2020

Liferay Portal before 7.3.0, and Liferay DXP 7.0 before fix pack 90, 7.1 before fix pack 17, and 7.2 before fix pack 5,

Liferay Portal before 7.3.0, and Liferay DXP 7.0 before fix pack 89, 7.1 before fix pack 17, and 7.2 before fix pack 4,

HUAWEI P30 Pro smartphones with versions earlier than 10.1.0.123(C432E19R2P5patch02), versions earlier than 10.1.0.126(C

HUAWEI P30 Pro smartphones with versions earlier than 10.1.0.123(C432E19R2P5patch02), versions earlier than 10.1.0.126(C

DaviewIndy 8.98.9 and earlier has a Heap-based overflow vulnerability, triggered when the user opens a malformed PDF fil

Grundfos CIM 500 before v06.16.00 responds to unauthenticated requests for password storage files.

Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via HTTP. An authe

Grandstream GWN7000 firmware version 1.0.9.4 and below allows authenticated remote users to modify the system's crontab

In glpi before 9.5.1, there is a SQL injection for all usages of "Clone" feature. This has been fixed in 9.5.1.

There is an improper configuration of recorder related service. Product: AndroidVersions: Android SoCAndroid ID: A-15633

In onCommand of CompanionDeviceManagerService.java, there is a possible permissions bypass due to a missing permission c

In createWithSurfaceParent of Client.cpp, there is a possible out of bounds write due to type confusion. This could lead

In Western Digital WD Discovery before 4.0.251.0, a malicious application running with standard user permissions could p

In notifyErrorForPendingRequests of QCamera3HWI.cpp, there is a possible out of bounds write due to a heap buffer overfl

On Juniper Networks Junos OS devices, a stream of TCP packets sent to the Routing Engine (RE) may cause mbuf leak which

On Juniper Networks Junos MX Series with service card configured, receipt of a stream of specific packets may crash the

When a device running Juniper Networks Junos OS with MPC7, MPC8, or MPC9 line cards installed and the system is configur

On Juniper Networks Junos OS and Junos OS Evolved devices, processing a specific BGP packet can lead to a routing proces

On Juniper Networks Junos OS and Junos OS Evolved devices, processing a specific UPDATE for an EBGP peer can lead to a r

When DNS filtering is enabled on Juniper Networks Junos MX Series with one of the following cards MS-PIC, MS-MIC or MS-M

On Juniper Networks Junos OS and Junos OS Evolved devices, the receipt of a specific BGP UPDATE packet causes an interna

An improper use of a validation framework when processing incoming genuine BGP packets within Juniper Networks RPD (rout

Graylog before 3.3.3 lacks SSL Certificate Validation for LDAP servers. It allows use of an external user/group database

SonicWall NetExtender Windows client vulnerable to arbitrary file write vulnerability, this allows attacker to overwrite

EyeSurfer BflyInstallerX.ocx v1.0.0.16 and earlier versions contain a vulnerability that could allow remote files to be

A vulnerability exists that could allow the execution of operating system commands on systems running MiPlatform 2019.05

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 traditional could allow a remote attacker to execute arbitrary c

This affects all versions of package rollup-plugin-serve. There is no path sanitization in readFile operation.

Adobe Download Manager version 2.0.0.518 have a command injection vulnerability. Successful exploitation could lead to a

Adobe ColdFusion 2016 update 15 and earlier versions, and ColdFusion 2018 update 9 and earlier versions have a dll searc

Adobe ColdFusion 2016 update 15 and earlier versions, and ColdFusion 2018 update 9 and earlier versions have a dll searc

Adobe Media Encoder versions 14.2 and earlier have an out-of-bounds write vulnerability. Successful exploitation could l

Adobe Media Encoder versions 14.2 and earlier have an out-of-bounds write vulnerability. Successful exploitation could l

An issue was found in Apache Airflow versions 1.10.10 and below. A remote code/command injection vulnerability was disco

A specially crafted communication packet sent to the affected systems could cause a denial-of-service condition due to i

A specially crafted communication packet sent to the affected device could cause a denial-of-service condition due to a

userfiles/modules/users/controller/controller.php in Microweber before 1.1.20 allows an unauthenticated user to disclose

A vulnerability in the web UI of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain rea

A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to inject arbit

A vulnerability in Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to execute code with root

A vulnerability in the web management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote at

A vulnerability in the CLI of Cisco Data Center Network Manager (DCNM) could allow an authenticated, local attacker to e

A vulnerability in Cisco SD-WAN Solution Software could allow an authenticated, local attacker to elevate privileges to

A vulnerability in the deep packet inspection (DPI) engine of Cisco SD-WAN vEdge Routers could allow an unauthenticated,

A vulnerability in the Secure Sockets Layer (SSL) VPN feature for Cisco Small Business RV VPN Routers could allow an una

A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, remote attacker to cause a denial of s

A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Series R

A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, local attacker to access an affected d

Multiple vulnerabilities in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, RV130 VPN Ro

Multiple vulnerabilities in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, RV130 VPN Ro