Ruckus Networks Ruckus vRioT Trust Management Issues Vulnerability

Ruckus Networks Ruckus vRioT is a software based on Bluetooth, ZigBee, LoRa to realize endpoint connectivity from Ruckus Networks, USA. A trust management issue vulnerability exists in Ruckus Networks Ruckus vRioT versions prior to 1.5.1.0.21. The vulnerability stems from the fact that Ruckus vRi...

CVE-2020-7145

A chooseperfview expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-8345

A DLL search path vulnerability was reported in the Lenovo HardwareScan Plugin for the Lenovo Vantage hardware scan feature prior to version 1.0.46.11 that could allow escalation of privilege...

CVE-2020-26945

MyBatis before 3.5.6 mishandles deserialization of object streams...

Cisco Vision Dynamic Signage Director Authentication Missing Vulnerability

Cisco Vision Dynamic Signage Director is a core component of the Cisco Vision Dynamic Signage solution that gives you the flexibility to coordinate, manage, and orchestrate the delivery of compelling, customized digital content to hundreds or even thousands of TV displays throughout your venue. A...

CVE-2020-16267

Zoho ManageEngine Applications Manager version 14740 and prior allows an authenticated SQL Injection via a crafted jsp request in the RCA module...

DEBIAN-CVE-2020-25743

hw/ide/pci.c in QEMU before 5.1.1 can trigger a NULL pointer dereference because it lacks a pointer check before an idecanceldmasync call...

Google Chrome Extension Policy Enforcement Deficiency Vulnerability (CNVD-2020-53299)

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. An extension policy enforcement deficiency vulnerability exists in versions of Google Chrome prior to 85.0.4183.121. An attacker can exploit this vulnerability by...

UBUNTU-CVE-2020-15964

Insufficient data validation in media in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

PT-2020-13648 · Drupal · Drupal Core

Name of the Vulnerable Software and Affected Versions: Drupal Core versions prior to 8.8.10 Drupal Core versions prior to 8.9.6 Drupal Core versions prior to 9.0.6 Description: The issue is an access bypass vulnerability in the Workspaces module of Drupal Core, which fails to properly check acces...

Rust Cross-Site Scripting Vulnerability

Rust is a general-purpose, compiled programming language. A cross-site scripting vulnerability exists in versions prior to rgb crate 0.8.20, which stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit this vulnerability to read and write data i...

chromium-browser: Use after free in IndexedDB

Use after free in IndexedDB in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Intel Graphics Drivers Buffer Overflow Vulnerability (CNVD-2020-49541)

Intel Graphics Drivers is an integrated graphics driver from Intel USA. A security vulnerability exists in the system driver in versions prior to Intel Graphics Drivers 15.33.50.5129, which stems from an improper buffer limit. An attacker could exploit the vulnerability to cause a denial of servi...

CVE-2020-7306

Unprotected Storage of Credentials vulnerability in McAfee Data Loss Prevention DLP for Mac prior to 11.5.2 allows local users to gain access to the ADRMS username and password via unprotected log files containing plain text...

Google Chrome Code Execution Vulnerability (CNVD-2020-49880)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in versions prior to Google Chrome 84.0.4147.125. An attacker can exploit the vulnerability to execute arbitrary code or cause a denial of service...

chromium-browser: Heap buffer overflow in PDFium

Heap buffer overflow in PDFium in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...

MunkiReport SQL Injection Vulnerability (CNVD-2020-42246)

Munkireport is a reporting tool for the Munki software management program. A SQL injection vulnerability exists in the TableQuery.php file in MunkiReport versions prior to 5.6.3. The vulnerability can be exploited by an attacker to execute arbitrary SQL commands by sending a POST request to...

DEBIAN-CVE-2020-6507

Out of bounds write in V8 in Google Chrome prior to 83.0.4103.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

DEBIAN-CVE-2020-6513

Heap buffer overflow in PDFium in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...

CVE-2020-5131

SonicWall NetExtender Windows client vulnerable to arbitrary file write vulnerability, this allows attacker to overwrite a DLL and execute code with the same privilege in the host operating system. This vulnerability impact SonicWall NetExtender Windows client version 9.0.815 and earlier...