2020

A vulnerability in the command-line interface in Brocade Fabric OS before Brocade Fabric OS v8.2.2a1, 8.2.2c, v7.4.2g, v

Brocade Fabric OS versions before Brocade Fabric OS v7.4.2g could allow an authenticated, remote attacker to view a user

Host Header Injection vulnerability in the http management interface in Brocade Fabric OS versions before v9.0.0 could a

A Reflective XSS Vulnerability in HTTP Management Interface in Brocade Fabric OS versions before Brocade Fabric OS v9.0.

The package ng-packagr before 10.1.1 are vulnerable to Command Injection via the styleIncludePaths option.

Zoho ManageEngine Applications Manager before 14 build 14730 has no protection against jsp/header.jsp Cross-site Scripti

cPanel before 90.0.10 allows self XSS via the Cron Editor interface (SEC-574).

cPanel before 90.0.10 allows self XSS via the Cron Jobs interface (SEC-573).

cPanel before 90.0.10 allows self XSS via WHM Manage API Tokens interfaces (SEC-569).

cPanel before 90.0.10 allows self XSS via the WHM Edit DNS Zone interface (SEC-566).

cPanel before 88.0.13 allows self XSS via DNS Zone Manager DNSSEC interfaces (SEC-564).

Pagure before 5.6 allows XSS via the templates/blame.html blame view.

hw/usb/hcd-ohci.c in QEMU 5.0.0 has an infinite loop when a TD list has a loop.

QEMU 5.0.0 has a heap-based Buffer Overflow in flatview_read_continue in exec.c because hw/sd/sdhci.c mishandles a write

The Framer Preview application 12 for Android exposes com.framer.viewer.FramerViewActivity to other applications. By cal

Pexip Infinity before 24.1 has Improper Input Validation, leading to temporary denial of service via SIP.

Mitel MiCloud Management Portal before 6.1 SP5 could allow an attacker, by sending a crafted request, to retrieve sensit

Mitel MiCloud Management Portal before 6.1 SP5 could allow an attacker, by sending a crafted request, to view system inf

Pexip Infinity before 17 allows an unauthenticated remote attacker to achieve stored XSS via management web interface vi

In PrestaShop from version 1.5.0.0 and before version 1.7.6.8, users are allowed to send compromised files. These attach

In PrestaShop from version 1.6.0.4 and before version 1.7.6.8 an attacker is able to inject javascript while using the c

A DOM-based cross-site scripting (XSS) vulnerability was reported in Lenovo Enterprise Network Disk prior to version 6.1

A reflective cross-site scripting (XSS) vulnerability was reported in Lenovo Enterprise Network Disk prior to version 6.

A potential vulnerability in the SMI callback function used in the EEPROM driver in some Lenovo Desktops and ThinkStatio

An XSS issue in Joplin desktop 1.0.190 to 1.0.245 allows arbitrary code execution via a malicious HTML embed tag.

A vulnerability in the Cisco IOS XE ROM Monitor (ROMMON) Software for Cisco 4000 Series Integrated Services Routers, Cis

A vulnerability in the web server authentication of Cisco IOS XE Software could allow an authenticated, remote attacker

Multiple vulnerabilities in the initialization routines that are executed during bootup of Cisco IOS XE Software for Cis

A vulnerability in the file system permissions of Cisco IOS XE Software could allow an authenticated, local attacker to

Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco

Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco

A vulnerability in the implementation of Multiprotocol Border Gateway Protocol (MP-BGP) for the Layer 2 VPN (L2VPN) Ethe

A vulnerability in the CLI parser of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local at

A vulnerability in the CLI implementation of a specific command of Cisco IOS XE Software could allow an authenticated, l

Multiple vulnerabilities in the web management framework of Cisco IOS XE Software could allow an authenticated, remote a

Multiple vulnerabilities in the web management framework of Cisco IOS XE Software could allow an authenticated, remote a

A vulnerability in the WPA2 and WPA3 security implementation of Cisco IOS XE Wireless Controller Software for the Cisco

A vulnerability in the WLAN Local Profiling feature of Cisco IOS XE Wireless Controller Software for the Cisco Catalyst

A vulnerability in the implementation of the Lua interpreter that is integrated in Cisco IOS XE Software could allow an

A vulnerability in Cisco IOS XE Wireless Controller Software for Cisco Catalyst 9800 Series Routers could allow an unaut

A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker to execute persistent code at boot

Multiple vulnerabilities in the initialization routines that are executed during bootup of Cisco IOS XE Software for Cis

A vulnerability in the file system on the pluggable USB 3.0 Solid State Drive (SSD) for Cisco IOS XE Software could allo

A vulnerability in the application-hosting subsystem of Cisco IOS XE Software could allow an authenticated, local attack

An improper neutralization of input vulnerability in FortiTester before 3.9.0 may allow a remote authenticated attacker

An improper neutralization of script-related HTML tags in a web page in FortiManager 6.2.0, 6.2.1, 6.2.2, and 6.2.3and F

ismartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to upload imae files via /index.php

ismartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to upload sound files via /index.php

iSmartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to create a new user via /index.php.

A missing CAP_NET_RAW check in NFC socket creation in net/nfc/rawsock.c in the Linux kernel before 5.8.2 could be used b