2020

SAP ERP and SAP S/4 HANA allows an authenticated user to see cost records to objects to which he has no authorization in

SAP Process Integration (PGP Module - Business-to-Business Add On), version - 1.0, allows an attacker to read PGP Keys u

SAP Commerce Cloud (Accelerator Payment Mock), versions - 1808, 1811, 1905, 2005, allows an unauthenticated attacker to

SAP Commerce Cloud, versions- 1808,1811,1905,2005, allows an attacker to bypass existing authentication and permission c

The frame touch module does not make validity judgments on parameter lengths when processing specific parameters,which c

Dell Inspiron 15 7579 2-in-1 BIOS versions prior to 1.31.0 contain an Improper SMM communication buffer verification vul

IBM Content Navigator 3.0CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Ja

IBM Content Navigator 3.0CD is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbit

IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, and 4.0 stores user credentials in plain in clear text which can be read by

In callCallbackForRequest of ConnectivityService.java, there is a possible permission bypass due to a missing permission

In updateNotification of BeamTransferManager.java, there is a possible permission bypass due to an unsafe PendingIntent.

In rw_i93_sm_format of rw_i93.cc, there is a possible out of bounds read due to uninitialized data. This could lead to r

In getPhoneAccountsForPackage of TelecomServiceImpl.java, there is a possible way to access a tracking identifier due to

In LocaleList of LocaleList.java, there is a possible forced reboot due to an uncaught exception. This could lead to loc

In CellBroadcastReceiver's intent handlers, there is a possible denial of service due to a missing permission check. Thi

In send_vc of res_send.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to

Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 stores administrative passwords using a hash that

Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 is vulnerable to an information disclosure vulner

Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 is vulnerable to a server side request forgery vu

Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 is vulnerable to an XML External Entity Processin

IBM Maximo Spatial Asset Management 7.6.0.3, 7.6.0.4, 7.6.0.5, and 7.6.1.0 is vulnerable to cross-site request forgery w

A stored cross-site scripting (XSS) vulnerability affects the Web UI in Locust before 1.3.2, if the installation violate

Microweber 1.1.18 is affected by broken authentication and session management. Local session hijacking may occur, which

Microweber v1.1.18 is affected by no session expiry after log-out.

A vulnerability was found in keycloak, where path traversal using URL-encoded path segments in the request is possible b

The Access Control issues include allowing a regular user to view a restricted incident, user role escalation to admin,

There were XSS vulnerabilities discovered and reported in the Dispatch application, affecting name and description param

The implementation of Brave Desktop's privacy-preserving analytics system (P3A) between 1.1 and 1.18.35 logged the times

A cryptographic issue in Nextcloud Server 19.0.1 allowed an attacker to downgrade the encryption scheme and break the in

A wrong generation of the passphrase for the encrypted block in Nextcloud Server 19.0.1 allowed an attacker to overwrite

An issue was discovered in ManagedClusterView API, that could allow secrets to be disclosed to users without the correct

Pega Platform before 8.4.0 has a XSS issue via stream rule parameters used in the request header.

The conferencing component on Mitel ShoreTel 19.46.1802.0 devices could allow an unauthenticated attacker to conduct a r

An inaccurate frame deduplication process in ChirpStack Network Server 3.9.0 allows a malicious gateway to perform uplin

Magento version 2.4.0 and 2.3.5p1 (and earlier) are affected by an incorrect permissions issue vulnerability in the Inve

Magento version 2.4.0 and 2.3.5p1 (and earlier) are affected by an incorrect permissions vulnerability in the Integratio

Magento versions 2.4.0 and 2.3.5p1 (and earlier) are affected by an incorrect authorization vulnerability. A user can st

This affects the package find-my-way before 2.2.5, from 3.0.0 and before 3.0.5. It accepts the Accept-Version' header by

Axios NPM package 0.21.0 contains a Server-Side Request Forgery (SSRF) vulnerability where an attacker is able to bypass

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, rem

A vulnerability in the web-based management interface of the Cisco SD-WAN vManage Software could allow an authenticated,

A vulnerability in the web-based management interface of the Cisco SD-WAN vManage Software could allow an authenticated,

A vulnerability in the web-based management interface of the Cisco SD-WAN vManage Software could allow an authenticated,

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, r

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthentic

A vulnerability in the web UI of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attac

A res_pjsip_session crash was discovered in Asterisk Open Source 13.x before 13.37.1, 16.x before 16.14.1, 17.x before 1

A vulnerability in the remote management feature of Cisco SD-WAN vManage Software could allow an authenticated, local at

A vulnerability in the application data endpoints of Cisco SD-WAN vManage Software could allow an authenticated, remote

A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client for Windows c