Archive
14 January 2020
Vulnerabilities first published on this day (UTC), newest first.
107 results · Feed
-
Medium 6.5
phpBB allows CSRF
phpBB 3.2.8 allows a CSRF attack that can approve pending group memberships.
-
Medium 4.3
phpBB Cross-Site Request Forgery (CSRF)
phpBB 3.2.8 allows a CSRF attack that can modify a group avatar.
-
Unscored —
A security feature bypass vulnerability exists in Microsoft OneDrive App for Android.This could allow an attacker to by…
-
Unscored —
A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a spec…
-
Unscored —CVE-2020-0653 EPSS 22%
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obj…
-
Unscored —CVE-2020-0652 EPSS 18%
A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle ob…
-
Unscored —CVE-2020-0650 EPSS 18%
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obj…
-
Unscored —
A spoofing vulnerability exists when Office Online does not validate origin in cross-origin communications correctly, a…
-
Unscored —CVE-2020-0651 EPSS 18%
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obj…
-
Critical 9.8
A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.…
KEV Nov 3, 2021 -
Unscored —
An elevation of privilege vulnerability exists when Microsoft Windows implements predictable memory section names, aka …
-
Unscored —
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…
-
Unscored —
An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface Plus (GDI+) handle…
-
Unscored —
An elevation of privilege vulnerability exists in Windows Media Service that allows file creation in arbitrary location…
-
Unscored —
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Interne…
-
Unscored —
An information disclosure vulnerability exists when Remote Desktop Web Access improperly handles credential information…
-
Unscored —
An information disclosure vulnerability exists in the Windows Common Log File System (CLFS) driver when it fails to pro…
-
High 7.8CVE-2020-0638 Exploited · Ransomware
An elevation of privilege vulnerability exists in the way the Update Notification Manager handles files.To exploit this…
KEV May 23, 2022 -
Unscored —
An elevation of privilege vulnerability exists in Microsoft Windows when Windows fails to properly handle certain symbo…
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Windows Subsystem for Linux handles files, aka 'Wind…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles…
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, ak…
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, ak…
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, ak…
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, ak…
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, ak…
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, ak…
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, ak…
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, ak…
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, ak…
-
Unscored —CVE-2020-0624 Public exploit
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, ak…
-
Unscored —
An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects…
-
Unscored —
An elevation of privilege vulnerability exists when Microsoft Cryptographic Services improperly handles files, aka 'Mic…
-
Unscored —
A security feature bypass vulnerability exists in Windows 10 when third party filters are called during a password upda…
-
Unscored —
A denial of service vulnerability exists when Microsoft Hyper-V Virtual PCI on a host server fails to properly validate…
-
Unscored —
An information disclosure vulnerability exists in the Windows Common Log File System (CLFS) driver when it fails to pro…
-
Unscored —
A denial of service vulnerability exists when Windows improperly handles hard links, aka 'Microsoft Windows Denial of S…
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, ak…
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, ak…