CVE-2020-37250 TFTP Broadband 4.3.0.1465 Unquoted Service Path Privilege Escalation

TFTP Broadband 4.3.0.1465 contains an unquoted service path vulnerability in the tftpt.exe service binary that allows local attackers to execute arbitrary code with system privileges. Attackers can place a malicious executable in the Program Files directory path that will be executed during servi...

SUSE-SU-2026:2472-1 Security update for apache-sshd, jpgpj

This update for apache-sshd, jpgpj fixes the following issues - CVE-2020-36843: no check performed on scalar to avoid signature malleability bsc1239551. - CVE-2026-48827: Apache MINA SSHD: Path traversal in org.apache.sshd: sshd-git bsc1267018. Changes for jpgpj: - Initial packaging with v1.3...

CVE-2020-15129

creationtimestamp| type| source ---|---|--- 2026-06-19 12:53:12+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6eac1c64-db75-460f-a775-e9cbe996d8bf...

CVE-2020-13126

creationtimestamp| type| source ---|---|--- 2026-06-19 12:53:12+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/db341ae1-4456-46c9-aec9-8225eb0b6685...

CVE-2020-12075

creationtimestamp| type| source ---|---|--- 2026-06-19 12:53:12+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d53278fd-6b0d-4300-a7cf-1bbda61826c2 2026-06-23 14:04:02+00:00| exploited|...

CVE-2020-6167

creationtimestamp| type| source ---|---|--- 2026-06-19 12:53:12+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fd358614-7a16-4bd8-bd35-a8601a7a18f5 2026-06-23 14:04:02+00:00| exploited|...

Lexmark Printers Cross-site Scripting (CVE-2020-10093)

A cross-site scripting XSS vulnerability in Lexmark Pro910 series inkjet and other discontinued products. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...

Updated luajit packages fix security vulnerabilities

In LuaJIT through 2.0.5, as used in Moonjit before 2.1.2 and other products, debug.getinfo has a type confusion issue that leads to arbitrary memory write or read operations, because certain cases involving valid stack levels and options are mishandled. CVE-2019-19391 LuaJIT through 2.1.0-beta3 h...

ROOT-APP-NPM-CVE-2020-28499 CVE-2020-28499 in @rootio/merge - Patched by Root

Root has patched CVE-2020-28499 in the @rootio/merge package for Root:npm. Multiple fixed versions available...

Siemens RuggedCom Rox Improper Input Validation (CVE-2020-10648)

Das U-Boot through 2020.01 allows attackers to bypass verified boot restrictions and subsequently boot arbitrary images by providing a crafted FIT image to a system configured to boot the default configuration. This plugin only works with Tenable.ot. Please visit...

ROOT-APP-MAVEN-CVE-2020-10683 CVE-2020-10683 in io.root.dom4j:dom4j - Patched by Root

Root has patched CVE-2020-10683 in the io.root.dom4j:dom4j package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2020-14061 CVE-2020-14061 in io.root.com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2020-14061 in the io.root.com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2020-14062 CVE-2020-14062 in io.root.com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2020-14062 in the io.root.com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

Security Bulletin: IBM Engineering Lifecycle Management - Engineering Test management is impacted by multiple vulnerabilities

Summary A vulnerability has been identified in jackson-databind library, which is used in IBM Engineering Lifecycle Management - Engineering Test management Vulnerability Details CVEID:CVE-2022-42003 DESCRIPTION: In FasterXML jackson-databind before versions 2.13.4.1 and 2.12.17.1, resource...

CVE-2023-43688

An issue was discovered in Malwarebytes 4.x and 5.x and Nebula 2020-10-21 and later. There is a Heap buffer overflow in various buffer encryption utilities...

CVE-2020-28852 vulnerabilities

Vulnerabilities for packages: dex-k8s-authenticator...

CVE-2023-43688

An issue was discovered in Malwarebytes 4.x and 5.x and Nebula 2020-10-21 and later. There is a Heap buffer overflow in various buffer encryption utilities...

PT-2026-48156

An issue was discovered in Malwarebytes 4.x and 5.x and Nebula 2020-10-21 and later. There is a Heap buffer overflow in various buffer encryption utilities...

CVE-2020-37248

creationtimestamp| type| source ---|---|--- 2026-06-08 17:22:18+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mns72d7tvl2l...

DEBIAN-CVE-2020-37248

OfflineIMAP before 8.0.3 trusts the server with their STARTTLS capability prior to authentication, which allows STRIPTLS/man-in-the-middle attacks, taking over the connection and extracting account credentials in cleartext...