Archive
11 February 2020
Vulnerabilities first published on this day (UTC), newest first.
210 results · Feed
-
Unscored —
An issue was discovered in MISP before 2.4.121. It mishandled time skew (between the machine hosting the web server and…
-
Unscored —
An issue was discovered in MISP before 2.4.121. It did not canonicalize usernames when trying to block a brute-force se…
-
Unscored —
An issue was discovered in MISP before 2.4.121. It did not consider the HTTP PUT method when trying to block a brute-fo…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory…
-
High 7.5CVE-2020-0767 EPSS 18%
ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0673, CVE-2020-0674, CVE-2020-0710, CVE-2020-07…
-
Unscored —CVE-2020-0759 EPSS 15%
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obj…
-
Unscored —
An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to prope…
-
Unscored —
An elevation of privilege vulnerability exists when Windows improperly handles Secure Socket Shell remote commands, aka…
-
Unscored —
An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, ak…
-
Unscored —CVE-2020-0753 Public exploit
An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, ak…
-
Unscored —
An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to prope…
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, ak…
-
Unscored —
A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific ma…
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects i…
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects i…
-
Unscored —
An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to prope…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations…
-
Unscored —
An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, …
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory…
-
Unscored —
An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles obje…
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects i…
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects i…
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects i…
-
Unscored —
An elevation of privilege vulnerability exists in the way that the dssvc.dll handles file creation allowing for a file …
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects i…
-
Unscored —
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windo…
-
Unscored —
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media…
-
Unscored —
An elevation of privilege vulnerability exists in the way that the tapisrv.dll handles objects in memory, aka 'Windows …
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, ak…
-
Unscored —CVE-2020-0734 EPSS 17%
A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious s…
-
Unscored —
An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevatio…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Malicious Software Removal Tool (MSRT) improperly handl…
-
Unscored —
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) improperly handles symli…
-
Unscored —CVE-2020-0728 Public exploit
An information vulnerability exists when Windows Modules Installer Service improperly discloses file information, aka '…
-
Unscored —CVE-2020-0729 EPSS 31%
A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file…
-
Unscored —
An elevation of privilege vulnerability exists when the Connected User Experiences and Telemetry Service improperly han…
-
Unscored —
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…
-
Unscored —
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…
-
Unscored —
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…