2020

An XSS issue was discovered in TreasuryXpress 19191105. Due to the lack of filtering and sanitization of user input, mal

In TreasuryXpress 19191105, a logged-in user can discover saved credentials, even though the UI hides them. Using functi

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R670

Silicon Labs Bluetooth Low Energy SDK before 2.13.3 has a buffer overflow via packet data. This is an over-the-air denia

In auth0-lock versions before and including 11.25.1, dangerouslySetInnerHTML is used to update the DOM. When dangerously

A cross-site scripting (XSS) vulnerability in i-doit 1.14.2 allows remote attackers to inject arbitrary web script or HT

When uploading a file in Sysax Multi Server 6.90, an authenticated user can modify the filename="" parameter in the uplo

Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.3

Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.3

Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.3

Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.3

Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.3

IBM Planning Analytics 2.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By

A vulnerability exsists in IBM Planning Analytics 2.0 whereby avatars in Planning Analytics Workspace could be modified

IBM Spectrum Scale for IBM Elastic Storage Server 5.3.0 through 5.3.6 could allow an authenticated user to cause a denia

Dell Encryption versions prior to 10.8 and Dell Endpoint Security Suite versions prior to 2.8 contain a privilege escala

Rocket.Chat through 3.4.2 allows XSS where an attacker can send a specially crafted message to a channel or in a direct

The TIBCO Data Virtualization Server component of TIBCO Software Inc.'s TIBCO Data Virtualization and TIBCO Data Virtual

In Elasticsearch before 7.9.0 and 6.8.12 a field disclosure flaw was found when running a scrolling search with Field Le

A flaw was found in Ovirt Engine's web interface in ovirt 4.4 and earlier, where it did not filter user-controllable par

Reflected Cross Site Scripting in Teradici PCoIP Management Console prior to 20.07 could allow an attacker to take over

In Play Framework 2.6.0 through 2.8.1, the CSRF filter can be bypassed by making CORS simple requests with content types

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a speci

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speciall

An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve informatio

A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory.

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speciall

A remote code execution vulnerability exists in the way that the MSHTML engine improperly validates input. An attacker c

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An at

An information disclosure vulnerability exists when the win32k component improperly provides kernel information. An atta

An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in memo

An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory. An a

An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory. An a

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requ

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requ

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requ

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory. An

An information disclosure vulnerability exists when attaching files to Outlook messages. This vulnerability could potent

An information disclosure vulnerability exists when the Windows Image Acquisition (WIA) Service improperly discloses con

A remote code execution vulnerability exists in Microsoft Outlook when the software fails to properly handle objects in

An elevation of privilege vulnerability exists when ASP.NET or .NET web applications running on IIS improperly allow acc

An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connect

A denial of service vulnerability exists when Microsoft SQL Server Management Studio (SSMS) improperly handles files. An

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An at

An information disclosure vulnerability exists in RPC if the server has Routing and Remote Access enabled. An attacker w

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker

Multiple vulnerabilities in the user interface of Cisco Webex Meetings Desktop App could allow an authenticated, remote

Multiple vulnerabilities in the user interface of Cisco Webex Meetings Desktop App could allow an authenticated, remote

A vulnerability in the IPv6 implementation of Cisco StarOS could allow an unauthenticated, remote attacker to cause a de

A vulnerability in the contacts feature of Cisco Webex Meetings could allow an authenticated, remote attacker with a leg