2020

An elevation of privilege vulnerability exists when the Windows iSCSI Target Service improperly handles file operations,

A remote code execution vulnerability exists when the Windows Font Driver Host improperly handles memory.An attacker who

An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory.To exploit th

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windo

An elevation of privilege vulnerability exists when the Windows USO Core Worker improperly handles memory.To exploit thi

An information disclosure vulnerability exists when the Windows Graphics component improperly handles objects in memory,

A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle req

A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in m

An elevation of privilege vulnerability exists when the Windows Storage Services improperly handle file operations, aka

An elevation of privilege vulnerability exists when the Windows Modules Installer improperly handles file operations, ak

An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka

An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninit

An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attacker

An elevation of privilege vulnerability exists when Group Policy Services Policy Processing improperly handle reparse po

An information disclosure vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handle

A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided inpu

This security update corrects a denial of service in the Local Security Authority Subsystem Service (LSASS) caused when

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windo

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obje

A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the softwar

An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in

A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate inpu

A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate inpu

A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate inpu

A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate inpu

A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate inpu

A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate inpu

An elevation of privilege vulnerability exists when Microsoft SharePoint Server and Skype for Business Server improperly

In Envoy before versions 1.12.6, 1.13.4, 1.14.4, and 1.15.0 when validating TLS certificates, Envoy would incorrectly al

In freewvs before 0.1.1, a directory structure of more than 1000 nested directories can interrupt a freewvs scan due to

In iPear, the manual execution of the eval() function can lead to command injection. Only PCs where commands are manuall

Traccar GPS Tracking System before version 4.9 has a LDAP injection vulnerability. It occurs when user input is being us

In October from version 1.0.319 and before version 1.0.466, a user with access to a markdown FormWidget that stores data

Netflix Titus, all versions prior to version v0.1.1-rc.274, uses Java Bean Validation (JSR 380) custom constraint valida

Dell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM and SCVMM versions prior to 7.2.1 contain

Dell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM and SCVMM versions prior to 7.2.1 contain

In freewvs before 0.1.1, a user could create a large file that freewvs will try to read, which will terminate a scan pro

SuperWebMailer 7.21.0.01526 is susceptible to a remote code execution vulnerability in the Language parameter of mailing

An issue was discovered in Verint Impact 360 15.1. At wfo/control/signin, the login form can accept submissions from ext

An issue was discovered in Verint Impact 360 15.1. At wfo/control/signin, the rd parameter can accept a URL, to which us

An issue was discovered in Verint Impact 360 15.1. At wfo/help/help_popup.jsp, the helpURL parameter can be changed to e

OpenVPN Access Server older than version 2.8.4 and version 2.9.5 generates new user authentication tokens instead of reu

Sylabs Singularity 3.0 through 3.5 lacks support for an Integrity Check. Singularity's sign and verify commands do not s

Sylabs Singularity 3.5.0 through 3.5.3 fails to report an error in a Status Code.

Sylabs Singularity 3.0 through 3.5 has Improper Validation of an Integrity Check Value. Image integrity is not validated

In GOG Galaxy 1.2.67, there is a service that is vulnerable to weak file/service permissions: GalaxyClientService.exe. A

RosarioSIS through 6.8-beta allows modules/Custom/NotifyParents.php XSS because of the href attributes for AddStudents.p

The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M1 to

An h2c direct connection to Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M5 to 9.0.36 and 8.5.1 to 8.5.56 did not release

A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (V1.81.01 - V1.81.03), LOGO! 8 BM (incl. SIPLU