2020

A remote urlaccesscontroller authentication bypass vulnerability was discovered in HPE Intelligent Management Center (iM

GoPro gpmf-parser 1.5 has a division-by-zero vulnerability in GPMF_ScaledData(). Parsing malicious input can result in a

GoPro gpmf-parser 1.5 has a division-by-zero vulnerability in GPMF_Decompress(). Parsing malicious input can result in a

GoPro gpmf-parser 1.5 has a heap out-of-bounds read and segfault in GPMF_ScaledData(). Parsing malicious input can resul

GoPro gpmf-parser through 1.5 has a stack out-of-bounds write vulnerability in GPMF_ExpandComplexTYPE(). Parsing malicio

AuthRestServlet in Matrix Synapse before 1.21.0 is vulnerable to XSS due to unsafe interpolation of the session GET para

An issue was discovered in tcpreplay tcpprep v4.3.3. There is a heap buffer overflow vulnerability in get_l2len() that c

An issue was discovered in tcpreplay tcpprep v4.3.3. There is a heap buffer overflow vulnerability in MemcmpInterceptorC

A mis-handling of invalid unicode characters in the Java implementation of Tink versions prior to 1.5 allows an attacker

SolarWinds N-Central version 12.3 GA and lower does not set the JSESSIONID attribute to HTTPOnly. This makes it possible

SolarWinds N-central through 2020.1 allows session hijacking and requires user interaction or physical access. The N-Cen

rConfig 3.9.4 and earlier allows authenticated code execution (of system commands) by sending a forged GET request to li

This affects the package MintegralAdSDK before 6.6.0.0. The SDK distributed by the company contains malicious functional

Multiple stored cross-site scripting (XSS) vulnerabilities in Sage EasyPay 10.7.5.10 allow authenticated attackers to in

TAXII libtaxii through 1.1.117, as used in EclecticIQ OpenTAXII through 0.2.0 and other products, allows SSRF via an ini

<p>A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific

<p>A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory.

<p>An elevation of privilege vulnerability exists when Windows Hyper-V on a host server fails to properly handle objects

<p>An elevation of privilege vulnerability exists when Windows Hyper-V on a host server fails to properly handle objects

<p>A remote code execution vulnerability exists in Visual Studio Code when a user is tricked into opening a malicious 'p

<p>A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memo

<p>A remote code execution vulnerability exists when the Base3D rendering engine improperly handles memory.</p> <p>An at

<p>An elevation of privilege vulnerability exists in Network Watcher Agent virtual machine extension for Linux. An attac

<p>An elevation of privilege vulnerability exists when the Windows iSCSI Target Service improperly handles file operatio

<p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a sp

<p>A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads a Jupyter notebook

<p>An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.</p

<p>An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.</p

<p>An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.</p

<p>An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.</p

<p>An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.</p

<p>An information disclosure vulnerability exists in how Microsoft Exchange validates tokens when handling certain messa

<p>A remote code execution vulnerability exists when the Windows Camera Codec Pack improperly handles objects in memory.

<p>A remote code execution vulnerability exists when the Windows Camera Codec Pack improperly handles objects in memory.

<p>A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles

<p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a sp

<p>An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run (C2R) AppVLP handles cer

<p>A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle

<p>An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in m

<p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source mark

<p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source mark

<p>An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in m

<p>A denial of service vulnerability exists in Microsoft Outlook software when the software fails to properly handle obj

<p>An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in m

<p>A remote code execution vulnerability exists in Microsoft Outlook software when the software fails to properly handle

<p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speci

<p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speci

<p>This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affe

<p>An elevation of privilege vulnerability exists in Microsoft Dynamics 365 Commerce. An unauthenticated attacker who su

<p>An information disclosure vulnerability exists when Microsoft SharePoint Server improperly discloses its folder struc