2020

An issue was discovered in SourceCodester Simple Grocery Store Sales And Inventory System 1.0. There was authentication

SourceCodester Online Clothing Store 1.0 is affected by an arbitrary file upload via the image upload feature of Product

SourceCodester Online Clothing Store 1.0 is affected by a SQL Injection via the txtUserName parameter to login.php.

Use of default credentials for the telnet server in BASETech GE-131 BT-1837836 firmware 20180921 allows remote attackers

A vulnerability in Cisco Security Manager could allow an unauthenticated, remote attacker to gain access to sensitive in

Arbitrary code execution vulnerability on Micro Focus ArcSight Logger product, affecting all version prior to 7.1.1. The

Garmin Forerunner 235 before 8.20 is affected by: Buffer Overflow. The component is: ConnectIQ TVM. The attack vector is

Garmin Forerunner 235 before 8.20 is affected by: Array index error. The component is: ConnectIQ TVM. The attack vector

Garmin Forerunner 235 before 8.20 is affected by: Integer Overflow. The component is: ConnectIQ TVM. The attack vector i

Garmin Forerunner 235 before 8.20 is affected by: Array index error. The component is: ConnectIQ TVM. The attack vector

Airleader Master <= 6.21 devices have default credentials that can be used to access the exposed Tomcat Manager for depl

The WebTools component on Canon Oce ColorWave 3500 5.1.1.0 devices allows attackers to retrieve stored SMB credentials v

In Anuko Time Tracker v1.19.23.5311, the password reset link emailed to the user doesn't expire once used, allowing an a

SQL injection vulnerability in PHPGurukul User Registration & Login and User Management System With admin panel 2.1 allo

JetBrains ToolBox before version 1.18 is vulnerable to Remote Code Execution via a browser protocol handler.

Deserialization of untrusted data vulnerability in XooNIps 3.49 and earlier allows remote attackers to execute arbitrary

In InfiniteWP Admin Panel before 3.1.12.3, resetPasswordSendMail generates a weak password-reset code, which makes it ea

Unauthenticated remote code execution with root privileges in Citrix SD-WAN Center versions before 11.2.2, 11.1.2b and 1

ask_password in Tomb 2.0 through 2.7 returns a warning when pinentry-curses is used and $DISPLAY is non-empty, causing a

lib/crud/userprocess.php in rConfig 3.9.x before 3.9.7 has an authentication bypass, leading to administrator account cr

Insufficient control flow management in the Open WebRTC Toolkit before version 4.3.1 may allow an unauthenticated user t

Exposed Erlang Cookie could lead to Remote Command Execution (RCE) attack. Communication between Erlang nodes is done by

SQL Injection issues in various ASPX pages of ResourceXpress Meeting Monitor 4.9 could lead to remote code execution and

An unrestricted file-upload issue in EditLaunchPadDialog.aspx in Ivanti Endpoint Manager 2019.1 and 2020.1 allows an aut

Path traversal in the Intel(R) EMA before version 1.3.3 may allow an unauthenticated user to potentially enable escalati

Out-of-bounds write in IPv6 subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.7

Out-of-bounds read in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may al

An authorization bypass and PHP local-file-include vulnerability in the installation component of SugarCRM before 8.0, 8

Prototype pollution vulnerability in 'deephas' versions 1.0.0 through 1.0.5 allows attacker to cause a denial of service

Prototype pollution vulnerability in 'object-hierarchy-access' versions 0.2.0 through 0.32.0 allows attacker to cause a

Prototype pollution vulnerability in 'field' versions 0.0.1 through 1.0.1 allows attacker to cause a denial of service a

An unauthenticated SQL Injection vulnerability in Good Layers LMS Plugin <= 2.1.4 exists due to the usage of "wp_ajax_no

u'When a non standard SIP sigcomp message is received from the network, then there may be chances of using more UDVM cyc

u'Integer overflow to buffer overflow occurs while playback of ASF clip having unexpected number of codec entries' in Sn

u'Buffer over read can happen while parsing mkv clip due to improper typecasting of data returned from atomsize' in Snap

u'Possible buffer overflow will occur in video while parsing mp4 clip with crafted esds atom size.' in Snapdragon Auto,

u'Null-pointer dereference can occur while accessing data buffer beyond its size that leads to access the buffer beyond

Scheduler for TAS prior to version 1.4.0 was permitting plaintext transmission of UAA client token by sending it over a

Windows Network File System Remote Code Execution Vulnerability

SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to compromise the system because o

SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to compromise the system because o

SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to compromise the system because o

SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to compromise the system because o

The cache action in action/cache.py in MoinMoin through 1.9.10 allows directory traversal through a crafted HTTP request

The previous default setting for Airflow's Experimental API was to allow all API requests without authentication, but th

A10 Networks ACOS and aGalaxy management Graphical User Interfaces (GUIs) have an unauthenticated Remote Code Execution

In exif_entry_get_value of exif-entry.c, there is a possible out of bounds write due to an integer overflow. This could

There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A

There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A

There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A