# CVEs published 2020-03-12

299 CVEs were published on March 12, 2020: 1 critical, 3 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2020-1887](https://cve.now/CVE-2020-1887.md): Incorrect validation of the TLS SNI hostname in osquery versions after 2.9.0 and before 4.2.0 could allow an attacker to MITM osquery… (no CVSS, Facebook Osquery)
- [CVE-2020-8469](https://cve.now/CVE-2020-8469.md): Trend Micro Password Manager for Windows version 5.0 is affected by a DLL hijacking vulnerability would could potentially allow an… (no CVSS, Trend Micro Password Manager for Windows)
- [CVE-2020-10535](https://cve.now/CVE-2020-10535.md): GitLab 12.8.x before 12.8.6, when sign-up is enabled, allows remote attackers to bypass email domain restrictions within the two-day grace… (no CVSS)
- [CVE-2020-7600](https://cve.now/CVE-2020-7600.md): querymen prior to 2.1.4 allows modification of object properties. (no CVSS, querymen)
- [CVE-2020-10534](https://cve.now/CVE-2020-10534.md): In the GlobalBlocking extension before 2020-03-10 for MediaWiki through 1.34.0, an issue related to IP range evaluation resulted in… (no CVSS)
- [CVE-2019-17653](https://cve.now/CVE-2019-17653.md): A Cross-Site Request Forgery (CSRF) vulnerability in the user interface of Fortinet FortiSIEM 5.2.5 could allow a remote, unauthenticated… (no CVSS, Fortinet FortiSIEM)
- [CVE-2020-1863](https://cve.now/CVE-2020-1863.md): Huawei USG6000V with versions V500R001C20SPC300, V500R003C00SPC100, and V500R005C00SPC100 have an out-of-bounds read vulnerability. (no CVSS, Huawei USG6000V)
- [CVE-2020-9064](https://cve.now/CVE-2020-9064.md): Huawei smartphone Honor V30 with versions earlier than OxfordS-AN00A 10.0.1.167(C00E166R4P1) have an improper authentication vulnerability. (no CVSS, Huawei Honor)
- [CVE-2019-12278](https://cve.now/CVE-2019-12278.md): Opera through 53 on Android allows Address Bar Spoofing. (no CVSS)
- [CVE-2019-17658](https://cve.now/CVE-2019-17658.md): An unquoted service path vulnerability in the FortiClient FortiTray component of FortiClientWindows v6.2.2 and prior allow an attacker to… (no CVSS, Fortinet FortiClientWindows)
- [CVE-2020-6643](https://cve.now/CVE-2020-6643.md): An improper neutralization of input vulnerability in the URL Description in Fortinet FortiIsolator version 1.2.2 allows a remote… (no CVSS, Fortinet FortiIsolator)
- [CVE-2019-16156](https://cve.now/CVE-2019-16156.md): An Improper Neutralization of Input vulnerability in the Anomaly Detection Parameter Name in Fortinet FortiWeb 6.0.5, 6.2.0, and 6.1.1 may… (no CVSS, Fortinet FortiWeb)
- [CVE-2020-0583](https://cve.now/CVE-2020-0583.md): Improper access control in the subsystem for Intel(R) Smart Sound Technology may allow an authenticated user to potentially enable… (no CVSS, Intel® Smart Sound Technology)
- [CVE-2020-0551](https://cve.now/CVE-2020-0551.md): Load value injection in some Intel(R) Processors utilizing speculative execution may allow an authenticated user to potentially enable… (no CVSS, Intel(R) Processors Load Value Injection)
- [CVE-2020-0550](https://cve.now/CVE-2020-0550.md): Improper data forwarding in some data cache for some Intel(R) Processors may allow an authenticated user to potentially enable information… (no CVSS, Intel Snoop Assisted L1D Sampling Advisory)
- [CVE-2019-11355](https://cve.now/CVE-2019-11355.md): An issue was discovered in Poly (formerly Polycom) HDX 3.1.13. (no CVSS)
- [CVE-2020-0530](https://cve.now/CVE-2020-0530.md): Improper buffer restrictions in firmware for Intel(R) NUC may allow an authenticated user to potentially enable escalation of privilege… (no CVSS, Intel(R) NUC Firmware)
