92471 matches found
CVE-2020-36864
Nagios XI versions prior to 5.7.2 are vulnerable to cross-site scripting XSS via the background color settings in Dashboards. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...
CVE-2020-36869
Nagios XI versions prior to 5.7.5 contain a SQL injection vulnerability in the SNMP Trap Interface edit page. Exploitation requires an account with administrative privileges to access the affected interface. A user with administrative access could supply crafted input that is not properly...
CVE-2020-36860
The Core Config Manager CCM in Nagios XI versions prior to CCM 3.0.7 / Nagios XI 5.7.4 contains multiple cross-site scripting XSS vulnerabilities in the object edit pages. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in th...
CVE-2020-36869
creationtimestamp| type| source ---|---|--- 2025-10-30 21:53:11+00:00| seen| Telegram/WxKZmPPrkpfONvDaDim0fHWb0gRkYUnR7y4zvPODjgUdTGI...
CVE-2020-36862
creationtimestamp| type| source ---|---|--- 2025-10-30 21:53:03+00:00| seen| Telegram/2yb6d8qIUEQFG9u3EJ4YzmM5eDHFnTpGOszkeK10OU0IrMI...
CVE-2020-36863
creationtimestamp| type| source ---|---|--- 2025-10-30 21:53:02+00:00| seen| Telegram/lt8dZtjQGloln1BAWjvqBHOAzy-jtPcFQqCxZznuXMALoG0...
Exploit for CVE-2020-14882
🌐 CVE-2020-14882 — Oracle WebLogic Server Remote Code Execut...
Siemens SIMATIC and Ruggedcom ROX Devices Integer Overflow or Wraparound (CVE-2020-12762)
json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbufmemappend. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...
CVE-2020-28852 affecting package buildah for versions less than 1.41.4-2
CVE-2020-28852 affecting package buildah for versions less than 1.41.4-2. An upgraded version of the package is available that resolves this issue...
CVE-2020-28851 affecting package buildah for versions less than 1.41.4-2
CVE-2020-28851 affecting package buildah for versions less than 1.41.4-2. An upgraded version of the package is available that resolves this issue...
CVE-2020-14040 affecting package buildah for versions less than 1.41.4-2
CVE-2020-14040 affecting package buildah for versions less than 1.41.4-2. An upgraded version of the package is available that resolves this issue...
VulnCheck KEV: CVE-2020-28653
Zoho ManageEngine OpManager Stable build before 125203 and Released build before 125233 allows Remote Code Execution via the Smart Update Manager SUM servlet...
VulnCheck KEV: CVE-2025-6204
An Improper Control of Generation of Code Code Injection vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to execute arbitrary code...
CLSA-2025-1761577745 Fix CVE(s): CVE-2020-35342
SECURITY UPDATE: uninitialized-heap vulnerability in tic4xprintcond function - debian/patches/CVE-2020-35342.patch: Initialize all elements of the condtable array to fix uninitialized heap memory issue in tic4xprintcond function - CVE-2020-35342...
VulnCheck KEV: CVE-2020-36723
The ListingPro - WordPress Directory & Listing Theme for WordPress is vulnerable to Sensitive Data Exposure in versions before 2.6.1 via the /listingpro-plugin/functions.php file. This makes it possible for unauthenticated attackers to extract sensitive data including usernames, full names, email...
VulnCheck KEV: CVE-2025-6205
A missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to gain privileged access to the application...
Low: java-11-amazon-corretto
Issue Overview: Vulnerability in the Java SE product of Oracle Java SE component: Hotspot. Supported versions that are affected are Java SE: 11.0.7 and 14.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE...
Linux Distros Unpatched Vulnerability : CVE-2020-36855
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security vulnerability has been detected in DCMTK up to 3.6.5. The affected element is the function parseQuota of the component dcmqrscp. The manipulation of...
DELMIA Apriso Deserialization of Untrusted Data Vulnerability (CVE-2025-5086)
The version of DELMIA Apriso installed on the remote host is Release 2020 through 2025. It is, therefore, affected by a deserialization of untrusted data vulnerability CVE-2025-5086 that could allow an unauthenticated attacker to execute arbitrary code remotely. Exploitation involves sending a...