2020

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. In certain cases an invalid usernam

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. Project reporters and above could s

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. API Authorization Using Outdated CI

An issue was discovered in KaiOS 1.0, 2.5, and 2.5.12.5. The pre-installed Email application is vulnerable to HTML and J

Codoforum 4.8.3 allows HTML Injection in the 'admin dashboard Manage users Section.'

Wordpress Plugin Store / Mike Rooijackers Recall Products V0.8 is affected by: Cross Site Scripting (XSS) via the 'Recal

Wordpress Plugin Store / AccessPress Themes WP Floating Menu V1.3.0 is affected by: Cross Site Scripting (XSS) via the i

Wordpress Plugin Store / SoftradeWeb SNC WP SMART CRM V1.8.7 is affected by: Cross Site Scripting via the Business Name

MediaKind (formerly Ericsson) RX8200 5.13.3 devices are vulnerable to multiple reflected and stored XSS. An attacker has

A timing side channel was discovered in AT91bootstrap before 3.9.2. It can be exploited by attackers with physical acces

A vulnerability that can hijack a DLL file that is loaded during products(LGPCSuite_Setup, IPSFULLHD, LG_ULTRAWIDE, ULTR

Sagemcom F@ST3686 v1.0 HUN 3.97.0 has XSS via RgDiagnostics.asp, RgDdns.asp, RgFirewallEL.asp, RgVpnL2tpPptp.asp.

Rukovoditel Project Management app 2.6 is affected by: Cross Site Scripting (XSS). An attacker can add JavaScript code t

Gazie 7.29 is affected by: Cross Site Scripting (XSS) via http://192.168.100.7/gazie/modules/config/admin_utente.php?use

The VPN service in AVAST SecureLine before 5.6.4982.470 allows local users to write to arbitrary files via an Object Man

In wp-includes/comment-template.php in WordPress before 5.4.2, comments from a post or page could sometimes be seen in t

A race condition between hugetlb sysctl handlers in mm/hugetlb.c in the Linux kernel before 5.8.8 could be used by local

The rbd block device driver in drivers/block/rbd.c in the Linux kernel through 5.8.9 used incomplete permission checking

An issue was discovered on Samsung mobile devices with Q(10.0) (Exynos and MediaTek chipsets) software. Unauthenticated

An issue was discovered in the DBI module before 1.632 for Perl. DBD::File drivers can open files from folders other tha

An issue was discovered in the DBI module before 1.628 for Perl. Stack corruption occurs when a user-defined function re

An issue was discovered in the DBI module before 1.632 for Perl. Using many arguments to methods for Callbacks may lead

A flaw was found in the Ansible Engine when using module_args. Tasks executed with check mode (--check-mode) do not prop

An Improper Output Neutralization for Logs flaw was found in Ansible when using the uri module, where sensitive data is

<p>An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly han

<p>A information disclosure vulnerability exists when TLS components use weak hash algorithms. An attacker who successfu

<p>An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory.</p>

<p>An elevation of privilege vulnerability exists when the Connected User Experiences and Telemetry Service improperly h

<p>An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attac

<p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speci

<p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speci

<p>An elevation of privilege vulnerability exists in the way that the Wininit.dll handles objects in memory. An attacker

<p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speci

<p>A tampering vulnerability exists when Microsoft SharePoint Server fails to properly handle profile data. An attacker

<p>An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory. An atta

<p>An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of it

<p>An information disclosure vulnerability exists when the win32k component improperly provides kernel information. An a

<p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speci

<p>An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory.

<p>A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web r

<p>A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memor

<p>A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memor

<p>An elevation of privilege vulnerability exists in the way that the StartTileData.dll handles file creation in protect

<p>An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys. An attacker who s

<p>An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory.</p> <p>To

<p>An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles file op

<p>An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles data op

<p>An elevation of privilege vulnerability exists when the Windows Language Pack Installer improperly handles file opera

<p>An information disclosure vulnerability exists when StartTileData.dll improperly handles objects in memory. An attack

<p>An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of it