2020

In teler before version 0.0.1, if you run teler inside a Docker container and encounter `errors.Exit` function, it will

A DLL hijacking vulnerability in the B. Braun OnlineSuite Version AP 3.0 and earlier allows local attackers to execute c

A relative path traversal attack in the B. Braun OnlineSuite Version AP 3.0 and earlier allows unauthenticated attackers

An Excel Macro Injection vulnerability exists in the export feature in the B. Braun OnlineSuite Version AP 3.0 and earli

SANtricity OS Controller Software versions 11.30 and higher are susceptible to a vulnerability which allows an unauthent

There is a remote escalation of privilege possible for a malicious user that has a OneView account in OneView and Synerg

UNIX Symbolic Link (Symlink) Following in TP-Link Archer A7(US)_V5_200721 allows an authenticated admin user, with physi

IBM UrbanCode Deploy (UCD) 6.2.7.3, 6.2.7.4, 7.0.3.0, and 7.0.4.0 could disclose sensitive information to an authenticat

IBM UrbanCode Deploy (UCD) 6.2.7.3, 6.2.7.4, 7.0.3.0, and 7.0.4.0 could allow a remote attacker to obtain sensitive info

IBM UrbanCode Deploy (UCD) 6.2.7.3, 6.2.7.4, 7.0.3.0, and 7.0.4.0 could allow an authenticated user to bypass security.

Synopsys hub-rest-api-python (aka blackduck on PyPI) version 0.0.25 - 0.0.52 does not validate SSL certificates in certa

An issue was discovered in PlayJava in Play Framework 2.6.0 through 2.8.2. The body parsing of HTTP requests eagerly par

In Play Framework 2.6.0 through 2.8.2, stack consumption can occur because of unbounded recursion during parsing of craf

In Play Framework 2.6.0 through 2.8.2, data amplification can occur when an application accepts multipart/form-data JSON

Visual Components (owned by KUKA) is a robotic simulator that allows simulating factories and robots in order toimprove

Visual Components (owned by KUKA) is a robotic simulator that allows simulating factories and robots in order toimprove

MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerbero

eth_get_gso_type in net/eth.c in QEMU 4.2.1 allows guest OS users to trigger an assertion failure. A guest can crash the

ati_2d_blt in hw/display/ati_2d.c in QEMU 4.2.1 can encounter an outside-limits situation in a calculation. A guest can

An issue was discovered in ioapic_lazy_update_eoi in arch/x86/kvm/ioapic.c in the Linux kernel before 5.9.2. It has an i

The JWT library in NATS nats-server before 2.1.9 has Incorrect Access Control because of how expired credentials are han

The JWT library in NATS nats-server before 2.1.9 allows a denial of service (a nil dereference in Go code).

In SaltStack Salt through 3002, salt-netapi improperly validates eauth credentials and tokens. A user can bypass authent

The TLS module within SaltStack Salt through 3002 creates certificates with weak file permissions.

An issue was discovered in SaltStack Salt through 3002. Sending crafted web requests to the Salt API, with the SSH clien

Cellinx NVT Web Server 5.0.0.014b.test 2019-09-05 allows a remote user to run commands as root via SetFileContent.cgi be

Joplin 1.2.6 for Desktop allows XSS via a LINK element in a note.

An issue was discovered in Asterisk Open Source 13.x before 13.37.1, 16.x before 16.14.1, 17.x before 17.8.1, and 18.x b

libmaxminddb before 1.4.3 has a heap-based buffer over-read in dump_entry_data_list in maxminddb.c.

Studyplus App for Android v6.3.7 and earlier and Studyplus App for iOS v8.29.0 and earlier use a hard-coded API key for

Resource management error vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT

Improper neutralization of argument delimiters in a command ('Argument Injection') vulnerability in TCP/IP function incl

Improper access control vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT14

NULL pointer dereferences vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT

Session fixation vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTBD

Buffer overflow vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTBDE

Improper input validation vulnerability in Cybozu Garoon 5.0.0 to 5.0.2 allows a remote authenticated attacker to delete

In tmux before version 3.1c the function input_csi_dispatch_sgr_colon() in file input.c contained a stack-based buffer-o

Ubuntu's packaging of libvirt in 20.04 LTS created a control socket with world read and write permissions. An attacker c

A local elevation of privilege using physical access security vulnerability was found in HPE Proliant Gen10 Servers usin

A ZTE product is impacted by an information leak vulnerability. An attacker could use this vulnerability to obtain the a

Sensitive information disclosure vulnerability in Micro Focus Self Service Password Reset (SSPR) product. The vulnerabil

A Red Hat only CVE-2020-12352 regression issue was found in the way the Linux kernel's Bluetooth stack implementation ha

A Red Hat only CVE-2020-12351 regression issue was found in the way the Linux kernel's Bluetooth implementation handled

Apache Shiro before 1.7.0, when using Apache Shiro with Spring, a specially crafted HTTP request may cause an authentica

An exploitable local privilege elevation vulnerability exists in the file system permissions of Moxa MXView series 3.1.8

An exploitable local privilege elevation vulnerability exists in the file system permissions of Moxa MXView series 3.1.8

Check Point Endpoint Security for Windows before E84.10 can reach denial of service during clean install of the client w

In BIG-IP Advanced WAF and FPS versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, and 14.1.0-14.1.2.7, under some circumstances,

In BIG-IP versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, and 14.1.0-14.1.2.7, undisclosed TMUI page contains a stored cross