92875 matches found
GE Reason S20 Ethernet Switch Improper Neutralization of Input During Web Page Generation (CVE-2020-16242)
The affected Reason S20 Ethernet Switch is vulnerable to cross-site scripting XSS, which may allow an attacker to trick application users into performing critical application actions that include, but are not limited to, adding and updating accounts. This plugin only works with Tenable.ot. Please...
WordPress Custom Searchable Data Entry System plugin <= 1.7.1 - Unauthenticated Database Wiping vulnerability
Unauthenticated Database Wiping vulnerability discovered by Sean Murphy in WordPress Plugin Custom Searchable Data Entry System versions = 1.7.1...
CVE-2020-36852
creationtimestamp| type| source ---|---|--- 2025-10-01 21:02:24+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m25wrqrzrh27...
K000156724: ImageMagick vulnerabilities CVE-2020-27773, CVE-2020-27774, CVE-2020-27775, CVE-2020-27776, and CVE-2020-27829
Security Advisory Description CVE-2020-27773 A flaw was found in ImageMagick in MagickCore/gem-private.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned char or division by zero. Thi...
Security Bulletin: IBM App Connect Enterprise Toolkit is vulnerable to Improper Verification of Cryptographic Signature due to EdDSA (CVE-2020-36843)
Summary IBM App Connect Enterprise Toolkit is vulnerable to Improper Verification of Cryptographic Signature due to EdDSA. Vulnerability Details CVEID:CVE-2020-36843 DESCRIPTION: The implementation of EdDSA in EdDSA-Java aka ed25519-java through 0.3.0 exhibits signature malleability and does not...
CVE-2020-11910
creationtimestamp| type| source ---|---|--- 2025-09-30 14:59:41+00:00| seen| Telegram/7BGgW9FqBdigJpFzXXdgD8fWQSYkKE56IzIvBFJ1yNof5k...
CVE-2020-11904
creationtimestamp| type| source ---|---|--- 2025-09-30 14:59:40+00:00| seen| Telegram/AUbnxlCSLTExRPEDr5R7V61TtRdp7ZVRuwe7GA7pZTKC1A...
CVE-2020-8561
creationtimestamp| type| source ---|---|--- 2025-09-30 00:13:34+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3lzzajpvyzb2z 2025-10-01 01:07:04+00:00| seen| https://bsky.app/profile/kubernetes.dev/post/3m23tycjbx325 2025-10-01 18:06:05+00:00| seen|...
NewStart CGSL MAIN 6.06 : p11-kit Multiple Vulnerabilities (NS-SA-2025-0209)
The remote NewStart CGSL host, running version MAIN 6.06, has p11-kit packages installed that are affected by multiple vulnerabilities: - An issue was discovered in p11-kit 0.21.1 through 0.23.21. A heap-based buffer over-read has been discovered in the RPC protocol used by thep11-kit server/remo...
NewStart CGSL MAIN 6.06 : libvirt Vulnerability (NS-SA-2025-0225)
The remote NewStart CGSL host, running version MAIN 6.06, has libvirt packages installed that are affected by a vulnerability: - An issue was discovered in qemuDomainGetStatsIOThread in qemu/qemudriver.c in libvirt 4.10.0 though 6.x before 6.1.0. A memory leak was found in the virDomainListGetSta...
CLSA-2025-1758896552 dovecot: Fix of CVE-2020-12674
CVE-2020-12674: fix mishandling of zero length in RPA request to prevent auth service crash...
CVE-2020-36851
creationtimestamp| type| source ---|---|--- 2025-09-25 23:23:52+00:00| published-proof-of-concept| https://github.com/SocketDev/security-research/security/advisories/GHSA-9wmg-93pw-fc3g...
CLSA-2025-1758822139 perl-CPAN: Fix of CVE-2020-16156
CVE-2020-16156: fix Signature Verification Bypass...
CLSA-2025-1758820840 dovecot: Fix of CVE-2020-12674
CVE-2020-12674: fix mishandling of zero length in RPA request to prevent auth service crash...
@extplug/cors-proxy (>=1.0.0, <=1.0.1), @ir-engine/server-core (1.6.0) +34 more potentially affected by CVE-2020-36851 via cors-anywhere (>=0.2.5, <=0.4.4)
cors-anywhere NPM version =0.2.5, =1.0.0, =0.0.7, =0.1.0, =0.13.0, =0.0.19, =0.5.0, =0.5.0, =1.0.0, =1.2.0, =1.1.0, =4.0.0-beta.4, =5.0.0 and more Source cves: CVE-2020-36851 Source advisory: SNYK:JS-CORSANYWHERE-13109647...
@extplug/cors-proxy (>=1.0.0, <=1.0.1), @ir-engine/server-core (1.6.0) +34 more potentially affected by CVE-2020-36851 via cors-anywhere (>=0.2.5, <=0.4.4)
cors-anywhere NPM version =0.2.5, =1.0.0, =0.0.7, =0.1.0, =0.13.0, =0.0.19, =0.5.0, =0.5.0, =1.0.0, =1.2.0, =1.1.0, =4.0.0-beta.4, =5.0.0 and more Source cves: CVE-2020-36851 Source advisory: OSV:GHSA-R3JV-XFGX-GJ24...
CLSA-2025-1758796775 spamassassin: Fix of 2 CVEs
CVE-2020-1930: fix command-execution vulnerability in SpamAssassin .cf parsing - CVE-2020-1931: fix command-execution vulnerability in SpamAssassin .cf parsing...
CVE-2020-26063
creationtimestamp| type| source ---|---|--- 2025-09-25 00:36:28+00:00| seen| MISP/1c5c38d6-3401-41ac-be0e-4cf361fa6f51...