Archive
June 2020
Vulnerabilities first published in this month (UTC), newest first.
1,813 results · Feed
-
Unscored —
An elevation of privilege vulnerability exists in Windows Defender that leads arbitrary file deletion on the system.To …
-
Unscored —
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web req…
-
Unscored —
An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects…
-
Unscored —
An elevation of privilege (user to user) vulnerability exists in Windows Security Health Service when handling certain …
-
High 8.1
ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'.
-
Unscored —
A denial of service vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file …
-
High 7.8
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka …
KEV Nov 3, 2021 -
Unscored —
An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles obje…
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles obje…
-
Unscored —
In FreeBSD 12.1-STABLE before r361918, 12.1-RELEASE before p6, 11.4-STABLE before r361919, 11.3-RELEASE before p10, and…
-
Unscored —
Royal TS before 5 has a 0.0.0.0 listener, which makes it easier for attackers to bypass tunnel authentication via a bru…
-
Unscored —
The Bluetooth Low Energy implementation in Cypress PSoC Creator BLE 4.2 component versions before 3.64 generates a rand…
-
Critical 9.8
SAP Commerce, versions - 6.7, 1808, 1811, 1905, and SAP Commerce (Data Hub), versions - 6.7, 1808, 1811, 1905, allows a…
-
Unscored —
Your Online Shop 1.8.0 allows authenticated users to trigger XSS via a Change Name or Change Surname operation.
-
Unscored —
The affected product is vulnerable to the handling of serialized data. The issue results from the lack of proper valida…
-
Unscored —
The affected product lacks proper validation of user-supplied data, which can result in deserialization of untrusted da…
-
Unscored —
The SportsPress plugin before 2.7.2 for WordPress allows XSS.
-
Unscored —
The affected product lacks proper authentication required to query the server on the Ignition 8 Gateway (versions prior…
-
Critical 10.0
TIBCO Managed File Transfer Platform Server for IBM i Arbitrary Command Execution
The file transfer component of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for IBM i contains a vulnerability that theoretically allows execution of arbitrary commands at the privilege level of the affected system following a failed file…
-
Critical 10.0
TIBCO Managed File Transfer Platform Server for IBM i Authentication Bypass
The file transfer component of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for IBM i contains a vulnerability that theoretically allows an attacker to perform unauthorized network file transfers to and from the file system accessible to …
-
Unscored —
AnyDesk before 5.5.3 on Linux and FreeBSD has a format string vulnerability that can be exploited for remote code execu…
-
Unscored —
An integer overflow was addressed through improved input validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, m…
-
Unscored —
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, w…
-
Unscored —CVE-2020-9856 Public exploit
This issue was addressed with improved checks. This issue is fixed in macOS Catalina 10.15.5. An application may be abl…
-
Unscored —
An input validation issue was addressed with improved input validation. This issue is fixed in iOS 13.5 and iPadOS 13.5…
-
Unscored —
A dynamic library loading issue was addressed with improved path searching. This issue is fixed in Windows Migration As…
-
Unscored —
An authorization issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5. A…
-
Unscored —
A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. …
-
Unscored —
An access issue was addressed with improved access restrictions. This issue is fixed in macOS Catalina 10.15.5. A malic…
-
Unscored —
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.5. A mal…
-
Unscored —
An integer overflow was addressed through improved input validation. This issue is fixed in macOS Catalina 10.15.5. An …
-
Unscored —
A double free issue was addressed with improved memory management. This issue is fixed in iOS 13.5 and iPadOS 13.5, mac…
-
Unscored —
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5. A r…
-
Unscored —
An entitlement parsing issue was addressed with improved parsing. This issue is fixed in iOS 13.5 and iPadOS 13.5, macO…
-
Unscored —
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, mac…
-
Unscored —CVE-2020-9839 Public exploit
A race condition was addressed with improved state handling. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Cat…
-
Unscored —
An issue existed in the pausing of FaceTime video. The issue was resolved with improved logic. This issue is fixed in i…
-
Unscored —
A memory initialization issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.…
-
Unscored —
A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvO…
-
Unscored —
A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.5. …