2020

In affected versions of TensorFlow the tf.raw_ops.ImmutableConst operation returns a constant tensor created from a memo

In affected versions of TensorFlow the tf.raw_ops.DataFormatVecPermute API does not validate the src_format and dst_form

In affected versions of TensorFlow under certain cases a saved model can trigger use of uninitialized values during code

Askey AP5100W_Dual_SIG_1.01.097 and all prior versions use a weak password at the Operating System (rlx-linux) level. Th

The member center function in fastadmin V1.0.0.20200506_beta is vulnerable to a Server-Side Template Injection (SSTI) vu

iCMS 7.0.14 attackers to execute arbitrary OS commands via shell metacharacters in the DB_NAME parameter to install/inst

iCMS 7 attackers to execute arbitrary OS commands via shell metacharacters in the DB_PREFIX parameter to install/install

Notable 1.8.4 allows XSS via crafted Markdown text, with resultant remote code execution (because nodeIntegration in web

SQL injection vulnerability exists in the handling of sort parameters in ProcessMaker 3.4.11. A specially crafted HTTP r

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.1 discloses sensitive inf

In affected versions of TensorFlow under certain cases, loading a saved model can result in accessing uninitialized memo

An information leak vulnerability exists in Gerrit versions prior to 2.14.22, 2.15.21, 2.16.25, 3.0.15, 3.1.10, 3.2.5 wh

An information leak vulnerability exists in Gerrit versions prior to 2.15.21, 2.16.25, 3.0.15, 3.1.10, 3.2.5 where a mis

In Lan ATMService M3 ATM Monitoring System 6.1.0, a remote attacker able to use a default cookie value, such as PHPSESSI

In Lan ATMService M3 ATM Monitoring System 6.1.0, due to a directory-listing vulnerability, a remote attacker can view l

Sympa before 6.2.59b.2 allows remote attackers to obtain full SOAP API access by sending any arbitrary string (except on

A XSS vulnerability exists in Gitlab CE/EE from 12.4 before 13.4.7, 13.5 before 13.5.5, and 13.6 before 13.6.2 that allo

AEM's Cloud Service offering, as well as version 6.5.6.0 (and below), are affected by a stored Cross-Site Scripting (XSS

AEM Forms SP6 add-on for AEM 6.5.6.0 and Forms add-on package for AEM 6.4 Service Pack 8 Cumulative Fix Pack 2 (6.4.8.2)

An information disclosure flaw allows a malicious, authenticated, privileged web UI user to obtain a password for a remo

A privilege escalation flaw allows a malicious, authenticated, privileged CLI user to escalate their privileges on the s

If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code in certifica

If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code in System Co

If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code in File Stat

If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code in File Stat

This cross-site scripting vulnerability in Music Station allows remote attackers to inject malicious code. QANP have alr

This cross-site scripting vulnerability in Multimedia Console allows remote attackers to inject malicious code. QANP hav

This cross-site scripting vulnerability in Photo Station allows remote attackers to inject malicious code. QANP We have

Various memory and file descriptor leaks were found in apt-python files python/arfile.cc, python/tag.cc, python/tarfile.

APT had several integer overflows and underflows while parsing .deb packages, aka GHSL-2020-168 GHSL-2020-169, in files

This command injection vulnerability allows attackers to execute arbitrary commands in a compromised application. QNAP h

Older firmware versions (FW1 up to FW10) of the WAGO PLC family 750-88x and 750-352 are vulnerable for a special denial

Use of a Broken or Risky Cryptographic Algorithm vulnerability in McAfee Database Security Server and Sensor prior to 4.

Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability

Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability

Visual Studio Remote Code Execution Vulnerability

Microsoft Edge for Android Spoofing Vulnerability

Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability

Visual Studio Code Remote Code Execution Vulnerability

Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability

Dynamics CRM Webclient Cross-site Scripting Vulnerability

Azure DevOps Server and Team Foundation Services Spoofing Vulnerability

Microsoft Exchange Remote Code Execution Vulnerability

Microsoft Exchange Server Information Disclosure Vulnerability

Microsoft Exchange Remote Code Execution Vulnerability

Microsoft Exchange Remote Code Execution Vulnerability

Windows SMB Information Disclosure Vulnerability

Windows Overlay Filter Security Feature Bypass Vulnerability

Windows Error Reporting Information Disclosure Vulnerability

DirectX Graphics Kernel Elevation of Privilege Vulnerability