2020

A double free vulnerability exists in the Binary File Descriptor (BFD) (aka libbrd) in GNU Binutils 2.35 in the process_

A head-based buffer overflow exists in Academy Software Foundation OpenEXR 2.3.0 in writeTileData in ImfTiledOutputFile.

A Null Pointer Deference issue exists in Academy Software Foundation OpenEXR 2.3.0 in generatePreview in makePreview.cpp

A heap-based buffer overflow vulnerability exists in Academy Software Foundation OpenEXR 2.3.0 in chunkOffsetReconstruct

pass through 1.7.3 has a possibility of using a password for an unintended resource. For exploitation to occur, the user

Matrix is an ecosystem for open federated Instant Messaging and VoIP. Synapse is a reference "homeserver" implementation

A local privilege escalation vulnerability exists in Palo Alto Networks Cortex XDR Agent on the Windows platform that al

An improper handling of exceptional conditions vulnerability in Cortex XDR Agent allows a local authenticated Windows us

This affects all versions of package react-adal. It is possible for a specially crafted JWT token and request URL can ca

This affects the package phpoffice/phpspreadsheet from 0.0.0. The library is vulnerable to XSS when creating an html out

A locking issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_jobctrl.c allows

A locking inconsistency issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_io

A buffer overflow in the web server of Flexense DupScout Enterprise 10.0.18 allows a remote anonymous attacker to execut

SAP Business Warehouse, versions - 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 782, and SAP BW4HANA, versions

SAP Solution Manager 7.2 (User Experience Monitoring), version - 7.2, allows an authenticated user to upload a malicious

SAP Solution Manager (Trace Analysis), version - 720, allows for misuse of a parameter in the application URL leading to

SAP NetWeaver AS ABAP, versions - 740, 750, 751, 752, 753, 754 , does not sufficiently encode URL which allows an attack

SAP HANA Database, version - 2.0, does not correctly validate the username when performing SAML bearer token-based user

SAP AS ABAP (SAP Landscape Transformation), versions - 2011_1_620, 2011_1_640, 2011_1_700, 2011_1_710, 2011_1_730, 2011_

SAP BusinessObjects BI Platform (Crystal Report), versions - 4.1, 4.2, 4.3, does not sufficiently validate uploaded XML

SAP Solution Manager 7.2 (User Experience Monitoring), version - 7.2, does not perform necessary authorization checks fo

SAP NetWeaver AS JAVA (P2P Cluster Communication), versions - 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows arbitrary conne

SAP Disclosure Management, version - 10.1, provides capabilities for authorized users to upload and download content of

Process Integration Monitoring of SAP NetWeaver AS JAVA, versions - 7.31, 7.40, 7.50, allows an attacker to upload any f

SAP AS JAVA (Key Storage Service), versions - 7.10, 7.11, 7.20 ,7.30, 7.31, 7.40, 7.50, has the key material which is st

jupyterhub-systemdspawner enables JupyterHub to spawn single-user notebook servers using systemd. In jupyterhub-systemds

BookStack is a platform for storing and organising information and documentation. In BookStack before version 0.30.5, a

A heap-based buffer overflow vulnerability exists within the WECON LeviStudioU Release Build 2019-09-21 and prior when p

Out-of-bounds Write vulnerability in TCP Stack of Apache NuttX (incubating) versions up to and including 9.1.0 and 10.0.

Out-of-bounds Write vulnerability in TCP stack of Apache NuttX (incubating) versions up to and including 9.1.0 and 10.0.

imcat 5.2 allows an authenticated file upload and consequently remote code execution via the picture functionality.

Incorrect Permission Assignment for Critical Resource vulnerability in McAfee VirusScan Enterprise (VSE) prior to 8.8 Pa

In JerryScript 2.3.0, there is an out-of-bounds read in main_print_unhandled_exception in the main-utils.c file.

An information disclosure vulnerability exists in RT-AC88U Download Master before 3.1.0.108. A direct access to /downloa

An injection vulnerability exists in RT-AC88U Download Master before 3.1.0.108. Accessing Main_Login.asp?flag=1&productn

A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be u

Aptdaemon performed policykit checks after interacting with potentially untrusted files with elevated privileges. This a

The aptdaemon DBus interface disclosed file existence disclosure by setting Terminal/DebconfSocket properties, aka GHSL-

When reading SMTP server status codes, Thunderbird writes an integer value to a position on the stack that is intended t

Mozilla developers reported memory safety bugs present in Firefox 82. Some of these bugs showed evidence of memory corru

Mozilla developers reported memory safety bugs present in Firefox 82 and Firefox ESR 78.4. Some of these bugs showed evi

When listening for page changes with a Mutation Observer, a malicious web page could confuse Firefox Screenshots into in

Searching for a single word from the address bar caused an mDNS request to be sent on the local network searching for a

Some websites have a feature "Show Password" where clicking a button will change a password field into a textbook field,

If the Remote Debugging via USB feature was enabled in Firefox for Android on an Android version prior to Android 6.0, u

Repeated calls to the history and location interfaces could have been used to hang the browser. This was addressed by in

Cross-origin iframes that contained a login form could have been recognized by the login autofill service, and populated

When DNS over HTTPS is in use, it intentionally filters RFC1918 and related IP ranges from the responses as these do not

If the Compact() method was called on an nsTArray, the array could have been reallocated without updating other pointers

During browser shutdown, reference decrementing could have occured on a previously freed object, resulting in a use-afte