CVE-2020-14438

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK842 before 3.2.15.25, RBR840 before 3.2.15.25, RBS840 before...

Unspecified Vulnerability in Foxit Reader and PhantomPDF (CNVD-2020-32081)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in the CAS service in Foxit Reader prior to version 9.7.2 and PhantomPDF prior to version 9.7.2, which stems from the program not limiting the number of failed login...

CVE-2019-20820

An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It has a NULL pointer dereference during the parsing of file data...

CVE-2020-13804

An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows information disclosure of a hardcoded username and password in the DocuSign plugin...

FreeRDP Buffer Overflow Vulnerability (CNVD-2020-31437)

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. A buffer overflow vulnerability exists in cliprdrreadformatlist in versions prior to FreeRDP 2.0.0. The vulnerability stems from a network system or product performing operations in memory without...

Inductive Automation Ignition Code Issue Vulnerability

Inductive Automation Ignition is a suite of integrated software platforms for SCADA systems from Inductive Automation, USA. The platform supports SCADA data acquisition and monitoring systems, HMI human machine interface and more. A code issue vulnerability exists in the handling of serialized da...

DEBIAN-CVE-2020-6474

Use after free in Blink in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Red Hat Keycloak Information Disclosure Vulnerability (CNVD-2020-35678)

Red Hat Keycloak is a suite of software from Red Hat, Inc. that provides authentication and management capabilities for modern applications and services. An information disclosure vulnerability exists in Red Hat Keycloak versions prior to 9.0.0. The vulnerability stems from an error in the...

CVE-2020-10859

Zoho ManageEngine Desktop Central before 10.0.484 allows authenticated arbitrary file writes during ZIP archive extraction via Directory Traversal in a crafted AppDependency API request...

UBUNTU-CVE-2020-12625

An issue was discovered in Roundcube Webmail before 1.4.4. There is a cross-site scripting XSS vulnerability in rcubewashtml.php because JavaScript code can occur in the CDATA of an HTML message...

NETGEAR WNR854T Injection Vulnerability

The NETGEAR WNR854T is a wireless router from NETGEAR. A security vulnerability exists in the NETGEAR WNR854T prior to version 1.5.2. An attacker can exploit the vulnerability to execute commands with administrator privileges...

CVE-2018-21099

NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user...

NETGEAR D3600 and NETGEAR D6000 Information Disclosure Vulnerability

The NETGEAR D3600 and NETGEAR D6000 are both a wireless modem from NETGEAR. An information disclosure vulnerability exists in the NETGEAR D3600 prior to version 1.0.0.76 and the D6000 prior to version 1.0.0.76, which can be exploited by attackers to obtain sensitive information...

SimpleSAMLphp Information Disclosure Vulnerability (CNVD-2020-33253)

SimpleSAMLphp is a PHP authentication application that implements the SAML 2.0 Service Provider and Identity Provider features. An information disclosure vulnerability exists in SimpleSAMLphp versions prior to 1.18.6. The vulnerability stems from an error in configuration or other errors in the...

CVE-2020-5737

Stored XSS in Tenable.Sc before 5.14.0 could allow an authenticated remote attacker to craft a request to execute arbitrary script code in a user's browser session. Updated input validation techniques have been implemented to correct this issue...

NETGEAR R7800 Command Injection Vulnerability

The NETGEAR R7800 is a wireless router from NETGEAR. A command injection vulnerability exists in the NETGEAR R7800 prior to version 1.0.2.62. The vulnerability arises from a network system or product not properly filtering specific elements of externally entered data during the construction of...

CVE-2019-20758

NETGEAR R7000 devices before 1.0.9.42 are affected by a buffer overflow by an authenticated user...

NETGEAR RAX40 Information Disclosure Vulnerability

The NETGEAR RAX40 is a wireless router from NETGEAR. An information disclosure vulnerability exists in versions prior to NETGEAR RAX40 1.0.3.64, which can be exploited by attackers to obtain sensitive information...

CVE-2019-20649

NETGEAR MR1100 devices before 12.06.08.00 are affected by disclosure of sensitive information...

UBUNTU-CVE-2018-11802

In Apache Solr, the cluster can be partitioned into multiple collections and only a subset of nodes actually host any given collection. However, if a node receives a request for a collection it does not host, it proxies the request to a relevant node and serves the request. Solr bypasses all...