2020

BD Alaris PC Unit, Model 8015, Versions 9.33.1 and earlier and BD Alaris Systems Manager, Versions 4.33 and earlier The

The affected product transmits unencrypted sensitive information, which may allow an attacker to access this information

The affected product does not properly validate input, which may allow an attacker to execute a denial-of-service attack

In fastadmin-tp6 v1.0, in the file app/admin/controller/Ajax.php the 'table' parameter passed is not filtered so a malic

HUAWEI Mate 30 versions earlier than 10.1.0.159(C00E159R7P2) have a vulnerability of improper buffer operation. Due to i

Some Huawei products have a command injection vulnerability. Due to insufficient input validation, an attacker with high

A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD f

A heap overflow vulnerability exists in the Pixar OpenUSD 20.05 while parsing compressed value rep arrays in binary USD

A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software USDC file format SPECS section decompressi

A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD f

A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD f

A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD f

IBM InfoSphere Information Server 11.7 stores sensitive information in the browser's history that could be obtained by a

SAP Fiori Launchpad (News tile Application), versions - 750,751,752,753,754,755, allows an unauthorized attacker to use

There is a denial of service vulnerability in some Huawei products. There is no protection against the attack scenario o

An XML external entity (XXE) vulnerability in Avaya WebLM admin interface allows authenticated users to read arbitrary f

A Cross Site Scripting (XSS) Vulnerability on the Unified Portal Client (web client) used in Avaya Equinox Conferencing

A cross-site scripting (XSS) vulnerability in the Color Dialog plugin for CKEditor 4.15.0 allows remote attackers to run

Exposed Erlang Cookie could lead to Remote Command Execution (RCE) attack. Communication between Erlang nodes is done by

Untangle Firewall NG before 16.0 uses MD5 for passwords.

SQL Injection issues in various ASPX pages of ResourceXpress Meeting Monitor 4.9 could lead to remote code execution and

A reflected cross-site scripting (XSS) vulnerability exists in the TranzWare Payment Gateway 3.1.12.3.2. A remote unauth

A reflected cross-site scripting (XSS) vulnerability exists in the TranzWare Payment Gateway 3.1.12.3.2. A remote unauth

A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All ver

An unrestricted file-upload issue in EditLaunchPadDialog.aspx in Ivanti Endpoint Manager 2019.1 and 2020.1 allows an aut

A potential vulnerability in a dynamically loaded AMD driver in AMD VBIOS Flash Tool SDK may allow any authenticated use

The Trusted Platform Modules (TPM) reference software may not properly track the number of times a failed shutdown happe

A potential vulnerability in the AMD extension to Linux "hwmon" service may allow an attacker to use the Linux-based Run

Improper input validation in the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated us

An unrestricted file upload issue in FlexDotnetCMS before v1.5.9 allows an authenticated remote attacker to upload and e

Incorrect Access Control in the FileEditor (/Admin/Views/FileEditor/) in FlexDotnetCMS before v1.5.11 allows an authenti

In Sentrifugo 3.2, admin can edit employee's informations via this endpoint --> /sentrifugo/index.php/empadditionaldetai

In Sentrifugo 3.2, users can share an announcement under "Organization -> Announcements" tab. Also, in this page, users

In Sentrifugo 3.2, users can upload an image under "Assets -> Add" tab. This "Upload Images" functionality is suffered f

Insecure inherited permissions in firmware update tool for some Intel(R) NUCs may allow an authenticated user to potenti

Incorrect default permissions in the Intel(R) DSA before version 20.8.30.6 may allow an authenticated user to potentiall

Incorrect default permissions in the Intel(R) Board ID Tool version v.1.01 may allow an authenticated user to potentiall

Improper Restriction of XML External Entity Reference in subsystem forIntel(R) Quartus(R) Prime Pro Edition before versi

In Arm software implementing the Armv8-M processors (all versions), the stack selection mechanism could be influenced by

Improper permissions in the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated user to

Improper access control in the Intel(R) XTU before version 6.5.1.360 may allow an authenticated user to potentially enab

Improper input validation in the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated us

Improper input validation in the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated us

Improper permissions in the installer for the Intel(R) Battery Life Diagnostic Tool before version 1.0.7 may allow an au

Improper permissions in the installer for the Intel(R) Data Center Manager Console before version 3.6.2 may allow an aut

Improper buffer restrictions in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escala

Insecure default variable initialization in firmware for some Intel(R) NUCs may allow an authenticated user to potential

Improper permissions in the installer for the Intel(R) Processor Identification Utility before version 6.4.0603 may allo

Improper permissions in the installer for the Intel(R) Advisor tools before version 2020 Update 2 may allow an authentic

Insufficiently protected credentials in the Intel(R) QAT for Linux before version 1.7.l.4.10.0 may allow an authenticate