2020

In MailStore Outlook Add-in (and Email Archive Outlook Add-in) through 12.1.2, the login process does not validate the v

IBM MaaS360 3.96.62 for iOS could allow an attacker with physical access to the device to obtain sensitive information f

IBM UrbanCode Deploy (UCD) 7.0.4.0 stores user credentials in plain in clear text which can be read by a local user. IBM

Anchor 0.12.7 allows admins to cause XSS via crafted post content.

Time-of-check Time-of-use Race Condition vulnerability on crash report ownership change in Apport allows for a possible

Apport creates a world writable lock file with root ownership in the world writable /var/lock/apport directory. If the a

Rapid7 Metasploit Framework versions before 5.0.85 suffers from an instance of CWE-78: OS Command Injection, wherein the

An issue was discovered in GitLab CE and EE 8.15 through 12.9.2. Members of a group could still have access after the gr

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D7800 before 1.0.1.34,

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D7800 befor

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects WAC505 before 5.0.0.17 and WAC

jQuery v2.2.2 allows XSS via a crafted onerror attribute of an IMG element. NOTE: this vulnerability has been reported t

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D7800 before 1.0.1.30

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects WNDR3700v4 before 1.0.2

Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects EX3700 before 1.0.0.

lazysizes through 5.2.0 allows execution of malicious JavaScript. The following attributes are not sanitized by the vide

Certain NETGEAR devices are affected by denial of service. This affects GS110EMX before 1.0.0.9, GS810EMX before 1.0.0.5

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects WAC505 before 5.0.5.4 a

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.34,

Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects DST6501 before 1.1.0

Certain NETGEAR devices are affected by denial of service. This affects R6300v2 before 1.0.4.8, R6400 before 1.0.1.22, R

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects JNR1010v2 before 1.1.

NETGEAR R8000 devices before 1.0.4.2 are affected by a stack-based buffer overflow by an authenticated user.

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R8300 befor

"HCL Connections is vulnerable to possible information leakage and could disclose sensitive information via stack trace

The Configuration pages in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway for user profiles and

The backup function in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway saves the current setting

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.44,

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.44,

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D3600 befor

Certain NETGEAR devices are affected by XSS. This affects D3600 before 1.0.0.67, D6000 before 1.0.0.67, D6100 before 1.0

Certain NETGEAR devices are affected by XSS. This affects D6200 before 1.1.00.24, D7000 before 1.0.1.52, JNR1010v2 befor

Certain NETGEAR devices are affected by XSS. This affects D6200 before 1.1.00.24, D7000 before 1.0.1.52, JNR1010v2 befor

Certain NETGEAR devices are affected by denial of service. This affects D6200 before 1.1.00.24, D7000 before 1.0.1.52, J

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D6220 before 1.0.0.28

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D6100 before V1.0.0.55,

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects R7800 before 1.0.2.36,

Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects D6220 before 1.0.0.4

In JetBrains TeamCity 2018.2 through 2019.2.1, a project administrator was able to see scrambled password parameters use

In JetBrains TeamCity before 2019.2.1, a user without appropriate permissions was able to import settings from the setti

JetBrains Space through 2020-04-22 allows stored XSS in Chats.

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects R6250 before V1.0.4.8, R6400 b

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.67,

The attachment-uploading feature in Atlassian Confluence Server from version 6.14.0 through version 6.14.3, and version

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D7800 befor

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D7800 befor

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.34,

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D7800 befor

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects DM200 befor

NETGEAR GS810EMX devices before 1.0.0.5 are affected by disclosure of sensitive information.