CVE-2020-3955

ESXi 6.5 without patch ESXi650-201912104-SG and ESXi 6.7 without patch ESXi670-202004103-SG do not properly neutralize script-related HTML when viewing virtual machines attributes. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base sco...

VMware ESXi Cross-Site Scripting Vulnerability

VMware ESXi is a server virtualization platform from VMware that can be installed directly on physical servers. A cross-site scripting vulnerability exists in VMware ESXi versions 6.5 and 6.7. An attacker can exploit this vulnerability to inject malicious scripts...

Caldera Access Control Error Vulnerability

Caldera is a suite of software from the French company Caldera that provides color management, imaging and processing solutions for printer devices. An access control error vulnerability exists in authsvc in versions of Caldera prior to 2.6.5, which can be exploited by an attacker to bypass...

CVE-2020-1790

GaussDB 200 with version of 6.5.1 have a command injection vulnerability. The software constructs part of a command using external input from users, but the software does not sufficiently validate the user input. Successful exploit could allow the attacker to inject certain commands...

UBUNTU-CVE-2020-5211

In NetHack before 3.6.5, an invalid extended command in value for the AUTOCOMPLETE configuration file option can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation. This vulnerability affects systems that have NetHack installed suid/sgid and shared systems...

Huawei GaussDB 200 Command Injection Vulnerability

Huawei GaussDB 200 is a distributed parallel relational database system developed by Huawei China based on the open source database Postgres-XC. A command injection vulnerability exists in Huawei GaussDB 200 version 6.5.1, which arises from a program that fails to adequately perform input...

Adobe Experience Manager Cross-Site Scripting Vulnerability (CNVD-2020-02995)

Adobe Experience Manager is an enterprise content management solution that helps you simplify the management and delivery of your content and assets. A cross-site scripting vulnerability exists in Adobe Experience Manager 6.3, 6.4, and 6.5. An attacker can exploit this vulnerability to obtain...

Open TFTP Server Formatting String Error Vulnerability

Open TFTP Server MT is a file transfer server. A formatting string error vulnerability exists in the 'logMess' function in Open TFTP Server MT version 1.65 and earlier. The vulnerability stems from a network system or product that receives external formatted strings as parameters with lax filteri...

Unspecified Vulnerability in CloudBees Jenkins Rundeck Plugin

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing project and some timed tasks . Rundeck Plugin is used in one of the...

IBM DB2 High Performance Unload load for LUW Code Issue Vulnerability

IBM DB2 is a relational database management system. The system is executed on UNIX, Linux, IBMi, z/OS, and Windows server versions.High Performance Unload load for LUW is a DB2 utility program. The program can be used to unload DB2 tables from a tablespace or image copy. A security vulnerability...

Cisco IOS XR Access Control Error Vulnerability

Cisco IOS XR is a set of operating systems developed by the American company Cisco Cisco for its network equipment. An access control error vulnerability exists in the access control logic for NETCONF over Secure Shell SSH in Cisco IOS XR versions 6.5.1 and 6.5.2, which stems from a lack of...

CVE-2019-8085

Adobe Experience Manager versions 6.5, 6.4, 6.3 and 6.2 have a reflected cross site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure...

CVE-2019-8081

Adobe Experience Manager versions 6.5, 6.4, 6.3 and 6.2 have an authentication bypass vulnerability. Successful exploitation could lead to sensitive information disclosure...

CVE-2019-8083

Adobe Experience Manager versions 6.5, 6.4 and 6.3 have a cross site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure...

CVE-2019-8089

Adobe Experience Manager Forms versions 6.3-6.5 have a reflected cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure...

Cisco Firepower Management Center Cross-Site Scripting Vulnerability (CNVD-2019-36629)

Cisco Firepower Management Center is the nerve center for managing Cisco network security solutions, improving the effectiveness of Cisco network security solutions by providing centralized, integrated, and simplified management. A stored cross-site scripting vulnerability exists in the web-based...

Adobe Experience Manager Command Injection Vulnerability

Adobe Experience Manager is an enterprise content management solution that helps you simplify the management and delivery of your content and assets. A command injection vulnerability exists in Adobe Experience Manager 6.0, 6.1, 6.2, 6.3, 6.4, 6.5. An attacker can exploit this vulnerability to...

Adobe Experience Manager Forms Cross-Site Scripting Vulnerability (CNVD-2019-37118)

Adobe Experience Manager AEM Forms is an enterprise document and forms platform that lets you capture and process information, deliver personalized communications, and protect and track sensitive information. A reflected cross-site scripting vulnerability exists in Adobe Experience Manager Forms...

CVE-2019-7964

Adobe Experience Manager versions 6.5, and 6.4 have an authentication bypass vulnerability. Successful exploitation could lead to remote code execution...

Adobe Experience Manager Authentication Bypass Vulnerability

Adobe Experience Manager is an enterprise content management solution that helps you simplify the management and delivery of your content and assets. An authentication bypass vulnerability exists in Adobe Experience Manager 6.5 and 6.4. An attacker can exploit this vulnerability to achieve remote...