2020

Vulnerability in the Hyperion Financial Reporting product of Oracle Hyperion (component: Web Based Report Designer). The

Vulnerability in the Java SE product of Oracle Java SE (component: Advanced Management Console). The supported version t

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions that

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions that

Vulnerability in the Oracle Solaris product of Oracle Systems (component: SMF command svcbundle). The supported version

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that ar

Vulnerability in the RDBMS/Optimizer component of Oracle Database Server. Supported versions that are affected are 12.1.

Privilege escalation vulnerability in the administrative user interface in McAfee Endpoint Security (ENS) for Windows pr

Istio through 1.5.1 and Envoy through 1.14.1 have a data-leak issue. If there is a TCP connection (negotiated with SNI o

fr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Directory Traversal during extraction because it lack

vulnerability within the Multimedia Viewer feature of Cisco Webex Meetings could allow an authenticated, remote attacker

Cisco Webex Business Suite before 39.1.0 contains a vulnerability that could allow an unauthenticated, remote attacker t

Periscope BuySpeed version 14.5 is vulnerable to stored cross-site scripting, which could allow a local, authenticated a

Tendermint before versions 0.33.3, 0.32.10, and 0.31.12 has a denial-of-service vulnerability. Tendermint does not limit

An information exposure vulnerability in the logging component of Palo Alto Networks Global Protect Agent allows a local

An issue was discovered on Samsung mobile devices with M(6.0), N(7.x), and O(8.x) software. There is a Clipboard content

An issue was discovered on Samsung mobile devices with M(6.x) (Exynos or Qualcomm chipsets) software. There is informati

An issue was discovered on Samsung mobile devices with N(7.x) and O(8.0) (Galaxy S9+, Galaxy S9, Galaxy S8+, Galaxy S8,

An issue was discovered on Samsung mobile devices with O(8.x) software. There is clipboard Data Exposure via the Emergen

An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (Exynos 9810 chipsets) software. There is infor

An issue was discovered on Samsung mobile devices with Q(10.0) software. Information about application preview (in the S

An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. Google Assistant leaks clipboard con

IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could expose sensitive information fr

An issue was discovered on Samsung mobile devices with N(7.x) software. An attacker can disable the Location service on

An issue was discovered on Samsung mobile devices with M(6.0) software. In the Shade Locked state, a physically proximat

ViewVC before versions 1.1.28 and 1.2.1 has a XSS vulnerability in CVS show_subdir_lastmod support. The impact of this v

ABB eSOMS versions 4.0 to 6.0.3 use ASP.NET Viewstate without Message Authentication Code (MAC). Alterations to Viewstat

For ABB eSOMS versions 4.0 to 6.0.2, the Secure Flag is not set in the HTTP response header. Unencrypted connections mig

Zoom Client for Meetings through 4.6.8 on macOS has the disable-library-validation entitlement, which allows a local pro

The issue was resolved by clearing application previews when content is deleted. This issue is fixed in iOS 13.4 and iPa

This issue was addressed with a new entitlement. This issue is fixed in macOS Catalina 10.15.4. A malicious application

The issue was addressed with improved handling of icon caches. This issue is fixed in iOS 14.0 and iPadOS 14.0. A malici

A race condition was addressed with additional validation. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, S

A logic issue was addressed with improved state management. This issue is fixed in iOS 13.4 and iPadOS 13.4, watchOS 6.2

A vulnerability was found in all pki-core 10.x.x version, where the Token Processing Service (TPS) did not properly sani

Versiant LYNX Customer Service Portal (CSP), version 3.5.2, is vulnerable to stored cross-site scripting, which could al

An issue was discovered in Proofpoint Email Protection through 2019-09-08. By collecting scores from Proofpoint email he

In Symfony before versions 4.4.7 and 5.0.7, when a `Response` does not contain a `Content-Type` header, affected version

Support bundle generated files could contain sensitive information that might be unwanted to be disclosed. This issue af

In the login screens (in agent and customer interface), Username and Password fields use autocomplete, which might be co

An issue was discovered on Samsung mobile devices with N(7.1) and O(8.x) (Exynos chipsets) software. The ion debugfs dri

An issue was discovered on Samsung mobile devices with N(7.1), O(8.x), and P(9.0) software. Gallery has uninitialized me

An issue was discovered on Samsung mobile devices with O(8.x) software. Bixby leaks the keyboard's learned words, and th

An issue was discovered on Samsung mobile devices with P(9.0) software. Quick Panel allows enabling or disabling the Blu

An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software. Gallery allows attackers to

An issue was discovered on Samsung mobile devices with P(9.0) software. Gallery allows viewing of photos on the lock scr

An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. Attackers can view notifications by

An issue was discovered on Samsung mobile devices with P(9.0) software. Attackers can view home-screen wallpaper by adju