2020

A remote code execution vulnerability exists in the way Microsoft SharePoint software parses specially crafted email mes

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requ

A spoofing vulnerability exists when an Office Web Apps server does not properly sanitize a specially crafted request, a

An elevation of privilege vulnerability exists in the way that the Windows Sync Host Service handles objects in memory,

An information disclosure vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka

An information disclosure vulnerability exists when Skype for Business is accessed via Internet Explorer, aka 'Skype for

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Window

An information disclosure vulnerability exists when Windows Error Reporting improperly handles file operations.To exploi

An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, ak

An elevation of privilege vulnerability exists when Windows Lockscreen fails to properly handle Ease of Access dialog.An

An information disclosure vulnerability exists in Windows when the Windows Imaging Component fails to properly handle ob

An information disclosure vulnerability exists when the Windows Agent Activation Runtime (AarSvc) fails to properly hand

An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, ak

An information vulnerability exists when Windows Connected User Experiences and Telemetry Service improperly discloses f

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Window

An information disclosure vulnerability exists in the way that the WalletService handles memory.To exploit the vulnerabi

An information disclosure vulnerability exists when the Windows Resource Policy component improperly handles memory.To e

An information disclosure vulnerability exists when the Windows Graphics component improperly handles objects in memory,

An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninit

An elevation of privilege vulnerability exists when Group Policy Services Policy Processing improperly handle reparse po

An information disclosure vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handle

A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided inpu

This security update corrects a denial of service in the Local Security Authority Subsystem Service (LSASS) caused when

In Envoy before versions 1.12.6, 1.13.4, 1.14.4, and 1.15.0 when validating TLS certificates, Envoy would incorrectly al

In iPear, the manual execution of the eval() function can lead to command injection. Only PCs where commands are manuall

Dell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM and SCVMM versions prior to 7.2.1 contain

An issue was discovered in Verint Impact 360 15.1. At wfo/control/signin, the rd parameter can accept a URL, to which us

An issue was discovered in Verint Impact 360 15.1. At wfo/help/help_popup.jsp, the helpURL parameter can be changed to e

RosarioSIS through 6.8-beta allows modules/Custom/NotifyParents.php XSS because of the href attributes for AddStudents.p

A vulnerability has been identified in SIMATIC HMI Basic Panels 1st Generation (incl. SIPLUS variants) (All versions), S

A vulnerability has been identified in Opcenter Execution Discrete (All versions < V3.2), Opcenter Execution Foundation

A vulnerability has been identified in Opcenter Execution Discrete (All versions < V3.2), Opcenter Execution Foundation

A vulnerability has been identified in Camstar Enterprise Platform (All versions), Opcenter Execution Core (All versions

In Dogtag PKI through 10.8.3, the pki.client.PKIConnection class did not enable python-requests certificate validation.

libldap in certain third-party OpenLDAP packages has a certificate-validation flaw when the third-party package is asser

A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions

A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions

A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions

SAP Disclosure Management, version 10.1, is vulnerable to Session Fixation attacks wherein the attacker tricks the user

The insufficient input path validation of certain parameter in the web service of SAP NetWeaver AS JAVA (LM Configuratio

SAP NetWeaver - XML Toolkit for JAVA (ENGINEAPI) (versions- 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50), under certain con

SAP NetWeaver AS JAVA (IIOP service) (SERVERCORE), versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, and SAP NetWeaver

SAP Business Objects Business Intelligence Platform (BI Launchpad), version 4.2, does not sufficiently encode user-contr

SAP Business Objects Business Intelligence Platform (BI Launchpad and CMC), versions 4.1, 4.2, allows to an attacker to

SAP Business Objects Business Intelligence Platform (bipodata), version 4.2, does not sufficiently encode user-controlle

Some sensitive cookies in SAP Disclosure Management, version 10.1, are missing HttpOnly flag, leading to sensitive cooki

IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Ja

IBM QRadar SIEM 7.3 and 7.4 could allow an authenticated user to cause a denial of service of the qflow process by sendi

IBM QRadar SIEM 7.3 and 7.4 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A r

IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Ja