2020

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka

An elevation of privilege vulnerability exists when Microsoft Cryptographic Services improperly handles files, aka 'Micr

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka

A denial of service vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an attacker connects to the

A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious se

A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a fi

A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a fi

A remote code execution vulnerability exists in ASP.NET Core software when the software fails to handle objects in memor

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

MmsValue_decodeMmsData in mms/iso_mms/server/mms_access_result.c in libIEC61850 through 1.4.0 has a heap-based buffer ov

In the Linux kernel 4.14 longterm through 4.14.165 and 4.19 longterm through 4.19.96 (and 5.x before 5.2), there is a us

A vulnerability was found in Symantec Norton Download Manager versions prior to 5.6. A remote user can create a speciall

A Cross Site Request Forgery (CSRF) vulnerability exists in the administrator functions in WebsiteBaker 2.8.1 and earlie

An Arbitrary File Upload vulnerability exists in admin/media/upload.php in WebsiteBaker 2.8.1 and earlier due to a failu

In PyInstaller before version 3.6, only on Windows, a local privilege escalation vulnerability is present in this partic

PHPGurukul Car Rental Project v1.0 allows Remote Code Execution via an executable file in an upload of a new profile ima

Viscosity 1.8.2 on Windows and macOS allows an unprivileged user to set a subset of OpenVPN parameters, which can be use

The IEC870IP driver for AVEVA’s Vijeo Citect and Citect SCADA and Schneider Electric’s Power SCADA Operation has a buffe

Improper input validation in SAP NetWeaver Internet Communication Manager (update provided in KRNL32NUC & KRNL32UC 7.21,

Norton Power Eraser, prior to 5.3.0.67, may be susceptible to a privilege escalation vulnerability, which is a type of i

The abrt-action-install-debuginfo-to-abrt-cache help program in Automatic Bug Reporting Tool (ABRT) does not properly ha

Directory traversal vulnerability in abrt-dbus in Automatic Bug Reporting Tool (ABRT) allows local users to read, write

abrt-dbus in Automatic Bug Reporting Tool (ABRT) allows local users to delete or change the ownership of arbitrary files

The default event handling scripts in Automatic Bug Reporting Tool (ABRT) allow local users to gain privileges as demons

Undisclosed traffic patterns received may cause a disruption of service to the Traffic Management Microkernel (TMM). Thi

ABB CP651 HMI products revision BSP UN30 v1.76 and prior implement hidden administrative accounts that are used during t

The compile_branch function in PCRE before 8.37 allows context-dependent attackers to compile incorrect code, cause a de

BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via a crafted email address.

cn.wps.moffice.common.beans.print.CloudPrintWebView in Kingsoft Office 5.3.1, as used in Huawei P2 devices before V100R0

XML external entity (XXE) vulnerability in Open-Xchange (OX) AppSuite before 7.4.2-rev11 and 7.6.x before 7.6.0-rev9 all

Innovative Interfaces Sierra Library Services Platform 1.2_3 does not properly handle query strings with multiple instan

Integer overflow in the get_len function in libavutil/lzo.c in FFmpeg before 0.10.14, 1.1.x before 1.1.12, 1.2.x before

Integer overflow in the get_len function in libavutil/lzo.c in Libav before 0.8.13, 9.x before 9.14, and 10.x before 10.

When Connect workers in Apache Kafka 2.0.0, 2.0.1, 2.1.0, 2.1.1, 2.2.0, 2.2.1, or 2.3.0 are configured with one or more

PotPlayer 1.5.40688: .avi File Memory Corruption

Nitro PDF 8.5.0.26: A specially crafted DLL file can facilitate Arbitrary Code Execution

Cerberus FTP Server Enterprise Edition prior to versions 11.0.3 and 10.0.18 allows an authenticated attacker to create f

A file-extension filtering vulnerability in Proofpoint Enterprise Protection (PPS / PoD), in the unpatched versions of P

A Privilege Escalation vulnerability exists in the unquoted Service Binary in SDPAgent or SDBAgent in Safend Data Protec

A Privilege Escalation vulnerability exists in the SDBagent service in Safend Data Protector Agent 3.4.5586.9772, which

A privilege escalation issue was discovered in the postUser function in HashBrown CMS through 1.3.3. An editor user can

PySAML2 before 5.0.0 does not check that the signature in a SAML document is enveloped and thus signature wrapping is ef