2020

An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writin

A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filte

An elevation of privilege vulnerability exists in Windows Media Service that allows file creation in arbitrary locations

A remote code execution vulnerability exists in the way that Windows handles objects in memory. An attacker who successf

An elevation of privilege vulnerability exists in .NET Framework which could allow an attacker to elevate their privileg

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory.

A remote code execution vulnerability exists in the way that the MSHTML engine improperly validates input. An attacker c

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a speci

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerabi

A remote code execution vulnerability exists in the way that the Microsoft Script Runtime handles objects in memory. The

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerab

A spoofing vulnerability exists when Microsoft Edge does not properly parse HTTP content. An attacker who successfully e

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerab

An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, whic

A cross-site-scripting (XSS) vulnerability exists when Active Directory Federation Services (ADFS) does not properly san

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle o

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory.

An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writin

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerab

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup

An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files. The

An elevation of privilege vulnerability exists in Windows Block Level Backup Engine Service (wbengine) that allows file

Slurm 19.05.x before 19.05.7 and 20.02.x before 20.02.3, in the rare case where Message Aggregation is enabled, allows A

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its m

A denial of service vulnerability exists when Hyper-V on a Windows Server fails to properly handle specially crafted net

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obje

Jodd before 5.0.4 performs Deserialization of Untrusted JSON Data when setClassMetadataName is set.

Gila CMS before 1.11.6 allows CSRF with resultant XSS via the admin/themes URI, leading to compromise of the admin accou

Gila CMS before 1.11.6 has reflected XSS via the admin/content/postcategory id parameter, which is mishandled for g_prev

Digi XBee 2 devices do not have an effective protection mechanism against remote AT commands, because of issues related

In RAONWIZ K Upload v2018.0.2.51 and prior, automatic update processing without integrity check on update module(web.js)

Contentful through 2020-05-21 for Python allows reflected XSS, as demonstrated by the api parameter to the-example-app.p

An issue was discovered in libexif before 0.6.22. Use of uninitialized memory in EXIF Makernote handling could lead to c

An issue was discovered in AnchorFree VPN SDK before 1.3.3.218. The VPN SDK service takes certain executable locations o

A Windows privilege change issue was discovered in Splashtop Software Updater before 1.5.6.16. Insecure permissions on t

An issue was discovered in libexif before 0.6.22. An unrestricted size in handling Canon EXIF MakerNote data could lead

An issue was discovered in libexif before 0.6.22. Several buffer over-reads in EXIF MakerNote handling could lead to inf

A flaw was found in Moodle versions 3.8 before 3.8.3, 3.7 before 3.7.6, 3.6 before 3.6.10, 3.5 before 3.5.12 and earlier

There is an information leakage vulnerability in some Huawei products. An unauthenticated, adjacent attacker could explo

During installation or upgrade to Software House C•CURE 9000 v2.70 and American Dynamics victor Video Management System

Element OS prior to version 12.0 and Element HealthTools prior to version 2020.04.01.04 are susceptible to a vulnerabili

netius prior to 1.17.58 is vulnerable to HTTP Request Smuggling. HTTP pipelining issues and request smuggling attacks mi

Relative path traversal in Druva inSync Windows Client 6.6.3 allows a local, unauthenticated attacker to execute arbitra

E6878-370 with versions of 10.0.3.1(H557SP27C233), 10.0.3.1(H563SP1C00), 10.0.3.1(H563SP1C233) has a use after free vuln

Insufficient data validation in site information in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spo

Insufficient data validation in loader in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had been abl

Inappropriate implementation in developer tools in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had