2020

An issue was discovered on Rittal PDU-3C002DEC through 5.17.10 and CMCIII-PU-9333E0FB through 3.17.10 devices. Attackers

An XSS issue in the /goform/WifiBasicSet endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to ex

A CSRF issue in the /goform/SysToolReboot endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to r

A flaw was found in the fix for CVE-2019-11135, in the Linux upstream kernel versions before 5.5 where, the way Intel CP

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view titles of a private project vi

The login.jsp resource in Jira before version 8.5.2, and from version 8.6.0 before version 8.6.1 allows remote attackers

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript

The Gadget API in Atlassian Jira Server and Data Center in affected versions allows remote attackers to make Jira unresp

The avatar upload feature in affected versions of Atlassian Jira Server and Data Center allows remote attackers to achie

Django Two-Factor Authentication before 1.12, stores the user's password in clear text in the user session (base64-encod

Bareos before version 19.2.8 and earlier allows a malicious client to communicate with the director without knowledge of

In Bareos Director less than or equal to 16.2.10, 17.2.9, 18.2.8, and 19.2.7, a heap overflow allows a malicious client

osquery before version 4.4.0 enables a privilege escalation vulnerability. If a Window system is configured with a PATH

Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.1

Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14

Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.1

Reflected code injection in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14

Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14

Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.1

A missing file type check in Nextcloud Contacts 3.2.0 allowed a malicious user to upload any file as avatars.

HUAWEI P30 and HUAWEI P30 Pro smartphones with versions earlier than 10.1.0.123(C432E22R2P5) and versions earlier than 1

HUAWEI P30 smartphone with versions earlier than 10.1.0.135(C00E135R2P11) have an improper input verification vulnerabil

Open redirect vulnerability in SHIRASAGI v1.13.1 and earlier allows remote attackers to redirect users to arbitrary web

IBM Guardium Activity Insights 10.6 and 11.0 does not set the secure attribute on authorization tokens or session cookie

A reflected Cross-Site Scripting (XSS) Vulnerability in the KingComposer plugin through 2.9.4 for WordPress allows remot

An information leak was discovered on Yubico YubiKey 5 NFC devices 5.0.0 to 5.2.6 and 5.3.0 to 5.3.1. The OTP applicatio

A PIN management problem was discovered on Yubico YubiKey 5 devices 5.2.0 to 5.2.6. OpenPGP has three passwords: Admin P

Atlassian Bitbucket Server from version 4.9.0 before version 7.2.4 allows remote attackers to intercept unencrypted repo

Webhooks in Atlassian Bitbucket Server from version 5.4.0 before version 7.3.1 allow remote attackers to access the cont

An issue was discovered in Yubico libykpiv before 2.1.0. An attacker can trigger an incorrect free() in the ykpiv_util_g

An issue was discovered in Yubico libykpiv before 2.1.0. lib/util.c in this library (which is included in yubico-piv-too

In Redgate SQL Monitor 7.1.4 through 10.1.6 (inclusive), the scope for disabling some TLS security certificate checks ca

An out-of-bounds read vulnerability was found in the SLiRP networking implementation of the QEMU emulator. This flaw occ

An issue was discovered in Mods for HESK 3.1.0 through 2019.1.0. A Stored XSS issue allows remote unauthenticated attack

Due to confusion processing a hyphen character in Date.parse(), a one-byte out of bounds read could have occurred, leadi

When performing add-on updates, certificate chains terminating in non-built-in-roots were rejected (even if they were le

Manipulating individual parts of a URL object could have caused an out-of-bounds read, leaking process memory to malicio

When "%2F" was present in a manifest URL, Firefox's AppCache behavior may have become confused and allowed a manifest to

IndexedDB should be cleared when leaving private browsing mode and it is not, the API for WKWebViewConfiguration was bei

By navigating a tab using the history API, an attacker could cause the address bar to display the incorrect domain (with

When browsing a document hosted on an IP address, an attacker could insert certain characters to flip domain and path in

Mozilla Developer Nicolas Silva found that when using WebRender, Firefox would under certain conditions leak arbitrary G

When browsing a malicious page, a race condition in our SharedWorkerService could occur and lead to a potentially exploi

For native-to-JS bridging the app requires a unique token to be passed that ensures non-app code can't call the bridging

During RSA key generation, bignum implementations used a variation of the Binary Extended Euclidean Algorithm which enta

NSS has shown timing differences when performing DSA signatures, which was exploitable and could eventually leak private

Incorrect handling of Upgrade header with the value websocket leads in crashing of containers hosting sockjs apps. This

When constructing a permission prompt for WebRTC, a URI was supplied from the content process. This URI was untrusted, a

An issue was discovered in phpList through 3.5.4. An XSS vulnerability occurs within the Import Administrators section v

An integer underflow vulnerability in the dnsproxyd component of the PAN-OS management interface allows authenticated ad