2020

The web application of Kyocera printer (ECOSYS M2640IDW) is affected by Stored XSS vulnerability, discovered in the addi

An Arbitrary File Upload is discovered in SourceCodester Tourism Management System 1.0 allows the user to conduct remote

An issue was discovered in SourceCodester Simple Grocery Store Sales And Inventory System 1.0. There was authentication

UPNP Service listening on port 5555 in Genexis Platinum 4410 Router V2.1 (P4410-V2–1.34H) has an action 'X_GetAccess' wh

SourceCodester Online Clothing Store 1.0 is affected by an arbitrary file upload via the image upload feature of Product

SourceCodester Online Clothing Store 1.0 is affected by a cross-site scripting (XSS) vulnerability via a Offer Detail fi

SourceCodester Online Clothing Store 1.0 is affected by a SQL Injection via the txtUserName parameter to login.php.

Path traversal vulnerability in package upload functionality in GitLab CE/EE starting from 12.8 allows an attacker to sa

An issue has been discovered in GitLab EE affecting all versions starting from 8.12. A regular expression related to a f

An issue has been discovered in GitLab EE affecting all versions starting from 10.2. Required CODEOWNERS approval could

Cross-site scripting (XSS) vulnerability in Dashboards section in Kaa IoT Platform v1.2.0 allows remote attackers to inj

Cross domain policies in Taskcafe Project Management tool before version 0.1.0 and 0.1.1 allows remote attackers to acce

Insufficient permission checks in scheduled pipeline API in GitLab CE/EE 13.0+ allows an attacker to read variable names

CSRF in runner administration page in all versions of GitLab CE/EE allows an attacker who's able to target GitLab instan

A vulnerability in Apache OpenOffice scripting events allows an attacker to construct documents containing hyperlinks po

Use of an undocumented user in BASETech GE-131 BT-1837836 firmware 20180921 allows remote attackers to view the video st

Unprotected Storage of Credentials vulnerability in BASETech GE-131 BT-1837836 firmware 20180921 allows local users to g

A predictable device ID in BASETech GE-131 BT-1837836 firmware 20180921 allows unauthenticated remote attackers to conne

Use of default credentials for the telnet server in BASETech GE-131 BT-1837836 firmware 20180921 allows remote attackers

Cleartext Transmission of Sensitive Information vulnerability in BASETech GE-131 BT-1837836 firmware 20180921 exists whi

In BASETech GE-131 BT-1837836 firmware 20180921, the web-server on the system is configured with the option “DocumentRoo

A stored cross-site scripting (XSS) vulnerability in LimeSurvey before and including 3.21.1 allows authenticated users w

In fastadmin V1.0.0.20191212_beta, when a user with administrator rights has logged in, a malicious parameter can be pas

Improper input validation vulnerability exists in TOBESOFT XPLATFORM which could cause arbitrary .hta file execution whe

The add artwork functionality in ARTWORKS GALLERY IN PHP, CSS, JAVASCRIPT, AND MYSQL 1.0 allows remote attackers to uplo

The edit profile functionality in ARTWORKS GALLERY IN PHP, CSS, JAVASCRIPT, AND MYSQL 1.0 allows remote attackers to upl

In Progress MOVEit Transfer before 2020.1, a malicious user could craft and store a payload within the application. If a

QED ResourceXpress Qubi3 devices before 1.40.9 could allow a local attacker (with physical access to the device) to obta

The package y18n before 3.2.2, 4.0.1 and 5.0.5, is vulnerable to Prototype Pollution.

Multiple vulnerabilities in the Java deserialization function that is used by Cisco Security Manager could allow an unau

A vulnerability in Cisco Security Manager could allow an unauthenticated, remote attacker to gain access to sensitive in

A vulnerability in Cisco Security Manager could allow an unauthenticated, remote attacker to access sensitive informatio

BinaryNights ForkLift 3.4 was compiled with the com.apple.security.cs.disable-library-validation flag enabled which allo

Persistent cross-Site Scripting vulnerability on Micro Focus IDOL product, affecting all version prior to version 12.7.

Reflected Cross Site scripting vulnerability on Micro Focus Filr product, affecting version 4.2.1. The vulnerability cou

A flaw in ICMP packets in the Linux kernel may allow an attacker to quickly scan open UDP ports. This flaw allows an off

BinaryNights ForkLift 3.x before 3.4 has a local privilege escalation vulnerability because the privileged helper tool i

It was found that Keycloak before version 12.0.0 would permit a user with only view-profile role to manage the resources

Arbitrary code execution vulnerability on Micro Focus ArcSight Logger product, affecting all version prior to 7.1.1. The

A flaw was found in Keycloak before version 12.0.0, where it is possible to add unsafe schemes for the redirect_uri para

Certain SAST CiConfiguration information could be viewed by unauthorized users in GitLab EE starting with 13.3. This inf

Cross-Site Scripting vulnerability on Micro Focus ArcSight Logger product, affecting version 7.1. The vulnerability coul

A vulnerability in the internal Kubernetes agent api in GitLab CE/EE version 13.3 and above allows unauthorized access t

A potential DOS vulnerability was discovered in GitLab CE/EE starting with version 12.6. The container registry name che

When importing repos via URL, one time use git credentials were persisted beyond the expected time window in Gitaly 1.79

Private group info is leaked leaked in GitLab CE/EE version 10.2 and above, when the project is moved from private to pu

Cross-Site Scripting vulnerability on Micro Focus ArcSight Logger product, affecting all version prior to 7.1.1. The vul

In PrestaShop Product Comments before version 4.2.0, an attacker could inject malicious web code into the users' web bro

In PrestaShop before version 1.7.6.9 an attacker is able to list all the orders placed on the website without being logg

An unrestricted file upload issue in HorizontCMS 1.0.0-beta allows an authenticated remote attacker to upload PHP code t