2020

The Magic Home Pro application 1.5.1 for Android allows Authentication Bypass. The security control that the application

LogRhythm Platform Manager (PM) 7.4.9 has Incorrect Access Control. Users within LogRhythm can be delegated different ro

LogRhythm Platform Manager (PM) 7.4.9 allows CSRF. The Web interface is vulnerable to Cross-site WebSocket Hijacking (CS

Lack of an anti-CSRF token in the entire administrative interface in EPSON EPS TSE Server 8 (21.0.11) allows an unauthen

irfanView 4.56 contains an error processing parsing files of type .pcx. Which leads to out-of-bounds writing at i_view32

An issue was discovered in ML Report Program. There is a stack-based buffer overflow in function sub_41EAF0 at MLReportD

AdRem NetCrunch 10.6.0.4587 allows Remote Code Execution. In the NetCrunch web client, a read-only administrator can exe

Dell BSAFE Micro Edition Suite, versions prior to 4.5, are vulnerable to a Buffer Under-Read Vulnerability. An unauthent

AdRem NetCrunch 10.6.0.4587 allows Credentials Disclosure. Every user can read the BSD, Linux, MacOS and Solaris private

A file upload restriction bypass vulnerability in Pluck CMS before 4.7.13 allows an admin privileged user to gain access

An issue was discovered in SolarWinds N-Central 12.3.0.670. The AdvancedScripts HTTP endpoint allows CSRF.

An issue was discovered in SolarWinds N-Central 12.3.0.670. The local database does not require authentication: security

An issue was discovered in SolarWinds N-Central 12.3.0.670. Hard-coded Credentials exist by default for local user accou

TLS-RSA cipher suites are not disabled in HCL BigFix Inventory up to v10.0.2. If TLS 2.0 and secure ciphers are not enab

An issue was discovered in p11-kit 0.23.6 through 0.23.21. A heap-based buffer overflow has been discovered in the RPC p

An issue was discovered in p11-kit 0.21.1 through 0.23.21. Multiple integer overflows have been discovered in the array

An issue was discovered in SolarWinds N-Central 12.3.0.670. The sudo configuration has incorrect access control because

An issue was discovered in SolarWinds N-Central 12.3.0.670. The AdvancedScripts HTTP endpoint allows Relative Path Trave

All versions of package datatables.net are vulnerable to Prototype Pollution due to an incomplete fix for https://snyk.i

Directory traversal vulnerability in GROWI versions prior to v4.2.3 (v4.2 Series), GROWI versions prior to v4.1.12 (v4.1

Improper input validation in GROWI versions prior to v4.2.3 (v4.2 Series), GROWI versions prior to v4.1.12 (v4.1 Series)

An issue was discovered in the Keysight Database Connector plugin before 1.5.0 for Confluence. A malicious user could by

An issue was discovered in the Keysight Database Connector plugin before 1.5.0 for Confluence. A malicious user could in

jsonparser 1.0.0 allows attackers to cause a denial of service (panic: runtime error: slice bounds out of range) via a G

GJSON before 1.6.4 allows attackers to cause a denial of service via crafted JSON.

A Remote Code Execution vulnerability exists in DourceCodester Alumni Management System 1.0. An authenticated attacker c

An issue was discovered on D-Link DSR-250 3.17 devices. Certain functionality in the Unified Services Router web interfa

An issue was discovered on D-Link DSR-250 3.17 devices. Insufficient validation of configuration file checksums could al

A lack of input validation and access controls in Lua CGIs on D-Link DSR VPN routers may result in arbitrary input being

The length of the input fields of Host Engineering H0-ECOM100, H2-ECOM100, and H4-ECOM100 modules are verified only on t

An issue was discovered in Xen XAPI before 2020-12-15. Certain xenstore keys provide feedback from the guest, and are th

An issue was discovered in Xen through 4.14.x. Access rights of Xenstore nodes are per domid. Unfortunately, existing gr

An issue was discovered in Xen through 4.14.x. In the Ocaml xenstored implementation, the internal representation of the

An issue was discovered in the Linux kernel through 5.10.1, as used with Xen through 4.14.x. The Linux kernel PV block b

In isSubmittable and showWarningMessagesIfAppropriate of WifiConfigController.java and WifiConfigController2.java, there

In onFactoryReset of BluetoothManagerService.java, there is a missing permission check. This could lead to local escalat

In getLockTaskLaunchMode of ActivityRecord.java, there is a possible way for any app to start in Lock Task Mode due to a

In NFA_RwI93WriteMultipleBlocks of nfa_rw_api.cc, there is a possible out of bounds write due to an integer overflow. Th

In rw_i93_send_cmd_write_multi_blocks of rw_i93.cc, there is a possible out of bounds write due to a heap buffer overflo

In rw_t3t_send_raw_frame of rw_t3t.cc, there is a possible out of bounds write due to a missing bounds check. This could

In RW_SendRawFrame of rw_main.cc, there is a possible out of bounds write due to a missing bounds check. This could lead

In CE_SendRawFrame of ce_main.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead

In restartWrite of Parcel.cpp, there is a possible memory corruption due to a use after free. This could lead to local e

A flaw was found in xorg-x11-server before 1.20.10. A heap-buffer overflow in XkbSetDeviceInfo may lead to a privilege e

This affects the package s-cart/core before 4.4. The search functionality of the admin dashboard in core/src/Admin/Contr

The package s-cart/core before 4.4 are vulnerable to Cross-site Scripting (XSS) via the admin panel.

In onCreate of HandleApiCalls.java, there is a possible permission bypass due to a confused deputy. This could lead to l

In smp_br_state_machine_event of smp_br_main.cc, there is a possible out of bounds read due to a missing bounds check. T

In Parse_data of eas_mdls.c, there is a possible out of bounds write due to a missing bounds check. This could lead to r

In openAssetFileListener of ContactsProvider2.java, there is a possible permission bypass due to an insecure default val