CWE-20

An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. An attacker could create fictive system-mes

An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. It allows an attacker to create a button th

A vulnerability in certain web pages of Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthentica

IBM Resilient SOAR V38.0 users may experience a denial of service of the SOAR Platform due to a insufficient input valid

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated HPGL file received from untrusted source

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated HPGL file received from untrusted source

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated 3DM file received from untrusted sources

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated SKP file received from untrusted sources

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated RH file received from untrusted sources

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PDF file received from untrusted sources

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated GIF file received from untrusted sources

<p>A security feature bypass vulnerability exists in SQL Server Reporting Services (SSRS) when the server improperly val

In Gallagher Command Centre v8.20 prior to v8.20.1093(MR2) it is possible to create Guard Tour events that when accessed

A content spoofing vulnerability was found in the openshift/console 3.11 and 4.x. This flaw allows an attacker to craft

Insufficient data validation in Omnibox in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to perform doma

IBM Security Secret Server proir to 10.9 could allow a remote attacker to bypass security restrictions, caused by improp

Multiple vulnerabilities in the web management framework of Cisco IOS XE Software could allow an authenticated, remote a

Multiple vulnerabilities in the web management framework of Cisco IOS XE Software could allow an authenticated, remote a

A vulnerability in the web server authentication of Cisco IOS XE Software could allow an authenticated, remote attacker

In Tensorflow before versions 2.2.1 and 2.3.1, if a user passes a list of strings to `dlpack.to_dlpack` there is a memor

In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when PHP is processing incoming HTTP cook

eramba through c2.8.1 allows HTTP Host header injection with (for example) resultant wkhtml2pdf PDF printing by authenti

A DOS vulnerability exists in Gitlab CE/EE >=10.3, <13.4.7,>=13.5, <13.5.5,>=13.6, <13.6.2 that allows an attacker to tr

A flaw was found in Soteria before 1.0.1, in a way that multiple requests occurring concurrently causing security identi

Multiple vulnerabilities in the user interface of Cisco Webex Meetings Desktop App could allow an authenticated, remote

Multiple vulnerabilities in the user interface of Cisco Webex Meetings Desktop App could allow an authenticated, remote

Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials to a host cont

A security bypass vulnerability exists in Symantec Norton Mobile Security for Android before 3.16, which could let a mal

In Helm before versions 2.16.11 and 3.3.2 there is a bug in which the `alias` field on a `Chart.yaml` is not properly sa

An issue was discovered in Treck IPv6 before 6.0.1.68. Improper input validation in the IPv6 component when handling a p

In the `@actions/core` npm module before version 1.2.6,`addPath` and `exportVariable` functions communicate with the Act

Some ZTE devices have input verification vulnerabilities. The devices support configuring a static prefix through the we

In Helm before versions 2.16.11 and 3.3.2 plugin names are not sanitized properly. As a result, a malicious plugin autho

A vulnerability in Cisco Webex Network Recording Player and Cisco Webex Player for Microsoft Windows could allow an atta

A vulnerability in Cisco Webex Network Recording Player and Cisco Webex Player for Microsoft Windows could allow an atta

A vulnerability in Cisco Webex Network Recording Player and Cisco Webex Player for Microsoft Windows could allow an atta

The issue was addressed with improved validation when an iCloud Link is created. This issue is fixed in iOS 13.3 and iPa

Acrobat Reader versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) are

In queryInternal of CallLogProvider.java, there is a possible permission bypass due to improper input validation. This c

An improper Input Validation vulnerability in the code handling file renaming and recovery in Bitdefender Engines allows

An elevation of privilege vulnerability exists in Microsoft Edge (Chromium-based) when the Feedback extension improperly

vulnerability within the Multimedia Viewer feature of Cisco Webex Meetings could allow an authenticated, remote attacker

When SSL/TLS Forward Proxy Decryption mode has been configured to decrypt the web transactions, the PAN-OS URL filtering

An Ubuntu-specific modification to AccountsService in versions before 0.6.55-0ubuntu13.2, among other earlier versions,

IBM Content Navigator 3.0.7 and 3.0.8 is vulnerable to improper input validation. A malicious administrator could bypass

In Symfony before versions 4.4.7 and 5.0.7, when a `Response` does not contain a `Content-Type` header, affected version

node-fetch before versions 2.6.1 and 3.0.0-beta.9 did not honor the size option after following a redirect, which means

An issue was discovered on Samsung mobile devices with N(7.x) software. An attacker can disable the Location service on

Philips SureSigns VS4, A.07.107 and prior receives input or data, but it does not validate or incorrectly validates that

Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result