2020

A memory initialization issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.6,

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Catalina 10.15.1, Security Update

A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. T

A memory consumption issue was addressed with improved memory handling. This issue is fixed in iCloud for Windows 7.7, w

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.3, Sec

A memory consumption issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.3, Sec

This issue is fixed in macOS Mojave 10.14. A memory corruption issue was addressed with improved input validation.

A lock screen issue allowed access to the share function on a locked device. This issue was addressed by restricting opt

Blueman is a GTK+ Bluetooth Manager. In Blueman before 2.1.4, the DhcpClient method of the D-Bus interface to blueman-me

All versions of package dat.gui are vulnerable to Regular Expression Denial of Service (ReDoS) via specifically crafted

Code execution with escalated privileges vulnerability in Micro Focus products Operation Bridge Manager and Operation Br

This affects the package npm-user-validate before 1.0.1. The regex that validates user emails took exponentially longer

A SQL injection vulnerability exists in Victor CMS V1.0 in the cat_id parameter of the category.php file. This parameter

Clustered Data ONTAP versions 9.7 through 9.7P7 are susceptible to a vulnerability which allows an attacker with access

Check Point ZoneAlarm before version 15.8.139.18543 allows a local actor to escalate privileges while restoring files in

An issue exits in IOBit Malware Fighter version 8.0.2.547. Local escalation of privileges is possible by dropping a mali

All versions of package trim are vulnerable to Regular Expression Denial of Service (ReDoS) via trim().

konzept-ix publiXone before 2020.015 allows attackers to download files by iterating over the IXCopy fileID parameter.

An XML external entity (XXE) vulnerability in Pulse Connect Secure (PCS) before 9.1R9 and Pulse Policy Secure (PPS) befo

An out-of-bounds read in the JavaScript Interpreter in Facebook Hermes prior to commit 8cb935cd3b2321c46aa6b7ed8454d95c7

Ruckus through 1.5.1.0.21 is affected by remote command injection. An authenticated user can submit a query to the API (

In the git-tag-annotation-action (open source GitHub Action) before version 1.0.1, an attacker can execute arbitrary (*)

A Denial of Service condition in Motion-Project Motion 3.2 through 4.3.1 allows remote unauthenticated users to cause a

This affects the package systeminformation before 4.27.11. This package is vulnerable to Command Injection. The attacker

An issue was discovered in KDE Partition Manager 4.1.0 before 4.2.0. The kpmcore_externalcommand helper contains a logic

A remote escalation of privilege vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.

A remote execution of arbitrary commandss vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.

A remote execution of arbitrary commands vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3

Arista EOS before 4.21.12M, 4.22.x before 4.22.7M, 4.23.x before 4.23.5M, and 4.24.x before 4.24.2F allows remote attack

Arista’s CloudVision eXchange (CVX) server before 4.21.12M, 4.22.x before 4.22.7M, 4.23.x before 4.23.5M, and 4.24.x bef

FruityWifi through 2.4 has an unsafe Sudo configuration [(ALL : ALL) NOPASSWD: ALL]. This allows an attacker to perform

NVIDIA GeForce Experience, all versions prior to 3.20.5.70, contains a vulnerability in the ShadowPlay component which m

NVIDIA GeForce Experience, all versions prior to 3.20.5.70, contains a vulnerability in its services in which a folder i

NVIDIA GeForce Experience, all versions prior to 3.20.5.70, contains a vulnerability in NVIDIA Web Helper NodeJS Web Ser

In Eclipse Jetty versions 1.0 thru 9.4.32.v20200930, 10.0.0.alpha1 thru 10.0.0.beta2, and 11.0.0.alpha1 thru 11.0.0.beta

Belkin LINKSYS WRT160NL 1.0.04.002_US_20130619 devices have a stack-based buffer overflow vulnerability because of sprin

CryptoPro CSP through 5.0.0.10004 on 32-bit platforms allows Local Privilege Escalation (by local users with the SeChang

FRITZ!OS before 7.21 on FRITZ!Box devices allows a bypass of a DNS Rebinding protection mechanism.

Verifone MX900 series Pinpad Payment Terminals with OS 30251000 allow multiple arbitrary command injections, as demonstr

Verifone Verix OS on VerixV Pinpad Payment Terminals with QT000530 have a Buffer Overflow via the Run system call.

Verifone VerixV Pinpad Payment Terminals with QT000530 allow bypass of integrity and origin control for S1G file generat

Verifone MX900 series Pinpad Payment Terminals with OS 30251000 have a race condition for RBAC bypass.

An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a host OS denial of service, achieve

An issue was discovered in Xen through 4.14.x allowing x86 HVM and PVH guest OS users to cause a denial of service (data

An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a denial of service (data corruption)

An XXE vulnerability exists within LeviStudioU Release Build 2019-09-21 and prior when processing parameter entities, wh

A CSRF vulnerability in Eyoucms v1.2.7 allows an attacker to add an admin account via login.php.

When multiple WASM threads had a reference to a module, and were looking up exported functions, one WASM thread could ha

Arbitrary code execution vulnerability affecting multiple Micro Focus products. 1.) Operation Bridge Manager affecting v

In Network Security Services before 3.44, a malformed Netscape Certificate Sequence can cause NSS to crash, resulting in