2020

Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. Successful exploitation could le

Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. Successful exploitation could le

Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. Successful exploitation could le

Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. Successful exploitation could le

Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. Successful exploitation could le

In binder_thread_release of binder.c, there is a possible use after free due to a race condition. This could lead to loc

In notifyNetworkTested and related functions of NetworkMonitor.java, there is a possible bypass of private DNS settings.

In HidRawSensor::batch of HidRawSensor.cpp, there is a possible out of bounds write due to an unexpected switch fallthro

In Parcel::continueWrite of Parcel.cpp, there is possible memory corruption due to a use after free. This could lead to

In setPhonebookAccessPermission of AdapterService.java, there is a possible disclosure of user contacts over bluetooth d

In reassemble_and_dispatch of packet_fragmenter.cc, there is possible out of bounds write due to an incorrect bounds cal

In removeUnusedPackagesLPw of PackageManagerService.java, there is a possible permanent denial-of-service due to a missi

In getAttributeRange of ExifInterface.java, there is a possible failure to redact location information from media files

In MotionEntry::appendDescription of InputDispatcher.cpp, there is a possible log information disclosure. This could lea

In multiple places, it was possible for the primary user’s dictionary to be visible to and modifiable by secondary users

In onCreate of CertInstaller.java, there is a possible way to overlay the Certificate Installation dialog by a malicious

It is possible for a malicious application to construct a TYPE_TOAST window manually and make that window clickable. Thi

In btm_read_remote_ext_features_complete of btm_acl.cc, there is a possible out of bounds write due to a missing bounds

In updatePermissions of PermissionManagerService.java, it may be possible for a malicious app to obtain a custom permiss

A stack-based buffer overflow was found on the D-Link DIR-842 REVC with firmware v3.13B09 HOTFIX due to the use of strcp

explorer.js in Amazon AWS JavaScript S3 Explorer (aka aws-js-s3-explorer) v2 alpha before 2019-08-02 allows XSS in certa

OpenVPN Access Server 2.8.x before 2.8.1 allows LDAP authentication bypass (except when a user is enrolled in two-factor

TimeTools SC7105 1.0.007, SC9205 1.0.007, SC9705 1.0.007, SR7110 1.0.007, SR9210 1.0.007, SR9750 1.0.007, SR9850 1.0.007

TimeTools SC7105 1.0.007, SC9205 1.0.007, SC9705 1.0.007, SR7110 1.0.007, SR9210 1.0.007, SR9750 1.0.007, SR9850 1.0.007

In Mailu before version 1.7, an authenticated user can exploit a vulnerability in Mailu fetchmail script and gain full a

LinuxKI v6.0-1 and earlier is vulnerable to an remote code execution which is resolved in release 6.0-2.

LinuxKI v6.0-1 and earlier is vulnerable to an XSS which is resolved in release 6.0-2.

Digi International ConnectPort LTS 32 MEI, Firmware Version 1.4.3 (82002228_K 08/09/2018), bios Version 1.2. Multiple cr

matestack-ui-core (RubyGem) before 0.7.4 is vulnerable to XSS/Script injection. This vulnerability is patched in version

A remotely exploitable information disclosure vulnerability is present in Aruba Intelligent Edge Switch models 5400, 381

A potential security vulnerability has been identified with certain versions of HP System Event Utility prior to version

An exploitable information disclosure vulnerability exists in the 'Secret Chats' functionality of Rakuten Viber on Andro

Digi International ConnectPort LTS 32 MEI, Firmware Version 1.4.3 (82002228_K 08/09/2018), bios Version 1.2. Successful

Insufficient Cross-Site Request Forgery (XSRF) protection on Expedition Migration Tool allows remote unauthenticated att

A denial-of-service (DoS) vulnerability in Palo Alto Networks GlobalProtect software running on Mac OS allows authentica

Missing XML validation vulnerability in the PAN-OS web interface on Palo Alto Networks PAN-OS software allows authentica

irc_mode_channel_update in plugins/irc/irc-mode.c in WeeChat through 2.7 allows remote attackers to cause a denial of se

A Cross-Site Scripting (XSS) vulnerability exists in Tiki Wiki CMG Groupware 11.0 via the id paraZeroClipboard.swf, whic

A Code Execution vulnerability exists in select.py when using python-mode 2012-12-19.

A Denial of Service (infinite loop) vulnerability exists in Avira AntiVir Engine before 8.2.12.58 via an unspecified fun

TinyBrowser plugin for Joomla! before 1.5.13 allows arbitrary file upload via upload.php.

Cloud Foundry CredHub, versions prior to 2.5.10, connects to a MySQL database without TLS even when configured to use TL

Tiny browser in TinyMCE 3.0 editor in Joomla! before 1.5.13 allows file upload and arbitrary PHP code execution.

The AUEPLauncher service in Radeon AMD User Experience Program Launcher through 1.0.0.1 on Windows allows elevation of p

SAP NetWeaver (Knowledge Management ICE Service), versions 7.30, 7.31, 7.40, 7.50, allows an unauthenticated attacker to

SAP Landscape Management, version 3.0, allows an attacker with admin privileges to execute malicious commands with root

SAP Landscape Management, version 3.0, allows an attacker with admin privileges to execute malicious executables with ro

Certain vulnerable endpoints in SAP NetWeaver AS Java (Heap Dump Application), versions 7.30, 7.31, 7.40, 7.50, provide

Certain settings page(s) in SAP Business Objects Business Intelligence Platform (CMC), version 4.2, generates error mess

VAT Pro-Rata reports in SAP ERP (SAP_APPL versions 600, 602, 603, 604, 605, 606, 616 and SAP_FIN versions 617, 618, 700,