2020

All versions of package express-validators are vulnerable to Regular Expression Denial of Service (ReDoS) when validatin

Windows Spoofing Vulnerability

Azure DevOps Server and Team Foundation Services Spoofing Vulnerability

Windows Camera Codec Information Disclosure Vulnerability

WebP Image Extensions Information Disclosure Vulnerability

Visual Studio Tampering Vulnerability

Microsoft Defender for Endpoint Security Feature Bypass Vulnerability

Microsoft Exchange Server Denial of Service Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Raw Image Extension Information Disclosure Vulnerability

Windows Delivery Optimization Information Disclosure Vulnerability

Windows NDIS Information Disclosure Vulnerability

Microsoft Office Online Spoofing Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Windows Network File System Information Disclosure Vulnerability

Chakra Scripting Engine Memory Corruption Vulnerability

A security feature bypass vulnerability exists in the way Key Distribution Center (KDC) determines if a service ticket c

Chakra Scripting Engine Memory Corruption Vulnerability

Windows Error Reporting Denial of Service Vulnerability

Windows KernelStream Information Disclosure Vulnerability

Windows Hyper-V Security Feature Bypass Vulnerability

Windows Function Discovery SSDP Provider Information Disclosure Vulnerability

Windows MSCTF Server Information Disclosure Vulnerability

Windows Canonical Display Driver Information Disclosure Vulnerability

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Microsoft SharePoint Information Disclosure Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Win32k Information Disclosure Vulnerability

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Windows Graphics Component Information Disclosure Vulnerability

Remote Desktop Protocol Client Information Disclosure Vulnerability

Windows WalletService Information Disclosure Vulnerability

Azure Sphere Elevation of Privilege Vulnerability

Azure Sphere Information Disclosure Vulnerability

Azure Sphere Elevation of Privilege Vulnerability

Azure Sphere Elevation of Privilege Vulnerability

Azure Sphere Denial of Service Vulnerability

Azure Sphere Information Disclosure Vulnerability

Azure Sphere Tampering Vulnerability

Azure Sphere Unsigned Code Execution Vulnerability

Azure Sphere Elevation of Privilege Vulnerability

Microsoft SharePoint Information Disclosure Vulnerability

An XSS issue exists in the question-pool file-upload preview feature in ILIAS 6.4.

The server in Dundas BI through 8.0.0.1001 allows XSS via addition of a Component (e.g., a button) when events such as c

The server in Dundas BI through 8.0.0.1001 allows XSS via an HTML label when creating or editing a dashboard.

Xen through 4.14.x allows guest OS administrators to obtain sensitive information (such as AES keys from outside the gue

A vulnerability in the TCL Android Smart TV series V8-R851T02-LF1 V295 and below and V8-T658T01-LF1 V373 and below by TC

The Core component of TIBCO Software Inc.'s TIBCO iProcess Workspace (Browser) contains a vulnerability that theoretical