2020

A missing secure communication definition and an incomplete TLS validation in the upgrade service in B&R Automation Stud

Insufficient protection of the inter-process communication functions in ABB System 800xA Base (all published versions) e

Insufficient protection of the inter-process communication functions in ABB System 800xA RNRP (all published versions) e

Insufficient protection of the inter-process communication functions in ABB System 800xA products OPC Server for AC 800M

For the Central Licensing Server component used in ABB products ABB Ability™ System 800xA and related system extensions

For the Central Licensing Server component used in ABB products ABB Ability™ System 800xA and related system extensions

Insufficient folder permissions used by system functions in ABB System 800xA products OPCServer for AC800M (versions 6.0

In FreeBSD 12.1-STABLE before r359021, 12.1-RELEASE before 12.1-RELEASE-p3, 11.3-STABLE before r359020, and 11.3-RELEASE

Open-AudIT 3.3.0 allows an XSS attack after login.

An XSS vulnerability exists in the banners.php page of PHP-Fusion 9.03.50. This can be exploited because the only securi

In FreeBSD 12.1-STABLE before r358739, 12.1-RELEASE before 12.1-RELEASE-p3, 11.3-STABLE before r358740, and 11.3-RELEASE

An issue was discovered in qemuDomainGetStatsIOThread in qemu/qemu_driver.c in libvirt 4.10.0 though 6.x before 6.1.0. A

Electron-Cash-SLP before version 3.6.2 has a vulnerability. All token creators that use the "Mint Tool" feature of the E

In FreeBSD 12.1-STABLE before r356606 and 12.1-RELEASE before 12.1-RELEASE-p3, driver specific ioctl command handlers in

In FreeBSD 12.1-STABLE before r356089, 12.1-RELEASE before 12.1-RELEASE-p3, 11.3-STABLE before r356090, and 11.3-RELEASE

If NiFi Registry 0.1.0 to 0.5.0 uses an authentication mechanism other than PKI, when the user clicks Log Out, NiFi Regi

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7000 before 1.0.1.60,

Certain NETGEAR devices are affected by reflected XSS. This affects JNR1010v2 before 1.1.0.46, JR6150 before 1.0.1.10, J

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 befor

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R7800 befor

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D7800 befor

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 befor

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D7800 befor

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 befor

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 befor

Certain NETGEAR devices are affected by authentication bypass. This affects JGS516PE before 2017-05-11, JGS524Ev2 before

Certain NETGEAR devices are affected by CSRF. This affects CM400 before 2017-01-11, CM600 before 2017-01-11, D1500 befor

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 befor

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 befor

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 befor

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 befor

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 befor

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 befor

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D7800 befor

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D7800 befor

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D7800 befor

IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0 and Liberty 17.0.0.3 through 20.0.0.4 could allow a remote, authenti

When user downloads PGP or S/MIME keys/certificates, exported file has same name for private and public keys. Therefore

HashiCorp Nomad and Nomad Enterprise up to 0.10.4 contained a cross-site scripting vulnerability such that files from a

A cross-site scripting (XSS) vulnerability in Lexmark CS31x before LW74.VYL.P273; CS41x before LW74.VY2.P273; CS51x befo

A cross-site scripting (XSS) vulnerability in Lexmark Pro910 series inkjet and other discontinued products.

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 befor

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 befor

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R7800 befor

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R7800 befor

In Octopus Deploy before 2019.12.9 and 2020 before 2020.1.12, the TaskView permission is not scoped to any dimension. Fo

Cross-site scripting vulnerability in Sales Force Assistant version 11.2.48 and earlier allows remote authenticated atta

Cross-site scripting vulnerability in Cybozu Garoon 4.6.0 to 5.0.0 allows remote attackers to inject arbitrary web scrip

Improper authorization vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote authenticated attackers to alter the

Improper input validation vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows a remote authenticated attacker to alter