2020

diskusage-ng through 0.2.4 is vulnerable to Command Injection.It allows execution of arbitrary commands via the path arg

Universal Robots Robot Controllers Version CB2 SW Version 1.4 upwards, CB3 SW Version 3.0 and upwards, e-series SW Versi

An issue was discovered in libgpac.a in GPAC 0.8.0, as demonstrated by MP4Box. audio_sample_entry_Read in isomedia/box_c

The Search Meter plugin through 2.13.2 for WordPress allows user input introduced in the search bar to be any formula. T

3xLOGIC Infinias eIDC32 2.213 devices with Web 1.107 allow Authentication Bypass via CMD.HTM?CMD= because authentication

Zoho ManageEngine ADSelfService Plus before 5815 allows unauthenticated remote code execution.

Flaw in input validation in npm package utils-extend version 1.0.8 and earlier may allow prototype pollution attack that

A SQL injection vulnerability in TestLink 1.9.20 allows attackers to execute arbitrary SQL commands in planUrgency.php v

A SQL injection vulnerability in TestLink 1.9.20 allows attackers to execute arbitrary SQL commands in dragdroptreenodes

A buffer overflow vulnerability was found in some devices of Hirschmann Automation and Control HiOS and HiSecOS. The vul

VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow a vulnerable ActiveX component to be exploited

An Improper Privilege Management in crowbar of SUSE OpenStack Cloud 7, SUSE OpenStack Cloud 8, SUSE OpenStack Cloud 9, S

git-add-remote through 1.0.0 is vulnerable to Command Injection. It allows execution of arbitrary commands via the name

install-package through 0.4.0 is vulnerable to Command Injection. It allows execution of arbitrary commands via the opti

umount through 1.1.6 is vulnerable to Command Injection. The argument device can be controlled by users without any sani

node-key-sender through 1.0.11 is vulnerable to Command Injection. It allows execution of arbitrary commands via the 'ar

karma-mojo through 1.0.1 is vulnerable to Command Injection. It allows execution of arbitrary commands via the config ar

op-browser through 1.0.6 is vulnerable to Command Injection. It allows execution of arbitrary commands via the url funct

effect through 1.0.4 is vulnerable to Command Injection. It allows execution of arbitrary command via the options argume

STARFACE UCC Client before 6.7.1.204 on WIndows allows binary planting to execute code with System rights, aka usd-2020-

jscover through 1.0.0 is vulnerable to Command Injection. It allows execution of arbitrary command via the source argume

strong-nginx-controller through 1.0.2 is vulnerable to Command Injection. It allows execution of arbitrary command as pa

pomelo-monitor through 0.3.7 is vulnerable to Command Injection.It allows injection of arbitrary commands as part of 'po

get-git-data through 1.3.1 is vulnerable to Command Injection. It is possible to inject arbitrary commands as part of th

CACAGOO Cloud Storage Intelligent Camera TV-288ZD-2MP with firmware 3.4.2.0919 has weak authentication of TELNET access,

LearnDash Wordpress plugin version below 3.1.6 is vulnerable to Unauthenticated SQL Injection.

Unsafe deserialization occurs within a Dubbo application which has HTTP remoting enabled. An attacker may submit a POST

Jon Hedley AlienForm2 (typically installed as af.cgi or alienform.cgi) 2.0.2 is vulnerable to Remote Command Execution v

The connection initiation process in March Networks Command Client before 2.7.2 allows remote attackers to execute arbit

A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3. A

A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3. A

A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3. A

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3. A rem

Multiple issues were addressed by updating to version 8.1.1850. This issue is fixed in macOS Catalina 10.15.4. Multiple

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Ca

A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Ca

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Ca

An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Servi

NETGEAR has released fixes for a pre-authentication command injection in request_handler.php security vulnerability on t

LimeSurvey before 4.1.12+200324 contains a path traversal vulnerability in application/controllers/admin/LimeSurveyFileM

An issue was discovered in the Login by Auth0 plugin before 4.0.0 for WordPress. It has numerous fields that can contain

A vulnerability was found in Moodle versions 3.7 before 3.7.3, 3.6 before 3.6.7, 3.5 before 3.5.9 and earlier. OAuth 2 p

LifterLMS Wordpress plugin version below 3.37.15 is vulnerable to arbitrary file write leading to remote code execution

IBM Spectrum Protect Plus 10.1.0 through 10.1.5 contains hard-coded credentials, such as a password or cryptographic key

pam-krb5 before 4.9 has a buffer overflow that might cause remote code execution in situations involving supplemental pr

All versions of io.micronaut:micronaut-http-client before 1.2.11 and all versions from 1.3.0 before 1.3.2 are vulnerable

An issue was discovered in USC iLab cereal through 1.3.0. It employs caching of std::shared_ptr values, using the raw po

A webserver component in Paessler PRTG Network Monitor 19.2.50 to PRTG 20.1.56 allows unauthenticated remote command exe

X-Plane before 11.41 has multiple improper path validations that could allow reading and writing files from/to arbitrary

X-Plane before 11.41 allows Arbitrary Memory Write via crafted network packets, which could cause a denial of service or