Siemens SIMATIC and Ruggedcom ROX Devices Integer Overflow or Wraparound (CVE-2020-12762)

json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbufmemappend. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...

CVE-2020-14040 affecting package buildah for versions less than 1.41.4-2

CVE-2020-14040 affecting package buildah for versions less than 1.41.4-2. An upgraded version of the package is available that resolves this issue...

CVE-2020-28851 affecting package buildah for versions less than 1.41.4-2

CVE-2020-28851 affecting package buildah for versions less than 1.41.4-2. An upgraded version of the package is available that resolves this issue...

CVE-2020-28852 affecting package buildah for versions less than 1.41.4-2

CVE-2020-28852 affecting package buildah for versions less than 1.41.4-2. An upgraded version of the package is available that resolves this issue...

VulnCheck KEV: CVE-2020-28653

Zoho ManageEngine OpManager Stable build before 125203 and Released build before 125233 allows Remote Code Execution via the Smart Update Manager SUM servlet...

VulnCheck KEV: CVE-2025-6204

An Improper Control of Generation of Code Code Injection vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to execute arbitrary code...

CLSA-2025-1761577745 Fix CVE(s): CVE-2020-35342

SECURITY UPDATE: uninitialized-heap vulnerability in tic4xprintcond function - debian/patches/CVE-2020-35342.patch: Initialize all elements of the condtable array to fix uninitialized heap memory issue in tic4xprintcond function - CVE-2020-35342...

Low: java-11-amazon-corretto

Issue Overview: Vulnerability in the Java SE product of Oracle Java SE component: Hotspot. Supported versions that are affected are Java SE: 11.0.7 and 14.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE...

Linux Distros Unpatched Vulnerability : CVE-2020-36855

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security vulnerability has been detected in DCMTK up to 3.6.5. The affected element is the function parseQuota of the component dcmqrscp. The manipulation of...

VulnCheck KEV: CVE-2025-6205

A missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to gain privileged access to the application...

VulnCheck KEV: CVE-2020-36723

The ListingPro - WordPress Directory & Listing Theme for WordPress is vulnerable to Sensitive Data Exposure in versions before 2.6.1 via the /listingpro-plugin/functions.php file. This makes it possible for unauthenticated attackers to extract sensitive data including usernames, full names, email...

DELMIA Apriso Deserialization of Untrusted Data Vulnerability (CVE-2025-5086)

The version of DELMIA Apriso installed on the remote host is Release 2020 through 2025. It is, therefore, affected by a deserialization of untrusted data vulnerability CVE-2025-5086 that could allow an unauthenticated attacker to execute arbitrary code remotely. Exploitation involves sending a...

Exploit for OS Command Injection in Tenda Ac15_Firmware

Tenda-Router-VR-and-Exploit...

Security Bulletin: A Prototype Pollution vulnerability in jquery.dataTables affects IBM Tivoli Network Manager IP Edition (ITNM) (CVE-2020-28458)

Summary A Prototype Pollution vulnerability in jquery.dataTables was addressed in ITNM version 4.2 Fix Pack 23 4.2.0.23 Vulnerability Details CVEID:CVE-2020-28458 DESCRIPTION: All versions of package datatables.net are vulnerable to Prototype Pollution due to an incomplete fix for...

CVE_2020_35489_EnhancedExploit.php

...

CVE-2020-10257

creationtimestamp| type| source ---|---|--- 2025-10-22 21:02:33+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m3sqld3yws2i...

CVE-2020-36854

creationtimestamp| type| source ---|---|--- 2025-10-21 21:02:32+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m3qa4b4o4526...

CVE-2020-36853

creationtimestamp| type| source ---|---|--- 2025-10-21 21:02:31+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m3qa4b22n727...

CVE-2020-36855

creationtimestamp| type| source ---|---|--- 2025-10-21 17:17:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3ptjs2tku2m...

Security Bulletin: The IBM® Engineering Lifecycle Management products using WebSphere Application Server could provide weaker than expected security due to crypto.js (CVE-2020-36732)

Summary A vulnerability in crypto.js library affects IBM WebSphere Application Server Liberty with the openidConnectServer-1.0 feature enabled. Following IBM® Engineering Lifecycle Management products are vulnerable to this attack, and addressed in this bulletin: Global Configuration Management,...