- [CVE-2019-11343](https://cve.now/CVE-2019-11343.md): Torpedo Query before 2.5.3 mishandles the LIKE operator in ConditionBuilder.java, LikeCondition.java, and NotLikeCondition.java. (no CVSS, org.torpedoquery:org.torpedoquery)
- [CVE-2020-0574](https://cve.now/CVE-2020-0574.md): Improper configuration in block design for Intel(R) MAX(R) 10 FPGA all versions may allow an authenticated user to potentially enable… (no CVSS, Intel(R) MAX(R) 10 FPGA)
- [CVE-2020-0567](https://cve.now/CVE-2020-0567.md): Improper input validation in Intel(R) Graphics Drivers before version 26.20.100.7212 may allow an authenticated user to enable denial of… (no CVSS, Intel(R) Graphics Drivers)
- [CVE-2020-0565](https://cve.now/CVE-2020-0565.md): Uncontrolled search path in Intel(R) Graphics Drivers before version 26.20.100.7158 may allow an authenticated user to potentially enable… (no CVSS, Intel(R) Graphics Drivers)
- [CVE-2020-0556](https://cve.now/CVE-2020-0556.md): Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enable escalation of… (no CVSS, Intel BlueZ)
- [CVE-2020-0546](https://cve.now/CVE-2020-0546.md): Unquoted service path in Intel(R) Optane(TM) DC Persistent Memory Module Management Software before version 1.0.0.3461 may allow an… (no CVSS, Intel® Optane(TM) DC Persistent Memory Module Management So…)
- [CVE-2015-3641](https://cve.now/CVE-2015-3641.md): bitcoind and Bitcoin-Qt prior to 0.10.2 allow attackers to cause a denial of service (disabled functionality such as a client application… (no CVSS)
- [CVE-2018-20586](https://cve.now/CVE-2018-20586.md): bitcoind and Bitcoin-Qt prior to 0.17.1 allow injection of arbitrary data into the debug log via an RPC call. (no CVSS)
- [CVE-2018-19516](https://cve.now/CVE-2018-19516.md): messagepartthemes/default/defaultrenderer.cpp in messagelib in KDE Applications before 18.12.0 does not properly restrict the handling of… (no CVSS)
- [CVE-2018-10704](https://cve.now/CVE-2018-10704.md): yidashi yii2cmf 2.0 has XSS via the /search q parameter. (no CVSS, yidashi/yii2cmf)
- [CVE-2017-18350](https://cve.now/CVE-2017-18350.md): bitcoind and Bitcoin-Qt prior to 0.15.1 have a stack-based buffer overflow if an attacker-controlled SOCKS proxy server is used. (no CVSS)
- [CVE-2020-0526](https://cve.now/CVE-2020-0526.md): Improper input validation in firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege via local… (no CVSS, Intel(R) NUC Firmware)
- [CVE-2020-0520](https://cve.now/CVE-2020-0520.md): Path traversal in igdkmd64.sys for Intel(R) Graphics Drivers before versions 15.45.30.5103, 15.40.44.5107, 15.36.38.5117 and 15.33.49.5100… (no CVSS, Intel(R) Graphics Drivers)
- [CVE-2020-5961](https://cve.now/CVE-2020-5961.md): NVIDIA vGPU graphics driver for guest OS contains a vulnerability in which an incorrect resource clean up on a failure path can impact the… (no CVSS, NVIDIA GPU Display Driver)
- [CVE-2020-5959](https://cve.now/CVE-2020-5959.md): NVIDIA Virtual GPU Manager, all versions, contains a vulnerability in the vGPU plugin in which an input index value is incorrectly… (no CVSS, NVIDIA GPU Display Driver)
- [CVE-2020-5960](https://cve.now/CVE-2020-5960.md): NVIDIA Virtual GPU Manager contains a vulnerability in the kernel module (nvidia.ko), where a null pointer dereference may occur, which… (no CVSS, NVIDIA GPU Display Driver)
- [CVE-2020-0519](https://cve.now/CVE-2020-0519.md): Improper access control for Intel(R) Graphics Drivers before versions 15.33.49.5100 and 15.36.38.5117 may allow an authenticated user to… (no CVSS, Intel(R) Graphics Drivers)
