before 5.02 contains a heap overflow if MTU is increased on reconnection.

Internet TRiLOGI Server (unknown versions) could allow a local user to bypass security and create a local user account.

Xerox ColorCube and WorkCenter devices in 2013 had hardcoded FTP and shell user accounts.

TRENDnet TS-S402 has a backdoor to enable TELNET.

QNAP VioCard 300 has hardcoded RSA private keys.

Microsys PROMOTIC 8.2.13 contains an ActiveX Control Start Buffer Overflow vulnerability which can lead to denial of ser

A denial of service vulnerability exists in some motherboard implementations of Intel e1000e/82574L network controller d

In the Voatz application 2020-01-01 for Android, the amount of data transmitted during a single voter's vote depends on

The Voatz application 2020-01-01 for Android allows only 100 million different PINs, which makes it easier for attackers

Authentication bypass using an alternate path or channel in SimpliSafe SS3 firmware 1.4 allows a local, unauthenticated

Directory traversal vulnerability in Kaseya Virtual System Administrator (VSA) 7.0.0.0 before 7.0.0.33, 8..0.0.0 before

Multiple security bypass vulnerabilities in the editAnswer, deleteAnswer, addAnswer, and deletePoll functions in WordPre

Multiple SQL injection vulnerabilities in CWPPoll.js in WordPress Poll Plugin 34.5 for WordPress allow attackers to exec

Directory traversal vulnerability in node/utils/Minify.js in Etherpad 1.1.2 through 1.5.4 allows remote attackers to rea

A Denial of Service vulnerability exists in askpop3d 0.7.7 in free (pszQuery),

Zend_XmlRpc Class in Magento before 1.7.0.2 contains an information disclosure vulnerability.

Improper permissions in the installer for Intel(R) RWC3 for Windows before version 7.010.009.000 may allow an authentica

Improper permissions in the installer for Intel(R) MPSS before version 3.8.6 may allow an authenticated user to potentia

Improper permissions in the installer for Intel(R) RWC2, all versions, may allow an authenticated user to potentially en

Improper initialization in the Intel(R) SGX SDK before v2.6.100.1 may allow an authenticated user to potentially enable

Improper Authentication in subsystem in Intel(R) CSME versions 12.0 through 12.0.48 (IOT only: 12.0.56), versions 13.0 t

A Two-Factor Authentication Bypass Vulnerability exists in BS-Client Private Client 2.4 and 2.5 via an XML request that

A Privilege Escalation Vulnerability exists in Free Reprintables ArticleFR 11.06.2014 due to insufficient access restric

A vulnerability exists in Netgear CG3100 devices before 3.9.2421.13.mp3 V0027 via an embed malicious script in an unspec

Squirrelmail 4.0 uses the outdated MD5 hash algorithm for passwords.

A cross-site scripting (XSS) vulnerability was discovered in the Source Integration plugin before 1.6.2 and 2.x before 2

Improper permissions in the installer for the Intel(R) Renesas Electronics(R) USB 3.0 Driver, all versions, may allow an