2020

The Citytv Video application 4.08.0 for Android and 3.35 for iOS sends Unencrypted Analytics.

The Global TV application 2.3.2 for Android and 4.7.5 for iOS sends Unencrypted Analytics.

GitLab EE 12.6 and later through 12.7.2 allows Denial of Service.

GitLab EE 8.8 and later through 12.7.2 has Insecure Permissions.

GitLab EE 12.4 and later through 12.7.2 has Incorrect Access Control.

GitLab EE 10.1 through 12.7.2 allows Information Disclosure.

GitLab through 12.7.2 allows XSS.

GitLab EE 12.2 has Insecure Permissions (issue 2 of 2).

GitLab EE 11.0 and later through 12.7.2 allows XSS.

GitLab EE 8.0 and later through 12.7.2 allows Information Disclosure.

GitLab EE 8.0 through 12.7.2 has Incorrect Access Control.

GitLab EE 8.0 through 12.7.2 has Insecure Permissions (issue 1 of 2).

GitLab EE 11.11 and later through 12.7.2 allows Directory Traversal.

It is possible to unmask credentials and other sensitive information on “unprotected” project files, which may allow an

TUF (aka The Update Framework) through 0.12.1 has Improper Verification of a Cryptographic Signature.

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to obtain sensitive information ca

IBM Cloud Automation Manager 3.2.1.0 does not set the secure attribute on authorization tokens or session cookies. Attac

IBM Planning Analytics 2.0 is vulnerable to cross-site request forgery which could allow an attacker to execute maliciou

Brocade Fabric OS Versions before v7.4.2f, v8.2.2a, v8.1.2j and v8.2.1d could expose external passwords, common secrets

Brocade Fabric OS Versions before v8.2.2a and v8.2.1d could expose the credentials of the remote ESRS server when these

IBM InfoSphere Information Server 8.1, 8.5, 8.7, 9.1 has a Session Fixation Vulnerability

GitLab EE 8.9 and later through 12.7.2 has Insecure Permission

GitLab EE 8.9 and later through 12.7.2 has Insecure Permission

An ni_dhcp4_parse_response memory leak in openSUSE wicked 0.6.55 and earlier allows network attackers to cause a denial

In cloud-init through 19.4, rand_user_password in cloudinit/config/cc_set_passwords.py has a small default pwlen value,

cloud-init through 19.4 relies on Mersenne Twister for a random password, which makes it easier for attackers to predict

Multiple relative path traversal vulnerabilities in the oneup/uploader-bundle before 1.9.3 and 2.1.5 allow remote attack

It's been found that multiple functions in ipmitool before 1.8.19 neglect proper checking of the data received from a re

An issue was discovered in Squid before 4.10. It allows a crafted FTP server to trigger disclosure of sensitive informat

im-metadata through 3.0.1 allows remote attackers to execute arbitrary commands via the "exec" argument. It is possible

im-resize through 2.3.2 allows remote attackers to execute arbitrary commands via the "exec" argument. The cmd argument

network-manager through 1.0.2 allows remote attackers to execute arbitrary commands via the "execSync()" argument.

An Information Disclosure vulnerability exists in HP SiteScope 11.2 and 11.3 on Windows, Linux and Solaris, HP Asset Man

A CSRF vulnerability in the Tutor LMS plugin before 1.5.3 for WordPress can result in an attacker approving themselves a

An issue was discovered in Squid before 4.10. Due to incorrect input validation, the NTLM authentication credentials par

An issue was discovered in Squid before 4.10. Due to incorrect buffer management, a remote client can cause a buffer ove

An issue was discovered in Squid before 4.10. Due to incorrect input validation, it can interpret crafted HTTP requests

Flaw in input validation in npm package klona version 1.1.0 and earlier may allow prototype pollution attack that may re

Insufficient validation and sanitization of user input exists in url-parse npm package version 1.4.4 and earlier may all

A denial of service exists in strapi v3.0.0-beta.18.3 and earlier that can be abused in the admin console using admin ri

A missing check in Nextcloud Server 14.0.3 could give recipient the possibility to extend the expiration date of a share

A bug in Nextcloud Server 14.0.4 could expose more data in reshared link shares than intended by the sharer.

A reflected Cross-Site Scripting vulnerability in Nextcloud Server 16.0.1 was discovered in the svg generation.

Improper authorization in Nextcloud server 17.0.0 causes leaking of previews and files when a file-drop share link is op

An authenticated server-side request forgery in Nextcloud server 16.0.1 allowed to detect local and remote services when

Improper preservation of permissions in Nextcloud Server 14.0.3 causes the event details to be leaked when sharing a non

Prototype pollution vulnerability in dot-prop npm package versions before 4.2.1 and versions 5.x before 5.1.1 allows an

A reflected XSS vulnerability has been discovered in the publicly accessible afr.php delivery script of Revive Adserver

A stack buffer overflow vulnerability exists in the way MiniSNMPD version 1.4 handles multiple connections. A specially

An exploitable out of bounds read vulnerability exists in the way MiniSNMPD version 1.4 parses incoming SNMP packets. A