2020

The Elementor Page Builder plugin before 2.8.4 for WordPress does not sanitize data during creation of a new template.

The following versions of MAXPRO VMS and NVR, MAXPRO VMS:HNMSWVMS prior to Version VMS560 Build 595 T2-Patch, HNMSWVMSLT

The following versions of MAXPRO VMS and NVR, MAXPRO VMS:HNMSWVMS prior to Version VMS560 Build 595 T2-Patch, HNMSWVMSLT

In schema-inspector before 1.6.9, a maliciously crafted JavaScript object can bypass the `sanitize()` and the `validate(

BibTeX-ruby before 5.1.0 allows shell command injection due to unsanitized user input being passed directly to the built

The wpa_supplicant system service in Samsung Galaxy Gear series allows an unprivileged process to fully control the Wi-F

ImpressPages CMS v1.0.12 has Unspecified Remote Code Execution (fixed in v1.0.13)

An issue was discovered in the Huge-IT gallery-images plugin before 1.9.0 for WordPress. The headers Client-Ip and X-For

The papercrop gem before 0.3.0 for Ruby on Rails does not properly handle crop input.

An issue was discovered in Simplejobscript.com SJS before 1.65. There is unauthenticated SQL injection via the search en

The forDNN.UsersExportImport module before 1.2.0 for DNN (formerly DotNetNuke) allows an unprivileged user to import (cr

Prizm Content Connect 5.1 has an Arbitrary File Upload Vulnerability

Jara 1.6 has a SQL injection vulnerability.

Heap buffer overflow can occur while parsing invalid MKV clip which is not standard and have invalid vorbis codec data i

Integer overflow occurs while playing the clip which is nonstandard in Snapdragon Auto, Snapdragon Compute, Snapdragon C

Possible buffer overflow when byte array receives incorrect input from reading source as array is not null terminated in

While parsing invalid super index table, elements within super index table may exceed total chunk size and invalid data

Buffer overflow occur while playing the clip which is nonstandard due to lack of offset length check in Snapdragon Auto,

Buffer overflow occur while playing the clip which is nonstandard due to lack of check of size duration in Snapdragon Au

Buffer overflow occurs while processing invalid MKV clip, which has invalid EBML size in Snapdragon Auto, Snapdragon Com

Buffer overflow can occur while processing clip due to lack of check of object size before parsing in Snapdragon Auto, S

NULL is assigned to local instance of audio device pointer after free instead of global static pointer and can lead to u

Buffer over-read can occur while playing the video clip which is not standard in Snapdragon Auto, Snapdragon Compute, Sn

Null-pointer dereference issue can occur while calculating string length when source string length is zero in Snapdragon

KMS Controls BAC-A1616BC BACnet devices have a cleartext password of snowman in the BACKDOOR_NAME variable in the BC_Log

Directory traversal vulnerability in the agentLogUploader servlet in ZOHO ManageEngine Desktop Central (DC) and Desktop

Eclipse Memory Analyzer version 1.9.1 and earlier is subject to a cross site scripting (XSS) vulnerability when generati

An issue was discovered in Maarch RM before 2.5. A path traversal vulnerability allows an unauthenticated remote attacke

In SaltStack Salt through 2019.2.0, the salt-api NET API with the ssh client enabled is vulnerable to command injection.

The WordPress plugin, WP Database Reset through 3.1, contains a flaw that allowed any unauthenticated user to reset any

A vulnerability has been identified in SINEMA Server (All versions < V14.0 SP2 Update 1). Incorrect session validation c

EMC RepliStor Server Service before ESA-09-003 has a DoASOCommand Remote Code Execution Vulnerability. The flaw exists w

Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Hierarchy Diagrammers). Suppo

Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Hierarchy Diagrammers). Suppo

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching,CacheStore,Invocation). Su

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Suppor

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Application Container - Java

Directory traversal vulnerability in Thomson Reuters for FATCA before 5.2 allows remote attackers to execute arbitrary f

Systrace before 1.6.0 has insufficient escape policy enforcement.

Simple Machine Forum (SMF) versions 1.0.4 and earlier have an SQL injection vulnerability that allows remote attackers t

Buffer overflow in the chat server in KiTTY Portable 0.65.0.2p and earlier allows remote attackers to execute arbitrary

A security feature bypass vulnerability exists in Microsoft OneDrive App for Android.This could allow an attacker to byp

A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.N

A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated atta

A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated atta

An SQL Injection vulnerability exists in Drupal 6.20 with Data 6.x-1.0-alpha14 due to insufficient sanitization of table

A Code Execution vulnerability exists the attachment parameter to index.php in Jcow CMS 4.x to 4.2 and 5.2 to 5.2.

Freelancy v1.0.0 allows remote command execution via the "file":"data:application/x-php;base64 substring (in conjunction

The phase_one_correct function in Libraw before 0.17.1 allows attackers to cause memory errors and possibly execute arbi

Array index error in smal_decode_segment function in LibRaw before 0.17.1 allows context-dependent attackers to cause me