2020

A vulnerability has been identified in SIMATIC Automation Tool (All versions < V4 SP2), SIMATIC NET PC Software V14 (All

An insecure-credentials flaw was found in all openstack-cinder versions before openstack-cinder 14.1.0, all openstack-ci

A Stored Cross-Site Scripting vulnerability allowed the execution of arbitrary Javascript code in the blobs API in all p

A Reflected Cross-Site Scripting vulnerability allowed the execution of arbitrary Javascript code on the Static Site Edi

A specially crafted request could be used to confirm the existence of files hosted on object storage services, without d

A Stored Cross-Site Scripting vulnerability allowed the execution on Javascript payloads on the Metrics Dashboard in Git

SAP NetWeaver AS ABAP (Banking Services), versions - 710, 711, 740, 750, 751, 752, 75A, 75B, 75C, 75D, 75E, does not per

Under certain conditions SAP Business Objects Business Intelligence Platform, version 4.2, allows an attacker to access

SAP Fiori for SAP S/4HANA, versions - 100, 200, 300, 400, allows an attacker to redirect users to a malicious site due t

SAP Solution Manager (Trace Analysis), version 7.20, allows an attacker to inject superflous data that can be displayed

SAP NetWeaver AS ABAP Business Server Pages Test Application SBSPEXT_TABLE, versions 700, 701, 702, 730, 731, 740, 750,

Under certain conditions SAP Business One (Backup service), versions 9.3, 10.0, allows an attacker with admin permission

DLL Search Order Hijacking Vulnerability in the installer component of McAfee Host Intrusion Prevention System (Host IPS

Privilege Escalation vulnerability in Microsoft Windows client (McTray.exe) in McAfee VirusScan Enterprise (VSE) 8.8 pri

DLL Search Order Hijacking vulnerability in McAfee Agent (MA) prior to 5.6.4 allows attackers with local access to execu

An unquoted search path vulnerability was reported in versions prior to 1.0.83.0 of the Synaptics Smart Audio UWP app as

Lenovo implemented Intel CSME Anti-rollback ARB protections on some ThinkPad models to prevent roll back of CSME Firmwar

The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T495s, X395, T495, A485, A285, A475, A275 which

A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStatio

A potential vulnerability in the SMI callback function used in the Legacy USB driver in some Lenovo Notebook and ThinkSt

A potential vulnerability in the SMI callback function used in the System Lock Preinstallation driver in some Lenovo Not

An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege.

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its m

An information disclosure vulnerability exists in Visual Studio Code Live Share Extension when it exposes tokens in plai

A spoofing vulnerability exists when the NuGetGallery does not properly sanitize input on package metadata values, aka '

A spoofing vulnerability exists when System Center Operations Manager (SCOM) does not properly sanitize a specially craf

A spoofing vulnerability exists when Microsoft Bing Search for Android improperly handles specific HTML content, aka 'Mi

A spoofing vulnerability exists in Microsoft Azure DevOps Server when it fails to properly handle web requests, aka 'Azu

An open redirect vulnerability exists in Microsoft SharePoint that could lead to spoofing.To exploit the vulnerability,

An information disclosure vulnerability exists when Microsoft Project reads out of bound memory due to an uninitialized

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speciall

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speciall

An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory, aka 'Interne

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle o

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speciall

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speciall

A vulnerability exists in the way the Windows Diagnostics &amp; feedback settings app handles objects in memory, aka 'Wi

An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Wi

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requ

A denial of service vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handl

A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Servi

An information disclosure vulnerability exists when a Windows service improperly handles objects in memory, aka 'Windows

An information disclosure vulnerability exists in the way Windows Error Reporting (WER) handles objects in memory, aka '

An information disclosure vulnerability exists in the way Windows Error Reporting (WER) handles objects in memory, aka '

A security feature bypass vulnerability exists when Windows Host Guardian Service improperly handles hashes recorded and

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle o

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle o

An information disclosure vulnerability exists in the way that Microsoft Edge handles cross-origin requests, aka 'Micros

An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Fo