2020

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a local authenticated attacker to gain elevated priv

Improper Authentication vulnerability in Bitdefender Endpoint Security for Mac allows an unprivileged process to restart

VMware GemFire versions prior to 9.10.0, 9.9.2, 9.8.7, and 9.7.6, and VMware Tanzu GemFire for VMs versions prior to 1.1

Sonatype Nexus Repository Manager OSS/Pro version before 3.25.1 allows Remote Code Execution.

Authentication Bypass Vulnerability RSA MFA Agent 2.0 for Microsoft Windows contains an Authentication Bypass vulnerabil

Faye before version 1.4.0, there is a lack of certification validation in TLS handshakes. Faye uses em-http-request and

In faye-websocket before version 0.11.0, there is a lack of certification validation in TLS handshakes. The `Faye::WebSo

An information disclosure vulnerability has been identified in FlexNet Publisher lmadmin.exe 11.14.0.2. The web portal l

In tgstation-server 4.4.0 and 4.4.1, an authenticated user with permission to download logs can download any file on the

The affected product is vulnerable to an information leak, which may allow an attacker to obtain sensitive information o

A flaw was found in Red Hat Satellite 6 which allows privileged attacker to read cache files. These cache credentials co

A vulnerability in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remot

A vulnerability in specific REST API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated,

A vulnerability in the archive utility of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote

A vulnerability in the Device Manager application of Cisco Data Center Network Manager (DCNM) could allow an unauthentic

An issue was discovered in RIPE NCC RPKI Validator 3.x through 3.1-2020.07.06.14.28. It allows remote attackers to bypas

An issue was discovered in RIPE NCC RPKI Validator 3.x through 3.1-2020.07.06.14.28. Missing validation checks on CRL pr

In SLP Validate (npm package slp-validate) before version 1.2.2, there is a vulnerability to false-positive validation o

In SLPJS (npm package slpjs) before version 0.27.4, there is a vulnerability to false-positive validation outcomes for t

DaviewIndy 8.98.4 and earlier version contain Heap-based overflow vulnerability, triggered when the user opens a malform

DaviewIndy 8.98.4 and earlier version contain Heap-based overflow vulnerability, triggered when the user opens a malform

DaviewIndy 8.98.7 and earlier version contain Use-After-Free vulnerability, triggered when the user opens a malformed sp

An issue was discovered in DP3T-Backend-SDK before 1.1.1 for Decentralised Privacy-Preserving Proximity Tracing (DP3T).

An issue was discovered in Pi-Hole through 5.0. The local www-data user has sudo privileges to execute the pihole core s

Pi-hole 4.4 allows a user able to write to /etc/pihole/dns-servers.conf to escalate privileges through command injection

An insufficient permission check vulnerability exists in Pulse Connect Secure <9.1R8 that allows an attacker to change t

A code injection vulnerability exists in Pulse Connect Secure <9.1R8 that allows an attacker to crafted a URI to perform

An improper authentication vulnerability exists in Pulse Connect Secure <9.1RB that allows an attacker with a users prim

IBM Security Guardium 10.5, 10.6, and 11.1 uses weaker than expected cryptographic algorithms that could allow an attack

A flaw was found in grub2, prior to version 2.06. An attacker may use the GRUB 2 flaw to hijack and tamper the GRUB veri

Use after free issue while processing error notification from camx driver due to not properly releasing the sequence dat

Possible out of bounds read due to a missing bounds check and could lead to local information disclosure in the wifi dri

Memory corruption can occurs in trusted application if offset size from HLOS is more than actual mapped buffer size in S

Memory failure in content protection module due to not having pointer within the scope in Snapdragon Auto, Snapdragon Co

Possible buffer overflow and over read possible due to missing bounds checks for fixed limits if we consider widevine HL

Out of bounds read can happen in diag event set mask command handler when user provided length in the command request is

Register write via debugfs is disabled by default to prevent register writing via debugfs. in Snapdragon Auto, Snapdrago

Device misbehavior may be observed when incorrect offset, length or number of buffers is passed by user space in Snapdra

Array out of bound access can occur in display module due to lack of bound check on input parcel received in Snapdragon

Close and bind operations done on a socket can lead to a Use-After-Free condition. in Snapdragon Auto, Snapdragon Comput

When kernel thread unregistered listener, Use after free issue happened as the listener client`s private data has been a

This affects the package express-fileupload before 1.1.8. If the parseNested option is enabled, sending a corrupt HTTP r

Global TechStream (GTS) for TOYOTA dealers version 15.10.032 and earlier allows an attacker to cause a denial-of-service

The seafile-client client 7.0.8 for Seafile is vulnerable to DLL hijacking because it loads exchndl.dll from the current

beroNet VoIP Gateways before 3.0.16 have a PHP script that allows downloading arbitrary files, including ones with crede

Grandstream HT800 series firmware version 1.0.17.5 and below contain a backdoor in the SSH service. An authenticated rem

Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to a denial of service attack against the TR-

Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to CPU exhaustion due to an infinite loop in

Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to an OS command injection vulnerability. Una

In GNOME Balsa before 2.6.0, a malicious server operator or man in the middle can trigger a NULL pointer dereference and