Jeedom Cross-Site Scripting Vulnerability

Jeedom is an open source home automation solution for the Internet of Things. A cross-site scripting vulnerability exists in Jeedom 4.0.38 and earlier versions. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit the...

Withdrawn Advisory: marked cross-site scripting vulnerability

Versions 0.3.2 and earlier of marked are affected by a cross-site scripting vulnerability even when sanitize:true is set...

Sick Package Analytics Password Management Vulnerability

Sick Package Analytics is a system performance monitoring software for automatic identification systems from Sick. A security vulnerability exists in Sick Package Analytics V04.1.1 and prior versions, which originates from the program storing passwords in plaintext. An attacker could exploit the...

CVE-2020-5760

Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to an OS command injection vulnerability. Unauthenticated remote attackers can execute arbitrary commands as root by crafting a special configuration file and sending a crafted SIP message...

ALPINE-CVE-2020-15706

GRUB2 contains a race condition in grubscriptfunctioncreate leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing, leading to arbitrary code execution and secure boot restriction bypass. This issue affects GRUB2...

SonicWall SonicOS Input Validation Error Vulnerability

SonicWall SonicOS is a set of operating systems designed for SonicWall firewall appliances from SonicWall, Inc. An input validation error vulnerability exists in SonicWall SonicOS 6.5.4.4-44n and prior versions. The vulnerability originates from a network system or product that does not properly...

Parity Browser Security Vulnerability

Parity Browser is a lightweight and fast Ethereum programming language client. A security vulnerability exists in Parity Browser version 1.6.10 and earlier. A remote attacker can exploit this vulnerability to obtain sensitive information by requesting other websites with the help of a parity bit...

PT-2020-5111 · Adobe · Magento

Name of the Vulnerable Software and Affected Versions: Magento versions 2.3.5-p1 and earlier Description: The issue is related to a path traversal vulnerability due to incorrect restriction of a directory path with limited access. Successful exploitation could lead to arbitrary code execution. Th...

Schneider Electric Easergy Builder Input Validation Error Vulnerability

The Schneider Electric Easergy Builder is used by expert engineering teams to configure the T300 grid automation platform. An input validation error vulnerability exists in Schneider Electric Easergy Builder version 1.4.7.2 and earlier versions, which can be exploited by an attacker to modify...

ALQO Resource Management Error Vulnerability

ALQO is an open source cryptocurrency. A security vulnerability exists in ALQO 4.1 and earlier versions. An attacker could exploit the vulnerability to cause a denial of service...

CVE-2020-7519

A CWE-521: Weak Password Requirements vulnerability exists in Easergy Builder Version 1.4.7.2 and older which could allow an attacker to compromise a user account...

Adobe Bridge Out-of-Bounds Read Vulnerability (CNVD-2020-43385)

Adobe Bridge is a free digital asset management application from Adobe. An out-of-bounds read vulnerability exists in Adobe Bridge 10.0.3 and earlier versions, which can be exploited by an attacker to execute arbitrary code...

DaviewIndy Heap Buffer Overflow Vulnerability

DaviewIndy is a document viewing application. The program supports the viewing of documents and images in many formats. A buffer overflow vulnerability exists in DaviewIndy versions prior to 8.98.9, which arises from the program failing to properly handle incorrectly formatted PDF files. An...

Apache Airflow Cross-Site Scripting Vulnerability (CNVD-2020-44095)

Apache Airflow is the United States Apache Apache Software Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. A cross-site scripting vulnerability exists in the Chart page of the...

PYSEC-2020-23

An issue was found in Apache Airflow versions 1.10.10 and below. A stored XSS vulnerability was discovered in the Chart pages of the the "classic" UI...

Cisco SD-WAN vManage Software Cross-Site Scripting Vulnerability

Cisco SD-WAN vManage Software is a management software for SD-WAN Software Defined Wide Area Network solutions from Cisco. A cross-site scripting vulnerability exists in the web management interface in Cisco SD-WAN vManage Software versions 19.2.2 and earlier, which stems from the program failing...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2020-41464)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the MySQL Server 8.0.20 and prior versions of Oracle MySQL in the Server: Optimizer component. An attacker could...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2020-41755)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the MySQL Server 8.0.20 and prior versions of Server: Security: Privileges component of Oracle MySQL. An attacker...

UBUNTU-CVE-2020-14586

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: Privileges. Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

UBUNTU-CVE-2020-14680

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...