2020

An elevation of privilege vulnerability exists when Windows improperly handles hard links. An attacker who successfully

A denial of service vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an attacker connects to the

A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploit

An information disclosure vulnerability exists on ARM implementations that use speculative execution in control flow via

A denial of service vulnerability exists when Microsoft SQL Server Management Studio (SSMS) improperly handles files. An

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An at

An information disclosure vulnerability exists in RPC if the server has Routing and Remote Access enabled. An attacker w

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker

An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles registry objects in memory

An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles registry objects in memory

A remote code execution vulnerability exists when Windows Media Audio Codec improperly handles objects. An attacker who

An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writin

A remote code execution vulnerability exists in Microsoft Dynamics 365 for Finance and Operations (on-premises) version

A remote code execution vulnerability exists when Microsoft .NET Framework processes input. An attacker who successfully

A remote code execution vulnerability exists in Visual Studio Code when it process environment variables after opening a

Multiple vulnerabilities in the user interface of Cisco Webex Meetings Desktop App could allow an authenticated, remote

Multiple vulnerabilities in the user interface of Cisco Webex Meetings Desktop App could allow an authenticated, remote

A vulnerability in the IPv6 implementation of Cisco StarOS could allow an unauthenticated, remote attacker to cause a de

A vulnerability in the contacts feature of Cisco Webex Meetings could allow an authenticated, remote attacker with a leg

A vulnerability in the web-based management interface of Cisco UCS Director could allow an authenticated, remote attacke

A vulnerability in the web-based management interface of Cisco Webex Meetings could allow an unauthenticated, remote att

A vulnerability in the Border Gateway Protocol (BGP) additional paths feature of Cisco IOS XR Software could allow an un

A vulnerability in an access control mechanism of Cisco Cyber Vision Center Software could allow an unauthenticated, rem

A vulnerability in the CLI of Cisco AsyncOS for Cisco Email Security Appliance (ESA) and Cisco AsyncOS for Cisco Content

A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client for Windows c

A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client for Windows c

A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client for Windows c

A vulnerability in the scheduled meeting template feature of Cisco Webex Meetings could allow an authenticated, remote a

A vulnerability in the scheduled meeting template feature of Cisco Webex Meetings could allow an authenticated, remote a

A vulnerability in Cisco DNA Center software could allow an unauthenticated remote attacker access to sensitive informat

A vulnerability in the IPv6 packet processing engine of Cisco Small Business Smart and Managed Switches could allow an u

A vulnerability in the web UI of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Mana

The package linux-cmdline before 1.0.1 are vulnerable to Prototype Pollution via the constructor.

LuaJIT through 2.1.0-beta3 has an out-of-bounds read in lj_err_run in lj_err.c.

lgc.c in Lua 5.4.0 mishandles the interaction between barriers and the sweep phase, leading to a memory access violation

ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal, as demonstrated by get

ldebug.c in Lua 5.4.0 attempts to access debug information via the line hook of a stripped function, leading to a NULL p

ShopXO v1.8.1 has a command execution vulnerability. Attackers can use this vulnerability to execute arbitrary commands

A SQL injection vulnerability in SourceCodester Online Shopping Alphaware 1.0 allows remote unauthenticated attackers to

Huawei 5G Mobile WiFi E6878-370 with versions of 10.0.3.1(H563SP1C00),10.0.3.1(H563SP21C233) have an improper authorizat

Huawei smartphone Taurus-AL00B with versions earlier than 10.1.0.126(C00E125R5P3) have a user after free vulnerability.

FusionCompute 8.0.0 have an insufficient authentication vulnerability. An attacker may exploit the vulnerability to dele

A command injection vulnerability exists in EdgeSwitch firmware <v1.9.0 that allowed an authenticated read-only user to

An information disclosure vulnerability exists in EdgeMax EdgeSwitch firmware v1.9.0 that allowed read only users could

A memory corruption vulnerability exists in NextCloud Desktop Client v2.6.4 where missing ASLR and DEP protections in fo

A vulnerability exists in phpBB <v3.2.10 and <v3.3.1 which allowed remote image dimensions check to be used to SSRF.

Improper access control in Citrix XenMobile Server 10.12 before RP3, Citrix XenMobile Server 10.11 before RP6, Citrix Xe

Improper input validation in Citrix XenMobile Server 10.12 before RP3, Citrix XenMobile Server 10.11 before RP6, Citrix

Insufficient protection of secrets in Citrix XenMobile Server 10.12 before RP3, Citrix XenMobile Server 10.11 before RP6