2020

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConso

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConso

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConso

This vulnerability allows remote attackers to execute arbitrary code on affected installations of installations of Marve

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Marvell QConve

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Marvell QConve

FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, rela

Fossil before 2.10.2, 2.11.x before 2.11.2, and 2.12.x before 2.12.1 allows remote authenticated users to execute arbitr

Softing Industrial Automation all versions prior to the latest build of version 4.47.0, The affected product is vulnerab

GateManager versions prior to 9.2c, The affected product uses a weak hash type, which may allow an attacker to view user

GateManager versions prior to 9.2c, The affected product is vulnerable to an off-by-one error, which may allow an attack

Cellopoint CelloOS v4.1.10 Build 20190922 does not validate URL inputted properly, which allows unauthorized user to lau

Cellopoint CelloOS v4.1.10 Build 20190922 does not validate URL inputted properly. With the cookie of the system adminis

An issue was discovered in includes/webconsole.php in RaspAP 2.5. With authenticated access, an attacker can use a misco

The Metasploit Framework module "auxiliary/admin/http/telpho10_credential_dump" module is affected by a relative path tr

The Metasploit Framework module "post/osx/gather/enum_osx module" is affected by a relative path traversal vulnerability

MineTime through 1.8.5 allows arbitrary command execution via the notes field in a meeting. Could lead to RCE via meetin

This affects the package MintegralAdSDK from 0.0.0. The SDK distributed by the company contains malicious functionality

Squid before 4.13 and 5.x before 5.0.4 allows a trusted peer to perform Denial of Service by consuming all available CPU

IBM Sterling Connect:Direct for UNIX 4.2.0, 4.3.0, 6.0.0, and 6.1.0 is vulnerable to a stack based buffer ovreflow, caus

** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** A Server-Side Request Forgery (SSRF) vulnerability was found in Codiad v1.7.8

** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** A Cross Side Request Forgery (CSRF) vulnerability was found in Codiad v1.7.8 a

A vulnerability in the web-based contract management service interface Ebiz4u of INOGARD could allow an victim user to d

DBHcms v1.2.0 has an Arbitrary file write vulnerability in dbhcms\mod\mod.editor.php $_POST['updatefile'] is filename an

DBHcms v1.2.0 has no CSRF protection mechanism,as demonstrated by CSRF for index.php?dbhcms_pid=-70 can add a user.

DBHcms v1.2.0 has no CSRF protection mechanism,as demonstrated by CSRF for an /index.php?dbhcms_pid=-80&deletemenu=9 can

DBHcms v1.2.0 has a sensitive information leaks vulnerability as there is no security access control in /dbhcms/ext/news

It was found that some PostgreSQL extensions did not use search_path safely in their installation script. An attacker wi

It was found that PostgreSQL versions before 12.4, before 11.9 and before 10.14 did not properly sanitize the search_pat

In OASIS Digital Signature Services (DSS) 1.0, an attacker can control the validation outcome (i.e., trigger either a va

This affects all versions of package github.com/russellhaering/goxmldsig. There is a crash on nil-pointer dereference ca

Cloud Foundry CAPI (Cloud Controller), versions prior to 1.97.0, when used in a deployment where an app domain is also t

NCR SelfServ ATMs running APTRA XFS 05.01.00 or earlier do not authenticate or protect the integrity of USB HID communic

In BIND 9.10.0 -> 9.11.21, 9.12.0 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.10.5-S1 -> 9.11.21-S1 of the BIND 9 Suppor

In BIND 9.14.0 -> 9.16.5, 9.17.0 -> 9.17.3, If a server is configured with both QNAME minimization and 'forward first' t

In BIND 9.15.6 -> 9.16.5, 9.17.0 -> 9.17.3, An attacker who can establish a TCP connection with the server and send data

NCR SelfServ ATMs running APTRA XFS 05.01.00 do not properly validate softare updates for the bunch note acceptor (BNA),

NCR SelfServ ATMs running APTRA XFS 04.02.01 and 05.01.00 implement 512-bit RSA certificates to validate bunch note acce

NCR SelfServ ATMs running APTRA XFS 05.01.00 do not encrypt, authenticate, or verify the integrity of messages between t

The SSH service on ALEOS before 4.12.0, 4.9.5, 4.4.9 allows traffic proxying.

An RPC server is enabled by default on the gateway's LAN of ALEOS before 4.12.0, 4.9.5, and 4.4.9.

An improper privilege management vulnerabitlity exists in ALEOS before 4.11.0, 4.9.4 and 4.4.9. An authenticated user ca

Red Discord Bot before versions 3.3.12 and 3.4 has a Remote Code Execution vulnerability in the Streams module. This exp

In Red Discord Bot before version 3.3.11, a RCE exploit has been discovered in the Trivia module: this exploit allows Di

The management website of the Verint S5120FD Verint_FW_0_42 unit features a CGI endpoint ('ipfilter.cgi') that allows th

A hardcoded credentials vulnerability exists in Verint 5620PTZ Verint_FW_0_42, Verint 4320 V4320_FW_0_23, V4320_FW_0_31,

Moog EXO Series EXVF5C-2 and EXVP7C2-3 units have a hardcoded credentials vulnerability. This could cause a confidential

An issue was discovered in wolfSSL before 4.5.0, when single precision is not employed. Local attackers can conduct a ca

An issue was discovered in wolfSSL before 4.5.0. It mishandles the change_cipher_spec (CCS) message processing logic for

Nessus versions 8.11.0 and earlier were found to maintain sessions longer than the permitted period in certain scenarios