2020

A unauthenticated path traversal arbitrary remote file deletion vulnerability in Trend Micro Worry-Free Business Securit

A vulnerability in Trend Micro Apex One could allow an unprivileged user to abuse the product installer to reinstall the

Trend Micro Security 2020 (Consumer) contains a vulnerability in the installer package that could be exploited by placin

Trend Micro Security 2020 (Consumer) contains a vulnerability in the installer package that could be exploited by placin

Trend Micro Security 2020 (Consumer) contains a vulnerability in the installer package that could be exploited by placin

IBM MQ Appliance 9.1.CD and LTS could allow an authenticated user, under nondefault configuration to cause a data corrup

A vulnerability in the API of Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote attacker to

A vulnerability in the log subscription subsystem of Cisco AsyncOS for the Cisco Secure Web Appliance (formerly Web Secu

A vulnerability in an API of Cisco Webex Meetings could allow an unauthenticated, remote attacker to conduct cross-site

The firmware of the PLANET Technology Corp NVR-915 and NVR-1615 before 2020-10-28 embeds default credentials for root ac

Multiple vulnerabilities in the web UI of Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote

A vulnerability in the user management functionality of Cisco IoT Field Network Director (FND) could allow an authentica

A vulnerability in the web UI of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attacker to

A vulnerability in the file system of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attack

A vulnerability in the access control functionality of Cisco IoT Field Network Director (FND) could allow an authenticat

A vulnerability in Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote attacker to view sensit

A vulnerability in the REST API of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attacker

A vulnerability in the SOAP API of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attacker

A vulnerability in the xAPI service of Cisco Telepresence CE Software and Cisco RoomOS Software could allow an authentic

Code injection in the go command with cgo before Go 1.14.12 and Go 1.15.5 allows arbitrary code execution at build time

Code injection in the go command with cgo before Go 1.14.12 and Go 1.15.5 allows arbitrary code execution at build time

Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.

cxuucms v3 has a SQL injection vulnerability, which can lead to the leakage of all database data via the keywords parame

Trusted Computing Group (TCG) Trusted Platform Module Library Family 2.0 Library Specification Revisions 1.38 through 1.

REDDOXX MailDepot 2033 (aka 2.3.3022) allows XSS via an incoming HTML e-mail message.

httpd on TP-Link TL-WPA4220 devices (hardware versions 2 through 4) allows remote authenticated users to trigger a buffe

RSA Archer 6.8 through 6.8.0.3 and 6.9 contains a URL injection vulnerability. An unauthenticated remote attacker could

app\admin\controller\sys\Uploads.php in lemocms 1.8.x allows users to upload files to upload executable files.

httpd on TP-Link TL-WPA4220 devices (versions 2 through 4) allows remote authenticated users to execute arbitrary OS com

Valve's Game Networking Sockets prior to version v1.2.0 improperly handles unreliable segments with negative offsets in

Open redirect vulnerability in werkzeug before 0.11.6 via a double slash in the URL.

A CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability exists in the Web Server

A CWE-787: Out-of-bounds Write vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premi

A CWE-125: Out-of-Bounds Read vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premiu

Kamailio before 5.4.0, as used in Sip Express Router (SER) in Sippy Softswitch 4.5 through 5.2 and other products, allow

Cross Site Scripting (XSS) vulnerability in the Registration page of the admin panel in PHPGurukul User Registration & L

An issue was discovered in the view_statistics (aka View frontend statistics) extension before 2.0.1 for TYPO3. It saves

A buffer over-read (at the framebuffer layer) in the fbcon code in the Linux kernel before 5.8.15 could be used by local

SQL injection vulnerability in SourceCodester Water Billing System 1.0 via the username and password parameters to proce

An improper file permissions vulnerability affects Kata Containers prior to 1.11.5. When using a Kubernetes hostPath vol

PESCMS Team 2.3.2 has multiple reflected XSS via the id parameter:?g=Team&m=Task&a=my&status=3&id=,?g=Team&m=Task&a=my&s

An Arbitrary File Upload in the Upload Image component in SourceCodester Online Library Management System 1.0 allows the

Stored Cross-site scripting (XSS) vulnerability in SourceCodester Gym Management System 1.0 allows users to inject and s

An issue was discovered in Aviatrix Controller before R6.0.2483. Several APIs contain functions that allow arbitrary fil

An issue was discovered in Aviatrix Controller before R6.0.2483. Multiple executable files, that implement API endpoints

An issue was discovered in Aviatrix Controller before R5.3.1151. Encrypted key values are stored in a readable file.

An issue was discovered in Aviatrix Controller before R5.3.1151. An encrypted file containing credentials to unrelated s

An issue was discovered in Aviatrix Controller before R5.4.1290. The htaccess protection mechanism to prevent requests t

An issue was discovered in Aviatrix Controller before R5.4.1290. There is an insecure sudo rule: a user exists that can

TYPO3 Fluid before versions 2.0.8, 2.1.7, 2.2.4, 2.3.7, 2.4.4, 2.5.11 and 2.6.10 is vulnerable to Cross-Site Scripting.