Code injection

Video Insight VMS versions prior to 7.6.1 allow remote attackers to conduct code injection attacks via unspecified vectors...

Unspecified Vulnerability in Bond Technology Management JetSelect

Bond Technology Management JetSelect is an application for managing IP and networks on board. An unspecified vulnerability exists in Bond Technology Management JetSelect. An attacker could exploit this vulnerability to obtain user credentials via the Developer tool or similar...

Unspecified Vulnerability in Bond Technology Management JetSelect (CNVD-2020-29622)

Bond Technology Management JetSelect is an application for managing IP and networks on board ships from Bond Technology Management in Cyprus. An unspecified vulnerability exists in Bond Technology Management JetSelect. An attacker could use this vulnerability to obtain the password of the JetSele...

CVE-2020-5575

Cross-site scripting vulnerability in Movable Type series Movable Type 7 r.4606 7.2.1 and earlier Movable Type 7, Movable Type Advanced 7 r.4606 7.2.1 and earlier Movable Type Advanced 7, Movable Type for AWS 7 r.4606 7.2.1 and earlier Movable Type for AWS 7, Movable Type 6.5.3 and earlier Movabl...

CVE-2020-5574

HTML attribute value injection vulnerability in Movable Type series Movable Type 7 r.4606 7.2.1 and earlier Movable Type 7, Movable Type Advanced 7 r.4606 7.2.1 and earlier Movable Type Advanced 7, Movable Type for AWS 7 r.4606 7.2.1 and earlier Movable Type for AWS 7, Movable Type 6.5.3 and...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Movable Type series Movable Type 7 r.4606 7.2.1 and earlier Movable Type 7, Movable Type Advanced 7 r.4606 7.2.1 and earlier Movable Type Advanced 7, Movable Type for AWS 7 r.4606 7.2.1 and earlier Movable Type for AWS 7, Movable Type 6.5.3 and...

CVE-2020-5577

Movable Type series Movable Type 7 r.4606 7.2.1 and earlier Movable Type 7, Movable Type Advanced 7 r.4606 7.2.1 and earlier Movable Type Advanced 7, Movable Type for AWS 7 r.4606 7.2.1 and earlier Movable Type for AWS 7, Movable Type 6.5.3 and earlier Movable Type 6.5, Movable Type Advanced 6.5....

CVE-2020-5577

Movable Type series Movable Type 7 r.4606 7.2.1 and earlier Movable Type 7, Movable Type Advanced 7 r.4606 7.2.1 and earlier Movable Type Advanced 7, Movable Type for AWS 7 r.4606 7.2.1 and earlier Movable Type for AWS 7, Movable Type 6.5.3 and earlier Movable Type 6.5, Movable Type Advanced 6.5....

CVE-2020-5574

HTML attribute value injection vulnerability in Movable Type series Movable Type 7 r.4606 7.2.1 and earlier Movable Type 7, Movable Type Advanced 7 r.4606 7.2.1 and earlier Movable Type Advanced 7, Movable Type for AWS 7 r.4606 7.2.1 and earlier Movable Type for AWS 7, Movable Type 6.5.3 and...

Unspecified Vulnerability in Zephyr

Zephyr is an open source, small, scalable real-time operating system from the Linux Foundation. An unspecified vulnerability exists in Zephyr. An attacker could exploit this vulnerability to elevate privileges...

Unspecified vulnerability in cPanel (CNVD-2020-29628)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An unspecified vulnerability exists in cPanel. An attacker can exploit this vulnerability to gain access to the current working...

Unspecified vulnerability in Linux kernel (CNVD-2020-28266)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in the 'btreegccoalesce' function in the drivers/md/bcache/btree.c file in Linux kernel 5.6.11 and earlier versions. An attacker can...

Unspecified Vulnerability in Blaauw Remote Kiln Control

The Blaauw Remote Kiln Control is an automated ceramic kiln controller from Blaauw in the Netherlands. An unspecified vulnerability exists in Blaauw Remote Kiln Control, which stems from the ability for a user to set a short or guessable password e.g., 1 or 1234. No details of the vulnerability a...

Unspecified Vulnerability in F5 BIG-IP (CNVD-2020-36267)

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A security vulnerability exists in F5 BIG-IP, which can be exploited by remote attackers with the help of a specially crafted...

The vulnerability of the “credentialhelper” component in the distributed Git version control system, related to insufficient protection of registration data, allows a malicious actor to access confidential information.

The vulnerability of the “credentialhelper” component in the distributed Git version control system is related to insufficient protection of registration data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to protected information through ...

Bitcoind/Bitcoin-Qt Unspecified Security

Bitcoin is an e-currency created with open source P2P software. An unspecified vulnerability exists in Bitcoind and Bitcoin-Qt. A remote attacker could exploit this vulnerability to cause a denial of service via unknown vectors...

Bitcoind/Bitcoin-Qt Denial of Service

Bitcoin is an e-currency created with open source P2P software. An unspecified vulnerability exists in Bitcoind and Bitcoin-Qt. A remote attacker could exploit this vulnerability to cause a denial of service via unknown vectors...

CVE-2020-5570

Cross-site scripting vulnerability in Sales Force Assistant version 11.2.48 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2020-5570

Cross-site scripting vulnerability in Sales Force Assistant version 11.2.48 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...

Unspecified Vulnerability in Multiple NETGEAR Products (CNVD-2020-28137)

The NETGEAR WAC505 and others are a wireless access point AP from NETGEAR. A security vulnerability exists in several NETGEAR products. No detailed vulnerability details are available at this time...