2020

MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A vulnerability was reported (fixed

MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A race condition was reported (fixed

MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A local privilege escalation vulnera

MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A local privilege escalation vulnera

In Advantech WebAccess, Versions 8.4.2 and prior. A stack-based buffer overflow vulnerability caused by a lack of proper

An attacker with the ability to generate session IDs or password reset tokens, either by being able to authenticate or b

Sunnet eHRD, a human training and development management system, contains a vulnerability of Broken Access Control. Afte

Sunnet eHRD, a human training and development management system, improperly stores system files. Attackers can use a spe

UltraLog Express device management software stores user’s information in cleartext. Any user can obtain accounts informa

UltraLog Express device management interface does not properly perform access authentication in some specific pages/func

An SQL injection vulnerability was discovered in Micro Focus Service Manager Automation (SMA), affecting versions 2019.0

Huawei smartphones OxfordP-AN10B with versions earlier than 10.0.1.169(C00E166R4P1) have an improper authentication vuln

In Continuous Delivery for Puppet Enterprise (CD4PE) before 3.4.0, changes to resources or classes containing Sensitive

HUAWEI smartphones P30 with versions earlier than 10.0.0.185(C00E85R1P11) have an improper access control vulnerability.

An exploitable memory corruption vulnerability exists in the Name Service Client functionality of 3S-Smart Software Solu

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 traditional is vulnerable to a privilege escalation vulnerabilit

DLL Side Loading vulnerability in the installer for McAfee Application and Change Control (MACC) prior to 8.3 allows loc

A vulnerability in the SonicWall SMA1000 HTTP Extraweb server allows an unauthenticated remote attacker to cause HTTP se

A hard-coded cryptographic key vulnerability in the default configuration file was found in Kiali, all versions prior to

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, rela

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, rela

Teradici PCoIP Management Console 20.01.0 and 19.11.1 is vulnerable to unauthenticated password resets via login/resetad

The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a request, which can be c

When a Web Extension had the all-urls permission and made a fetch request with a mode set to 'same-origin', it was possi

When a device was changed while a stream was about to be destroyed, the <code>stream-reinit</code> task may have been ex

By carefully crafting promise resolutions, it was possible to cause an out-of-bounds read off the end of an array resize

When removing data about an origin whose tab was recently closed, a use-after-free could occur in the Quota manager, res

FrozenNode Laravel-Administrator through 5.0.12 allows unrestricted file upload (and consequently Remote Code Execution)

Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a memory corrupti

Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a buffer errors v

Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have an out-of-bounds

Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have an out-of-bounds

Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a buffer errors v

Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a buffer errors v

Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have an out-of-bounds

Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a buffer errors v

Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a buffer errors v

This vulnerability allows network-adjacent attackers execute arbitrary code on affected installations of TP-Link Archer

This vulnerability allows local attackers to escalate privileges on affected installations of TP-Link Archer A7 Firmware

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Arch

Adobe Bridge versions 10.0 have a heap-based buffer overflow vulnerability. Successful exploitation could lead to arbitr

Adobe Bridge versions 10.0 have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary co

Adobe Experience Manager versions 6.5 and earlier have a server-side request forgery (ssrf) vulnerability. Successful ex

ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a remote file read vulnerability. Successful exploitation

In Nick Chan Bot before version 1.0.0-beta there is a vulnerability in the `npm` command which is part of this software

http4s before versions 0.18.26, 0.20.20, and 0.21.2 has a local file inclusion vulnerability. This vulnerability applies

Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 20

Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 20

Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 20

Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 20