2020

HUAWEI P30 smartphones with versions earlier than 10.1.0.135(C00E135R2P11) have an improper authentication vulnerability

In FreeRDP less than or equal to 2.0.0, an Integer Overflow to Buffer Overflow exists. When using /video redirection, a

In FreeRDP less than or equal to 2.0.0, when running with logger set to "WLOG_TRACE", a possible crash of application co

In FreeRDP less than or equal to 2.0.0, a possible resource exhaustion vulnerability can be performed. Malicious clients

In FreeRDP less than or equal to 2.0.0, by providing manipulated input a malicious client can create a double free condi

IBM Business Automation Workflow 18 and 19, and IBM Business Process Manager 8.0, 8.5, and 8.6 could allow a remote atta

IBM Planning Analytics Local 2.0.0 through 2.0.9 is vulnerable to cross-site scripting. This vulnerability allows users

Android App 'kintone mobile for Android' 1.0.0 to 2.5 allows an attacker to obtain credential information registered in

Android App 'Mailwise for Android' 1.0.0 to 1.0.1 allows an attacker to obtain credential information registered in the

In Kaminari before 1.2.1, there is a vulnerability that would allow an attacker to inject arbitrary code into pages with

CMS Made Simple through 2.2.14 allows XSS via a crafted File Picker profile name.

Certain NETGEAR devices are affected by Missing SSL Certificate Validation. This affects R7000 1.0.9.6_1.2.19 through 1.

A denial of service vulnerability was reported in the firmware prior to version 1.01 used in Lenovo Printer LJ4010DN tha

A denial of service vulnerability was reported in the firmware prior to version 1.01 used in Lenovo Printer LJ4010DN tha

IBM Jazz Reporting Service 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows user

IBM Security Identity Governance and Intelligence 5.2.6 could disclose highly sensitive information to other authenticat

IBM Security Identity Governance and Intelligence 5.2.6 could allow an unauthorized user to obtain sensitive information

IBM Security Identity Governance and Intelligence 5.2.6 could allow a remote attacker to obtain sensitive information, c

IBM Security Identity Governance and Intelligence 5.2.6 could allow an authenticated user to perform unauthorized comman

In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands via scripting in

testserver.cgi of the web service on VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x (and before XXXXX-VVTK-0XXX

In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the s

An issue was discovered in the Accordion plugin before 2.2.9 for WordPress. The unprotected AJAX wp_ajax_accordions_ajax

A cross-site scripting vulnerability (XSS) in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow a remot

Fork before 5.8.3 allows XSS via navigation_title or title.

Cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via the widgetId

Cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via the widgetId

Cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via the page par

Centreon before 19.10.7 exposes Session IDs in server responses.

ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query.

SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c an

sd_wp_addr in hw/sd/sd.c in QEMU 4.2.0 uses an unvalidated address, which leads to an out-of-bounds read during sdhci_wr

IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 could allow a privileged authenticated user to perform unauthorized actions u

IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 is vulnerable to cross-site scripting. This vulnerability allows users to emb

IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 could allow a remote attacker to obtain sensitive information when a detailed

IBM Spectrum Scale 4.2.0.0 through 4.2.3.21 and 5.0.0.0 through 5.0.4.4 could allow an authenticated GUI user to perform

An issue was discovered in the Linux kernel before 5.2. There is a NULL pointer dereference in tw5864_handle_frame() in

A race condition was found in the mkhomedir tool shipped with the oddjob package in versions before 0.34.5 and 0.34.6 wh

The boost ASIO wrapper in net/asio.cpp in Pichi before 1.3.0 lacks TLS hostname verification.

lib/QoreSocket.cpp in Qore before 0.9.4.2 lacks hostname verification for X.509 certificates.

An issue was discovered in ssl.c in Axel before 2.17.8. The TLS implementation lacks hostname verification.

The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of a request, which can b

We have recently released new version of AirMax AirOS firmware v6.3.0 for TI, XW and XM boards that fixes vulnerabilitie

A flaw was found in Undertow in versions before 2.1.1.Final, regarding the processing of invalid HTTP requests with larg

A flaw was found in the Linux kernels SELinux LSM hook implementation before version 5.7, where it incorrectly assumed t

The bbPress plugin through 2.6.4 for WordPress has stored XSS in the Forum creation section, resulting in JavaScript exe

qmail-verify as used in netqmail 1.06 is prone to an information disclosure vulnerability. A local attacker can test for

The Knock Knock plugin before 1.2.8 for Craft CMS allows malicious redirection.

An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS. There is stored XSS in the Bulk Resize a

ffjpeg through 2020-02-24 has an invalid write in bmp_load in bmp.c.