2020

IBM QRadar SIEM 7.3 and 7.4 could allow a remote privileged user to execute commands.

In MISP before 2.4.129, setting a favourite homepage was not CSRF protected.

The docker packages version docker-1.13.1-108.git4ef4b30.el7 as released for Red Hat Enterprise Linux 7 Extras via RHBA-

An issue was discovered in the Video Extension in Suprema BioStar 2 before 2.8.2. Remote attackers can read arbitrary fi

The version of docker as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 advisory included an incorrec

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in SRS Simple Hits Counter Plugin f

Appweb before 7.2.2 and 8.x before 8.1.0, when built with CGI support, mishandles an HTTP request with a Range header th

IBM Maximo Asset Management 7.6.0 and 7.6.1 does not invalidate session after logout which could allow a local user to i

In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when o

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to access sensitive information withou

An exploitable SQL injection vulnerability exists in the Admin Reports functionality of Glacies IceHRM v26.6.0.OS (Commi

Improper access control in Citrix ADC Gateway Linux client versions before 1.0.0.137 results in local privilege escalati

Privilege escalation vulnerability on Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21,

Incorrect file permissions in Citrix ADC and Citrix Gateway before versions 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.

Improper input validation in Citrix ADC and Citrix Gateway versions before 11.1-63.9 and 12.0-62.10 allows unauthenticat

XPLATFORM v9.2.260 and eariler versions contain a vulnerability that could allow remote files to be downloaded by settin

VMware Fusion (11.x before 11.5.5), VMware Remote Console for Mac (11.x and prior before 11.2.0 ) and Horizon Client for

RAONWIZ v2018.0.2.50 and eariler versions contains a vulnerability that could allow remote files to be downloaded and ex

IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow a remote attacker to execute arbitrary code on the sy

The tough library (Rust/crates.io) prior to version 0.7.1 does not properly verify the threshold of cryptographic signat

In TimelineJS before version 3.7.0, some user data renders as HTML. An attacker could implement an XSS exploit with mali

An issue was discovered in Mods for HESK 3.1.0 through 2019.1.0. A privileged user can achieve code execution on the ser

An issue was discovered in Mods for HESK 3.1.0 through 2019.1.0. A blind time-based SQL injection issue allows remote un

Mozilla developers and community members reported memory safety bugs present in Firefox 77. Some of these bugs showed ev

When the Windows DLL "webauthn.dll" was missing from the Operating System, and a malicious one was placed in a folder in

In non-standard configurations, a JPEG image created by JavaScript could have caused an internal variable to overflow, r

When trying to connect to a STUN server, a race condition could have caused a use-after-free of a pointer, leading to me

When processing callbacks that occurred during window flushing in the parent process, the associated window may die; cau

Due to confusion about ValueTags on JavaScript Objects, an object may pass through the type barrier, resulting in memory

A VideoStreamEncoder may have been freed in a race condition with VideoBroadcaster::AddOrUpdateSink, resulting in a use-

Mozilla developers reported memory safety bugs present in Firefox 76. Some of these bugs showed evidence of memory corru

Mozilla developers reported memory safety bugs present in Firefox 76 and Firefox ESR 68.8. Some of these bugs showed evi

When using certain blank characters in a URL, they where incorrectly rendered as spaces instead of an encoded URL. This

Mozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal, resulting in a crash. We

If Thunderbird is configured to use STARTTLS for an IMAP server, and the server sends a PREAUTH response, then Thunderbi

PKCE support is not implemented in accordance with the RFC for OAuth 2.0 for Native Apps. Without the use of PKCE, the a

In FreeBSD 12.1-STABLE before r359565, 12.1-RELEASE before p7, 11.4-STABLE before r362975, 11.4-RELEASE before p1, and 1

Dell EMC iDRAC9 versions prior to 4.20.20.20 contain a Path Traversal Vulnerability. A remote authenticated malicious us

An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at l

D-Link DIR-610 devices allow Remote Command Execution via the cmd parameter to command.php. NOTE: This vulnerability onl

D-Link DIR-610 devices allow Information Disclosure via SERVICES=DEVICE.ACCOUNT%0AAUTHORIZED_GROUP=1 to getcfg.php. NOTE

Android App 'Mercari' (Japan version) prior to version 3.52.0 allows arbitrary method execution of a Java object by a re

NVIDIA JetPack SDK, version 4.2 and 4.3, contains a vulnerability in its installation scripts in which permissions are i

An issue was discovered in phpList through 3.5.4. An error-based SQL Injection vulnerability exists via the Import Admin

An OS Command Injection vulnerability in the PAN-OS GlobalProtect portal allows an unauthenticated network based attacke

An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to exe

The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit the

The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit the

The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit the

A sensitive information disclosure vulnerability in Tableau Server 10.5, 2018.x, 2019.x, 2020.x released before June 26,