2020

In affected versions of TensorFlow the tf.raw_ops.ImmutableConst operation returns a constant tensor created from a memo

In affected versions of TensorFlow the tf.raw_ops.DataFormatVecPermute API does not validate the src_format and dst_form

In affected versions of TensorFlow under certain cases a saved model can trigger use of uninitialized values during code

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.1 discloses sensitive inf

In affected versions of TensorFlow under certain cases, loading a saved model can result in accessing uninitialized memo

In Lan ATMService M3 ATM Monitoring System 6.1.0, due to a directory-listing vulnerability, a remote attacker can view l

A XSS vulnerability exists in Gitlab CE/EE from 12.4 before 13.4.7, 13.5 before 13.5.5, and 13.6 before 13.6.2 that allo

AEM Forms SP6 add-on for AEM 6.5.6.0 and Forms add-on package for AEM 6.4 Service Pack 8 Cumulative Fix Pack 2 (6.4.8.2)

An information disclosure flaw allows a malicious, authenticated, privileged web UI user to obtain a password for a remo

If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code in certifica

If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code in System Co

If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code in File Stat

If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code in File Stat

This cross-site scripting vulnerability in Music Station allows remote attackers to inject malicious code. QANP have alr

This cross-site scripting vulnerability in Multimedia Console allows remote attackers to inject malicious code. QANP hav

This cross-site scripting vulnerability in Photo Station allows remote attackers to inject malicious code. QANP We have

APT had several integer overflows and underflows while parsing .deb packages, aka GHSL-2020-168 GHSL-2020-169, in files

Use of a Broken or Risky Cryptographic Algorithm vulnerability in McAfee Database Security Server and Sensor prior to 4.

Microsoft Edge for Android Spoofing Vulnerability

Azure DevOps Server and Team Foundation Services Spoofing Vulnerability

Windows Error Reporting Information Disclosure Vulnerability

Azure DevOps Server Spoofing Vulnerability

Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability

Chakra Scripting Engine Memory Corruption Vulnerability

Microsoft Excel Security Feature Bypass Vulnerability

Microsoft Excel Information Disclosure Vulnerability

Microsoft SharePoint Information Disclosure Vulnerability

Microsoft Outlook Information Disclosure Vulnerability

Microsoft Exchange Remote Code Execution Vulnerability

Windows Lock Screen Security Feature Bypass Vulnerability

Windows GDI+ Information Disclosure Vulnerability

Windows Error Reporting Information Disclosure Vulnerability

Kerberos Security Feature Bypass Vulnerability

Cross-site scripting (XSS) vulnerability in Online Examination System 1.0 via the subject or feedback parameter to feedb

Cross-site scripting (XSS) vulnerability in Online Examination System 1.0 via the w parameter to index.php.

Cross-site scripting (XSS) vulnerability in Online Examination System 1.0 via the q parameter to feedback.php.

A Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka libbfd), as distributed

A Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka libbfd), as distributed

A use after free issue exists in the Binary File Descriptor (BFD) library (aka libbfd) in GNU Binutils 2.34 in bfd_hash_

A Denial of Service vulnerability exists in the Binary File Descriptor (BFD) in GNU Binutils 2.35 due to an invalid read

A double free vulnerability exists in the Binary File Descriptor (BFD) (aka libbrd) in GNU Binutils 2.35 in the process_

A head-based buffer overflow exists in Academy Software Foundation OpenEXR 2.3.0 in writeTileData in ImfTiledOutputFile.

A Null Pointer Deference issue exists in Academy Software Foundation OpenEXR 2.3.0 in generatePreview in makePreview.cpp

A heap-based buffer overflow vulnerability exists in Academy Software Foundation OpenEXR 2.3.0 in chunkOffsetReconstruct

Matrix is an ecosystem for open federated Instant Messaging and VoIP. Synapse is a reference "homeserver" implementation

An improper handling of exceptional conditions vulnerability in Cortex XDR Agent allows a local authenticated Windows us

A locking inconsistency issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_io

SAP Solution Manager (Trace Analysis), version - 720, allows for misuse of a parameter in the application URL leading to

SAP NetWeaver AS ABAP, versions - 740, 750, 751, 752, 753, 754 , does not sufficiently encode URL which allows an attack

SAP HANA Database, version - 2.0, does not correctly validate the username when performing SAML bearer token-based user