2020

Azure Sphere Elevation of Privilege Vulnerability

Microsoft SharePoint Information Disclosure Vulnerability

Azure Sphere Unsigned Code Execution Vulnerability

An Ubuntu-specific modification to AccountsService in versions before 0.6.55-0ubuntu13.2, among other earlier versions,

An Ubuntu-specific modification to AccountsService in versions before 0.6.55-0ubuntu13.2, among other earlier versions,

Remote Code Execution can occur via the external news feed in ILIAS 6.4 because of incorrect parameter sanitization for

An XSS issue exists in the question-pool file-upload preview feature in ILIAS 6.4.

The server in Dundas BI through 8.0.0.1001 allows XSS via addition of a Component (e.g., a button) when events such as c

The server in Dundas BI through 8.0.0.1001 allows XSS via an HTML label when creating or editing a dashboard.

Incorrect file permissions in BlueStacks 4 through 4.230 on Windows allow a local attacker to escalate privileges by mod

The Canto plugin 1.3.0 for WordPress allows includes/lib/download.php?subdomain= SSRF.

Ilex International Sign&go Workstation Security Suite 7.1 allows elevation of privileges via a symlink attack on Program

Subrion CMS 4.2.1 has CSRF in panel/modules/plugins/. The attacker can remotely activate/deactivate the plugins.

Xen through 4.14.x allows guest OS administrators to obtain sensitive information (such as AES keys from outside the gue

A vulnerability in the TCL Android Smart TV series V8-R851T02-LF1 V295 and below and V8-T658T01-LF1 V373 and below by TC

A vulnerability in the TCL Android Smart TV series V8-R851T02-LF1 V295 and below and V8-T658T01-LF1 V373 and below by TC

The Core component of TIBCO Software Inc.'s TIBCO iProcess Workspace (Browser) contains a vulnerability that theoretical

SAP ERP and SAP S/4 HANA allows an authenticated user to see cost records to objects to which he has no authorization in

SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to compromise the system because o

SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to compromise the system because o

SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to compromise the system because o

SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to compromise the system because o

SAP NetWeaver AS JAVA, versions - 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker who is authenticated as an administra

SAP NetWeaver AS ABAP (Web Dynpro), versions - 731, 740, 750, 751, 752, 753, 754, 755, 782, allows an authenticated user

SAP NetWeaver AS ABAP (Web Dynpro), versions - 731, 740, 750, 751, 752, 753, 754, 755, 782, allows an authenticated user

SAP 3D Visual Enterprise Viewer, version - 9, allows an user to open manipulated HPGL file received from untrusted sourc

SAP Fiori Launchpad (News tile Application), versions - 750,751,752,753,754,755, allows an unauthorized attacker to send

SAP Process Integration (PGP Module - Business-to-Business Add On), version - 1.0, allows an attacker to read PGP Keys u

SAP Commerce Cloud (Accelerator Payment Mock), versions - 1808, 1811, 1905, 2005, allows an unauthenticated attacker to

SAP Commerce Cloud (Accelerator Payment Mock), versions - 1808, 1811, 1905, 2005, allows an unauthenticated attacker to

SAP Commerce Cloud, versions- 1808,1811,1905,2005, allows an attacker to bypass existing authentication and permission c

SAP AS ABAP(DMIS), versions - 2011_1_620, 2011_1_640, 2011_1_700, 2011_1_710, 2011_1_730, 2011_1_731, 2011_1_752, 2020 a

SAP ERP Client for E-Bilanz, version - 1.0, installation sets Incorrect default filesystem permissions are set in its in

The cache action in action/cache.py in MoinMoin through 1.9.10 allows directory traversal through a crafted HTTP request

This affects all versions of package json-ptr. The issue occurs in the set operation (https://flitbit.github.io/json-ptr

Prototype pollution vulnerability in '@strikeentco/set' version 1.0.0 allows attacker to cause a denial of service and m

The previous default setting for Airflow's Experimental API was to allow all API requests without authentication, but th

The frame touch module does not make validity judgments on parameter lengths when processing specific parameters,which c

Dell Inspiron 15 7579 2-in-1 BIOS versions prior to 1.31.0 contain an Improper SMM communication buffer verification vul

IBM Content Navigator 3.0CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Ja

IBM Content Navigator 3.0CD is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbit

IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, and 4.0 stores user credentials in plain in clear text which can be read by

A10 Networks ACOS and aGalaxy management Graphical User Interfaces (GUIs) have an unauthenticated Remote Code Execution

In callCallbackForRequest of ConnectivityService.java, there is a possible permission bypass due to a missing permission

In updateNotification of BeamTransferManager.java, there is a possible permission bypass due to an unsafe PendingIntent.

In exif_entry_get_value of exif-entry.c, there is a possible out of bounds write due to an integer overflow. This could

In sbrDecoder_AssignQmfChannels2SbrChannels of sbrdecoder.cpp, there is a possible out of bounds write due to a heap buf

In rw_i93_sm_format of rw_i93.cc, there is a possible out of bounds read due to uninitialized data. This could lead to r

In btm_sec_disconnected of btm_sec.cc, there is a possible memory corruption due to a use after free. This could lead to

In getPhoneAccountsForPackage of TelecomServiceImpl.java, there is a possible way to access a tracking identifier due to