2020

Attackers can use public NetTest web service of Apache OpenMeetings 4.0.0-5.0.0 to organize denial of service attack.

Harbor 1.9.* 1.10.* and 2.0.* allows Exposure of Sensitive Information to an Unauthorized Actor.

In Lansweeper 8.0.130.17, the web console is vulnerable to a CSRF attack that would allow a low-level Lansweeper user to

An issue has been discovered in GitLab affecting versions prior to 12.10.13. GitLab was vulnerable to a stored XSS by in

An issue has been discovered in GitLab affecting versions prior to 12.10.13. GitLab was vulnerable to a stored XSS in im

An issue has been discovered in GitLab affecting versions from 12.6.2 prior to 12.10.13. GitLab was vulnerable to a stor

An issue has been discovered in GitLab affecting versions prior to 13.1.2, 13.0.8 and 12.10.13. GitLab was vulnerable to

A vulnerability was discovered in GitLab versions prior to 13.1. Under certain conditions the restriction for Github pro

A vulnerability was discovered in GitLab versions prior 13.1. The comment section of the issue page was not restricting

A vulnerability was discovered in GitLab versions prior to 13.1. Under certain conditions the private activity of a user

A vulnerability was discovered in GitLab versions prior 13.1. Under certain conditions private merge requests could be r

A vulnerability was discovered in GitLab versions after 12.9. Due to improper verification of permissions, an unauthoriz

A vulnerability was discovered in GitLab versions prior to 13.1. Username format restrictions could be bypassed allowing

An issue has been discovered in GitLab before version 12.10.13 that allowed a project member with limited permissions to

An issue has been discovered in GitLab affecting versions prior to 13.1.2, 13.0.8 and 12.10.13. Missing permission check

An issue has been discovered in GitLab affecting versions >=10.7 <13.0.14, >=13.1.0 <13.1.8, >=13.2.0 <13.2.6. Improper

Handlebars before 4.4.5 allows Regular Expression Denial of Service (ReDoS) because of eager matching. The parser may be

bootstrap-select before 1.13.6 allows Cross-Site Scripting (XSS). It does not escape title values in OPTION elements. Th

Handlebars before 3.0.8 and 4.x before 4.5.3 is vulnerable to Arbitrary Code Execution. The lookup helper fails to prope

A partial authentication bypass vulnerability exists on Atheros AR9132 3.60(AMX.8), AR9283 1.85, and AR9285 1.0.0.12NA d

A partial authentication bypass vulnerability exists on Realtek RTL8812AR 1.21WW, RTL8196D 1.0.0, RTL8192ER 2.10, and RT

A partial authentication bypass vulnerability exists on Mediatek MT7620N 1.06 devices. The vulnerability allows sending

The custom GINA/CP module in ANIXIS Password Reset Client before version 3.22 allows remote attackers to execute code an

The custom GINA/CP module in Zoho ManageEngine ADSelfService Plus before 5.5 build 5517 allows remote attackers to execu

In Apache Hadoop versions 3.0.0-alpha2 to 3.0.0, 2.9.0 to 2.9.2, 2.8.0 to 2.8.5, any users can access some servlets with

Improper Authentication vulnerability in WAGO 750-8XX series with FW version <= FW03 allows an attacker to change the se

Improper Authentication vulnerability in WAGO 750-8XX series with FW version <= FW07 allows an attacker to change some s

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a local user with specialized access to obtain sensi

Use of hard-coded cryptographic key vulnerability in August Connect Wi-Fi Bridge App, Connect Firmware allows an attacke

An improper Input Validation vulnerability in the code handling file renaming and recovery in Bitdefender Engines allows

SonicWall SSL-VPN products and SonicWall firewall SSL-VPN feature misconfiguration leads to possible DNS flaw known as d

In goxmldsig (XML Digital Signatures implemented in pure Go) before version 1.1.0, with a carefully crafted XML file, an

IBM Security Secret Server (IBM Security Verify Privilege Vault Remote 1.2 ) could allow a local user to bypass security

The Trend Micro Security 2020 (v16) consumer family of products is vulnerable to a security race condition arbitrary fil

A vulnerability in the Trend Micro Apex One ServerMigrationTool component could allow an attacker to trigger an out-of-b

A vulnerability in the Trend Micro Apex One ServerMigrationTool component could allow an attacker to execute arbitrary c

An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to discl

An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to discl

An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to discl

An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to discl

An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to discl

A vulnerability in Trend Micro Apex One may allow a local attacker to manipulate the process of the security agent unloa

A vulnerability in Trend Micro OfficeScan XG SP1 on Microsoft Windows may allow an attacker to create a hard link to any

An issue was discovered in the FileImporter extension for MediaWiki before 1.34.4. An attacker can import a file even wh

XSS exists in the MobileFrontend extension for MediaWiki before 1.34.4 because section.line is mishandled during regex s

An information leak was discovered in MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1.34.4. Handling of acto

An issue was discovered in MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1.34.4. The non-jqueryMsg version o

An issue was discovered in the OATHAuth extension in MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1.34.4. F

An issue was discovered in MediaWiki 1.32.x through 1.34.x before 1.34.4. LogEventList::getFiltersDesc is insecurely usi

In MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1.34.4, XSS related to jQuery can occur. The attacker creat