2020

An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions before 5.2.0. This issue o

controller/controller-comments.php in WP GDPR plugin through 2.1.1 has unauthenticated stored XSS.

The Chamber Dashboard Business Directory plugin 3.2.8 for WordPress allows XSS.

The includes/gateways/stripe/includes/admin/admin-actions.php in GiveWP plugin through 2.5.9 for WordPress allows unauth

lara-google-analytics.php in Lara Google Analytics plugin through 2.0.4 for WordPress allows authenticated stored XSS.

Dashboards and progressiveProfileForms in ForgeRock Identity Manager before 7.0.0 are vulnerable to stored XSS. The vuln

Dolibarr 11.0.4 is affected by multiple stored Cross-Site Scripting (XSS) vulnerabilities that could allow remote authen

The flash memory readout protection in Gigadevice GD32F103 devices allows physical attackers to extract firmware via the

Apex Microelectronics APM32F103 devices allow physical attackers to execute arbitrary code via a power glitch and a spec

Gigadevice GD32F103 and GD32F130 devices allow physical attackers to extract data via the probing of easily accessible b

The flash memory readout protection in Gigadevice GD32VF103 devices allows physical attackers to extract firmware via th

Gigadevice GD32F130 devices allow physical attackers to escalate their debug interface permissions via fault injection i

The flash memory readout protection in China Key Systems & Integrated Circuit CKS32F103 devices allows physical attacker

STMicroelectronics STM32F103 devices through 2020-05-20 allow physical attackers to execute arbitrary code via a power g

The security protection in Gigadevice GD32F103 devices allows physical attackers to redirect the control flow and execut

The flash memory readout protection in China Key Systems & Integrated Circuit CKS32F103 devices allows physical attacker

The flash memory readout protection in Apex Microelectronics APM32F103 devices allows physical attackers to extract firm

RabbitMQ versions 3.8.x prior to 3.8.7 are prone to a Windows-specific binary planting security vulnerability that allow

An issue was discovered in Collabtive 3.0 and later. managefile.php is vulnerable to XSS: when the action parameter is s

The Bluetooth Low Energy (BLE) controller implementation in Espressif ESP-IDF 4.0 through 4.2 (for ESP32 devices) return

The Bluetooth Low Energy (BLE) controller implementation in Espressif ESP-IDF 4.2 and earlier (for ESP32 devices) does n

OX App Suite 7.10.3 and earlier allows XSS via text/x-javascript, text/rdf, or a PDF document.

OX App Suite 7.10.3 and earlier allows SSRF, related to the mail account API and the /folder/list API.

OX App Suite 7.10.3 and earlier has Incorrect Access Control via an /api/subscriptions request for a snippet containing

The RSS application on THOMSON THT741FTA 2.2.1 and Philips DTR3502BFTA DVB-T2 2.2.1 set-top boxes doesn't validate the S

IBM Spectrum Scale V5.0.0.0 through V5.0.4.3 and V4.2.0.0 through V4.2.3.21 could allow a local attacker to cause a deni

An issue was discovered in the Elementor plugin through 2.9.13 for WordPress. An authenticated attacker can achieve stor

The Blubrry subscribe-sidebar (aka Subscribe Sidebar) plugin 1.3.1 for WordPress allows subscribe_sidebar.php&status= re

XSS on the PIX-Link Repeater/Router LV-WR07 with firmware v28K.Router.20170904 allows attackers to steal credentials wit

Mara CMS 7.5 allows cross-site scripting (XSS) in contact.php via the theme or pagetheme parameters.

osTicket before 1.14.3 allows XSS via a crafted filename to DraftAjaxAPI::_uploadInlineImage() in include/ajax.draft.php

A buffer over-read vulnerability exists in bl <4.0.3, <3.0.1, <2.2.1, and <1.2.3 which could allow an attacker to supply

managers/socketManager.ts in PreMiD through 2.1.3 has a locally hosted socketio web server (port 3020) open to all origi

Hoosk Codeigniter CMS before 1.7.2 is affected by a Cross Site Request Forgery (CSRF). When an attacker induces authenti

IBM Resilient SOAR 38 uses incomplete blacklisting for input validation which allows attackers to bypass application con

IBM Resilient SOAR V38.0 users may experience a denial of service of the SOAR Platform due to a insufficient input valid

Grafana <= 6.4.3 has an Arbitrary File Read vulnerability, which could be exploited by an authenticated attacker that ha

Cross-site scripting vulnerability in XooNIps 3.48 and earlier allows remote attackers to inject an arbitrary script via

NITORI App for Android versions 6.0.4 and earlier and NITORI App for iOS versions 6.0.2 and earlier allow remote attacke

Cross-site request forgery (CSRF) vulnerability in NETGEAR switching hubs (GS716Tv2 Firmware version 5.4.2.30 and earlie

An improper access control vulnerability was identified in GitHub Enterprise Server that allowed authenticated users of

In JetBrains YouTrack versions before 2020.3.4313, 2020.2.11008, 2020.1.11011, 2019.1.65514, 2019.2.65515, and 2019.3.65

Dell EMC Isilon OneFS version 8.2.2 and Dell EMC PowerScale OneFS version 9.0.0 contains a buffer overflow vulnerability

An issue was discovered in certain WSO2 products. The Try It tool allows Reflected XSS. This affects API Manager through

An issue was discovered in certain WSO2 products. The Try It tool allows Reflected XSS. This affects API Manager 2.2.0,

eonweb in EyesOfNetwork before 5.3-7 does not properly escape the username on the /module/admin_logs page, which might a

Laborator Neon dashboard v3 is affected by stored Cross Site Scripting (XSS) via the chat tab.

Online Hotel Booking System Pro PHP Version 1.3 has Persistent Cross-site Scripting in Customer registration-form all-ta

Michael-design iChat Realtime PHP Live Support System 1.6 has persistent Cross-site Scripting via chat,text-filed tags.

DesignMasterEvents Conference management 1.0.0 has cross site scripting via the 'certificate.php'