2020

An issue was discovered in Mattermost Desktop App before 4.4.0. Prompting for HTTP Basic Authentication is mishandled, a

An issue was discovered in Mattermost Desktop App before 4.4.0. Attackers can open web pages in the desktop application

An issue was discovered in Mattermost Server before 5.21.0. mmctl allows directory traversal via HTTP, aka MMSA-2020-001

An issue was discovered in Mattermost Mobile Apps before 1.26.0. A view cache can persist on a device after a logout.

An issue was discovered in Mattermost Mobile Apps before 1.26.0. Cookie data can persist on a device after a logout.

An issue was discovered in Mattermost Server before 5.18.0. An attacker can send a user_typing WebSocket event to any ch

An issue was discovered in Mattermost Server before 5.18.0, 5.17.2, 5.16.4, 5.15.4, and 5.9.7. An attacker can spoof a d

CALDERA 2.7.0 allows XSS via the Operation Name box.

An issue was discovered in WSO2 Identity Server through 5.10.0 and WSO2 IS as Key Manager through 5.10.0. An open redire

An issue was discovered in WSO2 Identity Server through 5.9.0 and WSO2 IS as Key Manager through 5.9.0. A potential Refl

An issue was discovered in WSO2 Identity Server through 5.9.0 and WSO2 IS as Key Manager through 5.9.0. A potential Refl

CISOfy Lynis before 3.0.0 has Incorrect Access Control because of a TOCTOU race condition. The routine to check the log

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RBK752 before 3.2.15.25

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RBK852 before 3.2.15.25

HUAWEI Mate 30 with versions earlier than 10.1.0.126(C00E125R5P3) have an information disclosure vulnerability. A logic

HUAWEI P30 and HUAWEI P30 Pro with versions earlier than 10.1.0.135(C00E135R2P11) and versions earlier than 10.1.0.135(C

Convos before 4.20 does not properly generate a random secret in Core/Settings.pm and Util.pm. This leads to a predictab

Lib/ipaddress.py in Python through 3.8.3 improperly computes hash values in the IPv4Interface and IPv6Interface classes,

An exposure of sensitive information flaw was found in Ansible version 3.7.0. Sensitive information, such tokens and oth

In the Linux kernel before 5.4.16, a race condition in tty->disc_data handling in the slip and slcan line discipline cou

A vulnerability in the antispam protection mechanisms of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA)

A vulnerability in the access control list (ACL) functionality of the standby route processor management interface of Ci

A vulnerability in the CLI of Cisco Network Services Orchestrator (NSO) could allow an authenticated, local attacker to

A vulnerability in the Web Access feature of Cisco IP Phones Series 7800 and Series 8800 could allow an unauthenticated,

A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthe

A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an authent

A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an authent

A vulnerability in the endpoint software of Cisco AMP for Endpoints and Clam AntiVirus could allow an authenticated, loc

A vulnerability in Cisco Webex Meetings Desktop App for Windows could allow an authenticated, local attacker to gain acc

A vulnerability in the web server of Cisco Umbrella could allow an unauthenticated, remote attacker to redirect a user t

A vulnerability in the web application of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unauthentica

A vulnerability in the Enhanced Charging Service (ECS) functionality of Cisco ASR 5000 Series Aggregation Services Route

A vulnerability in the REST API of Cisco UCS Director could allow an authenticated, remote attacker with administrative

A vulnerability in the orchestration tasks of Cisco UCS Director could allow an authenticated, remote attacker to perfor

A vulnerability in the CLI of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local a

In ISC BIND9 versions BIND 9.11.14 -> 9.11.19, BIND 9.14.9 -> 9.14.12, BIND 9.16.0 -> 9.16.3, BIND Supported Preview Edi

An attacker who is permitted to send zone data to a server via zone transfer can exploit this to intentionally trigger t

An issue was discovered in Agentejo Cockpit 0.10.2. Insufficient sanitization of the to parameter in the /auth/login rou

IBM Business Automation Workflow and IBM Business Process Manager (IBM Business Process Manager Express 8.5.5, 8.5.6, 8.

OMERO.web before 5.6.3 optionally allows sensitive data elements (e.g., a session key) to be passed as URL query paramet

OMERO before 5.6.1 makes the details of each user available to all users.

An issue was discovered in LibVNCServer before 0.9.13. libvncclient/rfbproto.c does not limit TextChat size.

An issue was discovered in LibVNCServer before 0.9.13. libvncserver/rre.c allows out-of-bounds access via encodings.

An issue was discovered in LibVNCServer before 0.9.13. libvncserver/hextile.c allows out-of-bounds access via encodings.

An issue was discovered in LibVNCServer before 0.9.13. libvncserver/corre.c allows out-of-bounds access via encodings.

An issue was discovered in LibVNCServer before 0.9.13. libvncserver/scale.c has a pixel_value integer overflow.

The Treck TCP/IP stack before 6.0.1.66 has an ARP Out-of-bounds Read.

The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read.

The Treck TCP/IP stack before 6.0.1.66 has a TCP Out-of-bounds Read.

The Treck TCP/IP stack before 6.0.1.66 has Improper ICMPv4 Access Control.