2020

Transcend WiFiSD 1.8 has persistent XSS

PQI AirCard has persistent XSS

In Appspace On-Prem through 7.1.3, an adversary can steal a session token via XSS.

HMailServer 5.3.x and prior: Memory Corruption which could cause DOS

Cisco Linksys Routers EA2700, EA3500, E4200, EA4500: A bug can cause an unsafe TCP port to open which leads to unauthent

Codoforum 4.8.3 allows XSS in the admin dashboard via a category to the Manage Users screen.

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modi

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modi

Incorrect Authorization vulnerability exists in EcoStruxure Control Expert (all versions prior to 14.1 Hot Fix), Unity P

A CWE-287: Improper Authentication vulnerability exists in a folder within EcoStruxure Geo SCADA Expert (ClearSCADA) -wi

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modi

A Cross-Site Scripting (XSS) vulnerability exists in the description field of an Download RSS item or Contacts in Freebo

Multiple Cross-Site Scripting (XSS) vulnerabilities exist in Simple Online Planning (SOPlanning) before 1.33 via the doc

An insecure file upload and code execution issue was discovered in Ahsay Cloud Backup Suite 8.3.0.30 via a "PUT /obs/obm

OKER G232V1 v1.03.02.20161129 devices provide a root terminal on a UART serial interface without proper access control.

A cross-site scripting (XSS) vulnerability in the configuration web interface of the Jinan USR IOT USR-WIFI232-S/T/G2/H

An issue was discovered in Suricata 5.0.0. It was possible to bypass/evade any tcp based signature by faking a closed TC

DTEN D5 and D7 before 1.3.2 devices allows remote attackers to read saved whiteboard image PDF documents via storage/emu

A file upload issue exists in the specid parameter in Thomson Reuters FATCH before 5.2, which allows malicious users to

A file upload issue exists in DeDeCMS before 5.7-sp1, which allows malicious users getshell.

Gila CMS 1.11.8 allows /cm/delete?t=../ Directory Traversal.

Gila CMS 1.11.8 allows /admin/media?path=../ Path Traversal.

In uftpd before 2.11, there is a buffer overflow vulnerability in handle_PORT in ftpcmd.c that is caused by a buffer tha

An issue was discovered in rConfig 3.9.3. The install script updates the /etc/sudoers file for rconfig specific tasks. A

An issue was discovered in rConfig 3.9.3. A remote authenticated user can directly execute system commands by sending a

An issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.12, and Community Edition 5.0.x through 5

OX App Suite through 7.10.2 has XSS.

OX App Suite through 7.10.2 has Incorrect Access Control.

DTEN D5 before 1.3 and D7 before 1.3 devices transfer customer data files via unencrypted HTTP.

DTEN D5 and D7 before 1.3.4 devices allow unauthenticated root shell access through Android Debug Bridge (adb), leading

On DTEN D5 and D7 before 1.3.4 devices, factory settings allows for firmware reflash and Android Debug Bridge (adb) enab

Multiple cross-site scripting (XSS) vulnerabilities in the Marked module before 0.3.1 for Node.js allow remote attackers

Gila CMS 1.11.8 allows /admin/sql?query= SQL Injection.

Gila CMS 1.11.8 allows Unrestricted Upload of a File with a Dangerous Type via .phar or .phtml to the lzld/thumb?src= UR

Multiple cross-site scripting (XSS) vulnerabilities in the WP Membership plugin 1.2.3 for WordPress allow remote authent

An issue was discovered in HashBrown CMS before 1.3.2. Server/Entity/Resource/Connection.js allows an attacker to reach

In DCRYPTO_equals of compare.c, there is a possible timing attack due to improperly used crypto. This could lead to loca

In set_outbound_iatu of abc-pcie.c, there is a possible out of bounds write due to a missing bounds check. This could le

In dma_sblk_start of abc-pcie.c, there is a possible out of bounds write due to a missing bounds check. This could lead

In km_compute_shared_hmac of km4.c, there is a possible out of bounds write due to improper input validation. This could

In export_key_der of export_key.cpp, there is possible memory corruption due to a double free. This could lead to local

An issue was discovered in Suricata 5.0.0. It is possible to bypass/evade any tcp based signature by overlapping a TCP s

The seefl package v0.1.1 is vulnerable to a stored Cross-Site Scripting (XSS) vulnerability via a malicious filename ren

The fileview package v0.1.6 has inadequate output encoding and escaping, which leads to a stored Cross-Site Scripting (X

The application login page in AKIPS Network Monitor 15.37 through 16.5 allows a remote unauthenticated attacker to execu

The MojoHaus Exec Maven plugin 1.1.1 for Maven allows code execution via a crafted XML document because a configuration

The WebAdmin Console in OpenLiteSpeed before v1.6.5 does not strictly check request URLs, as demonstrated by the "Server

A vulnerability in the application environment of Cisco Data Center Network Manager (DCNM) could allow an authenticated,

Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager (DCNM) could allow an a

Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager (DCNM) could allow an a