CVE-2020-7486

VERSION NOT SUPPORTED WHEN ASSIGNED A vulnerability could cause TCM modules to reset when under high network load in TCM v10.4.x and in system v10.3.x. This vulnerability was discovered and remediated in version v10.5.x on August 13, 2009. TCMs from v10.5.x and on will no longer exhibit this...

Broadcom CA API Developer Portal Information Disclosure Vulnerability

Broadcom CA API Developer Portal is an API developer portal product of Broadcom's complete API lifecycle management solution, which provides API release control, API performance monitoring and other functions. An information disclosure vulnerability exists in Broadcom CA API Developer Portal...

Intel Data Migration Software Elevation of Privilege Vulnerability

Intel Data Migration Software is a set of data migration software from Intel USA. The software supports data migration between two storage drives. A security vulnerability exists in the installer of Intel Data Migration Software 3.3 and earlier versions, which stems from incorrect default...

CVE-2019-20664

Certain NETGEAR devices are affected by stored XSS. This affects RBR20 before 2.3.5.26, RBS20 before 2.3.5.26, RBK20 before 2.3.5.26, RBR40 before 2.3.5.30, RBS40 before 2.3.5.30, RBK40 before 2.3.5.30, RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, and RBK50 before 2.3.5.30...

CVE-2019-20660

Certain NETGEAR devices are affected by stored XSS. This affects RBR20 before 2.3.5.26, RBS20 before 2.3.5.26, RBK20 before 2.3.5.26, RBR40 before 2.3.5.30, RBS40 before 2.3.5.30, RBK40 before 2.3.5.30, RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, and RBK50 before 2.3.5.30...

Dell EMC XtremIO XMS Information Disclosure Vulnerability

Dell EMC XtremIO XMS is a suite of XtremIO Enterprise Storage Platform management software from Dell USA. An information disclosure vulnerability exists in Dell EMC XtremIO XMS versions prior to 6.3.0. The vulnerability stems from an error in the configuration, etc. of a networked system or produ...

Dell EMC XtremIO XMS Cross-Site Scripting Vulnerability

Dell EMC XtremIO XMS is a suite of XtremIO Enterprise Storage Platform management software from Dell USA. A cross-site scripting vulnerability exists in Dell EMC XtremIO XMS versions prior to 6.3.0. The vulnerability stems from a lack of proper validation of client data by the WEB application. An...

SilverStripe Cross-Site Request Forgery Vulnerability (CNVD-2020-10710)

SilverStripe is New Zealand SilverStripe company's set of open source programming framework and content management system CMS. The system has support for multiple languages , cross-platform and other features . A cross-site request forgery vulnerability exists in SilverStripe 4.3.3 and earlier...

HTTP Response Splitting

Overview org.wso2.transport.http:org.wso2.transport.http.netty is a HTTP protocol handling implementations for C5 based products. Affected versions of this package are vulnerable to HTTP Response Splitting due to HTTP Header validation being disabled. Remediation Upgrade...

EyesOfNetwork Arbitrary OS Command Execution Vulnerability

EyesOfNetwork EON is an open source, free IT monitoring solution. The solution provides features such as business process configuration tools, generating pop-up windows when events occur in the active queue, and more. An arbitrary OS command execution vulnerability exists in EyesOfNetwork 5.3,...

AZL-44577 CVE-2020-8112 affecting package openjpeg2 for versions less than 2.3.1-12

opjt1clbldecodeprocessor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a different issue than CVE-2020-6851...

UBUNTU-CVE-2012-6083

Freeciv before 2.3.3 allows remote attackers to cause a denial of service via a crafted packet...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1474)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Apple iOS and Apple watchOS Mail Message Framework Component Resource Management Error Vulnerability

Apple iOS and Apple watchOS are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices. apple watchOS is an operating system for smartwatches. mail Message Framework is one of the email messaging frameworks. A resource management error vulnerability exists in th...

Apple iOS Photos Storage Component Sandbox Authentication Bypass Vulnerability

Apple iOS is an operating system developed by Apple for mobile devices.Photos Storage is one of the components of Photos Storage. A security vulnerability exists in the Photos Storage component in Apple iOS versions prior to 12.3. An attacker can exploit this vulnerability to bypass sandboxing...

Unspecified Vulnerability in Apple iOS Status Bar Component

Apple iOS is an operating system for mobile devices developed by Apple Inc.Status Bar is one of the status bar components. A security vulnerability exists in the Status Bar component in Apple iOS versions prior to 12.3. An attacker could exploit the vulnerability to display a locked icon after...

Apple iOS and Apple watchOS Mail component input validation error vulnerability

Apple iOS and Apple watchOS are both products of Apple Inc. Apple iOS is an operating system for mobile devices. apple watchOS is an operating system for smartwatches. mail is an email plug-in. An input validation error vulnerability exists in the Mail component in Apple iOS versions prior to 12....

CVE-2018-18288

CrushFTP through 8.3.0 is vulnerable to credentials theft via URL redirection...

DEBIAN-CVE-2019-19960

In wolfSSL before 4.3.0, wceccmulmodex does not properly resist side-channel attacks...

Unspecified vulnerability in CrushFTP (CNVD-2020-03729)

CrushFTP is a file transfer server. A security vulnerability exists in CrushFTP 8.3.0 and earlier versions that can be exploited by attackers to steal credentials...