2020

Microsys PROMOTIC 8.2.13 contains an ActiveX Control Start Buffer Overflow vulnerability which can lead to denial of ser

In the Voatz application 2020-01-01 for Android, the amount of data transmitted during a single voter's vote depends on

The Voatz application 2020-01-01 for Android allows only 100 million different PINs, which makes it easier for attackers

Authentication bypass using an alternate path or channel in SimpliSafe SS3 firmware 1.4 allows a local, unauthenticated

Improper Authentication in subsystem in Intel(R) CSME versions 12.0 through 12.0.48 (IOT only: 12.0.56), versions 13.0 t

A cross-site scripting (XSS) vulnerability was discovered in the Source Integration plugin before 1.6.2 and 2.x before 2

dojox is vulnerable to Cross-site Scripting in all versions before version 1.16.1, 1.15.2, 1.14.5, 1.13.6, 1.12.7 and 1.

XSS in Telligent Community 5.6.583.20496 via a flash file and related to the allowScriptAccess parameter.

Stored XSS vulnerability in UpdateFieldJson.jspa in JIRA 4.4.3 and GreenHopper before 5.9.8 allows an attacker to inject

SuiteCRM through 7.11.10 allows SQL Injection via the SOAP API, the EmailUIAjax interface, or the MailMerge module.

Codologic Codoforum through 4.8.4 allows stored XSS in the login area. This is relevant in conjunction with CVE-2020-584

Lexmark printer MS812 and multiple older generation Lexmark devices have a stored XSS vulnerability in the embedded web

In notifyNetworkTested and related functions of NetworkMonitor.java, there is a possible bypass of private DNS settings.

In setPhonebookAccessPermission of AdapterService.java, there is a possible disclosure of user contacts over bluetooth d

In removeUnusedPackagesLPw of PackageManagerService.java, there is a possible permanent denial-of-service due to a missi

In getAttributeRange of ExifInterface.java, there is a possible failure to redact location information from media files

In MotionEntry::appendDescription of InputDispatcher.cpp, there is a possible log information disclosure. This could lea

In multiple places, it was possible for the primary user’s dictionary to be visible to and modifiable by secondary users

It is possible for a malicious application to construct a TYPE_TOAST window manually and make that window clickable. Thi

In btm_read_remote_ext_features_complete of btm_acl.cc, there is a possible out of bounds write due to a missing bounds

explorer.js in Amazon AWS JavaScript S3 Explorer (aka aws-js-s3-explorer) v2 alpha before 2019-08-02 allows XSS in certa

LinuxKI v6.0-1 and earlier is vulnerable to an XSS which is resolved in release 6.0-2.

Digi International ConnectPort LTS 32 MEI, Firmware Version 1.4.3 (82002228_K 08/09/2018), bios Version 1.2. Multiple cr

An exploitable information disclosure vulnerability exists in the 'Secret Chats' functionality of Rakuten Viber on Andro

Digi International ConnectPort LTS 32 MEI, Firmware Version 1.4.3 (82002228_K 08/09/2018), bios Version 1.2. Successful

A denial-of-service (DoS) vulnerability in Palo Alto Networks GlobalProtect software running on Mac OS allows authentica

Missing XML validation vulnerability in the PAN-OS web interface on Palo Alto Networks PAN-OS software allows authentica

A Cross-Site Scripting (XSS) vulnerability exists in Tiki Wiki CMG Groupware 11.0 via the id paraZeroClipboard.swf, whic

A Denial of Service (infinite loop) vulnerability exists in Avira AntiVir Engine before 8.2.12.58 via an unspecified fun

SAP NetWeaver (Knowledge Management ICE Service), versions 7.30, 7.31, 7.40, 7.50, allows an unauthenticated attacker to

Certain vulnerable endpoints in SAP NetWeaver AS Java (Heap Dump Application), versions 7.30, 7.31, 7.40, 7.50, provide

Certain settings page(s) in SAP Business Objects Business Intelligence Platform (CMC), version 4.2, generates error mess

SAP NetWeaver (Guided Procedures), versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently validate an

Under certain conditions ABAP Online Community in SAP NetWeaver (SAP_BASIS version 7.40) and SAP S/4HANA (SAP_BASIS vers

Under certain conditions, ABAP Online Community in SAP NetWeaver (SAP_BASIS version 7.40) and SAP S/4HANA (SAP_BASIS ver

SAP Host Agent, version 7.21, allows an unprivileged user to read the shared memory or write to the shared memory by sen

Under some circumstances the SAML SSO implementation in the SAP NetWeaver (SAP_BASIS versions 702, 730, 731, 740 and SAP

SAP Mobile Platform, version 3.0, does not sufficiently validate an XML document accepted from an untrusted source which

Mambo CMS through 4.6.5 has multiple XSS.

The Bluetooth Low Energy implementation on STMicroelectronics BLE Stack through 1.3.1 for STM32WB5x devices does not pro

The Bluetooth Low Energy implementation in Cypress PSoC 4 BLE component 3.61 and earlier processes data channel frames w

Realtek NDIS driver rt640x64.sys, file version 10.1.505.2015, fails to do any size checking on an input buffer from user

The IMAP and LMTP components in Dovecot 2.3.9 before 2.3.9.3 mishandle snippet generation when many characters must be r

A Cross-Site Scripting (XSS) Vulnerability exists in OTRS ITSM prior to 3.2.4, 3.1.8, and 3.0.7 and FAQ prior to 2.1.4 a

IBM Content Navigator 3.0CD is vulnerable to Server Side Request Forgery (SSRF). This may allow an unauthenticated attac

IBM Rational Publishing Engine 6.0.6 and 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users

Tube Map Live Underground for Android before 3.0.22 has an Information Disclosure Vulnerability

Simple Machines Forum (SMF) through 2.0.5 has XSS

Zimbra 2013 has XSS in aspell.php

Stored XSS was discovered on CHIYU BF-430 232/485 TCP/IP Converter devices before 1.16.00, as demonstrated by the /if.cg