2020

An exposed Telnet Service on the Billion Smart Energy Router SG600R2 with firmware v3.02.rc6 allows a local network atta

XSS in the DHCP lease-status table in Billion Smart Energy Router SG600R2 Firmware v3.02.rc6 allows an attacker to injec

netflow_get_stats in functions_netflow.php in Pandora FMS 7.0NG allows remote authenticated users to execute arbitrary O

An out-of-bounds memory write issue was found in the Linux Kernel, version 3.13 through 5.4, in the way the Linux kernel

AgileBits 1Password through 1.0.9.340 allows security feature bypass

BSS Continuity CMS 4.2.22640.0 has an Authentication Bypass vulnerability

BSS Continuity CMS 4.2.22640.0 has a Remote Code Execution vulnerability due to unauthenticated file upload

BSS Continuity CMS 4.2.22640.0 has a Remote Denial Of Service vulnerability

Publify before 8.0.1 is vulnerable to a Denial of Service attack

PHPGurukul Dairy Farm Shop Management System 1.0 is vulnerable to XSS, as demonstrated by the category and CategoryCode

Broadcom based cable modems across multiple vendors are vulnerable to a buffer overflow, which allows a remote attacker

Ansible prior to 1.5.4 mishandles the evaluation of some strings.

Unify OpenStage/OpenScape Desk Phone IP SIP before V3 R3.11.0 has an authentication bypass in the default mode of the Wo

Unify OpenStage / OpenScape Desk Phone IP before V3 R3.11.0 SIP has an OS command injection vulnerability in the web bas

In PrestaShop 1.7.6.2, XSS can occur during addition or removal of a QuickAccess link. This is related to AdminQuickAcce

An issue was discovered in GPAC version 0.8.0. There is a NULL pointer dereference in the function gf_m2ts_stream_proces

An issue was discovered in GPAC version 0.8.0. There is a NULL pointer dereference in the function gf_isom_get_media_dat

Ming (aka libming) 0.4.8 has z NULL pointer dereference in the function decompileGETURL2() in decompile.c.

Ming (aka libming) 0.4.8 has a heap-based buffer over-read in the function decompile_SWITCH() in decompile.c.

In Pow (Hex package) before 1.0.16, the use of Plug.Session in Pow.Plug.Session is susceptible to session fixation attac

jhead through 3.04 has a heap-based buffer over-read in Get32s when called from ProcessGpsInfo in gpsinfo.c.

jhead through 3.04 has a heap-based buffer over-read in process_DQT in jpgqguess.c.

Pivotal Ops Manager, versions 2.4.x prior to 2.4.27, 2.5.x prior to 2.5.24, 2.6.x prior to 2.6.16, and 2.7.x prior to 2.

stb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_get_index.

stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__buf_peek8.

stb stb_truetype.h through 1.22 has a heap-based buffer over-read in ttUSHORT.

stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__buf_get8.

stb stb_truetype.h through 1.22 has an assertion failure in stbtt__buf_seek.

stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__find_table.

stb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_int.

Imperva SecureSphere Web Application Firewall (WAF) before 12-august-2010 allows SQL injection filter bypass.

Snare for Linux before 1.7.0 has CSRF in the web interface.

Snare for Linux before 1.7.0 has password disclosure because the rendered page contains the field RemotePassword.

Koala Framework before 2011-11-21 has XSS via the request_uri parameter.

Given a compromised sandboxed content process due to a separate vulnerability, it is possible to escape that sandbox by

Mozilla developers reported memory safety bugs present in Firefox 71. Some of these bugs showed evidence of memory corru

Mozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3. Some of these bugs showed evi

After a HelloRetryRequest has been sent, the client may negotiate a lower protocol that TLS 1.3, resulting in an invalid

When pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer does not escape < and

During the initialization of a new content process, a race condition occurs that can allow a content process to disclose

If an XML file is served with a Content Security Policy and the XML file includes an XSL stylesheet, the Content Securit

When Python was installed on Windows, a python file being served with the MIME type of text/plain could be executed by P

When in Private Browsing Mode on Windows 10, the Windows keyboard may retain word suggestions to improve the accuracy of

Due to a missing case handling object types, a type confusion vulnerability could occur, resulting in a crash. We presum

When pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer incorrectly rewrites a @n

During the initialization of a new content process, a pointer offset can be manipulated leading to memory corruption and

If an image had not loaded correctly (such as when it is not actually an image), it could be dragged and dropped cross-d

Mozilla developers reported memory safety bugs present in Firefox 70. Some of these bugs showed evidence of memory corru

Mozilla developers reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2. Some of these bugs showed evi

Under certain conditions, when retrieving a document from a DocShell in the antitracking code, a race condition could ca