2020

Certain NETGEAR devices are affected by administrative password disclosure. This affects D6220 before V1.0.0.28, D6400 b

Certain NETGEAR devices are affected by authentication bypass. This affects D6100 before V1.0.0.55, D7000 before V1.0.1.

Certain NETGEAR devices are affected by CSRF. This affects R6100 before 1.0.1.12, R7500 before 1.0.0.108, WNDR3700v4 bef

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D6100 before V1.0.0.55,

Certain NETGEAR devices are affected by authentication bypass. This affects EX3700 before 1.0.0.64, EX3800 before 1.0.0.

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects R7800 before 1.0.2.36,

Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects D6220 before 1.0.0.4

In JetBrains TeamCity 2018.2 through 2019.2.1, a project administrator was able to see scrambled password parameters use

In JetBrains Space through 2020-04-22, the password authentication implementation was insecure.

In JetBrains Space through 2020-04-22, the session timeout period was configured improperly.

JetBrains YouTrack before 2020.1.659 was vulnerable to DoS that could be caused by attaching a malformed TIFF file to an

In JetBrains YouTrack before 2020.1.659, DB export was accessible to read-only administrators.

In JetBrains Hub before 2020.1.12099, content spoofing in the Hub OAuth error message was possible.

In JetBrains IntelliJ IDEA before 2020.1, the license server could be resolved to an untrusted host in some cases.

In JetBrains TeamCity before 2019.2.1, a user without appropriate permissions was able to import settings from the setti

In JetBrains TeamCity before 2019.2.1, the application state is kept alive after a user ends his session.

In JetBrains TeamCity before 2019.2.2, password values were shown in an unmasked format on several pages.

In JetBrains TeamCity before 2019.1.4, a project administrator was able to retrieve some TeamCity server settings.

In JetBrains GoLand before 2019.3.2, the plugin repository was accessed via HTTP instead of HTTPS.

An issue was discovered on Tata Sonata Smart SF Rush 1.12 devices. It has been identified that the smart band has no pai

JetBrains Space through 2020-04-22 allows stored XSS in Chats.

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects R6250 before V1.0.4.8, R6400 b

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.67,

An issue was discovered in Ceph through 13.2.9. A POST request with an invalid tagging XML can crash the RGW process by

The attachment-uploading feature in Atlassian Confluence Server from version 6.14.0 through version 6.14.3, and version

The CentralAuth extension through REL1_34 for MediaWiki allows remote attackers to obtain sensitive hidden account infor

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D7800 befor

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D7800 befor

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.34,

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D7800 befor

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects DM200 befor

NETGEAR GS810EMX devices before 1.0.0.5 are affected by disclosure of sensitive information.

Certain NETGEAR devices are affected by denial of service. This affects R6100 before 1.0.1.22, R7500 before 1.0.0.122, R

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D3600 before 1.0.0.76

SimpleSAMLphp versions before 1.18.6 contain an information disclosure vulnerability. The module controller in `SimpleSA

Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials to a host cont

SysAid On-Premise 20.1.11, by default, allows the AJP protocol port, which is vulnerable to a GhostCat attack. Additiona

"HCL AppScan Enterprise uses hard-coded credentials which can be exploited by attackers to get unauthorized access to ap

The login page on D-Link DIR-615 T1 20.10 devices allows remote attackers to bypass the CAPTCHA protection mechanism and

Certain NETGEAR devices are affected by command injection. This affects R6220 before 1.1.0.50, R6700v2 before 1.1.0.38,

Certain NETGEAR devices are affected by reflected XSS. This affects R6700v2 before 1.1.0.42 and R6800 before 1.1.0.42.

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R6200v2 before 1.0.3.

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R6700v2 before 1.1.0.

Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects R6400 before 1.0.1.2

Certain NETGEAR devices are affected by command injection. This affects R6400 before 1.0.1.24, R6700 before 1.0.1.26, R6

Certain NETGEAR devices are affected by command injection. This affects D6220 before 1.0.0.28 and D6100 before 1.0.0.50_

Certain NETGEAR devices are affected by command injection. This affects R6300v2 before 1.0.4.8_10.0.77, R6400 before 1.0

NETGEAR R7800 devices before 1.0.2.36 are affected by command injection.

NETGEAR D6100 devices before 1.0.0.50_0.0.50 are affected by command injection.

Certain NETGEAR devices are affected by CSRF. This affects R6050/JR6150 before 1.0.1.7, PR2000 before 1.0.0.17, R6220 be