CVE-2021-25769: Undefined Security Weakness

In JetBrains YouTrack before 2020.4.6808, the YouTrack administrator wasn't able to access attachments...

CVE-2021-26306: Undefined Security Weakness

An issue was discovered in the raw-cpuid crate before 9.0.0 for Rust. It has unsound transmute calls within asstring methods...

CVE-2020-36219: Undefined Security Weakness

An issue was discovered in the atomic-option crate through 2020-10-31 for Rust. Because AtomicOption implements Sync unconditionally, a data race can occur...

CVE-2020-28478: Undefined Security Weakness

This affects the package gsap before 3.6.0...

CVE-2020-28477: Undefined Security Weakness

This affects all versions of package immer...

CVE-2021-1674: Undefined Security Weakness

Windows Remote Desktop Protocol Core Security Feature Bypass Vulnerability...

CVE-2020-36170: Undefined Security Weakness

The Ultimate Member plugin before 2.1.13 for WordPress mishandles hidden name="timestamp" fields in forms...

CVE-2020-35865: Undefined Security Weakness

An issue was discovered in the osstrbytes crate before 2.0.0 for Rust. It has false expectations about char::fromu32unchecked behavior...

CVE-2020-35919: Undefined Security Weakness

An issue was discovered in the net2 crate before 0.2.36 for Rust. It has false expectations about the std::net::SocketAddr memory representation...

CVE-2020-35922: Undefined Security Weakness

An issue was discovered in the mio crate before 0.7.6 for Rust. It has false expectations about the std::net::SocketAddr memory representation...

CVE-2020-35920: Undefined Security Weakness

An issue was discovered in the socket2 crate before 0.3.16 for Rust. It has false expectations about the std::net::SocketAddr memory representation...

CVE-2020-29594: Undefined Security Weakness

Rocket.Chat before 0.74.4, 1.x before 1.3.4, 2.x before 2.4.13, 3.x before 3.7.3, 3.8.x before 3.8.3, and 3.9.x before 3.9.1 mishandles SAML login...

CVE-2020-28925: Undefined Security Weakness

Bolt before 3.7.2 does not restrict filter options in a Request in the Twig context, and is therefore inconsistent with the "How to Harden Your PHP for Better Security" guidance...

CVE-2020-35800: Undefined Security Weakness

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects AC2100 before 1.2.0.72, AC2400 before 1.2.0.72, AC2600 before 1.2.0.72, CBK40 before 2.5.0.10, CBR40 before 2.5.0.10, D6000 before 1.0.0.80, D6220 before 1.0.0.60, D6400 before 1.0.0.94, D7000v2...

CVE-2020-5808: Undefined Security Weakness

In certain scenarios in Tenable.sc prior to 5.17.0, a scanner could potentially be used outside the user's defined scan zone without a particular zone being specified within the Automatic Distribution configuration...

CVE-2020-28052: Undefined Security Weakness

An issue was discovered in Legion of the Bouncy Castle BC Java 1.65 and 1.66. The OpenBSDBCrypt.checkPassword utility method compared incorrect data when checking the password, allowing incorrect passwords to indicate they were matching with previously hashed ones that were different...

CVE-2020-35554: Undefined Security Weakness

An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software. There is a WebView SSL error-handler vulnerability. The LG ID is LVE-SMP-200026 December 2020...

CVE-2020-35453: Undefined Security Weakness

HashiCorp Vault Enterprise’s Sentinel EGP policy feature incorrectly allowed requests to be processed in parent and sibling namespaces. Fixed in 1.5.6 and 1.6.1...

CVE-2020-27068: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-127973231References: Upstream kernel...

CVE-2020-7791: Undefined Security Weakness

This affects the package i18n before 2.1.15. Vulnerability arises out of insufficient handling of erroneous language tags in src/i18n/Concrete/TextLocalizer.cs and src/i18n/LocalizedApplication.cs...