745 matches found
CVE-2020-17010
Win32k Elevation of Privilege Vulnerability...
Oracle Java SE Security Update (cpuoct2020 - 02) - Windows
Oracle Java SE is prone to a remote security vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-9964
A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 14.0 and iPadOS 14.0. A local user may be able to read kernel memory...
CVE-2020-15488
Re:Desk 2.3 allows insecure file upload...
CVE-2020-7815
XPLATFORM v9.2.260 and eariler versions contain a vulnerability that could allow remote files to be downloaded by setting the arguments to the vulnerable method. this can be leveraged for code execution. File download vulnerability in COMPONENT of TOBESOFT XPLATFORM allows ATTACKER/ATTACK to caus...
CVE-2020-11912
The Treck TCP/IP stack before 6.0.1.66 has a TCP Out-of-bounds Read...
CVE-2020-9634
Adobe Framemaker versions 2019.0.5 and below have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution...
CVE-2020-13854
Artica Pandora FMS 7.44 allows privilege escalation...
CVE-2020-6264
SAP Commerce, versions - 6.7, 1808, 1811, 1905, may allow an attacker to access information under certain conditions which would otherwise be restricted, leading to Information Disclosure...
CVE-2018-21236
An issue was discovered in Foxit Reader before 2.4.4. It has a NULL pointer dereference...
UBUNTU-CVE-2020-10936
Sympa before 6.2.56 allows privilege escalation...
CVE-2020-12720
vBulletin before 5.5.6pl1, 5.6.0 before 5.6.0pl1, and 5.6.1 before 5.6.1pl1 has incorrect access control...
CVE-2019-19219
BMC Control-M/Agent 7.0.00.000 allows Arbitrary File Download...
CVE-2019-16717
OX App Suite through 7.10.2 has XSS...
CVE-2019-0168
Insufficient input validation in the subsystem for IntelR CSME before versions 11.8.70, 12.0.45 and 13.0.10; IntelR TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable information disclosure via local access...
CVE-2019-19248
Electronic Arts Origin through 10.5.x allows Elevation of Privilege issue 2 of 2...
CVE-2019-12734
SiteVision 4 has Incorrect Access Control...
The vulnerability of the library component (.dll) of the Advantech WebAccess monitoring software allows a perpetrator to delete any file they desire.
The vulnerability of the library component .dll of the Advantech WebAccess monitoring software exists due to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor to delete any file remotely...
CVE-2019-1436
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1440...