2020

There is a Stored XSS in Magicpin v2.1 in the User Registration section. Each time an admin visits the manage user secti

October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework. In October CMS from version

October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework. In October CMS from version

October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework. In October CMS from version

October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework. In October CMS from version

Specially crafted API calls may allow an authenticated user who holds Organization Owner privilege to obtain an API key

Mutt before 2.0.2 and NeoMutt before 2020-11-20 did not ensure that $ssl_force_tls was processed if an IMAP server's ini

Buffer overflow in WinSCP 5.17.8 allows a malicious FTP server to cause a denial of service or possibly have other unspe

Scratch Addons is a WebExtension that supports both Chrome and Firefox. Scratch Addons before version 1.3.2 is vulnerabl

A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which

A user authorized to perform database queries may trigger a read overrun and access arbitrary memory by issuing speciall

Tableau Server installations configured with Site-Specific SAML that allows the APIs to be used by unauthenticated users

IBM Spectrum Protect Plus 10.1.0 thorugh 10.1.6 contains hard-coded credentials, such as a password or cryptographic key

IBM Spectrum Protect Plus 10.1.0 through 10.1.6 could allow a remote attacker to obtain sensitive information, caused by

IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.10.and 7.1.0.000 through 7.1.11 could allow a remote attack

Improper access control in BlueZ may allow an unauthenticated user to potentially enable information disclosure via adja

Improper input validation in BlueZ may allow an unauthenticated user to potentially enable escalation of privilege via a

Out of bounds write in Intel(R) PROSet/Wireless WiFi products on Windows 10 may allow an authenticated user to potential

Logic issue EDK II may allow an unauthenticated user to potentially enable denial of service via adjacent access.

Use after free vulnerability in EDK II may allow an authenticated user to potentially enable escalation of privilege, in

Logic issue in DxeImageVerificationHandler() for EDK II may allow an authenticated user to potentially enable escalation

Integer truncation in EDK II may allow an authenticated user to potentially enable escalation of privilege via local acc

This affects all versions of package jsen. If an attacker can control the schema file, it could run arbitrary JavaScript

CA Unified Infrastructure Management 20.1 and earlier contains a vulnerability in the robot (controller) component that

When OTRS uses multiple backends for user authentication (with LDAP), agents are able to login even if the account is se

A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which

A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which

A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries which t

A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which

Integer overflow in DxeImageVerificationHandler() EDK II may allow an authenticated user to potentially enable denial of

Uncontrolled resource consumption in EDK II may allow an unauthenticated user to potentially enable denial of service vi

Improper authentication in EDK II may allow a privileged user to potentially enable information disclosure via network a

A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which

A user authorized to perform database queries may trigger denial of service by issuing specially crafted applyOps invoca

A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries with co

A user authorized to perform database queries may cause denial of service by issuing a specially crafted query which vio

Incorrect validation of user input in the role name parser may lead to use of uninitialized memory allowing an unauthent

HashiCorp Consul and Consul Enterprise 1.2.0 up to 1.8.5 allowed operators with operator:read ACL permissions to read th

Security Onion v2 prior to 2.3.10 has an incorrect sudo configuration, which allows the administrative user to obtain ro

svm_predict_values in svm.cpp in Libsvm v324, as used in scikit-learn 0.23.2 and other products, allows attackers to cau

HCL Notes is susceptible to a Denial of Service vulnerability caused by improper validation of user-supplied input. A re

HCL Domino is susceptible to a Denial of Service vulnerability due to improper validation of user-supplied input, potent

HCL Domino is susceptible to a Denial of Service vulnerability caused by improper validation of user-supplied input. A r

The affected product is vulnerable to three stack-based buffer overflows, which may allow an unauthenticated attacker to

UNIX Symbolic Link (Symlink) Following in TP-Link Archer C9(US)_V1_180125 firmware allows an unauthenticated actor, with

In Xpdf 4.02, SplashOutputDev::endType3Char(GfxState *state) SplashOutputDev.cc:3079 is trying to use the freed `t3Glyph

The affected product is vulnerable to five post-authentication buffer overflows, which may allow a logged in user to rem

VMware ESXi (7.0 before ESXi70U1b-17168206, 6.7 before ESXi670-202011101-SG, 6.5 before ESXi650-202011301-SG) contains a

VMware ESXi (7.0 before ESXi70U1b-17168206, 6.7 before ESXi670-202011101-SG, 6.5 before ESXi650-202011301-SG), Workstati

A CSV injection vulnerability in the Admin portal for Netskope 75.0 allows an unauthenticated user to inject malicious p