2020

Insufficient policy enforcement in V8 in Google Chrome prior to 14.0.0.0 allowed a remote attacker to obtain potentially

In OctoberCMS (october/october composer package) versions from 1.0.319 and before 1.0.466, any users with the ability to

In OctoberCMS (october/october composer package) versions from 1.0.319 and before 1.0.466, a user with the ability to us

In OctoberCMS (october/october composer package) versions from 1.0.319 and before 1.0.466, an attacker can exploit this

In OctoberCMS (october/october composer package) versions from 1.0.319 and before 1.0.466, an attacker can exploit this

An issue was discovered in Navigate CMS through 2.8.7. It allows XSS because of a lack of purify calls in lib/packages/f

An issue was discovered in Navigate CMS through 2.8.7. It allows XSS because of a lack of purify calls in lib/packages/w

An issue was discovered in Navigate CMS through 2.8.7. It allows XSS because of a lack of purify calls in lib/packages/s

An issue was discovered in Navigate CMS through 2.8.7. It allows Directory Traversal because lib/packages/templates/temp

PlayTube 1.8 allows disclosure of user details via ajax.php?type=../admin-panel/autoload&page=manage-users directory tra

A vulnerability in the syslog processing engine of Cisco Identity Services Engine (ISE) could allow an unauthenticated,

A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an authenticated, remote

Kibana versions before 6.8.9 and 7.7.0 contains a stored XSS flaw in the TSVB visualization. An attacker who is able to

Elastic App Search versions before 7.7.0 contain a cross site scripting (XSS) flaw when displaying document URLs in the

A vulnerability in the key store of Cisco Application Services Engine Software could allow an authenticated, local attac

A vulnerability in the API of Cisco Application Services Engine Software could allow an unauthenticated, remote attacker

A vulnerability in the Cisco Application Framework component of the Cisco IOx application environment could allow an aut

A vulnerability in the web-based Local Manager interface of the Cisco IOx Application Framework could allow an authentic

A vulnerability in the 802.1X feature of Cisco Catalyst 2960-L Series Switches and Cisco Catalyst CDB-8P Switches could

A vulnerability in the web-based user interface (web UI) of Cisco IOS XE Software could allow an authenticated, remote a

A vulnerability in the web-based user interface (web UI) of Cisco IOS XE Software could allow an unauthenticated, adjace

A vulnerability in the hardware crypto driver of Cisco IOS XE Software for Cisco 4300 Series Integrated Services Routers

A vulnerability in Cisco IOS XE SD-WAN Software could allow an unauthenticated, physical attacker to bypass authenticati

A vulnerability in the Virtual Services Container of Cisco IOS XE Software could allow an authenticated, local attacker

A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker to escalate their privileges to a

A vulnerability in the ROMMON of Cisco IOS XE Software could allow an authenticated, local attacker to elevate privilege

A vulnerability in the CLI parsers of Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers (I

A vulnerability in software image verification in Cisco IOS XE Software could allow an unauthenticated, physical attacke

A vulnerability in the image verification feature of Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Serv

A vulnerability in the processing of boot options of specific Cisco IOS XE Software switches could allow an authenticate

A vulnerability in the handling of IEEE 802.11w Protected Management Frames (PMFs) of Cisco Catalyst 9800 Series Wireles

A vulnerability in the Tool Command Language (Tcl) interpreter of Cisco IOS Software and Cisco IOS XE Software could all

A vulnerability in the Tool Command Language (Tcl) interpreter of Cisco IOS Software and Cisco IOS XE Software could all

In WatermelonDB (NPM package "@nozbe/watermelondb") before versions 0.15.1 and 0.16.2, a maliciously crafted record ID c

Clusters using Calico (version 3.14.0 and below), Calico Enterprise (version 2.8.2 and below), may be vulnerable to info

IBM Security Guardium 11.1 could allow an attacker on the same network to gain access to the Solr dashboard and cause a

IBM Security Guardium 10.6, 11.0, and 11.1 contains hard-coded credentials, such as a password or cryptographic key, whi

IBM Security Guardium 11.1 could disclose sensitive information on the login page that could aid in further attacks agai

IBM Security Guardium 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Jav

An issue was discovered in Django 2.2 before 2.2.13 and 3.0 before 3.0.7. Query parameters generated by the Django admin

An issue was discovered in Django 2.2 before 2.2.13 and 3.0 before 3.0.7. In cases where a memcached backend does not pe

A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious con

Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier does not escape the error message for the repository

Jenkins Project Inheritance Plugin 19.08.02 and earlier does not redact encrypted secrets in the 'getConfigAsXML' API UR

Jenkins Project Inheritance Plugin 19.08.02 and earlier does not require users to have Job/ExtendedRead permission to ac

Jenkins Compact Columns Plugin 1.11 and earlier displays the unprocessed job description in tooltips, resulting in a sto

Jenkins ECharts API Plugin 4.7.0-3 and earlier does not escape the display name of the builds in the trend chart, result

Jenkins ECharts API Plugin 4.7.0-3 and earlier does not escape the parser identifier when rendering charts, resulting in

A cross-site request forgery vulnerability in Jenkins Self-Organizing Swarm Plug-in Modules Plugin 3.20 and earlier allo

Jenkins Self-Organizing Swarm Plug-in Modules Plugin 3.20 and earlier does not check permissions on API endpoints that a