- [CVE-2020-0517](https://cve.now/CVE-2020-0517.md): Out-of-bounds write in Intel(R) Graphics Drivers before version 15.36.38.5117 may allow an authenticated user to potentially enable… (no CVSS, Intel(R) Graphics Drivers)
- [CVE-2020-0516](https://cve.now/CVE-2020-0516.md): Improper access control in Intel(R) Graphics Drivers before version 26.20.100.7463 may allow an authenticated user to potentially enable… (no CVSS, Intel(R) Graphics Drivers)
- [CVE-2020-0515](https://cve.now/CVE-2020-0515.md): Uncontrolled search path element in the installer for Intel(R) Graphics Drivers before versions 26.20.100.7584, 15.45.30.5103… (no CVSS, Intel(R) Graphics Drivers)
- [CVE-2020-0514](https://cve.now/CVE-2020-0514.md): Improper default permissions in the installer for Intel(R) Graphics Drivers before versions 26.20.100.7463 and 15.45.30.5103 may allow an… (no CVSS, Intel(R) Graphics Drivers)
- [CVE-2020-0511](https://cve.now/CVE-2020-0511.md): Uncaught exception in system driver for Intel(R) Graphics Drivers before version 15.40.44.5107 may allow an authenticated user to… (no CVSS, Intel(R) Graphics Drivers)
- [CVE-2020-0508](https://cve.now/CVE-2020-0508.md): Incorrect default permissions in the installer for Intel(R) Graphics Drivers before versions 15.33.49.5100, 15.36.38.5117, 15.40.44.5107… (no CVSS, Intel(R) Graphics Drivers)
- [CVE-2020-10532](https://cve.now/CVE-2020-10532.md): The AD Helper component in WatchGuard Fireware before 5.8.5.10317 allows remote attackers to discover cleartext passwords via the… (no CVSS)
- [CVE-2020-10531](https://cve.now/CVE-2020-10531.md): An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. (no CVSS, node · node-min)
- [CVE-2020-1739](https://cve.now/CVE-2020-1739.md): A flaw was found in Ansible 2.7.16 and prior, 2.8.8 and prior, and 2.9.5 and prior when a password is set with the argument "password" of… (CVSS 3.9, Red Hat Ansible · ansible)
- [CVE-2020-0503](https://cve.now/CVE-2020-0503.md): Improper access control in Intel(R) Graphics Drivers before version 26.20.100.7212 may allow an authenticated user to potentially enable… (no CVSS, Intel(R) Graphics Drivers)
- [CVE-2020-0505](https://cve.now/CVE-2020-0505.md): Improper conditions check in Intel(R) Graphics Drivers before versions 15.33.49.5100, 15.36.38.5117, 15.40.44.5107, 15.45.30.5103, and… (no CVSS, Intel(R) Graphics Drivers)
- [CVE-2019-14625](https://cve.now/CVE-2019-14625.md): Improper access control in on-card storage for the Intel® FPGA Programmable Acceleration Card N3000, all versions, may allow a privileged… (no CVSS, Intel(R) FPGA Programmable Acceleration Card N3000)
- [CVE-2019-14626](https://cve.now/CVE-2019-14626.md): Improper access control in PCIe function for the Intel® FPGA Programmable Acceleration Card N3000, all versions, may allow a privileged… (no CVSS, Intel(R) FPGA Programmable Acceleration Card N3000)
- [CVE-2020-0501](https://cve.now/CVE-2020-0501.md): Buffer overflow in Intel(R) Graphics Drivers before version 26.20.100.6912 may allow an authenticated user to potentially enable a denial… (no CVSS, Intel(R) Graphics Drivers)
- [CVE-2020-0502](https://cve.now/CVE-2020-0502.md): Improper access control in Intel(R) Graphics Drivers before version 26.20.100.6912 may allow an authenticated user to potentially enable… (no CVSS, Intel(R) Graphics Drivers)
- [CVE-2020-0504](https://cve.now/CVE-2020-0504.md): Buffer overflow in Intel(R) Graphics Drivers before versions 15.40.44.5107, 15.45.30.5103, and 26.20.100.7158 may allow an authenticated… (no CVSS, Intel(R) Graphics Drivers)
- [CVE-2020-0506](https://cve.now/CVE-2020-0506.md): Improper initialization in Intel(R) Graphics Drivers before versions 15.40.44.5107, 15.45.29.5077, and 26.20.100.7000 may allow a… (no CVSS, Intel(R) Graphics Driver)
