2020

Yii 2 (yiisoft/yii2) before version 2.0.38 is vulnerable to remote code execution if the application calls `unserialize(

A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow may

A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow may

A flaw was found in xorg-x11-server before 1.20.9. An integer underflow in the X input extension protocol decoding in th

The ScratchSig extension for MediaWiki before version 1.0.1 allows stored Cross-Site Scripting. Using <script> tag insid

In PrestaShop contactform module (prestashop/contactform) before version 4.3.0, an attacker is able to inject JavaScript

A race condition vulnerability was reported in Lenovo System Update prior to version 5.07.0106 that could allow escalati

IBM Spectrum Protect Plus 10.1.0 through 10.1.6 Administrative Console could allow an authenticated attacker to upload a

IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow a remote authenticated attacker to execute arbitrary code on the

Spiceworks Version <= 7.5.00107 is affected by CSRF which can lead to privilege escalation via "/settings/v1/users" func

It is possible for an unauthenticated remote DCOM websocket connection to crash the Command Centre service due to an out

It is possible for an unauthenticated remote DCOM websocket connection to crash the Command Centre service's DCOM websoc

On controllers running versions of v8.20 prior to vCR8.20.200221b (distributed in v8.20.1093(MR2)), v8.10 prior to vGR8.

A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Out-Of-Bounds access in XkbSetNames function may lead

A Sensitive Source Code Path Disclosure vulnerability is found in ElkarBackup v1.3.3. An attacker is able to view the pa

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. Due to improper verification of per

A vulnerability in the Private Internet Access (PIA) VPN Client for Linux 1.5 through 2.3+ allows remote attackers to by

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. Conan package upload functionality

An array index error in MikroTik RouterOS 6.41.3 through 6.46.5, and 7.x through 7.0 Beta5, allows an unauthenticated re

A CSRF issue in vtecrm vtenext 19 CE allows attackers to carry out unwanted actions on an administrator's behalf, such a

A file upload vulnerability in vtecrm vtenext 19 CE allows authenticated users to upload files with a .pht extension, re

An issue was discovered in the http crate before 0.1.20 for Rust. An integer overflow in HeaderMap::reserve() could resu

Logic error in BIOS firmware for 8th, 9th and 10th Generation Intel(R) Core(TM) Processors may allow an unauthenticated

GitLab CE/EE version 13.3 prior to 13.3.4 was vulnerable to an OAuth authorization scope change without user consent in

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. The revocation feature was not revo

Uncontrolled search path in the QT Library before 5.14.0, 5.12.7 and 5.9.10 may allow an authenticated user to potential

An access permission override in Apache Struts 2.0.0 to 2.5.20 may cause a Denial of Service when performing a file uplo

Wordpress Plugin Store / Mike Rooijackers Recall Products V0.8 fails to sanitize input from the 'Manufacturer[]' paramet

Dataiku DSS before 6.0.5 allows attackers write access to the project to modify the "Created by" metadata.

The Secure Monitor in Microchip Atmel ATSAMA5 products use a hardcoded key to encrypt and authenticate secure applets.

CMAC verification functionality in Microchip Atmel ATSAMA5 products is vulnerable to vulnerable to timing and power anal

Microchip Atmel ATSAMA5 products in Secure Mode allow an attacker to bypass existing security mechanisms related to appl

ThinkAdmin v6 is affected by a directory traversal vulnerability. An unauthorized attacker can read arbitrarily file on

GdiDrawHoriLineIAlt in Kingsoft WPS Office before 11.2.0.9403 allows remote heap corruption via a crafted PLTE chunk in

Pligg 2.0.3 allows remote authenticated users to execute arbitrary commands because the template editor can edit any fil

An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 software. Applications with sen

ArGo Soft Mail Server 1.8.8.9 is affected by Cross Site Request Forgery (CSRF) for perform remote arbitrary code executi

An integer overflow vulnerability leading to a double-free was found in libX11. This flaw allows a local privileged atta

<p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle o

<p>A remote code execution vulnerability exists when Windows Media Audio Decoder improperly handles objects. An attacker

<p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source mark

<p>An elevation of privilege vulnerability exists when the Windows Storage Services improperly handle file operations. A

<p>An elevation of privilege vulnerability exists when the Windows InstallService improperly handles memory.</p> <p>To e

<p>A tampering vulnerability exists when Microsoft SharePoint Server fails to properly handle profile data. An attacker

<p>A remote code execution vulnerability exists when Windows Media Audio Decoder improperly handles objects. An attacker

<p>An elevation of privilege vulnerability exists in the way that Microsoft COM for Windows handles objects in memory. A

<p>An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects

<p>An elevation of privilege vulnerability exists when Microsoft Windows CloudExperienceHost fails to check COM objects.

<p>A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and fi

<p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source mark