2020

A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an authent

A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthe

A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthe

A vulnerability in the Device Manager application of Cisco Data Center Network Manager (DCNM) could allow an authenticat

A potential security vulnerability has been identified in HPE Intelligent Provisioning, Service Pack for ProLiant, and H

In Traefik before versions 1.7.26, 2.2.8, and 2.3.0-rc3, there exists a potential open redirect vulnerability in Traefik

A Stored XSS vulnerability exists in Nagios Log Server before 2.1.7 via the Notification Methods -> Email Users menu.

HashiCorp Terraform Enterprise up to v202006-1 contained a default signup page that allowed user registration even when

A path traversal vulnerability exists in Pulse Connect Secure <9.1R8 that allowed an authenticated attacker via the admi

A path traversal vulnerability exists in Pulse Connect Secure <9.1R8 which allows an authenticated attacker to read arbi

A denial of service vulnerability exists in Pulse Connect Secure <9.1R8 that allows an authenticated attacker to perform

A cross site scripting (XSS) vulnerability in Pulse Connect Secure <9.1R8 allowed attackers to exploit in the URL used f

An information disclosure vulnerability in meeting of Pulse Connect Secure <9.1R8 allowed an authenticated end-users to

An information exposure vulnerability exists in UniFi Protect before v1.13.4-beta.5 that allowed unauthenticated attacke

A cross site scripting (XSS) vulnerability exists in Pulse Connect Secure <9.1R5 on the PSAL Page.

Improper check of inputs in Nextcloud Preferred Providers app v1.6.0 allowed to perform a denial of service attack when

A denial of service vulnerability exists in Fastify v2.14.1 and v3.0.0-rc.4 that allows a malicious user to trigger reso

IBM Security Guardium 10.5, 10.6, and 11.1 could disclose sensitive information on the login page that could aid in furt

There's an issue with grub2 in all versions before 2.06 when handling squashfs filesystems containing a symbolic link wi

libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if ssh_buffer_new returns NULL.

In grub2 versions before 2.06 the grub memory allocator doesn't check for possible arithmetic overflows on the requested

In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with a NULL pointer derefere

Integer overflows were discovered in the functions grub_cmd_initrd and grub_initrd_init in the efilinux component of GRU

GRUB2 contains a race condition in grub_script_function_create() leading to a use-after-free vulnerability which can be

GRUB2 fails to validate kernel signature when booted directly without shim, allowing secure boot to be bypassed. This on

An attacker with access to an InMail voicemail box equipped with the find me/follow me feature on Aspire-derived NEC PBX

It was discovered that snapctl user-open allowed altering the $XDG_DATA_DIRS environment variable when calling the syste

The Kubernetes ingress-nginx component prior to version 0.28.0 allows a user with the ability to create namespaces and t

The dlf (aka Kitodo.Presentation) extension before 3.1.2 for TYPO3 allows XSS.

IBM Planning Analytics Local 2.0.0 through 2.0.9.1 is vulnerable to cross-site scripting. This vulnerability allows user

IBM Planning Analytics Local 2.0.0 through 2.0.9.1 could allow a remote attacker to hijack the clicking action of the vi

IBM Tivoli Key Lifecycle Manager 3.0.1 and 4.0 could disclose sensitive information due to responding to unauthenticated

IBM Tivoli Key Lifecycle Manager 3.0.1 and 4.0 could allow a remote attacker to obtain sensitive information when a deta

IBM Tivoli Key Lifecycle Manager 3.0.1 and 4.0 uses a protection mechanism that relies on the existence or values of an

Passwords are stored in plain text within the configuration of SICK Package Analytics software up to and including V04.1

An attacker may bypass permission/authorization checks in OpenClinic GA 5.09.02 and 5.89.05b by ignoring the redirect of

Magento versions 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier have a security mitigation bypass vulnerability. Success

Magento versions 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier have an observable timing discrepancy vulnerability. Suc

Magento versions 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier have a path traversal vulnerability. Successful exploita

OpenClinic GA 5.09.02 and 5.89.05b does not properly neutralize user-controllable input, which may allow the execution o

OpenClinic GA 5.09.02 and 5.89.05b stores passwords using inadequate hashing complexity, which may allow an attacker to

Directory traversal vulnerability in KonaWiki 3.1.0 and earlier allows remote attackers to read arbitrary files via unsp

Cross-site scripting vulnerability in KonaWiki 3.1.0 and earlier allows remote attackers to execute an arbitrary script

Cross-site scripting vulnerability in KonaWiki 2.2.0 and earlier allows remote attackers to execute an arbitrary script

In Shopware before 6.2.3, authenticated users are allowed to use the Mediabrowser fileupload feature to upload SVG image

Gambio GX before 4.0.1.0 allows XSS in admin/coupon_admin.php.

Gambio GX before 4.0.1.0 allows SQL Injection in admin/mobile.php.

Gambio GX before 4.0.1.0 allows SQL Injection in admin/gv_mail.php.

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R670

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETG