2020

A Bash script injection vulnerability exists in Kemp Load Master 7.1-16 and earlier due to a failure to sanitize input i

In calc_vm_may_flags of ashmem.c, there is a possible arbitrary write to shared memory due to a permissions bypass. This

A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially c

CA Automic Sysload 5.6.0 through 6.1.2 contains a vulnerability, related to a lack of authentication on the File Server

An issue was discovered in Jamf Pro 9.x and 10.x before 10.15.1. Deserialization of untrusted data when parsing JSON in

devcert-sanscache before 0.4.7 allows remote attackers to execute arbitrary code or cause a Command Injection via the ex

A code-execution vulnerability exists during startup in jhi.dll and otpiha.dll in Symantec VIP Access Desktop before 2.2

A security bypass vulnerability exists in Symantec Norton App Lock 1.0.3.186 and earlier if application pinning is enabl

A privilege escalation vulnerability exists when loading DLLs during boot up and reboot in Symantec IT Management Suite

A Denial of Service vulnerability exists in the ITMS workflow process manager login window in Symantec IT Management Sui

Dassault Systemes Catia V5-6R2013: Stack Buffer Overflow due to inadequate boundary checks

Contao CMS through 3.2.4 has PHP Object Injection Vulnerabilities

MobileIron VSP versions prior to 5.9.1 and Sentry versions prior to 5.0 have an authentication bypass vulnerability due

In Teradici PCoIP Agent before 19.08.1 and PCoIP Client before 19.08.3, an unquoted service path can cause execution of

It was found that keycloak before version 8.0.0 exposes internal adapter endpoints in org.keycloak.constants.AdapterCons

A Denial of Service vulnerability exists in Google Android 4.4.4, 5.0.2, and 5.1.1, which allows malicious users to bloc

centurystar 7.12 ActiveX Control has a Stack Buffer Overflow

Pearson eSIS (Enterprise Student Information System) message board has stored XSS due to improper validation of user inp

An authentication bypass vulnerability on Genexis Platinum-4410 v2.1 P4410-V2 1.28 devices allows attackers to obtain cl

There was a flaw in the WordPress plugin, Email Subscribers & Newsletters before 4.3.1, that allowed SQL statements to b

A flaw in Give before 2.5.5, a WordPress plugin, allowed unauthenticated users to bypass API authentication methods and

The WikibaseMediaInfo extension 1.35 for MediaWiki allows XSS because of improper template syntax within the PropertySug

An Information Disclosure vulnerability exists in NTP 4.2.7p25 private (mode 6/7) messages via a GET_RESTRICT control me

This vulnerability allows remote attackers redirect users to an external resource on affected installations of Tencent W

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop Parallel

This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-LINK TL-WR841N rout

This vulnerability allows remote attackers to execute arbitrary code on affected installations of D-Link DCS-960L v1.07.

A DOM based XSS vulnerability has been identified on the WatchGuard XMT515 through 12.1.3, allowing a remote attacker to

An issue was discovered in OpServices OpMon 9.3.1-1. Using password change parameters, an attacker could perform SQL inj

An attacker could specially craft an FTP request that could crash the PR100088 Modbus gateway versions prior to release

A flaw was found with the RHSA-2019:3950 erratum, where it did not fix the CVE-2019-13616 SDL vulnerability. This issue

Codoforum 4.8.3 allows XSS in the user registration page: via the username field to the index.php?u=/user/register URI.

PHPGurukul Dairy Farm Shop Management System 1.0 is vulnerable to SQL injection, as demonstrated by the username paramet

In the Titan M handling of cryptographic operations, there is a possible information disclosure due to an unusual root c

An information exposure vulnerability in the external authentication profile form of FortiSIEM 5.2.2 and earlier may all

Systems management on Unisys ClearPath Forward Libra and ClearPath MCP Software Series can fault and have other unspecif

An improper neutralization of input during web page generation in FortiAuthenticator WEB UI 6.0.0 may allow an unauthent

In "index.js" file line 240, the run command executes the git command with a user controlled variable called remoteUrl.

Jamf Pro 10.x before 10.3.0 has Incorrect Access Control. Jamf Pro user accounts and groups with access to log in to Jam

A flaw was found during the upgrade of an existing OpenShift Container Platform 3.x cluster. Using CRI-O, the dockergc s

Multiple SQL vulnerabilities exist in planning.php, user_list.php, projets.php, user_groupes.php, and groupe_list.php in

A vulnerability was found in Moodle versions 3.7.x before 3.7.3, 3.6.x before 3.6.7 and 3.5.x before 3.5.9. When a cohor

In all versions of cpio before 2.13 does not properly validate input files when generating TAR archives. When cpio is us

OpenShift Container Platform 4 does not sanitize secret data written to static pod logs when the log level in a given op

A flaw was found in Wildfly Security Manager, running under JDK 11 or 8, that authorized requests for any requester. Thi

A flaw was found in keycloack before version 8.0.0. The owner of 'placeholder.org' domain can setup mail server on this

A vulnerability was found in dnsmasq before version 2.81, where the memory leak allows remote attackers to cause a denia

AultWare pwStore 2010.8.30.0 has XSS

AultWare pwStore 2010.8.30.0 has DoS via an empty HTTP request

FuzeZip 1.0.0.131625 has a Local Buffer Overflow vulnerability