2019

An authenticated attacker in SAP E-Commerce (Business-to-Consumer application), versions 7.3, 7.31, 7.32, 7.33, 7.54, ca

SAP HANA Extended Application Services (advanced model), version 1, allows authenticated low privileged XS Advanced Plat

Java Server Pages (JSPs) provided by the SAP NetWeaver Process Integration (SAP_XIESR and SAP_XITOOL: 7.10 to 7.11, 7.20

A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All Versions < V5.2.4),

A vulnerability was found in keycloak before 6.0.2. The X.509 authenticator supports the verification of client certific

It was found that Picketlink as shipped with Jboss Enterprise Application Platform 7.2 would accept an xinclude paramete

It was found that a SAMLRequest containing a script could be processed by Picketlink versions shipped in Jboss Applicati

A vulnerability has been identified in SIMATIC MV400 family (All Versions < V7.0.6). Communication with the device is no

An information disclosure vulnerability exists when affected Microsoft browsers improperly handle objects in memory. An

A security feature bypass vulnerability exists in Edge that allows for bypassing Mark of the Web Tagging (MOTW). Failing

An elevation of privilege vulnerability exists when the Windows Shell fails to validate folder shortcuts. An attacker wh

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its m

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its m

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its m

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its m

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its m

A security feature bypass vulnerability exists when Windows Secure Kernel Mode fails to properly handle objects in memor

A remote code execution vulnerability exists in the way that comctl32.dll handles objects in memory. The vulnerability c

A tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass t

An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory. To expl

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speciall

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speciall

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speciall

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speciall

A denial of service vulnerability exists in Skype for Business. An attacker who successfully exploited the vulnerability

A denial of service vulnerability exists when Windows improperly handles objects in memory. An attacker who successfully

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in M

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its m

It was found that Keycloak's Node.js adapter before version 4.8.3 did not properly verify the web token received from th

It was found that OpenShift Container Platform versions 3.6.x - 4.6.0 does not perform SSH Host Key checking when using

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its m

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its m

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its m

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its m

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its m

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its m

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

A spoofing vulnerability exists in Azure DevOps Server when it improperly handles requests to authorize applications, re

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

An elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) improperly handles symlin

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its m

This security update corrects a denial of service in the Local Security Authority Subsystem Service (LSASS) caused when