2020

The COVIDSafe (Australia) app 1.0 and 1.1 for iOS allows a remote attacker to crash the app, and consequently interfere

Movable Type series (Movable Type 7 r.4606 (7.2.1) and earlier (Movable Type 7), Movable Type Advanced 7 r.4606 (7.2.1)

Cross-site request forgery (CSRF) vulnerability in Movable Type series (Movable Type 7 r.4606 (7.2.1) and earlier (Movab

Cross-site scripting vulnerability in Movable Type series (Movable Type 7 r.4606 (7.2.1) and earlier (Movable Type 7), M

HTML attribute value injection vulnerability in Movable Type series (Movable Type 7 r.4606 (7.2.1) and earlier (Movable

Pivotal Concourse, most versions prior to 6.0.0, allows redirects to untrusted websites in its login flow. A remote unau

In TYPO3 CMS 9.0.0 through 9.5.16 and 10.0.0 through 10.4.1, it has been discovered that the backend user interface and

In TYPO3 CMS 9.0.0 through 9.5.16 and 10.0.0 through 10.4.1, it has been discovered that backend user settings (in $BE_U

In TYPO3 CMS greater than or equal to 9.0.0 and less than 9.5.17 and greater than or equal to 10.0.0 and less than 10.4.

In TYPO3 CMS greater than or equal to 9.5.12 and less than 9.5.17, and greater than or equal to 10.2.0 and less than 10.

In TYPO3 CMS greater than or equal to 9.0.0 and less than 9.5.17 and greater than or equal to 10.0.0 and less than 10.4.

In TYPO3 CMS versions 10.4.0 and 10.4.1, it has been discovered that time-based attacks can be used with the password re

An authentication bypass vulnerability in the Panorama context switching feature allows an attacker with network access

A DOM-Based Cross Site Scripting Vulnerability exists in PAN-OS and Panorama Management Web Interfaces. A remote attacke

A race condition due to insecure creation of a file in a temporary directory vulnerability in PAN-OS allows for root pri

A buffer overflow vulnerability in the PAN-OS management server allows authenticated users to crash system processes or

An OS Command Injection vulnerability in PAN-OS management server allows authenticated users to inject and execute arbit

A cleartext transmission of sensitive information vulnerability in Palo Alto Networks PAN-OS Panorama that discloses an

Improper restriction of XML external entity reference ('XXE') vulnerability in Palo Alto Networks Panorama management se

An improper input validation vulnerability in the configuration daemon of Palo Alto Networks PAN-OS Panorama allows for

An OS command injection vulnerability in PAN-OS management interface allows an authenticated administrator to execute ar

An external control of filename vulnerability in the SD WAN component of Palo Alto Networks PAN-OS Panorama allows an au

An OS command injection and external control of filename vulnerability in Palo Alto Networks PAN-OS allows authenticated

An OS command injection vulnerability in the management server component of PAN-OS allows an authenticated user to poten

A stack-based buffer overflow vulnerability in the management server component of PAN-OS that allows an authenticated us

A cross-site scripting (XSS) vulnerability exists when visiting malicious websites with the Palo Alto Networks GlobalPro

Under certain circumstances a user's password may be logged in cleartext in the PanGPS.log diagnostic file when logs are

An external control of filename vulnerability in the command processing of PAN-OS allows an authenticated administrator

An authentication bypass by spoofing vulnerability exists in the authentication daemon and User-ID components of Palo Al

An external control of path and data vulnerability in the Palo Alto Networks PAN-OS Panorama XSLT processing logic that

An improper authorization vulnerability in PAN-OS that mistakenly uses the permissions of local linux users instead of t

An open redirection vulnerability in the GlobalProtect component of Palo Alto Networks PAN-OS allows an attacker to spec

A missing authorization vulnerability in the management server component of PAN-OS Panorama allows a remote unauthentica

A NULL pointer dereference vulnerability in Palo Alto Networks PAN-OS allows an authenticated administrator to send a re

A predictable temporary file vulnerability in PAN-OS allows a local authenticated user with shell access to corrupt arbi

The GlobalProtect Portal feature in PAN-OS does not set a new session identifier after a successful user login, which al

A flaw was found in Keycloak before version 11.0.0, where the code base contains usages of ObjectInputStream without typ

In Autoswitch Python Virtualenv before version 0.16.0, a user who enters a directory with a malicious `.venv` file could

The SVG Sanitizer extension for TYPO3 has a cross-site scripting vulnerability in versions before 1.0.3. Slightly invali

WordPress Plugin Simple File List before 4.2.8 is prone to a vulnerability that lets attackers delete arbitrary files be

An issue was discovered in FRRouting FRR (aka Free Range Routing) through 7.3.1. When using the split-config feature, th

Spring Security versions 5.2.x prior to 5.2.4 and 5.3.x prior to 5.3.2 contain a signature wrapping vulnerability during

In affected Ops Manager versions there is an exposed http route was that may allow attackers to view a specific access l

Some Dahua products with Build time before December 2019 have Session ID predictable vulnerabilities. During normal user

Attackers can obtain Cloud Key information from the Dahua Web P2P control in specific ways. Cloud Key is used to authent

In FreeBSD 12.1-STABLE before r360973, 12.1-RELEASE before p5, 11.4-STABLE before r360973, 11.4-BETA1 before p1 and 11.3

In FreeBSD 12.1-STABLE before r360971, 12.1-RELEASE before p5, 11.4-STABLE before r360971, 11.4-BETA1 before p1 and 11.3

Symantec IT Analytics, prior to 2.9.1, may be susceptible to a cross-site scripting (XSS) exploit, which is a type of is

Dahua devices with Build time before December 2019 use strong security login mode by default, but in order to be compati

In FreeBSD 12.1-STABLE before r356911, and 12.1-RELEASE before p5, insufficient checking in the cryptodev module allocat