CVE-2020-6824

Initially, a user opens a Private Browsing Window and generates a password for a site, then closes the Private Browsing Window but leaves Firefox open. Subsequently, if the user had opened a new Private Browsing Window, revisited the same site, and generated a new password - the generated passwor...

CVE-2018-21108

NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user...

PT-2020-13029 · WordPress · Mappress-Google-Maps-For-Wordpress

Name of the Vulnerable Software and Affected Versions: mappress-google-maps-for-wordpress plugin versions prior to 2.53.9 Description: The issue arises from the incorrect implementation of AJAX functions with nonces or capability checks in the mappress-google-maps-for-wordpress plugin, leading to...

NETGEAR XR500 Code Execution Vulnerability

The NETGEAR XR500 is a wireless router from NETGEAR. A code execution vulnerability exists in NETGEAR XR500 versions prior to 2.3.2.32, which can be exploited by an attacker to execute code...

UBUNTU-CVE-2019-20787

Teeworlds before 0.7.4 has an integer overflow when computing a tilemap size...

NETGEAR ReadyNAS OS xss Vulnerability (CNVD-2020-74064)

NETGEAR ReadyNAS OS is a set of operating systems for ReadyNAS network attached storage devices from NETGEAR. A cross-site scripting vulnerability exists in NETGEAR ReadyNAS OS 6 versions prior to 6.8.0. The vulnerability stems from a lack of proper validation of client data by the WEB applicatio...

NETGEAR R7800 Buffer Overflow Vulnerability

The NETGEAR R7800 is a wireless router from NETGEAR. A buffer error vulnerability exists in the ETGEAR R7800 prior to version 1.0.2.52. The vulnerability stems from a network system or product performing operations on memory without properly validating data boundaries, resulting in incorrect read...

NETGEAR R9000 Cross-Site Scripting Vulnerability

The NETGEAR R9000 is a wireless router from NETGEAR. A cross-site scripting vulnerability exists in the NETGEAR R9000 prior to version 1.0.4.26, which stems from a lack of proper validation of client-side data by the WEB application and can be exploited by an attacker to execute client-side code...

CVE-2019-20761

NETGEAR R7800 devices before 1.0.2.62 are affected by command injection by an authenticated user...

chromium-browser: Inappropriate implementation in extensions

Inappropriate implementation in extensions in Google Chrome prior to 81.0.4044.92 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information via a crafted Chrome Extension...

DAViCal Andrew's Web Libraries Authorization Issues Vulnerability

DAViCal Andrew's Web Libraries AWL is an AWL project that focuses on providing some shared PHP libraries for DAViCal, a calendar sharing server. An authorization issue vulnerability exists in DAViCal AWL version 0.60 and earlier. A remote attacker could exploit this vulnerability to impersonate a...

GHSA-6PMV-7PR9-CGRJ Predictable password in Keycloak

A flaw was found in all versions of the Keycloak operator, before version 8.0.2,community only where the operator generates a random admin password when installing Keycloak, however the password remains the same when deployed to the same OpenShift namespace...

CVE-2019-20647

NETGEAR RAX40 devices before 1.0.3.64 are affected by denial of service...

CVE-2020-10617

There are multiple ways an unauthenticated attacker could perform SQL injection on WebAccess/NMS versions prior to 3.0.2 to gain access to sensitive information...

Juniper Networks Junos OS Evolved Log Message Disclosure Vulnerability

Juniper Networks Junos OS is a Juniper Networks network operating system designed for use with Juniper Networks hardware devices. The operating system provides a secure programming interface and the Junos SDK.Junos OS Evolved is an upgraded version of Junos OS. A log information disclosure...

MediaWiki xss vulnerability

MediaWiki is a set of free and freely available web-based Wiki engines from the MediaWiki Wikimedia Foundation in the United States. It can be used to deploy in-house knowledge management and content management systems. A security vulnerability exists in MediaWiki versions prior to 1.34.1. The...

CVE-2020-10203

Sonatype Nexus Repository before 3.21.2 allows XSS...

CVE-2020-10204

Sonatype Nexus Repository before 3.21.2 allows Remote Code Execution...

GHSA-8QXJ-F9RH-9FG2 Improper Verification of Cryptographic Signature in Pure-Python ECDSA

A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable...

WordPress LifterLMS Plugin Code Issue Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.LifterLMS is a learning management system plugin used in it. A code issue vulnerability exists in WordPress LifterLMS...