2020

Not strictly enough sanitization in the Nextcloud Android app 3.6.0 allowed an attacker to get content information from

Improper access control in Nextcloud Talk 6.0.3 leaks the existance and the name of private conversations when linked th

The process_tx_desc function in hw/net/e1000.c in QEMU before 2.4.0.1 does not properly process transmit descriptor data

_is_safe in the File::Temp module for Perl does not properly handle symlinks.

A privilege escalation vulnerability in BDLDaemon as used in Bitdefender Antivirus for Mac allows a local attacker to ob

IBM Security Secret Server 10.7 does not set the secure attribute on authorization tokens or session cookies. This could

IBM Security Secret Server 10.7 could disclose sensitive information to an authenticated user from generated error messa

IBM Security Secret Server 10.7 could allow a privileged user to perform unauthorized command injection due to imporoper

A Improper Certificate Validation vulnerability in susestudio-common of SUSE Studio onsite allows remote attackers to MI

An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.

yast2-security didn't use secure defaults to protect passwords. This became a problem on 2019-10-07 when configuration f

USG9500 with versions of V500R001C30SPC100, V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, V500R005C00SPC100,

An issue was discovered in button_open in login/logind-button.c in systemd before 243. When executing the udevadm trigge

Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.1.0.2,

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions th

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions tha

Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions that are affected are

Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Audit Plugin). Supported versions that are

Vulnerability in the Oracle VM Server for SPARC product of Oracle Systems (component: Templates). The supported version

Vulnerability in the Oracle Applications DBA component of Oracle Database Server. Supported versions that are affected a

Vulnerability in the Oracle Applications DBA component of Oracle Database Server. Supported versions that are affected a

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: BI

Vulnerability in the Database Gateway for ODBC component of Oracle Database Server. Supported versions that are affected

Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.1.0.2,

MikroTik Winbox 3.20 and below is vulnerable to man in the middle attacks. A man in the middle can downgrade the client'

Missing authorization check in a transaction within SAP Leasing (update provided in SAP_APPL 6.18, EA-APPL 6.0, 6.02, 6.

Agent A is able to save a draft (i.e. for customer reply). Then Agent B can open the draft, change the text completely a

Due to improper handling of uploaded images it is possible in very unlikely and rare conditions to force the agents brow

An improper control of parameters allows the spoofing of the from fields of the following screens: AgentTicketCompose, A

389 Directory Server before 1.2.7.1 (aka Red Hat Directory Server 8.2) and HP-UX Directory Server before B.08.10.03, whe

An issue was found in Samsung Mobile Print (Android) versions prior to 4.08.007. A potential security vulnerability caus

A security bypass vulnerability exists in Symantec Norton Mobile Security for Android before 3.16, which could let a mal

A vulnerability was found in dnsmasq before version 2.81, where the memory leak allows remote attackers to cause a denia