2020

The official plone Docker images before version of 4.3.18-alpine (Alpine specific) contain a blank password for a root u

The official adminer docker images before 4.7.0-fastcgi contain a blank password for a root user. System using the admin

The official composer docker images before 1.8.3 contain a blank password for a root user. System using the composer doc

The official kong docker images before 1.0.2-alpine (Alpine specific) contain a blank password for a root user. System u

The official telegraf docker images before 1.9.4-alpine (Alpine specific) contain a blank password for a root user. Syst

The official ghost docker images before 2.16.1-alpine (Alpine specific) contain a blank password for a root user. System

Unrestricted access to the log downloader functionality in EPSON EPS TSE Server 8 (21.0.11) allows an unauthenticated at

This affects the package connection-tester before 0.2.1. The injection point is located in line 15 in index.js. The foll

AdRem NetCrunch 10.6.0.4587 has a hardcoded SSL private key vulnerability in the NetCrunch web client. The same hardcode

AdRem NetCrunch 10.6.0.4587 has an Improper Session Handling vulnerability in the NetCrunch web client, which can lead t

A remote code execution vulnerability occurs in OpenTSDB through 2.4.0 via command injection in the yrange parameter. Th

The Software AG Terracotta Server OSS Docker image 5.4.1 contains a blank password for the root user. Systems deployed u

The Appbase streams Docker image 2.1.2 contains a blank password for the root user. Systems deployed using affected vers

The official sonarqube docker images before alpine (Alpine specific) contain a blank password for a root user. System us

The Docker Docs Docker image through 2020-12-14 contains a blank password for the root user. Systems deployed using affe

The Blackfire Docker image through 2020-12-14 contains a blank password for the root user. Systems deployed using affect

Version 1.3.0 of the Weave Cloud Agent Docker image contains a blank password for the root user. Systems deployed using

Version 1.0.0 of the Instana Dynamic APM Docker image contains a blank password for the root user. Systems deployed usin

Version 3.16.0 of the CoScale agent Docker image contains a blank password for the root user. Systems deployed using aff

Icinga 2 v2.8.0 through v2.11.7 and v2.12.2 has an issue where revoked certificates due for renewal will automatically b

Product: AndroidVersions: Android kernelAndroid ID: A-127973231References: Upstream kernel

IBM Connect:Direct for UNIX 6.1.0, 6.0.0, 4.3.0, and 4.2.0 can allow a local or remote user to obtain an authenticated C

There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A

There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A

There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A

A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). A service available on

SQL Injection vulnerability in NewPK 1.1 via the title parameter to admin\newpost.php.

Improper privilege management on services run by Citrix Gateway Plug-in for Windows, versions before and including 13.0-

The encoding/xml package in Go (all versions) does not correctly preserve the semantics of element namespace prefixes du

The encoding/xml package in Go versions 1.15 and earlier does not correctly preserve the semantics of directives during

The encoding/xml package in Go (all versions) does not correctly preserve the semantics of attribute namespace prefixes

GateOne allows remote attackers to execute arbitrary commands via shell metacharacters in the port field when attempting

QuantConnect Lean versions from 2.3.0.0 to 2.4.0.1 are affected by an insecure deserialization vulnerability due to inse

The Web Administrative Interface in Mobile Viewpoint Wireless Multiplex Terminal (WMT) Playout Server 20.2.8 and earlier

GE Healthcare Imaging and Ultrasound Products may allow specific credentials to be exposed during transport over the net

GE Healthcare Imaging and Ultrasound Products may allow specific credentials to be exposed during transport over the net

SQL Injection in the login page in Online Bus Ticket Reservation 1.0 allows attackers to execute arbitrary SQL commands

A vulnerability in the MIME message handling of the Notes client (versions 9 and 10) could potentially be exploited by a

A vulnerability in the MIME message handling of the Domino server (versions 9 and 10) could potentially be exploited by

An issue was discovered in Car Rental Management System 1.0. An unauthenticated user can perform a file inclusion attack

Directory traversal vulnerability in FileZen versions from V3.0.0 to V4.2.2 allows remote attackers to upload an arbitra

An issue was discovered on Western Digital My Cloud OS 5 devices before 5.07.118. A NAS Admin authentication bypass vuln

An issue was discovered in the IPv6 stack in Contiki through 3.0. There are inconsistent checks for IPv6 header extensio

An issue was discovered in the IPv6 stack in Contiki through 3.0. There is an insufficient check for the IPv6 header len

An issue was discovered in the DNS implementation in Ethernut in Nut/OS 5.1. The length byte of a domain name in a DNS q

An issue was discovered in the DNS implementation in Ethernut in Nut/OS 5.1. The number of DNS queries/responses (set in

An issue was discovered in the DNS implementation in Ethernut in Nut/OS 5.1. The DNS response data length is not checked

An issue was discovered in the DNS implementation in Ethernut in Nut/OS 5.1. There is no check on whether a domain name

An issue was discovered in FNET through 4.6.4. The code for processing resource records in mDNS queries doesn't check fo

An issue was discovered in picoTCP and picoTCP-NG through 1.7.0. The TCP input data processing function in pico_tcp.c do