2020

WritePALMImage() in /coders/palm.c used size_t casts in several areas of a calculation which could lead to values outsid

In IntensityCompare() of /MagickCore/quantize.c, a double value was being casted to int and returned, which in some case

A reachable assertion issue was found in the USB EHCI emulation code of QEMU. It could occur while processing USB reques

We have resolved a security issue in the camera plugin that could have affected certain Cordova (Android) applications.

Audacity through 2.3.3 saves temporary files to /var/tmp/audacity-$USER by default. After Audacity creates the temporary

In certain situations, an attacker with regular user credentials and local access to an ASE cockpit installation can acc

An issue was discovered in the Linux kernel before 5.7.3, related to mm/gup.c and mm/huge_memory.c. The get_user_pages (

An issue was discovered in romfs_dev_read in fs/romfs/storage.c in the Linux kernel before 5.8.4. Uninitialized memory l

Slurm before 19.05.8 and 20.x before 20.02.6 exposes Sensitive Information to an Unauthorized Actor because xauth for X1

An issue was discovered in BigBlueButton through 2.2.29. A brute-force attack may occur because an unlimited number of c

TYPO3 is an open source PHP based web content management system. In TYPO3 from version 10.4.0, and before version 10.4.1

A flaw was found in rhacm versions before 2.0.5 and before 2.1.0. Two internal service APIs were incorrectly provisioned

October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework. In October CMS from version

Some ZTE devices have input verification vulnerabilities. The devices support configuring a static prefix through the we

CSRF in runner administration page in all versions of GitLab CE/EE allows an attacker who's able to target GitLab instan

When importing repos via URL, one time use git credentials were persisted beyond the expected time window in Gitaly 1.79

Private group info is leaked leaked in GitLab CE/EE version 10.2 and above, when the project is moved from private to pu

Sensitive information could be disclosed in the JetBrains YouTrack application before 2020.2.0 for Android via applicati

A misconfiguration in the debug interface in Mercedes-Benz HERMES 2.1 allows an attacker with direct physical access to

A misconfiguration in the debug interface in Mercedes-Benz HERMES 1.5 allows an attacker with direct physical access to

A misconfiguration in the debug interface in Mercedes-Benz HERMES 1 allows an attacker with direct physical access to de

IBM InfoSphere Information Server 11.7 stores sensitive information in the browser's history that could be obtained by a

An information exposure through log file vulnerability exists where the password for the configured system proxy server

toucbase.ai before version 2.0 leaks information by not stripping exif data from images. Anyone with access to the uploa

In some Lenovo Desktop models, the Configuration Change Detection BIOS setting failed to detect SATA configuration chang

Microsoft Word Security Feature Bypass Vulnerability

An Ubuntu-specific modification to AccountsService in versions before 0.6.55-0ubuntu13.2, among other earlier versions,

An Ubuntu-specific modification to AccountsService in versions before 0.6.55-0ubuntu13.2, among other earlier versions,

SAP ERP Client for E-Bilanz, version - 1.0, installation sets Incorrect default filesystem permissions are set in its in

IBM Maximo Spatial Asset Management 7.6.0.3, 7.6.0.4, 7.6.0.5, and 7.6.1.0 allows web pages to be stored locally which c

When in maintenance mode, Magento version 2.4.0 and 2.3.4 (and earlier) are affected by an information disclosure vulner

Magento version 2.4.0 and 2.3.5p1 (and earlier) are affected by an incorrect permissions vulnerability within the Integr

Magento version 2.4.0 and 2.3.5p1 (and earlier) are affected by an incorrect user permissions vulnerability within the I

PackageKit provided detailed error messages to unprivileged callers that exposed information about file presence and mim

Acrobat Reader DC for macOS versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and

Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) a

Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) a

Acrobat Reader versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) are

Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) a

IBM QRadar SIEM 7.3 and 7.4 n a multi tenant configuration could be vulnerable to information disclosure. IBM X-Force ID

IBM Maximo Anywhere 7.6.2.0, 7.6.2.1, 7.6.3.0, and 7.6.3.1 applications can be installed on a deprecated operating syste

A too small set of random characters being used for encryption in Nextcloud Server 18.0.4 allowed decryption in shorter

CyberArk Privileged Session Manager (PSM) 10.9.0.15 allows attackers to discover internal pathnames by reading an error

This issue was addressed with improved checks This issue is fixed in macOS Catalina 10.15.4, Security Update 2020-002 Mo

The issue was addressed with improved validation when an iCloud Link is created. This issue is fixed in iOS 13.3 and iPa

An API issue existed in the handling of outgoing phone calls initiated with Siri. This issue was addressed with improved

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.2, Security U

A validation issue was addressed with improved logic. This issue is fixed in macOS Catalina 10.15, iOS 13.1 and iPadOS 1

This issue was resolved by replacing device names with a random identifier. This issue is fixed in iOS 13.1 and iPadOS 1

A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state manageme