CVE-2020-8342

A race condition vulnerability was reported in Lenovo System Update prior to version 5.07.0106 that could allow escalation of privilege...

Kubernetes < 1.15.10 / 1.16.x < 1.16.7 / 1.17.x < 1.17.3 DoS

The version of Kubernetes installed on the remote host is a version prior to 1.13.10, or 1.14.x prior to 1.14.6, or 1.15.x prior to 1.15.3. It is, therefore, affected by a denial of service vulnerability Note that Nessus has not attempted to exploit these issues but has instead relied only on the...

CVE-2020-7382

Rapid7 Nexpose installer version prior to 6.6.40 contains an Unquoted Search Path which may allow an attacker on the local machine to insert an arbitrary file into the executable path. This issue affects: Rapid7 Nexpose versions prior to 6.6.40...

MunkiReport Cross-Site Request Forgery Vulnerability

Munkireport is a reporting tool for the Munki software management program. A cross-site request forgery vulnerability exists in manager/deletemachine/id in MunkiReport versions prior to 5.6.3. An attacker could exploit this vulnerability to delete arbitrary devices from the MunkiReport database...

CVE-2020-15543

SolarWinds Serv-U FTP server before 15.2.1 does not validate an argument path...

McAfee Advanced Threat Defense Information Disclosure Vulnerability (CNVD-2020-52853)

McAfee Advanced Threat Defense ATD is a suite of advanced threat protection systems from the U.S.-based company McAfee McAfee. The system provides zero-day attack protection and malware protection through static code analysis, malware dynamic analysis and machine learning. An information disclosu...

LibVNCServer Buffer Overflow Vulnerability (CNVD-2020-36788)

LibVNCServer is a cross-platform C library that supports the implementation of VNC Virtual Network Computing server or client functionality in programs. A buffer overflow vulnerability exists in the libvncserver/corre.c file in versions of LibVNCServer prior to 0.9.13. A remote attacker could...

PT-2020-13412 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions prior to 13.0.1 Description: A Stored Cross-Site Scripting issue allows the execution of arbitrary Javascript code in the blobs API. Recommendations: For versions prior to 13.0.1, update to version 13.0.1 or later to...

Foxit Reader and PhantomPDF Resource Management Error Vulnerability (CNVD-2020-32085)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A resource management error vulnerability exists in Foxit Reader versions prior to 9.7.2 and PhantomPDF versions prior to 9.7.2. An attacker can exploit this vulnerability to cause a denial of service...

CVE-2019-5997

Video Insight VMS versions prior to 7.6.1 allow remote attackers to conduct code injection attacks via unspecified vectors...

CVE-2020-8020

A Improper Neutralization of Input During Web Page Generation vulnerability in open-build-service allows remote attackers to store arbitrary JS code to cause XSS. This issue affects: openSUSE open-build-service versions prior to 7cc32c8e2ff7290698e101d9a80a9dc29a5500fb...

CVE-2020-12018

Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. An out-of-bounds vulnerability exists that may allow access to unauthorized data...

Teclib GLPI Input Validation Error Vulnerability

Teclib GLPI is an open source IT asset management suite from the French company Teclib. The suite includes features such as device status management, asset inventory storage, management processes and work log management. An input validation error vulnerability exists in Teclib GLPI versions prior...

PYSEC-2020-304

TensorFlow before 1.7.0 has an integer overflow that causes an out-of-bounds read, possibly causing disclosure of the contents of process memory. This occurs in the DecodeBmp feature of the BMP decoder in core/kernels/decodebmpop.cc...

CVE-2020-6823

A malicious extension could have called browser.identity.launchWebAuthFlow, controlling the redirecturi, and through the Promise returned, obtain the Auth code and gain access to the user's account at the service provider. This vulnerability affects Firefox 75...

CVE-2018-21101

NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user...

CVE-2020-11782

Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, XR500 before 2.3.2.56, and XR700 before 1.0.1.10...

Advantech WebAccess/NMS SQL Injection Vulnerability (CNVD-2020-22315)

Advantech WebAccess/NMS is a web browser based software suite for Network Management Systems NMS. A SQL injection vulnerability exists in Advantech WebAccess/NMS versions prior to 3.0.2, which can be exploited by attackers to obtain sensitive information...

Ivanti Workspace Control Information Disclosure Vulnerability

Ivanti Workspace Control RES One Workspace is a set of workspace control software from Ivanti, USA. The software includes features such as user management, application management and report management. An information disclosure vulnerability exists in Ivanti Workspace Control versions prior to...

LimeSurvey Cross-Site Scripting Vulnerability (CNVD-2020-35515)

LimeSurvey formerly known as PHPSurveyor is a set of open source online questionnaire survey program from the LimeSurvey team, which supports survey program development, questionnaire distribution, and data collection. The application/views/admin/surveysgroups/surveySettings.php and...