Archive

14 January 2020

Vulnerabilities first published on this day (UTC), newest first.

← December 2019 2020 / January /14 February 2020 →

All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

Critical 9.8

CVE-2020-0646 Exploited Public exploit EPSS 99%

A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.…

Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 Microsoft .NET Framework 3.5.1 Windows

Jan 14, 2020
KEV Nov 3, 2021
Unscored —

CVE-2020-0624 Public exploit

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Jan 14, 2020
Unscored —

CVE-2020-0609 Public exploit EPSS 78%

A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated att…

Microsoft Windows Server Windows

Jan 14, 2020
Unscored —

CVE-2020-0610 Public exploit EPSS 68%

A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated att…

Microsoft Windows Server Windows

Jan 14, 2020
High 8.1

CVE-2020-0601 Exploited Public exploit EPSS 89%

Certificate validation bypass on Windows in crypto/x509

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making …

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows Alpine Go

Jan 14, 2020
KEV Nov 3, 2021
High 7.0

CVE-2019-16784 Public exploit

Local Privilege Escalation present only on the Windows version of PyInstaller

In PyInstaller before version 3.6, only on Windows, a local privilege escalation vulnerability is present in this particular case: If a software using PyInstaller in "onefile" mode is launched by a privileged user (at least more than the current one) which ha…

PyInstaller PyInstaller pyinstaller PyPI

Jan 14, 2020
Unscored —

CVE-2020-5509 Public exploit

PHPGurukul Car Rental Project v1.0 allows Remote Code Execution via an executable file in an upload of a new profile im…

Jan 14, 2020
Unscored —

CVE-2013-7185 Public exploit

PotPlayer 1.5.40688: .avi File Memory Corruption

Jan 14, 2020