- [CVE-2020-0507](https://cve.now/CVE-2020-0507.md): Unquoted service path in Intel(R) Graphics Drivers before versions 15.33.49.5100, 15.36.38.5117, 15.40.44.5107, 15.45.30.5103, and… (no CVSS, Intel(R) Graphics Drivers)
- [CVE-2020-9543](https://cve.now/CVE-2020-9543.md): OpenStack Manila \<7.4.1, \>=8.0.0 \<8.1.1, and \>=9.0.0 \<9.1.1 allows attackers to view, update, delete, or share resources that do not… (no CVSS, manila)
- [CVE-2020-0905](https://cve.now/CVE-2020-0905.md): An remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution… (no CVSS, Microsoft Dynamics NAV · Microsoft Dynamics 365 BC On Pr… +2)
- [CVE-2020-0902](https://cve.now/CVE-2020-0902.md): An elevation of privilege vulnerability exists in Service Fabric File Store Service under certain conditions, aka 'Service Fabric… (no CVSS, Microsoft Service Fabric)
- [CVE-2020-0903](https://cve.now/CVE-2020-0903.md): A cross-site-scripting (XSS) vulnerability exists when Microsoft Exchange Server does not properly sanitize a specially crafted web… (CVSS 5.4, Microsoft Exchange Server 2019 Cumulative Update · Microsof…)
- [CVE-2020-0897](https://cve.now/CVE-2020-0897.md): An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work… (no CVSS, Microsoft Windows)
- [CVE-2020-0898](https://cve.now/CVE-2020-0898.md): An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows… (no CVSS, Microsoft Windows)
- [CVE-2020-0894](https://cve.now/CVE-2020-0894.md): A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web… (CVSS 5.4, Microsoft SharePoint Enterprise Server · Microsoft Share… +1)
- [CVE-2020-0896](https://cve.now/CVE-2020-0896.md): An elevation of privilege vulnerability exists when Windows improperly handles hard links, aka 'Windows Hard Link Elevation of Privilege… (no CVSS, Microsoft Windows)
- [CVE-2020-0892](https://cve.now/CVE-2020-0892.md): A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft… (no CVSS, Microsoft SharePoint Foundation · Microsoft SharePoint E… +3)
- [CVE-2020-0893](https://cve.now/CVE-2020-0893.md): A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web… (CVSS 5.4, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2020-0885](https://cve.now/CVE-2020-0885.md): An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka… (no CVSS, Microsoft Windows)
- [CVE-2020-0887](https://cve.now/CVE-2020-0887.md): An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka… (no CVSS, Microsoft Windows)
- [CVE-2020-0891](https://cve.now/CVE-2020-0891.md): This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint… (CVSS 5.4, Microsoft SharePoint Enterprise Server · Microsoft Share… +1)
- [CVE-2020-0883](https://cve.now/CVE-2020-0883.md): A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory… (no CVSS, Microsoft Windows)
- [CVE-2020-0884](https://cve.now/CVE-2020-0884.md): A spoofing vulnerability exists in Microsoft Visual Studio as it includes a reply URL that is not secured by SSL, aka 'Microsoft Visual… (no CVSS, Microsoft Visual Studio)
- [CVE-2020-0881](https://cve.now/CVE-2020-0881.md): A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory… (no CVSS, Microsoft Windows)
- [CVE-2020-0882](https://cve.now/CVE-2020-0882.md): An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka… (no CVSS, Microsoft Windows)
- [CVE-2020-0879](https://cve.now/CVE-2020-0879.md): An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory… (no CVSS, Microsoft Windows)
- [CVE-2020-0880](https://cve.now/CVE-2020-0880.md): An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka… (no CVSS, Microsoft Windows)
