2020

SAP NetWeaver AS JAVA, versions - 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker who is authenticated as an administra

SAP NetWeaver AS ABAP (Web Dynpro), versions - 731, 740, 750, 751, 752, 753, 754, 755, 782, allows an authenticated user

SAP NetWeaver AS ABAP (Web Dynpro), versions - 731, 740, 750, 751, 752, 753, 754, 755, 782, allows an authenticated user

SAP 3D Visual Enterprise Viewer, version - 9, allows an user to open manipulated HPGL file received from untrusted sourc

SAP Fiori Launchpad (News tile Application), versions - 750,751,752,753,754,755, allows an unauthorized attacker to send

SAP Commerce Cloud (Accelerator Payment Mock), versions - 1808, 1811, 1905, 2005, allows an unauthenticated attacker to

SAP AS ABAP(DMIS), versions - 2011_1_620, 2011_1_640, 2011_1_700, 2011_1_710, 2011_1_730, 2011_1_731, 2011_1_752, 2020 a

This affects all versions of package json-ptr. The issue occurs in the set operation (https://flitbit.github.io/json-ptr

Prototype pollution vulnerability in '@strikeentco/set' version 1.0.0 allows attacker to cause a denial of service and m

In sbrDecoder_AssignQmfChannels2SbrChannels of sbrdecoder.cpp, there is a possible out of bounds write due to a heap buf

In btm_sec_disconnected of btm_sec.cc, there is a possible memory corruption due to a use after free. This could lead to

In Message and toBundle of Notification.java, there is a possible UI slowdown or crash due to improper input validation.

In Message and toBundle of Notification.java, there is a possible resource exhaustion due to improper input validation.

In generatePackageInfo of PackageManagerService.java, there is a possible permissions bypass due to an incorrect permiss

In the AIBinder_Class constructor of ibinder.cpp, there is a possible arbitrary code execution due to uninitialized data

In getPermissionInfosForGroup of Utils.java, there is a logic error. This could lead to local escalation of privilege wi

In create of FileMap.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local e

gdm3 versions before 3.36.2 or 3.38.2 would start gnome-initial-setup if gdm3 can't contact the accountservice service v

Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 has updated a specific critical library that may

Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 is vulnerable to a cross-site request forgery (CS

upnpd on certain NETGEAR devices allows remote (LAN) attackers to execute arbitrary code via a stack-based buffer overfl

IBM FileNet Content Manager 5.5.4 and 5.5.5 is potentially vulnerable to CVS Injection. A remote attacker could execute

CapaSystems CapaInstaller before 6.0.101 does not properly assign, modify, or check privileges for an actor who attempts

Microweber 1.1.18 is affected by insufficient session expiration. When changing passwords, both sessions for when a user

Prototype pollution vulnerability in json8-merge-patch npm package < 1.0.3 may allow attackers to inject or modify metho

Insufficient validation in the Bitdefender Update Server and BEST Relay components of Bitdefender Endpoint Security Tool

Magento versions 2.4.0 and 2.3.5 (and earlier) are affected by an SQL Injection vulnerability that could lead to sensiti

An issue was discovered on LG mobile devices with Android OS 10 software. The Wi-Fi subsystem may crash because of the l

An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software. System services may crash b

An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (Exynos 980, 9820, and 9830 chipsets) software

An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (China / India) software. The S Secure applica

An issue was discovered on Samsung mobile devices with Q(10.0) (Exynos990 chipsets) software. The S3K250AF Secure Elemen

The usc-e-shop (aka Collne Welcart e-Commerce) plugin before 1.9.36 for WordPress allows Object Injection because of usc

PackageKit's apt backend mistakenly treated all local debs as trusted. The apt security model is based on repository tru

ad-ldap-connector's admin panel before version 5.0.13 does not provide csrf protection, which when exploited may result

Multiple vulnerabilities in Cisco Webex Network Recording Player for Windows and Cisco Webex Player for Windows could al

Multiple vulnerabilities in Cisco Webex Network Recording Player for Windows and Cisco Webex Player for Windows could al

A vulnerability in Cisco SD-WAN Software could allow an authenticated, local attacker to elevate privileges to root on t

A vulnerability in Cisco SD-WAN Software could allow an authenticated, local attacker to elevate privileges to root grou

A vulnerability in Cisco SD-WAN Software could allow an authenticated, local attacker to elevate privileges to root on t

A vulnerability in Cisco SD-WAN Software could allow an authenticated, local attacker to elevate privileges to root on t

A vulnerability in virtualization channel messaging in Cisco Webex Meetings Desktop App for Windows could allow a local

A vulnerability in the TCP packet processing functionality of Cisco IP Phones could allow an unauthenticated, remote att

Multiple vulnerabilities in Cisco Webex Network Recording Player for Windows and Cisco Webex Player for Windows could al

A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client Software coul

A vulnerability in the packet filtering features of Cisco SD-WAN Software could allow an unauthenticated, remote attacke

SuiteCRM before 7.11.17 is vulnerable to remote code execution via the system settings Log File Name setting. In certain

raptor_xml_writer_start_element_common in raptor_xml_writer.c in Raptor RDF Syntax Library 2.0.15 miscalculates the maxi

A vulnerability in Nessus Network Monitor versions 5.11.0, 5.11.1, and 5.12.0 for Windows could allow an authenticated l

A DLL hijacking vulnerability in the B. Braun OnlineSuite Version AP 3.0 and earlier allows local attackers to execute c