Archive
February 2020
Vulnerabilities first published in this month (UTC), newest first.
1,406 results · Feed
-
Unscored —
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet…
-
High 7.5
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet…
KEV Nov 3, 2021 -
Unscored —
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka …
-
Unscored —
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka …
-
Unscored —
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka …
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windo…
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windo…
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, ak…
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, ak…
-
Unscored —CVE-2020-0665 Public exploit
An elevation of privilege vulnerability exists in Active Directory Forest trusts due to a default setting that lets an …
-
Unscored —
An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, whi…
-
Unscored —
A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target syste…
-
Unscored —
A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from …
-
Unscored —CVE-2020-0662 EPSS 13%
A remote code execution vulnerability exists in the way that Windows handles objects in memory, aka 'Windows Remote Cod…
-
Unscored —
An information disclosure vulnerability exists in the Windows Common Log File System (CLFS) driver when it fails to pro…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles…
-
Unscored —CVE-2020-0655 EPSS 66%
A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – whe…
-
Critical 9.8
A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles pag…
KEV Sep 18, 2024 -
High 7.5
Insertion of Sensitive Information into Log File in Apache NiFi
In Apache NiFi 0.0.1 to 1.11.0, the flow fingerprint factory generated flow fingerprints which included sensitive property descriptor values. In the event a node attempted to join a cluster and the cluster flow was not inheritable, the flow fingerprint of bot…
-
Critical 9.8
An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll JPEG SOFx parser of the Accusoft ImageGear…
-
Critical 9.8
An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll TIFF tifread parser of the Accusoft ImageG…
-
Critical 9.8
An exploitable out-of-bounds write vulnerability exists in the uncompress_scan_line function of the igcore19d.dll libra…
-
Critical 9.8
An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll JPEG jpegread precision parser of the Accu…
-
Critical 9.8
An exploitable out-of-bounds write vulnerability exists in the uncompress_scan_line function of the igcore19d.dll libra…
-
Critical 9.8
An exploitable out-of-bounds write vulnerability exists in the bmp_parsing function of the igcore19d.dll library of Acc…
-
Unscored —
The RESTful Web Services (restws) module 7.x-1.x before 7.x-1.4 and 7.x-2.x before 7.x-2.1 for Drupal does not properly…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Ariadne 2.7.6 allow remote attackers to inject arbitrary web scr…
-
Unscored —CVE-2012-1124 Public exploit
SQL injection vulnerability in search.php in phxEventManager 2.0 beta 5 allows remote attackers to execute arbitrary SQ…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in SocialEngine before 4.2.4 allow remote attackers to inject arbit…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in the (1) Forum, (2) Event, and (3) Classifieds plugins in …
-
Medium 5.9
Podman has Files or Directories Accessible to External Parties
A flaw was discovered in Podman where it incorrectly allows containers when created to overwrite existing files in volumes, even if they are mounted as read-only. When a user runs a malicious container or a container based on a malicious image with an attache…
-
High 7.7
An out-of-bounds heap buffer access flaw was found in the way the iSCSI Block driver in QEMU versions 2.12.0 before 4.2…
-
Unscored —CVE-2012-2452 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in pragmaMx 1.x before 1.12.2 allow remote attackers to inject arbi…
-
Unscored —
The KRandom::random function in KDE Paste Applet after 4.10.5 in kdeplasma-addons uses the GNU C Library rand function'…
-
Unscored —CVE-2012-2517 Public exploit
Cross-site scripting (XSS) vulnerability in PrestaShop before 1.4.9 allows remote attackers to inject arbitrary web scr…
-
Unscored —
The %{password(...)} macro in pastemacroexpander.cpp in the KDE Paste Applet before 4.10.5 in kdeplasma-addons does not…
-
Unscored —
Cross-site scripting (XSS) vulnerability in MyBB before 1.6.13 allows remote authenticated users to inject arbitrary we…
-
Unscored —CVE-2013-5582 Public exploit
Ammyy Admin 3.2 and earlier stores the client ID at a fixed memory location, which might make it easier for user-assist…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the MyBB (aka MyBulletinBoard) before 1.8.4 allow remote authent…