2020

SAP NetWeaver AS Java, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, Start Page allows an unauthenticated remote

Cross-site request forgery (CSRF) vulnerability in Live Chat - Live support version 3.1.0 and earlier allows remote atta

In BlueZ before 5.55, a double free was found in the gatttool disconnect_cb() routine from shared/att.c. A remote attack

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated Right Hemisphere Binary (.rh) file recei

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated Right Computer Graphics Metafile (.cgm)

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated Jupiter Tessallation(.jt) file received

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PDF file received from untrusted sources

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PDF file received from untrusted sources

User enumeration vulnerability can be exploited to get a list of user accounts and personal user information can be expo

SAP Business Planning and Consolidation, versions - 750, 751, 752, 753, 754, 755, 810, 100, 200, can be abused by an att

SAP Solution Manager and SAP Focused Run (update provided in WILY_INTRO_ENTERPRISE 9.7, 10.1, 10.5, 10.7), allows an att

SAP Commerce Cloud, versions - 1808, 1811, 1905, 2005, exposes several web applications that maintain sessions with a us

SAP NetWeaver Enterprise Portal (Fiori Framework Page) versions - 7.50, 7.31, 7.40, does not sufficiently encode user-co

SAP NetWeaver Application Server Java, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, and 7.50 allows an unauthenticated

SAP Commerce Cloud versions - 1808, 1811, 1905, 2005, does not sufficiently encode user inputs, which allows an authenti

An authentication bypass vulnerability was reported in Lenovo ThinkPad Stack Wireless Router firmware version 1.1.3.4 th

An internal security review has identified an unauthenticated remote code execution vulnerability in Cloud Networking Op

A DLL search path vulnerability was reported in the Lenovo HardwareScan Plugin for the Lenovo Vantage hardware scan feat

A DLL search path vulnerability was reported in Lenovo Diagnostics prior to version 4.35.4 that could allow a user with

A potential vulnerability in the SMI callback function used in the legacy BIOS mode USB drivers in some legacy Lenovo an

A SQL Injection issue in Rapid7 Nexpose version prior to 6.6.49 that may have allowed an authenticated user with a low p

Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator (ePO) prior to 5.10.9 Update 9 allows administrators t

Cross-Site Scripting vulnerability in McAfee ePolicy Orchistrator (ePO) prior to 5.10.9 Update 9 allows administrators t

Duo has identified and fixed an issue with the Duo Network Gateway (DNG) product in which some customer-provided SSL cer

The Windows Logon installer prior to 4.1.2 did not properly validate file installation paths. This allows an attacker wi

Versions of Grocy <= 2.7.1 are vulnerable to Cross-Site Scripting via the Create Shopping List module, that is rendered

Singularity (an open source container platform) from version 3.1.1 through 3.6.3 has a vulnerability. Due to insecure ha

In Open Enclave before version 0.12.0, an information disclosure vulnerability exists when an enclave application using

IBM Security Access Manager Appliance 9.0.7 does not invalidate session after logout which could allow an authenticated

Trend Micro Antivirus for Mac 2020 (Consumer) contains a vulnerability in the product that occurs when a webserver is st

Telegram Desktop through 2.4.3 does not require passcode entry upon pushing the Export key within the Export Telegram Da

Trend Micro Antivirus for Mac 2020 (Consumer) has a vulnerability in a specific kernel extension where an attacker could

Trend Micro Antivirus for Mac 2020 (Consumer) is vulnerable to a specific kernel extension request attack where an attac

Cross-site scripting (XSS) vulnerability in the search functionality in Intrexx before 9.4.0 allows remote attackers to

Adobe Flash Player version 32.0.0.433 (and earlier) are affected by an exploitable NULL pointer dereference vulnerabilit

An improper input validation vulnerability in the UEM Core of BlackBerry UEM version(s) 12.13.0, 12.12.1a QF2 (and earli

In binder_release_work of binder.c, there is a possible use-after-free due to improper locking. This could lead to local

In constructImportFailureNotification of NotificationImportExportListener.java, there is a possible permissions bypass d

In appendFormatV of String8.cpp, there is a possible out of bounds write due to incorrect error handling. This could lea

In setUpdatableDriverPath of GpuService.cpp, there is a possible memory corruption due to a missing permission check. Th

In generateInfo of PackageInstallerSession.java, there is a possible leak of cross-profile URI data during app installat

In multiple settings screens, there are possible tapjacking attacks due to an insecure default value. This could lead to

In various locations in SystemUI, there is a possible permission bypass due to an unsafe PendingIntent. This could lead

In AudioFlinger::RecordThread::threadLoop of audioflinger/Threads.cpp, there is a possible non-silenced audio buffer due

In gatt_process_read_by_type_rsp of gatt_cl.cc, there is a possible out of bounds read due to a missing bounds check. Th

In setProcessMemoryTrimLevel of ActivityManagerService.java, there is a missing permission check. This could lead to loc

In ~AACExtractor() of AACExtractor.cpp, there is a possible out of bounds write due to uninitialized data. This could le

In setNotification of SapServer.java, there is a possible permission bypass due to a PendingIntent error. This could lea

In remove of String16.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local

In showDataRoamingNotification of NotificationMgr.java, there is a possible permission bypass due to an unsafe PendingIn