Archive
March 2020
Vulnerabilities first published in this month (UTC), newest first.
1,762 results · Feed
-
Unscored —
An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, lead…
-
Low 3.9
Exposure of Sensitive Information to an Unauthorized Actor in Ansible
A flaw was found in Ansible 2.7.16 and prior, 2.8.8 and prior, and 2.9.5 and prior when a password is set with the argument "password" of svn module, it is used on svn command line, disclosing to other users within the same node. An attacker could take advant…
-
Unscored —
Improper access control in Intel(R) Graphics Drivers before version 26.20.100.7212 may allow an authenticated user to p…
-
Unscored —
Improper conditions check in Intel(R) Graphics Drivers before versions 15.33.49.5100, 15.36.38.5117, 15.40.44.5107, 15.…
-
Unscored —
Improper access control in on-card storage for the Intel® FPGA Programmable Acceleration Card N3000, all versions, may …
-
Unscored —
Improper access control in PCIe function for the Intel® FPGA Programmable Acceleration Card N3000, all versions, may al…
-
Unscored —
Buffer overflow in Intel(R) Graphics Drivers before version 26.20.100.6912 may allow an authenticated user to potential…
-
Unscored —
Improper access control in Intel(R) Graphics Drivers before version 26.20.100.6912 may allow an authenticated user to p…
-
Unscored —
Buffer overflow in Intel(R) Graphics Drivers before versions 15.40.44.5107, 15.45.30.5103, and 26.20.100.7158 may allow…
-
Unscored —
Improper initialization in Intel(R) Graphics Drivers before versions 15.40.44.5107, 15.45.29.5077, and 26.20.100.7000 m…
-
Unscored —
Unquoted service path in Intel(R) Graphics Drivers before versions 15.33.49.5100, 15.36.38.5117, 15.40.44.5107, 15.45.3…
-
High 8.3
OpenStack Manila Unprivileged users can retrieve, use and manipulate share networks
OpenStack Manila <7.4.1, >=8.0.0 <8.1.1, and >=9.0.0 <9.1.1 allows attackers to view, update, delete, or share resources that do not belong to them, because of a context-free lookup of a UUID. Attackers may also create resources, such as shared file systems a…
-
Unscored —CVE-2020-0905 EPSS 11%
An remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Re…
-
Medium 5.4
A cross-site-scripting (XSS) vulnerability exists when Microsoft Exchange Server does not properly sanitize a specially…
-
Unscored —
An elevation of privilege vulnerability exists in Service Fabric File Store Service under certain conditions, aka 'Serv…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations,…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory…
-
Medium 5.4
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…
-
Unscored —
An elevation of privilege vulnerability exists when Windows improperly handles hard links, aka 'Windows Hard Link Eleva…
-
Unscored —CVE-2020-0892 EPSS 12%
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in mem…
-
Medium 5.4
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…
-
Unscored —
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its …
-
Unscored —CVE-2020-0887 Public exploit
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…
-
Medium 5.4
This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affect…
-
Unscored —
A spoofing vulnerability exists in Microsoft Visual Studio as it includes a reply URL that is not secured by SSL, aka '…
-
Unscored —CVE-2020-0883 EPSS 22%
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles object…
-
Unscored —CVE-2020-0881 EPSS 17%
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles object…
-
Unscored —
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its …
-
Unscored —
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its …
-
Unscored —
An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles obje…
-
Unscored —
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'W…
-
Unscored —
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…
-
Unscored —
An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles obje…
-
Unscored —CVE-2020-0872 EPSS 10%
A remote code execution vulnerability exists in Application Inspector version v1.0.23 or earlier when the tool reflects…
-
Unscored —
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media…
-
Unscored —
An information disclosure vulnerability exists when Windows Network Connections Service fails to properly handle object…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file ope…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file ope…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations,…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations,…