PYSEC-2020-60

A stored cross-site scripting XSS vulnerability affects the Web UI in Locust before 1.3.2, if the installation violates the usage expectations by exposing this UI to outside users...

Google Chrome Resource Management Error Vulnerability (CNVD-2020-62477)

Google Chrome is a web browser from Google, an American company. A security vulnerability in versions of Google Chrome prior to 86.0.4240.99 allows an attacker to perform sandbox escaping to affect the renderer process via a carefully crafted HTML page after using a password in the browser...

UBUNTU-CVE-2020-26521

The JWT library in NATS nats-server before 2.1.9 allows a denial of service a nil dereference in Go code...

CVE-2020-28196

MIT Kerberos 5 aka krb5 before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerberos message because the lib/krb5/asn.1/asn1encode.c support for BER indefinite lengths lacks a recursion limit...

PT-2020-16975 · Salesagility · Suitecrm

Name of the Vulnerable Software and Affected Versions: SuiteCRM versions prior to 7.11.17 Description: The issue allows for remote code execution via the system settings Log File Name setting. In certain circumstances involving admin account takeover, the logger file name can refer to an...

Aruba Networks Aruba Airwave Remote Command Execution Vulnerability

Aruba Networks Aruba Airwave is Aruba Networks' software for visualizing, tracking, and managing wired wireless networks. A remote command execution vulnerability exists in Aruba Airwave Software versions prior to 1.3.2, which can be exploited by an unauthenticated attacker to remotely execute...

Cisco Identity Services Engine Elevation of Privilege Vulnerability

Cisco Identity Services Engine ISE is a next-generation identity and access control policy platform that enables organizations to enforce compliance, enhance infrastructure security, and streamline their service operations. An elevation of privilege vulnerability exists in the Microsoft Active...

CVE-2020-7128

A remote unauthenticated arbitrary code execution vulnerability was discovered in Aruba Airwave Software versions: Prior to 1.3.2...

Microchip CryptoAuthLib Buffer Overflow Vulnerability

Microchip CryptoAuthLib is a Microchip code library written in C for interaction with Microchip security devices. A buffer overflow vulnerability exists in versions prior to Microchip CryptoAuthentication Library CryptoAuthLib 20191122, which stems from a buffer overflow in Microchip CryptoAuthLi...

Apple macOS Catalina Logic Vulnerability

Apple macOS Catalina is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Catalina versions prior to 10.15.5, which stems from the ability of someone with physical access to the Mac to bypass the login window. No details of th...

Microchip CryptoAuthLib Buffer Overflow Vulnerability (CNVD-2020-62800)

Microchip CryptoAuthLib is a Microchip code library written in C for interaction with Microchip security devices. A buffer overflow vulnerability exists in versions prior to Microchip CryptoAuthentication Library CryptoAuthLib 20191122. No detailed vulnerability details are available at this time...

CVE-2020-8261

A vulnerability in the Pulse Connect Secure / Pulse Policy Secure 9.1R9 is vulnerable to arbitrary cookie injection...

Aruba Airwave Software Unauthorized Access Vulnerability

Aruba Airwave Software is a network monitoring software that helps users view real-time data and situational reports for every user, device, and segment of the network. An unauthorized access vulnerability exists in Aruba Airwave Software versions prior to 1.3.2. An attacker could exploit this...

Aruba Airwave Software Remote Command Execution Vulnerability (CNVD-2020-59213)

Aruba Airwave Software is a network monitoring software that helps users view real-time data and situational reports for every user, device, and segment of the network. A remote command execution vulnerability exists in Aruba Airwave Software versions prior to 1.3.2. An attacker can exploit this...

Aruba Airwave Software Remote Command Execution Vulnerability

Aruba Airwave Software is a network monitoring software that helps users view real-time data and situational reports for every user, device, and segment of the network. A remote command execution vulnerability exists in Aruba Airwave Software versions prior to 1.3.2. An attacker can exploit this...

CVE-2020-7127

A remote unauthenticated arbitrary code execution vulnerability was discovered in Aruba Airwave Software versions: Prior to 1.3.2...

CVE-2020-7124

A remote unauthorized access vulnerability was discovered in Aruba Airwave Software versions: Prior to 1.3.2...

VMware Horizon Client for Windows Information Disclosure Vulnerability

VMware Horizon Client is a client application for connecting to VMware Horizon virtual desktops from VMware. An information disclosure vulnerability exists in VMware Horizon Client for Windows 5.x series versions prior to 5.5.0, which can be exploited by an attacker to retrieve hashed credentials...

Oracle Database Server Oracle Application Express component unauthorized access vulnerability

Oracle Database Server is a set of relational database management system of the United States Oracle Oracle. The database management system provides data management, distributed processing and other functions. An unauthorized vulnerability exists in Oracle Database Server Oracle Application Expre...

CVE-2020-14884

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...