2020

SAP Disclosure Management, version - 10.1, provides capabilities for authorized users to upload and download content of

Process Integration Monitoring of SAP NetWeaver AS JAVA, versions - 7.31, 7.40, 7.50, allows an attacker to upload any f

SAP AS JAVA (Key Storage Service), versions - 7.10, 7.11, 7.20 ,7.30, 7.31, 7.40, 7.50, has the key material which is st

BookStack is a platform for storing and organising information and documentation. In BookStack before version 0.30.5, a

Incorrect Permission Assignment for Critical Resource vulnerability in McAfee VirusScan Enterprise (VSE) prior to 8.8 Pa

Aptdaemon performed policykit checks after interacting with potentially untrusted files with elevated privileges. This a

When listening for page changes with a Mutation Observer, a malicious web page could confuse Firefox Screenshots into in

Searching for a single word from the address bar caused an mDNS request to be sent on the local network searching for a

Some websites have a feature "Show Password" where clicking a button will change a password field into a textbook field,

If the Remote Debugging via USB feature was enabled in Firefox for Android on an Android version prior to Android 6.0, u

Repeated calls to the history and location interfaces could have been used to hang the browser. This was addressed by in

Cross-origin iframes that contained a login form could have been recognized by the login autofill service, and populated

When DNS over HTTPS is in use, it intentionally filters RFC1918 and related IP ranges from the responses as these do not

Firefox did not block execution of scripts with incorrect MIME types when the response was intercepted and cached throug

OneCRL was non-functional in the new Firefox for Android due to a missing service initialization. This could result in a

In some cases, removing HTML elements during sanitization would keep existing SVG event handlers and therefore lead to X

When a user downloaded a file in Firefox for Android, if a cookie is set, it would have been re-sent during a subsequent

When accepting a malicious intent from other installed apps, Firefox for Android accepted manifests from arbitrary file

It was possible to cause the browser to enter fullscreen mode without displaying the security UI; thus making it possibl

A parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire, even after sanitizati

The moodlenetprofile user profile field required extra sanitizing to prevent a stored XSS risk. This affects versions 3.

The Microsoft Teams online service contains a stored cross-site scripting vulnerability in the displayName parameter tha

Opencast before versions 8.9 and 7.9 disables HTTPS hostname verification of its HTTP client used for a large portion of

A path handling issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.0.1. A remote atta

A flaw was found in the memory management API of QEMU during the initialization of a memory region cache. This issue cou

In ParseMetaGeometry() of MagickCore/geometry.c, image height and width calculations can lead to divide-by-zero conditio

There are several memory leaks in the MIFF coder in /coders/miff.c due to improper image depth values, which can be trig

A flaw was found in ImageMagick in MagickCore/colorspace-private.h and MagickCore/quantum.h. An attacker who submits a c

Fast-csv is an npm package for parsing and formatting CSVs or any other delimited value file in node. In fast-cvs before

In CatromWeights(), MeshInterpolate(), InterpolatePixelChannel(), InterpolatePixelChannels(), and InterpolatePixelInfo()

WriteOnePNGImage() from coders/png.c (the PNG coder) has a for loop with an improper exit condition that can allow an ou

A memory initialization issue was addressed. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watch

A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. T

An issue existed in the handling of incoming calls. The issue was addressed with additional state checks. This issue is

An authentication issue was addressed with improved state management. This issue is fixed in iOS 14.2 and iPadOS 14.2. A

An issue existed in the handling of snapshots. The issue was resolved with improved permissions logic. This issue is fix

A denial of service issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.0.1. An at

TIFFGetProfiles() in /coders/tiff.c calls strstr() which causes a large out-of-bounds read when it searches for `"dc:for

The PALM image coder at coders/palm.c makes an improper call to AcquireQuantumMemory() in routine WritePALMImage() becau

In WriteOnePNGImage() of the PNG coder at coders/png.c, an improper call to AcquireVirtualMemory() and memset() allows f

A call to ConformPixelInfo() in the SetImageAlphaChannel() routine of /MagickCore/channel.c caused a subsequent heap-use

The issue was addressed with improved UI handling. This issue is fixed in watchOS 7.0, Safari 14.0, iOS 14.0 and iPadOS

The issue was addressed with improved deletion. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.0, iOS 14.0 and i

The issue was addressed with improved deletion. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.0 and iPadOS 14.0. A

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in Safari 14.0. V

A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the pro

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.2 and iP

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Big Sur 11.0.1, watchOS

The issue was addressed with improved handling of icon caches. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.0 and

A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue is