Cisco Identity Services Engine Elevation of Privilege Vulnerability

Cisco Identity Services Engine ISE is a next-generation identity and access control policy platform that enables organizations to enforce compliance, enhance infrastructure security, and streamline their service operations. An elevation of privilege vulnerability exists in the Microsoft Active...

Aruba Networks Aruba Airwave Remote Command Execution Vulnerability

Aruba Networks Aruba Airwave is Aruba Networks' software for visualizing, tracking, and managing wired wireless networks. A remote command execution vulnerability exists in Aruba Airwave Software versions prior to 1.3.2, which can be exploited by an unauthenticated attacker to remotely execute...

CVE-2020-7128

A remote unauthenticated arbitrary code execution vulnerability was discovered in Aruba Airwave Software versions: Prior to 1.3.2...

Microchip CryptoAuthLib Buffer Overflow Vulnerability (CNVD-2020-62800)

Microchip CryptoAuthLib is a Microchip code library written in C for interaction with Microchip security devices. A buffer overflow vulnerability exists in versions prior to Microchip CryptoAuthentication Library CryptoAuthLib 20191122. No detailed vulnerability details are available at this time...

Apple macOS Catalina Logic Vulnerability

Apple macOS Catalina is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Catalina versions prior to 10.15.5, which stems from the ability of someone with physical access to the Mac to bypass the login window. No details of th...

Microchip CryptoAuthLib Buffer Overflow Vulnerability

Microchip CryptoAuthLib is a Microchip code library written in C for interaction with Microchip security devices. A buffer overflow vulnerability exists in versions prior to Microchip CryptoAuthentication Library CryptoAuthLib 20191122, which stems from a buffer overflow in Microchip CryptoAuthLi...

CVE-2020-8261

A vulnerability in the Pulse Connect Secure / Pulse Policy Secure 9.1R9 is vulnerable to arbitrary cookie injection...

Aruba Airwave Software Remote Command Execution Vulnerability

Aruba Airwave Software is a network monitoring software that helps users view real-time data and situational reports for every user, device, and segment of the network. A remote command execution vulnerability exists in Aruba Airwave Software versions prior to 1.3.2. An attacker can exploit this...

Aruba Airwave Software Remote Command Execution Vulnerability (CNVD-2020-59213)

Aruba Airwave Software is a network monitoring software that helps users view real-time data and situational reports for every user, device, and segment of the network. A remote command execution vulnerability exists in Aruba Airwave Software versions prior to 1.3.2. An attacker can exploit this...

Aruba Airwave Software Unauthorized Access Vulnerability

Aruba Airwave Software is a network monitoring software that helps users view real-time data and situational reports for every user, device, and segment of the network. An unauthorized access vulnerability exists in Aruba Airwave Software versions prior to 1.3.2. An attacker could exploit this...

CVE-2020-7127

A remote unauthenticated arbitrary code execution vulnerability was discovered in Aruba Airwave Software versions: Prior to 1.3.2...

VMware Horizon Client for Windows Information Disclosure Vulnerability

VMware Horizon Client is a client application for connecting to VMware Horizon virtual desktops from VMware. An information disclosure vulnerability exists in VMware Horizon Client for Windows 5.x series versions prior to 5.5.0, which can be exploited by an attacker to retrieve hashed credentials...

Oracle Database Server Oracle Application Express component unauthorized access vulnerability

Oracle Database Server is a set of relational database management system of the United States Oracle Oracle. The database management system provides data management, distributed processing and other functions. An unauthorized vulnerability exists in Oracle Database Server Oracle Application Expre...

CVE-2020-14884

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

McAfee ePolicy chistrator (ePO) cross-site scripting vulnerability

McAfee ePolicy Orchistrator ePO is a suite of scalable security management software from McAfee. The software enables centralized, streamlined management of endpoint, network, content security and compliance solutions. A cross-site scripting vulnerability exists in McAfee ePolicy chistrator ePO...

PT-2020-16711 · Bigbluebutton · Bigbluebutton

Name of the Vulnerable Software and Affected Versions: BigBlueButton versions prior to 2.2.7 Description: The issue arises from the lockSettingsProps.disablePrivateChat setting not being applied to chats that are already open. This problem is located in the...

Crossbeam Buffer Overflow Vulnerability

Crossbeam is a tool for individual developers applied to concurrent programming. A buffer overflow vulnerability exists in Crossbeam crossbeam-channel versions prior to 0.4.4, which stems from an inconsistency between the Vec::from iter allocated memory and the number of iterators. An attacker ca...

CVE-2020-24188

Cross-site scripting XSS vulnerability in the search functionality in Intrexx before 9.4.0 allows remote attackers to inject arbitrary web script or HTML via the request parameter...

CVE-2020-26925

NETGEAR GS808E devices before 1.7.1.0 are affected by denial of service...

UBUNTU-CVE-2020-26164

In kdeconnect-kde aka KDE Connect before 20.08.2, an attacker on the local network could send crafted packets that trigger use of large amounts of CPU, memory, or network connection slots, aka a Denial of Service attack...