CVE-2020-12018

Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. An out-of-bounds vulnerability exists that may allow access to unauthorized data...

Sprout Forms Code Injection Vulnerability

Sprout Forms is a form builder plugin. A code injection vulnerability exists in Sprout Forms versions prior to 3.9.0. An attacker can exploit this vulnerability to execute Twig code...

Ledger SAS Ledger Monero app information disclosure vulnerability

Ledger SAS Ledger Monero app is an application for Ledger eWallet device management from Ledger SAS, France. A security vulnerability exists in the Ledger SAS Ledger Monero app versions prior to 1.5.1 for Ledger Nano and Ledger S devices. An attacker could exploit the vulnerability by sending a...

Soteria Input Validation Error Vulnerability

Soteria is a cloud backup risk solution. An input validation error vulnerability exists in versions of Soteria prior to 1.0.1. The vulnerability stems from a network system or product that does not properly validate incoming data. No details of the vulnerability are provided at this time...

Teclib GLPI Input Validation Error Vulnerability

Teclib GLPI is an open source IT asset management suite from the French company Teclib. The suite includes features such as device status management, asset inventory storage, management processes and work log management. An input validation error vulnerability exists in Teclib GLPI versions prior...

Dell EMC RSA Archer Injection Vulnerability

Dell EMC RSA Archer is an enterprise IT governance and compliance governance product from Dell USA. The product enables the development of eGRC programs for managing enterprise risk, automating business processes, and more. An injection vulnerability exists in versions prior to Dell EMC RSA Arche...

PYSEC-2020-304

TensorFlow before 1.7.0 has an integer overflow that causes an out-of-bounds read, possibly causing disclosure of the contents of process memory. This occurs in the DecodeBmp feature of the BMP decoder in core/kernels/decodebmpop.cc...

Pegasystem PEGA Platform Cross-Site Scripting Vulnerability (CNVD-2020-27232)

Pegasystem PEGA Platform is a suite of application development platforms from Pegasystem UK. The platform is used to develop applications for BPM Business Process Management, Case Management, Real Time Decision Making and CRM Customer Relationship Management. A cross-site scripting vulnerability...

CVE-2017-18855

NETGEAR WNR854T devices before 1.5.2 are affected by command execution...

libreoffice: Insufficient URL encoding flaw in allowed script location check

LibreOffice has a feature where documents can specify that pre-installed macros can be executed on various script events such as mouse-over, document-open etc. Access is intended to be restricted to scripts under the share/Scripts/python, user/Scripts/python sub-directories of the LibreOffice...

libreoffice: Remote resources protection module not applied to bullet graphics

LibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are allowed to retrieve remote resources. This mode is not the default mode, but can be enabled by users who want to disable LibreOffice's ability to include remote resources within a document. A flaw existed...

CVE-2020-6823

A malicious extension could have called browser.identity.launchWebAuthFlow, controlling the redirecturi, and through the Promise returned, obtain the Auth code and gain access to the user's account at the service provider. This vulnerability affects Firefox 75...

CVE-2020-5867

In versions prior to 3.3.0, the NGINX Controller Agent installer script 'install.sh' uses HTTP instead of HTTPS to check and install packages...

CVE-2018-21104

NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user...

CVE-2018-21101

NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user...

Teeworlds Input Validation Error Vulnerability

Teeworlds is a multiplayer online shooter. An input validation error vulnerability exists in versions of Teeworlds prior to 0.7.4. An attacker can exploit this vulnerability to execute arbitrary code on the system...

JetBrains TeamCity Access Control Error Vulnerability (CNVD-2020-27762)

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. An access control error vulnerability exists in...

Phproject Code Issues Vulnerabilities

Phproject is a project management system. The system supports features such as issue management, task management and dashboards. A code issue vulnerability exists in versions prior to Phprojec 1.7.8. An attacker can exploit the vulnerability to execute arbitrary code...

CVE-2017-18807

CVE-2017-18807 affects NETGEAR ReadyNAS OS 6 devices running versions prior to 6.8.0 and is described as a stored Cross-Site Scripting (XSS) vulnerability. The connected records confirm the affected product family and the version threshold, but do not provide technical details about the root caus...

PT-2020-12923 · Open Source Matters · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions prior to 3.9.17 Description: An issue was discovered in the usergroup table class due to improper input validations, which could lead to a broken ACL configuration. Recommendations: For versions prior to 3.9.17, update to...