2020

The kantan netprint App for iOS 2.0.2 and earlier does not verify X.509 certificates from servers, which allows man-in-t

The netprint App for iOS 3.2.3 and earlier does not verify X.509 certificates from servers, which allows man-in-the-midd

Cross-site scripting vulnerability in F-RevoCRM 6.0 to F-RevoCRM 6.5 patch6 (version 6 series) allows remote attackers t

An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in susestudio-ui-s

A Improper Certificate Validation vulnerability in susestudio-common of SUSE Studio onsite allows remote attackers to MI

A Inclusion of Sensitive Information in Log Files vulnerability in yast2-rmt of SUSE Linux Enterprise Server 15; openSUS

Relative Path Traversal vulnerability in obs-service-tar_scm of SUSE Linux Enterprise Server 15; openSUSE Factory allows

A double-free vulnerability in vrend_renderer.c in virglrenderer through 0.8.1 allows attackers to cause a denial of ser

A NULL pointer dereference in vrend_renderer.c in virglrenderer through 0.8.1 allows attackers to cause a denial of serv

In the Lustre file system before 2.12.3, the mdt module has an out-of-bounds access and panic due to the lack of validat

In the Lustre file system before 2.12.3, the ptlrpc module has an osd_map_remote_to_local out-of-bounds access and panic

In the Lustre file system before 2.12.3, the mdt module has an LBUG panic (via a large MDT Body eadatasize field) due to

In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds read and panic (via a modified lm_bufcou

In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds read and panic due to the lack of valida

In the Lustre file system before 2.12.3, the ptlrpc module has a buffer overflow and panic, and possibly remote code exe

In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds access and panic due to the lack of vali

In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds access and panic due to the lack of vali

In the Lustre file system before 2.12.3, mdt_object_remote in the mdt module has a NULL pointer dereference and panic du

In the Lustre file system before 2.12.3, the ptlrpc module has a buffer overflow and panic due to the lack of validation

In the Linux kernel before 5.3.4, fib6_rule_lookup in net/ipv6/ip6_fib.c mishandles the RT6_LOOKUP_F_DST_NOREF flag in a

In Jp2Image::readMetadata() in jp2image.cpp in Exiv2 0.27.2, an input file can result in an infinite loop and hang, with

The Intellian Aptus application 1.0.2 for Android has a hardcoded password of intellian for the masteruser FTP account.

Intellian Aptus Web 1.24 has a hardcoded password of 12345678 for the intellian account.

The Intellian Aptus application 1.0.2 for Android has hardcoded values for DOWNLOAD_API_KEY and FILE_DOWNLOAD_API_KEY.

htdocs/user/passwordforgotten.php in Dolibarr 10.0.6 allows XSS via the Referer HTTP header.

The htdocs/index.php?mainmenu=home login page in Dolibarr 10.0.6 allows an unlimited rate of failed authentication attem

Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr 10.0.6 allow remote attackers to inject arbitrary web sc

Adive Framework 2.0.8 has admin/config CSRF to change the Administrator password.

Adive Framework 2.0.8 has admin/user/add userName XSS.

Adive Framework 2.0.8 has admin/user/add userUsername XSS.

SolarWinds N-central before 12.1 SP1 HF5 and 12.2 before SP1 HF2 allows remote attackers to retrieve cleartext domain ad

A vulnerability in Cisco Webex Meetings Suite sites and Cisco Webex Meetings Online sites could allow an unauthenticated

A vulnerability in the out of band (OOB) management interface IP table rule programming for Cisco Application Policy Inf

A vulnerability in the web-based management interface of Cisco Jabber Guest could allow an unauthenticated, remote attac

A vulnerability in the zip decompression engine of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could

A vulnerability in the Cisco Webex Teams client for Windows could allow an authenticated, remote attacker to cause the c

A vulnerability in the web-based management interface of Cisco Unity Connection Software could allow an authenticated, r

A vulnerability in the web-based management interface of Cisco Small Business Smart and Managed Switches could allow an

A vulnerability in the CLI of the Cisco SD-WAN Solution vManage software could allow an authenticated, local attacker to

A vulnerability in the application programming interface (API) of Cisco Smart Software Manager On-Prem could allow an un

A vulnerability in the implementation of the Intermediate System–to–Intermediate System (IS–IS) routin

A vulnerability in the implementation of the Stream Control Transmission Protocol (SCTP) on Cisco Mobility Management En

A vulnerability in the web-based management interface of Cisco Crosswork Change Automation could allow an unauthenticate

Multiple vulnerabilities in the implementation of Border Gateway Protocol (BGP) Ethernet VPN (EVPN) functionality in Cis

Multiple vulnerabilities in the implementation of Border Gateway Protocol (BGP) Ethernet VPN (EVPN) functionality in Cis

A vulnerability in the implementation of Border Gateway Protocol (BGP) Ethernet VPN (EVPN) functionality in Cisco IOS XR

A vulnerability in the web-based management interface of the Cisco Data Center Analytics Framework application could all

A vulnerability in the web-based GUI of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware could all

A vulnerability in the web-based management interface of Cisco Webex Video Mesh could allow an authenticated, remote att

A vulnerability in the web-based management interface of Cisco UCS Director could allow an unauthenticated, remote attac