2020

An OS Command Injection vulnerability in the PAN-OS web management interface allows authenticated administrators to exec

An OS Command Injection vulnerability in PAN-OS management server allows authenticated administrators to execute arbitra

A buffer overflow vulnerability in the authd component of the PAN-OS management server allows authenticated administrato

A malicious guest compromised before a container creation (e.g. a malicious guest image or a guest running multiple cont

In addListener of RegionSamplingThread.cpp, there is a possible out of bounds write due to improper input validation. Th

In verifyIntentFiltersIfNeeded of PackageManagerService.java, there is a possible settings bypass allowing an app to bec

In onCreateSliceProvider of KeyguardSliceProvider.java, there is a possible confused deputy due to a PendingIntent error

A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.0 (All versions <

A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.0 (All versions <

mosc through 1.0.0 is vulnerable to Arbitrary Code Execution. User input provided to `properties` argument is executed b

goliath through 1.0.6 allows request smuggling attacks where goliath is used as a backend and a frontend proxy also bein

agoo prior to 2.14.0 allows request smuggling attacks where agoo is used as a backend and a frontend proxy also being vu

Missing permission check on fork relation creation in GitLab CE/EE 11.3 and later through 13.0.1 allows guest users to c

SAP Solution Manager (Problem Context Manager), version 7.2, does not perform the necessary authentication, allowing an

Statutory Reporting for Insurance Companies in SAP ERP (EA-FINSERV versions - 600, 603, 604, 605, 606, 616, 617, 618, 80

SAP Commerce, versions - 6.7, 1808, 1811, 1905, may allow an attacker to access information under certain conditions whi

Certain IBM Aspera applications are vulnerable to buffer overflow after valid authentication, which could allow an attac

Certain IBM Aspera applications are vulnerable to arbitrary memory corruption based on the product configuration, which

Certain IBM Aspera applications are vulnerable to buffer overflow based on the product configuration and valid authentic

Certain IBM Aspera applications are vulnerable to a stack-based buffer overflow, caused by improper bounds checking. Thi

Certain IBM Aspera applications are vulnerable to command injection after valid authentication, which could allow an att

Privilege Escalation vulnerability during daily DAT updates when using McAfee Virus Scan Enterprise (VSE) prior to 8.8 P

Privilege Escalation vulnerability in Microsoft Windows client (McTray.exe) in McAfee VirusScan Enterprise (VSE) 8.8 pri

Privilege escalation vulnerability in McAfee Total Protection (ToPS) for Mac OS prior to 4.6 allows local users to gain

The J2Store plugin before 3.3.13 for Joomla! allows a SQL injection attack by a trusted store manager.

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windo

An elevation of privilege (user to user) vulnerability exists in Windows Security Health Service when handling certain o

A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in me

An elevation of privilege vulnerability exists when Group Policy improperly checks access, aka 'Group Policy Elevation o

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka '

An elevation of privilege vulnerability exists in Windows Text Service Framework (TSF) when the TSF server fails to prop

An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file oper

An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain

An elevation of privilege vulnerability exists when Component Object Model (COM) client uses special case IIDs, aka 'Com

An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory.To exploit thi

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka '

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windo

An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in m

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windo

An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 (SMBv1) server handl

A remote code execution vulnerability exists when Microsoft Windows fails to properly handle cabinet files.To exploit th

A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file

An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privilege

An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles fi

An elevation of privilege vulnerability exists in OpenSSH for Windows when it does not properly restrict access to confi

An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects i

An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka

A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths.An attacker wh