2020

SAP Banking Services version 500, use an incorrect authorization object in some of its reports. Although the affected re

SAP 3D Visual Enterprise Viewer, version 9, allows an attacker to send certain manipulated file to the victim, which can

SAP BusinessObjects Business Intelligence Platform (Web Services) versions - 410, 420, 430, allows an unauthenticated at

This affects the package @tsed/core before 5.65.7. This vulnerability relates to the deepExtend function which is used a

This affects all versions of package lightning-server. It is possible to inject malicious JavaScript code as part of a s

In Sylius before versions 1.6.9, 1.7.9 and 1.8.3, the user may register in a shop by email [email protected], verify it,

Apache Kylin 2.0.0, 2.1.0, 2.2.0, 2.3.0, 2.3.1, 2.3.2, 2.4.0, 2.4.1, 2.5.0, 2.5.1, 2.5.2, 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.

A flaw was found in Infinispan (org.infinispan:infinispan-server-runtime) version 10, where it permits local access to c

E6878-370 versions 10.0.3.1(H557SP27C233),10.0.3.1(H563SP21C233) and E6878-870 versions 10.0.3.1(H557SP27C233),10.0.3.1(

HUAWEI Mate 20 versions earlier than 10.1.0.163(C00E160R3P8) have a JavaScript injection vulnerability. A module does no

Blinger.io v.1.0.2519 is vulnerable to Blind/Persistent XSS. An attacker can send arbitrary JavaScript code via a built-

A DNS rebinding vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3.

Sprecher SPRECON-E firmware prior to 8.64b might allow local attackers with access to engineering data to insert arbitra

AuthRestServlet in Matrix Synapse before 1.21.0 is vulnerable to XSS due to unsafe interpolation of the session GET para

A mis-handling of invalid unicode characters in the Java implementation of Tink versions prior to 1.5 allows an attacker

SolarWinds N-Central version 12.3 GA and lower does not set the JSESSIONID attribute to HTTPOnly. This makes it possible

Multiple stored cross-site scripting (XSS) vulnerabilities in Sage EasyPay 10.7.5.10 allow authenticated attackers to in

<p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a sp

<p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a sp

<p>An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in m

<p>An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in m

<p>A denial of service vulnerability exists in Microsoft Outlook software when the software fails to properly handle obj

<p>An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in m

<p>An elevation of privilege vulnerability exists in Microsoft Dynamics 365 Commerce. An unauthenticated attacker who su

<p>An information disclosure vulnerability exists when Microsoft SharePoint Server improperly discloses its folder struc

<p>An information disclosure vulnerability exists when Microsoft SharePoint Server improperly discloses its folder struc

<p>An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attac

<p>An information disclosure vulnerability exists when the .NET Framework improperly handles objects in memory. An attac

<p>A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully expl

<p>An information disclosure vulnerability exists in Text Services Framework when it fails to properly handle objects in

<p>An information disclosure vulnerability exists when the Windows Enterprise App Management Service improperly handles

<p>An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface Plus (GDI+) hand

<p>A security feature bypass vulnerability exists when Microsoft Windows fails to handle file creation permissions, whic

<p>An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files.

<p>An elevation of privilege vulnerability exists in the way Azure Functions validate access keys.</p> <p>An unauthentic

<p>An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory.</p>

<p>An information disclosure vulnerability exists when NetBIOS over TCP (NBT) Extensions (NetBT) improperly handle objec

<p>An information disclosure vulnerability exists when the Windows KernelStream improperly handles objects in memory. An

<p>A security feature bypass vulnerability exists in the PowerShellGet V2 module. An attacker who successfully exploited

An issue was discovered in the Linux kernel before 5.8.15. scalar32_min_max_or in kernel/bpf/verifier.c mishandles bound

On Juniper Networks EX4300-MP Series, EX4600 Series and QFX5K Series deployed in a Virtual Chassis configuration, receip

On Juniper Networks SRX Series and NFX Series, a local authenticated user with access to the shell may obtain the Web AP

On Juniper Networks EX4300-MP Series, EX4600 Series and QFX5K Series deployed in (Ethernet VPN) EVPN-(Virtual Extensible

When configuring stateless firewall filters in Juniper Networks EX4600 and QFX 5000 Series devices using Virtual Extensi

An input validation vulnerability exists in Juniper Networks Junos OS, allowing an attacker to crash the srxpfe process,

Receipt of a specifically malformed NDP packet sent from the local area network (LAN) to a device running Juniper Networ

On Juniper Networks MX Series with MS-MIC or MS-MPC card configured with NAT64 configuration, receipt of a malformed IPv

On Juniper Networks Junos OS and Junos OS Evolved platforms with EVPN configured, receipt of specific BGP packets causes

On Juniper Networks EX4300 Series, receipt of a stream of specific IPv4 packets can cause Routing Engine (RE) high CPU l

The Juniper Device Manager (JDM) container, used by the disaggregated Junos OS architecture on Juniper Networks NFX350 S