🚨 CVE-2021-25770
In JetBrains YouTrack before 2020.5.3123, server-side template injection (SSTI) was possible, which could lead to code execution.

🎖@cveNotify

🚨 CVE-2021-25776
In JetBrains TeamCity before 2020.2, an ECR token could be exposed in a build's parameters.

🎖@cveNotify

🚨 CVE-2020-35482
SolarWinds Serv-U before 15.2.2 allows authenticated reflected XSS.

🎖@cveNotify

🚨 CVE-2020-25208
In JetBrains YouTrack before 2020.4.4701, an attacker could enumerate users via the REST API without appropriate permissions.

🎖@cveNotify

🚨 CVE-2020-28895
In Wind River VxWorks, memory allocator has a possible overflow in calculating the memory block's size to be allocated by calloc(). As a result, the actual memory allocated is smaller than the buffer size specified by the arguments, leading to memory corruption.

🎖@cveNotify

🚨 CVE-2020-29582
In JetBrains Kotlin before 1.4.21, a vulnerable Java API was used for temporary file and folder creation. An attacker was able to read data from such files and list directories due to insecure permissions.

🎖@cveNotify

🚨 CVE-2020-2506
The vulnerability have been reported to affect earlier versions of QTS. If exploited, this improper access control vulnerability could allow attackers to obtain control of a QNAP device. This issue affects: QNAP Systems Inc. Helpdesk versions prior to 3.0.3.

🎖@cveNotify

🚨 CVE-2020-2507
The vulnerability have been reported to affect earlier versions of QTS. If exploited, this improper access control vulnerability could allow attackers to obtain control of a QNAP device. This issue affects: QNAP Systems Inc. Helpdesk versions prior to 3.0.3.

🎖@cveNotify

🚨 CVE-2021-25758
In JetBrains IntelliJ IDEA before 2020.3, potentially insecure deserialization of the workspace model could lead to code execution.

🎖@cveNotify

🚨 CVE-2021-25757
In JetBrains Hub before 2020.1.12629, an open redirect was possible.

🎖@cveNotify

🚨 CVE-2021-25759
In JetBrains Hub before 2020.1.12629, an authenticated user can delete 2FA settings of any other user.

🎖@cveNotify

🚨 CVE-2020-35481
SolarWinds Serv-U before 15.2.2 allows Unauthenticated Macro Injection.

🎖@cveNotify

🚨 CVE-2020-27994
SolarWinds Serv-U before 15.2.2 allows Authenticated Directory Traversal.

🎖@cveNotify

🚨 CVE-2020-35667
JetBrains TeamCity Plugin before 2020.2.85695 SSRF. Vulnerability that could potentially expose user credentials.

🎖@cveNotify

🚨 CVE-2020-35482
SolarWinds Serv-U before 15.2.2 allows authenticated reflected XSS.

🎖@cveNotify

🚨 CVE-2020-25208
In JetBrains YouTrack before 2020.4.4701, an attacker could enumerate users via the REST API without appropriate permissions.

🎖@cveNotify

🚨 CVE-2021-25758
In JetBrains IntelliJ IDEA before 2020.3, potentially insecure deserialization of the workspace model could lead to code execution.

🎖@cveNotify

🚨 CVE-2020-28895
In Wind River VxWorks, memory allocator has a possible overflow in calculating the memory block's size to be allocated by calloc(). As a result, the actual memory allocated is smaller than the buffer size specified by the arguments, leading to memory corruption.

🎖@cveNotify

🚨 CVE-2020-13582
A denial-of-service vulnerability exists in the HTTP Server functionality of Micrium uC-HTTP 3.01.00. A specially crafted HTTP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability.

🎖@cveNotify

🚨 CVE-2021-3193
Improper access and command validation in the Nagios Docker Config Wizard before 1.1.2, as used in Nagios XI through 5.7, allows an unauthenticated attacker to execute remote code as the apache user.

🎖@cveNotify

🚨 CVE-2020-29538
Archer before 6.9 P1 (6.9.0.1) contains an improper access control vulnerability in an API. A remote authenticated malicious administrative user can potentially exploit this vulnerability to gather information about the system, and may use this information in subsequent attacks.

🎖@cveNotify