- [CVE-2020-0876](https://cve.now/CVE-2020-0876.md): An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information… (no CVSS, Microsoft Windows)
- [CVE-2020-0877](https://cve.now/CVE-2020-0877.md): An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka… (no CVSS, Microsoft Windows)
- [CVE-2020-0872](https://cve.now/CVE-2020-0872.md): A remote code execution vulnerability exists in Application Inspector version v1.0.23 or earlier when the tool reflects example code… (no CVSS, Microsoft Application Inspector)
- [CVE-2020-0874](https://cve.now/CVE-2020-0874.md): An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory… (no CVSS, Microsoft Windows)
- [CVE-2020-0869](https://cve.now/CVE-2020-0869.md): A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory… (no CVSS, Microsoft Windows)
- [CVE-2020-0871](https://cve.now/CVE-2020-0871.md): An information disclosure vulnerability exists when Windows Network Connections Service fails to properly handle objects in memory, aka… (no CVSS, Microsoft Windows)
- [CVE-2020-0867](https://cve.now/CVE-2020-0867.md): An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file operations, aka… (no CVSS, Microsoft Windows)
- [CVE-2020-0868](https://cve.now/CVE-2020-0868.md): An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file operations, aka… (no CVSS, Microsoft Windows)
- [CVE-2020-0865](https://cve.now/CVE-2020-0865.md): An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work… (no CVSS, Microsoft Windows)
- [CVE-2020-0866](https://cve.now/CVE-2020-0866.md): An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work… (no CVSS, Microsoft Windows)
- [CVE-2020-0863](https://cve.now/CVE-2020-0863.md): An information vulnerability exists when Windows Connected User Experiences and Telemetry Service improperly discloses file information… (no CVSS, Microsoft Windows)
- [CVE-2020-0864](https://cve.now/CVE-2020-0864.md): An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work… (no CVSS, Microsoft Windows)
- [CVE-2020-0860](https://cve.now/CVE-2020-0860.md): An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this… (no CVSS, Microsoft Windows)
- [CVE-2020-0861](https://cve.now/CVE-2020-0861.md): An information disclosure vulnerability exists when the Windows Network Driver Interface Specification (NDIS) improperly handles memory.To… (no CVSS, Microsoft Windows)
- [CVE-2020-0858](https://cve.now/CVE-2020-0858.md): An elevation of privilege vulnerability exists when the &quot;Public Account Pictures&quot; folder improperly handles junctions.To exploit… (no CVSS, Microsoft Windows)
- [CVE-2020-0859](https://cve.now/CVE-2020-0859.md): An information vulnerability exists when Windows Modules Installer Service improperly discloses file information, aka 'Windows Modules… (no CVSS, Microsoft Windows)
- [CVE-2020-0854](https://cve.now/CVE-2020-0854.md): An elevation of privilege vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles junctions, aka… (no CVSS, Microsoft Windows)
- [CVE-2020-0855](https://cve.now/CVE-2020-0855.md): A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft… (no CVSS, Microsoft Office)
- [CVE-2020-0857](https://cve.now/CVE-2020-0857.md): An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search… (no CVSS, Microsoft Windows)
- [CVE-2020-0852](https://cve.now/CVE-2020-0852.md): A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft… (no CVSS, Microsoft SharePoint Server · Microsoft Office)
- [CVE-2020-0853](https://cve.now/CVE-2020-0853.md): An information disclosure vulnerability exists in Windows when the Windows Imaging Component fails to properly handle objects in memory… (no CVSS, Microsoft Windows)
