2020

A CSRF Vulnerability exists in Kemp Load Master before 7.0-18a via unspecified vectors in administrative pages.

The external frontend system uses numerous background calls to the backend. Each background request is treated as user a

TeamViewer Desktop through 14.7.1965 allows a bypass of remote-login access control because the same key is used for dif

A Code Execution vulnerability exists in Android prior to 4.4.0 related to the addJavascriptInterface method and the acc

A Cross-site Scripting (XSS) vulnerability exists in WatchGuard XTM 11.8.3 via the poll_name parameter in the firewall/p

statusnet through 2010 allows attackers to spoof syslog messages via newline injection attacks.

A privilege escalation in the EdgeSwitch prior to version 1.7.1, an CGI script don't fully sanitize the user input resul

A privilege escalation vulnerability in FortiClient for Linux 6.2.1 and below may allow a user with low privilege to ove

Including trailing white space in HTTP header values in Nodejs 10, 12, and 13 causes bypass of authorization based on he

HTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer-encoding is malformed

Improper Certificate Validation in Node.js 10, 12, and 13 causes the process to abort when sending a crafted X.509 certi

A vulnerability exists in nw.js before 0.11.3 when calling nw methods from normal frames, which has an unspecified impac

opOpenSocialPlugin 0.8.2.1, > 0.9.9.2, 0.9.13, 1.2.6: Multiple XML External Entity Injection Vulnerabilities

ProjectPier 0.8.8 does not use the Secure flag for cookies

ProjectPier 0.8.8 has a Remote Information Disclosure Weakness because of the lack of the HttpOnly cookie flag

ProjectPier 0.8.8 has stored XSS

ISPConfig 3.0.5.2 has Arbitrary PHP Code Execution

Zabbix 2.0.9 has an Arbitrary Command Execution Vulnerability

vTiger CRM 5.3 and 5.4: 'files' Upload Folder Arbitrary PHP Code Execution Vulnerability

Synaptive Medical ClearCanvas ImageServer 3.0 Alpha allows XSS (and HTML injection) via the Default.aspx UserName parame

The omniauth-weibo-oauth2 gem 0.4.6 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserte

opWebAPIPlugin 0.5.1, 0.4.0, and 0.1.0: XXE Vulnerabilities

WordPress WP Super Cache Plugin 1.2 has Remote PHP Code Execution

WordPress Super Cache Plugin 1.3 has XSS.

Cisco ACE A2(3.6) allows log retention DoS.

File Disclosure in SMF (SimpleMachines Forum) <= 2.0.3: Forum admin can read files such as the database config.

LinuxMint as of 2012-03-19 has temporary file creation vulnerabilities in mintUpdate.

LinuxMint as of 2012-03-19 has temporary file creation vulnerabilities in mintNanny.

Possible use after free issue while CRM is accessing the link pointer from device private data due to lack of resource p

Out of bound access due to Invalid inputs to dapm mux settings which results into kernel failure in Snapdragon Auto, Sna

Uninitialized stack data gets used If memory is not allocated for blob or if the allocated blob is less than the struct

Buffer Over read of codec private data while parsing an mkv file due to lack of check of buffer size before read in Snap

Possibility of use-after-free and double free because of not marking buffer as NULL after freeing can lead to dangling p

Subsequent additions performed during Module loading while allocating the memory would lead to integer overflow and then

Stage-2 fault will occur while writing to an ION system allocation which has been assigned to non-HLOS memory which is n

Out of bound access while allocating memory for an array in camera due to improper validation of elements parameters in

Out of bound access due to access of uninitialized memory segment in an array of pointers while normal camera open close

During listener modified response processing, a buffer overrun occurs due to lack of buffer size verification when updat

Using memory after being freed in qsee due to wrong implementation can lead to unexpected behavior such as execution of

APKs without proper permission may bind to CallEnhancementService and can lead to unauthorized access to call status in

Out of bound access while parsing dts atom, which is non-standard as it does not have valid number of tracks in Snapdrag

There is a way to deceive the GPU kernel driver into thinking there is room in the GPU ringbuffer and overwriting existi

An issue was discovered in EyesOfNetwork 5.3. The EyesOfNetwork API 2.4.2 is prone to SQL injection, allowing an unauthe

An issue was discovered in EyesOfNetwork 5.3. The sudoers configuration is prone to a privilege escalation vulnerability

An issue was discovered in EyesOfNetwork 5.3. An authenticated web user with sufficient privileges could abuse the AutoD

An issue was discovered in Simplejobscript.com SJS through 1.66. There is an unauthenticated SQL injection via the job a

SQL injection vulnerability in Boonex Dolphin before 7.1.3 allows remote authenticated users to execute arbitrary SQL co

Cross-site request forgery (CSRF) vulnerability in Cisco Linksys WRT110 allows remote attackers to hijack the authentica

The web interface in VideoLAN VLC media player before 2.0.7 has no access control which allows remote attackers to view

Schmid ZI 620 V400 VPN 090 routers allow an attacker to execute OS commands as root via shell metacharacters to an entry