DEBIAN-CVE-2012-6685

Nokogiri before 1.5.4 is vulnerable to XXE attacks...

CVE-2020-8427

In Unitrends Backup before 10.4.1, an HTTP request parameter was not properly sanitized, allowing for SQL injection that resulted in an authentication bypass...

DEBIAN-CVE-2014-6262

Multiple format string vulnerabilities in the python module in RRDtool, as used in Zenoss Core before 4.2.5 and other products, allow remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted third argument to the rrdtool.graph function, aka ZEN-15415...

PT-2020-20264

Name of the Vulnerable Software and Affected Versions: InfiniteWP Client plugin versions prior to 1.9.4.5 Description: The InfiniteWP Client plugin for WordPress has a missing authorization check in the iwp mmb set request function within the init.php file. An attacker who knows an administrator'...

AZL-35332 CVE-2014-8140 affecting package unzip for versions less than 6.0-20

Heap-based buffer overflow in the testcompreb function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command...

CVE-2020-7911

In JetBrains TeamCity before 2019.2, several user-level pages were vulnerable to XSS...

DEBIAN-CVE-2020-5225

Log injection in SimpleSAMLphp before version 1.18.4. The www/erroreport.php script, which receives error reports and sends them via email to the system administrator, did not properly sanitize the report identifier obtained from the request. This allows an attacker, under specific circumstances,...

CVE-2016-1000237

sanitize-html before 1.4.3 has XSS...

CVE-2020-5217

In Secure Headers RubyGem secureheaders, a directive injection vulnerability is present in versions before 3.8.0, 5.1.0, and 6.2.0. If user-supplied input was passed into append/overridecontentsecuritypolicydirectives, a semicolon could be injected leading to directive injection. This could be us...

CVE-2019-6858

A CWE-427:Uncontrolled Search Path Element vulnerability exists in MSX Configurator Software Version prior to V1.0.8.1, which could cause privilege escalation when injecting a malicious DLL...

Unspecified Vulnerability in SchedMD Slurm (CNVD-2020-10640)

SchedMD Slurm is SchedMD's open source and highly scalable cluster management and job scheduling system for large and small Linux clusters. A security vulnerability exists in SchedMD Slurm versions prior to 18.08.9 and 19.x versions prior to 19.05.5. No detailed vulnerability details are availabl...

PYSEC-2020-83

libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow...

Cisco Data Center Network Manager Authentication Bypass Vulnerability

Cisco Data Center Network Manager DCNM is a suite of data center network managers from Cisco that provides multiprotocol management of the network and troubleshooting of switch operating conditions and performance. An authentication bypass vulnerability exists in the Web management interface of...

UBUNTU-CVE-2019-20063

hdf/dataobject.c in libmysofa before 0.8 has an uninitialized use of memory, as demonstrated by mysofa2json...

JetBrains Ktor framework injection vulnerability

JetBrains Ktor framework is a Web application framework from the Czech company JetBrains. An injection vulnerability exists in JetBrains Ktor framework versions prior to 1.2.6. The vulnerability stems from a lack of proper validation of user input data by a web system or product during the course...

WordPress ListingPro theme cross-site scripting vulnerability (CNVD-2020-01194)

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.ListingPro theme is a directory website theme plugin used in it. A cross-site scripting vulnerability exists in WordPress...

DEBIAN-CVE-2019-19960

In wolfSSL before 4.3.0, wceccmulmodex does not properly resist side-channel attacks...

libxml2 Memory Leak Vulnerability

libxml2 is a library written in C for parsing XML documents . A memory leak vulnerability exists in the xmlParseBalancedChunkMemoryRecover of the parser.c file in versions of libxml2 prior to 2.9.10. No detailed vulnerability details are provided at this time...

cPanel Input Validation Error Vulnerability (CNVD-2020-03742)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An input validation error vulnerability exists in versions of cPanel prior to 70.0.23. The vulnerability stems from a web-based...

Barco ClickShare Button R9861500D01 Key Disclosure Vulnerability

The Barco ClickShare Button R9861500D01 is a wireless control device for presentation systems from Barco Belgium. A security vulnerability exists in Barco ClickShare Button R9861500D01 versions prior to 1.9.0. An attacker can exploit this vulnerability to obtain a symmetric encryption key and gai...