2020

Under certain conditions SAP Business Objects Business Intelligence Platform, version 4.2, allows an attacker to access

Statutory Reporting for Insurance Companies in SAP ERP (EA-FINSERV versions - 600, 603, 604, 605, 606, 616, 617, 618, 80

SAP Fiori for SAP S/4HANA, versions - 100, 200, 300, 400, allows an attacker to redirect users to a malicious site due t

SAP Commerce, versions - 6.7, 1808, 1811, 1905, may allow an attacker to access information under certain conditions whi

Standalone clients connecting to SAP NetWeaver AS Java via P4 Protocol, versions (SAP-JEECOR 7.00, 7.01; SERVERCOR 7.10,

SAP Solution Manager (Trace Analysis), version 7.20, allows an attacker to inject superflous data that can be displayed

SAP NetWeaver AS ABAP Business Server Pages Test Application SBSPEXT_TABLE, versions 700, 701, 702, 730, 731, 740, 750,

Under certain conditions SAP Business One (Backup service), versions 9.3, 10.0, allows an attacker with admin permission

Certain IBM Aspera applications are vulnerable to buffer overflow after valid authentication, which could allow an attac

Certain IBM Aspera applications are vulnerable to arbitrary memory corruption based on the product configuration, which

Certain IBM Aspera applications are vulnerable to buffer overflow based on the product configuration and valid authentic

Certain IBM Aspera applications are vulnerable to a stack-based buffer overflow, caused by improper bounds checking. Thi

Certain IBM Aspera applications are vulnerable to command injection after valid authentication, which could allow an att

IBM QRadar Network Packet Capture 7.3.0 - 7.3.3 Patch 1 and 7.4.0 GA does not require that users should have strong pass

Privilege Escalation vulnerability during daily DAT updates when using McAfee Virus Scan Enterprise (VSE) prior to 8.8 P

DLL Search Order Hijacking Vulnerability in the installer component of McAfee Host Intrusion Prevention System (Host IPS

Privilege Escalation vulnerability in Microsoft Windows client (McTray.exe) in McAfee VirusScan Enterprise (VSE) 8.8 pri

Privilege Escalation vulnerability in Microsoft Windows client (McTray.exe) in McAfee VirusScan Enterprise (VSE) 8.8 pri

DLL Search Order Hijacking vulnerability in McAfee Agent (MA) prior to 5.6.4 allows attackers with local access to execu

Privilege escalation vulnerability in McAfee Total Protection (ToPS) for Mac OS prior to 4.6 allows local users to gain

The J2Store plugin before 3.3.13 for Joomla! allows a SQL injection attack by a trusted store manager.

An unquoted search path vulnerability was reported in versions prior to 1.0.83.0 of the Synaptics Smart Audio UWP app as

Lenovo implemented Intel CSME Anti-rollback ARB protections on some ThinkPad models to prevent roll back of CSME Firmwar

The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T495s, X395, T495, A485, A285, A475, A275 which

A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStatio

A potential vulnerability in the SMI callback function used in the Legacy USB driver in some Lenovo Notebook and ThinkSt

A potential vulnerability in the SMI callback function used in the System Lock Preinstallation driver in some Lenovo Not

An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege.

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its m

An information disclosure vulnerability exists in Visual Studio Code Live Share Extension when it exposes tokens in plai

A spoofing vulnerability exists when the NuGetGallery does not properly sanitize input on package metadata values, aka '

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windo

A spoofing vulnerability exists when System Center Operations Manager (SCOM) does not properly sanitize a specially craf

A spoofing vulnerability exists when Microsoft Bing Search for Android improperly handles specific HTML content, aka 'Mi

A spoofing vulnerability exists in Microsoft Azure DevOps Server when it fails to properly handle web requests, aka 'Azu

An elevation of privilege (user to user) vulnerability exists in Windows Security Health Service when handling certain o

An open redirect vulnerability exists in Microsoft SharePoint that could lead to spoofing.To exploit the vulnerability,

An information disclosure vulnerability exists when Microsoft Project reads out of bound memory due to an uninitialized

A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in me

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speciall

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speciall

An elevation of privilege vulnerability exists when Group Policy improperly checks access, aka 'Group Policy Elevation o

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka '

An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory, aka 'Interne

An elevation of privilege vulnerability exists in Windows Text Service Framework (TSF) when the TSF server fails to prop

An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file oper

An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain

An elevation of privilege vulnerability exists when Component Object Model (COM) client uses special case IIDs, aka 'Com

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle o

An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory.To exploit thi