Archive
9 June 2020
Vulnerabilities first published on this day (UTC), newest first.
222 results · Feed
-
Unscored —CVE-2020-13996 Public exploit
The J2Store plugin before 3.3.13 for Joomla! allows a SQL injection attack by a trusted store manager.
-
Unscored —
An unquoted search path vulnerability was reported in versions prior to 1.0.83.0 of the Synaptics Smart Audio UWP app a…
-
Medium 6.1
The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T495s, X395, T495, A485, A285, A475, A275 whic…
-
Medium 6.4
Lenovo implemented Intel CSME Anti-rollback ARB protections on some ThinkPad models to prevent roll back of CSME Firmwa…
-
Medium 6.4
A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStati…
-
Medium 6.4
A potential vulnerability in the SMI callback function used in the System Lock Preinstallation driver in some Lenovo No…
-
Medium 6.4
A potential vulnerability in the SMI callback function used in the Legacy USB driver in some Lenovo Notebook and ThinkS…
-
Medium 6.4
An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege.
-
Medium 6.7
A symbolic link vulnerability in some Lenovo installation packages, prior to version 1.2.9.3, could allow privileged fi…
-
Medium 6.7
A DLL search path vulnerability could allow privilege escalation in some Lenovo installation packages, prior to version…
-
Unscored —
A spoofing vulnerability exists when the NuGetGallery does not properly sanitize input on package metadata values, aka …
-
Unscored —
An information disclosure vulnerability exists in Visual Studio Code Live Share Extension when it exposes tokens in pla…
-
Unscored —
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its …
-
Unscored —
A spoofing vulnerability exists when System Center Operations Manager (SCOM) does not properly sanitize a specially cra…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Wind…
-
Unscored —
A spoofing vulnerability exists when Microsoft Bing Search for Android improperly handles specific HTML content, aka 'M…
-
Unscored —
A spoofing vulnerability exists in Microsoft Azure DevOps Server when it fails to properly handle web requests, aka 'Az…
-
Unscored —
An elevation of privilege (user to user) vulnerability exists in Windows Security Health Service when handling certain …
-
Unscored —
An open redirect vulnerability exists in Microsoft SharePoint that could lead to spoofing.To exploit the vulnerability,…
-
Unscored —CVE-2020-1321 EPSS 12%
A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in m…
-
Unscored —
An information disclosure vulnerability exists when Microsoft Project reads out of bound memory due to an uninitialized…
-
Medium 5.4
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…
-
Medium 5.4
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…
-
Unscored —
An elevation of privilege vulnerability exists when Group Policy improperly checks access, aka 'Group Policy Elevation …
-
Unscored —
An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory, aka 'Intern…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka …
-
Unscored —
An elevation of privilege vulnerability exists in Windows Text Service Framework (TSF) when the TSF server fails to pro…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file ope…
-
Unscored —
An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certai…
-
Unscored —
An elevation of privilege vulnerability exists when Component Object Model (COM) client uses special case IIDs, aka 'Co…
-
Unscored —
An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory.To exploit th…
-
Unscored —
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle …
-
Unscored —
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka …
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Wind…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Wind…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in …
-
Unscored —
An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certai…
-
Unscored —
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 (SMBv1) server hand…
-
Unscored —CVE-2020-1300 EPSS 60%
A remote code execution vulnerability exists when Microsoft Windows fails to properly handle cabinet files.To exploit t…
-
Unscored —CVE-2020-1299 EPSS 15%
A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file…