2020

An attacker with knowledge of the modem access number on a NEC UM8000 voicemail system may use SSH tunneling or standard

An exploitable privilege escalation vulnerability exists in the WebPro functionality of Aspire-derived NEC PBXes, includ

Aspire-derived NEC PBXes operating InMail software, including all versions of SV8100, SV9100, SL1100 and SL2100 devices

The WebPro interface in NEC SV9100 software releases 7.0 or higher allows unauthenticated remote attackers to reset all

In auth0 (npm package) versions before 2.27.1, a DenyList of specific keys that should be sanitized from the request obj

In TYPO3 CMS greater than or equal to 9.0.0 and less than 9.5.20, and greater than or equal to 10.0.0 and less than 10.4

In TYPO3 CMS greater than or equal to 9.0.0 and less than 9.5.20, and greater than or equal to 10.0.0 and less than 10.4

cloud-init as managed by snapd on Ubuntu Core 16 and Ubuntu Core 18 devices was run without restrictions on every boot,

TeamViewer Desktop for Windows before 15.8.3 does not properly quote its custom URI handlers. A malicious website could

IBM Tivoli Key Lifecycle Manager does not require that users should have strong passwords by default, which makes it eas

IBM Maximo Asset Management 7.6.0.1 and 7.6.0.2 is vulnerable to an XML External Entity Injection (XXE) attack when proc

SICK Package Analytics software up to and including version V04.0.0 are vulnerable due to incorrect default permissions

OpenClinic GA 5.09.02 and 5.89.05b does not properly verify uploaded files, which may allow a low-privilege user to uplo

This affects the package Gerapy from 0 and before 0.9.3. The input being passed to Popen, via the project_configure endp

A low-privilege user may use SQL syntax to write arbitrary files to the OpenClinic GA 5.09.02 and 5.89.05b server, which

OpenClinic GA 5.09.02 and 5.89.05b includes arbitrary local files specified within its parameter and executes some files

An exploitable denial of service vulnerability exists in the freeDiameter functionality of freeDiameter 1.3.2. A special

In Shopware before 6.2.3, the database password is leaked to an unauthenticated user when a DriverException occurs and v

Shopware before 6.2.3 is vulnerable to a Server-Side Request Forgery (SSRF) in its "Mediabrowser upload by URL" feature.

Concrete5 before 8.5.3 allows Unrestricted Upload of File with Dangerous Type such as a .phar file.

NCP Secure Enterprise Client before 10.15 r47589 allows a symbolic link attack on enumusb.reg via Support Assistant.

Gambio GX before 4.0.1.0 allows admin/admin.php CSRF.

In imap_scan_tree_recursive in Claws Mail through 3.17.6, a malicious IMAP server can trigger stack consumption because

Grin 3.0.0 before 4.0.0 has insufficient validation of data related to Mimblewimble.

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Veeam ONE 10.0

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Veeam ONE 10.0

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R670

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R670

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R670

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R670

This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected i

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Pan

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Pan

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Pan

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Pan

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Pan

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Pan

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Pan

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Pan

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Pan

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Pan

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Pan

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Pan

Incorrect access control in webs in Ruckus Wireless Unleashed through 200.7.10.102.92 allows a remote attacker to leak s

Insecure permissions in emfd/libemf in Ruckus Wireless Unleashed through 200.7.10.102.92 allow a remote attacker to over

webs in Ruckus Wireless Unleashed through 200.7.10.102.92 allows a remote attacker to cause a denial of service (Segment

rConfig 3.9.5 is vulnerable to SQL injection. A remote authenticated attacker could send crafted SQL statements to the d