2020

An exploitable vulnerability exists in the configuration-loading functionality of the jw.util package before 2.3 for Pyt

meinheld prior to 1.0.2 is vulnerable to HTTP Request Smuggling. HTTP pipelining issues and request smuggling attacks mi

In Puma (RubyGem) before 4.3.5 and 3.12.6, a client could smuggle a request through a proxy, causing the proxy to send a

In Puma (RubyGem) before 4.3.4 and 3.12.5, an attacker could smuggle an HTTP response, by using an invalid transfer-enco

A NULL pointer dereference flaw was found in the Linux kernel's SELinux subsystem in versions before 5.7. This flaw occu

Composr 10.0.30 allows Persistent XSS via a Usergroup name under the Security configuration.

Ezhttptrans.ocx ActiveX Control in Kaoni ezHTTPTrans 1.0.0.70 and prior versions contain a vulnerability that could allo

An exploitable authentication bypass vulnerability exists in the ESPON Web Control functionality of Epson EB-1470Ui MAIN

Apache Kylin 2.3.0, and releases up to 2.6.5 and 3.0.1 has some restful apis which will concatenate os command with the

A vulnerability in Cisco AMP for Endpoints Linux Connector Software and Cisco AMP for Endpoints Mac Connector Software c

A vulnerability in Cisco AMP for Endpoints Linux Connector Software and Cisco AMP for Endpoints Mac Connector Software c

A vulnerability in the file scan process of Cisco AMP for Endpoints Mac Connector Software could cause the scan engine t

A vulnerability in the Java Remote Management Interface of Cisco Unified Contact Center Express (Unified CCX) could allo

A vulnerability in the DHCP server of Cisco Prime Network Registrar could allow an unauthenticated, remote attacker to c

A vulnerability in the web-based management interface of Cisco Prime Collaboration Provisioning Software could allow an

Monstra CMS 3.0.4 allows remote authenticated users to upload and execute arbitrary PHP code via admin/index.php?id=file

An elevation of privilege vulnerability exists in Microsoft Edge (Chromium-based) when the Feedback extension improperly

A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads workspace settings fr

An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in m

An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in m

An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in m

An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in m

An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in m

An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in m

An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in m

An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in m

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its m

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory.

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory.

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory.

A spoofing vulnerability exists in Microsoft Power BI Report Server in the way it validates the content-type of uploaded

A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads configuration files a

An elevation of privilege vulnerability exists when Windows improperly handles calls to Clipboard Service. An attacker w

An elevation of privilege vulnerability exists when Windows improperly handles calls to Clipboard Service. An attacker w

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory. An attacke

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests. An attacker who successfully

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory. An attacke

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory. An attacke

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory. An attacke

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory. An attacke

An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles

A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory. An

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory. An attacke

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory. An attacke

An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles obje

An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in m

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle o

An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objec

An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles obje