CVE-2020-14092

The CodePeople Payment Form for PayPal Pro plugin before 1.1.65 for WordPress allows SQL Injection...

PYSEC-2020-79

In libImaging/Jpeg2KDecode.c in Pillow before 7.1.0, there are multiple out-of-bounds reads via a crafted JP2 file...

Unspecified Vulnerability in Mattermost Server (CNVD-2020-41491)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in Mattermost Server versions prior to 5.8.0. The vulnerability can be exploited by an attacker to perform unauthorized operations when Town Square is set to read-onl...

Unspecified vulnerability in Google Chrome accessibility

Google Chrome is a web browser of Google Google, Inc. accessibility is one of the auxiliary functions of the plug-in. A security vulnerability exists in accessibility in Google Chrome versions prior to 74.0.3729.108, which can be exploited by remote attackers to obtain sensitive information from...

UBUNTU-CVE-2020-12408

When browsing a document hosted on an IP address, an attacker could insert certain characters to flip domain and path information in the address bar. This vulnerability affects Firefox 77...

DEBIAN-CVE-2020-6481

Insufficient policy enforcement in URL formatting in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to perform domain spoofing via a crafted domain name...

PT-2020-2735 · Panasonic · Video Insight Vms

Name of the Vulnerable Software and Affected Versions: Video Insight VMS versions prior to 7.6.1 Description: The issue is caused by insufficient validation of user-provided data, allowing a remote attacker to execute arbitrary code by sending a specially crafted malicious request. This can lead ...

Pegasystem PEGA Platform Cross-Site Scripting Vulnerability (CNVD-2020-27232)

Pegasystem PEGA Platform is a suite of application development platforms from Pegasystem UK. The platform is used to develop applications for BPM Business Process Management, Case Management, Real Time Decision Making and CRM Customer Relationship Management. A cross-site scripting vulnerability...

CVE-2018-21104

NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user...

CVE-2017-18807

CVE-2017-18807 affects NETGEAR ReadyNAS OS 6 devices running versions prior to 6.8.0 and is described as a stored Cross-Site Scripting (XSS) vulnerability. The connected records confirm the affected product family and the version threshold, but do not provide technical details about the root caus...

NETGEAR WAC505 and WAC510 Information Disclosure Vulnerability

Both the NETGEAR WAC505 and NETGEAR WAC510 are a wireless access point AP from NETGEAR. An information disclosure vulnerability exists in the NETGEAR WAC505 version prior to V5.6.8.3 and the WAC510 version prior to V5.6.8.3, which can be exploited by an attacker to obtain sensitive information...

DEBIAN-CVE-2020-6444

Uninitialized use in WebRTC in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2020-10623

Multiple vulnerabilities could allow an attacker with low privileges to perform SQL injection on WebAccess/NMS versions prior to 3.0.2 to gain access to sensitive information...

chromium-browser: Use after free in audio

Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Apple macOS Catalina FaceTime Component Logic Issue Vulnerability

Apple macOS Catalina is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in the FaceTime component of Apple macOS Catalina versions prior to 10.15.4. A local attacker can exploit the vulnerability to obtain sensitive user information...

MantisBT < 2.21.3 XSS Vulnerability - Windows

MantisBT is prone to a cross-site scripting vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; yo...

DEBIAN-CVE-2020-6418

Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

HP System Event Utility Input Validation Error Vulnerability

HP System is a system event utility component. A security vulnerability exists in HP System Event Utility versions prior to 1.4.33. A local attacker can exploit this vulnerability to execute arbitrary code via the HP System Event Utility system service...

DEBIAN-CVE-2020-6387

Out of bounds write in WebRTC in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted video stream...

Unspecified vulnerability in MISP (CNVD-2020-16094)

MISP is an open source software solution. The product is used to collect, store, distribute and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. A security vulnerability exists in versions of MISP prior to 2.4.121, which can be exploit...