- [CVE-2020-0850](https://cve.now/CVE-2020-0850.md): A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft… (no CVSS, Microsoft SharePoint Enterprise Server · Microsoft Share… +3)
- [CVE-2020-0851](https://cve.now/CVE-2020-0851.md): A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft… (no CVSS, Microsoft Office)
- [CVE-2020-0848](https://cve.now/CVE-2020-0848.md): A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting… (no CVSS, Microsoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +1)
- [CVE-2020-0849](https://cve.now/CVE-2020-0849.md): An elevation of privilege vulnerability exists when Windows improperly handles hard links, aka 'Windows Hard Link Elevation of Privilege… (no CVSS, Microsoft Windows)
- [CVE-2020-0845](https://cve.now/CVE-2020-0845.md): An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka… (no CVSS, Microsoft Windows)
- [CVE-2020-0847](https://cve.now/CVE-2020-0847.md): A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code… (no CVSS, Microsoft Internet Explorer)
- [CVE-2020-0843](https://cve.now/CVE-2020-0843.md): An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem… (no CVSS, Microsoft Windows)
- [CVE-2020-0844](https://cve.now/CVE-2020-0844.md): An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations… (no CVSS, Microsoft Windows)
- [CVE-2020-0841](https://cve.now/CVE-2020-0841.md): An elevation of privilege vulnerability exists when Windows improperly handles hard links, aka 'Windows Hard Link Elevation of Privilege… (no CVSS, Microsoft Windows)
- [CVE-2020-0842](https://cve.now/CVE-2020-0842.md): An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem… (no CVSS, Microsoft Windows)
- [CVE-2020-0834](https://cve.now/CVE-2020-0834.md): An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC).An attacker… (no CVSS, Microsoft Windows)
- [CVE-2020-0840](https://cve.now/CVE-2020-0840.md): An elevation of privilege vulnerability exists when Windows improperly handles hard links, aka 'Windows Hard Link Elevation of Privilege… (no CVSS, Microsoft Windows)
- [CVE-2020-0832](https://cve.now/CVE-2020-0832.md): A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka… (no CVSS, Microsoft Internet Explorer · Microsoft.ChakraCore)
- [CVE-2020-0833](https://cve.now/CVE-2020-0833.md): A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka… (no CVSS, Microsoft Internet Explorer · Microsoft.ChakraCore)
- [CVE-2020-0830](https://cve.now/CVE-2020-0830.md): A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka… (no CVSS, Microsoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +2)
- [CVE-2020-0831](https://cve.now/CVE-2020-0831.md): A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting… (no CVSS, Microsoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +1)
- [CVE-2020-0828](https://cve.now/CVE-2020-0828.md): A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting… (no CVSS, Microsoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +1)
- [CVE-2020-0829](https://cve.now/CVE-2020-0829.md): A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting… (no CVSS, Microsoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +1)
- [CVE-2020-0826](https://cve.now/CVE-2020-0826.md): A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting… (no CVSS, Microsoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +1)
- [CVE-2020-0827](https://cve.now/CVE-2020-0827.md): A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting… (no CVSS, Microsoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +1)
- [CVE-2020-0824](https://cve.now/CVE-2020-0824.md): A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory… (no CVSS, Microsoft Internet Explorer)
- [CVE-2020-0825](https://cve.now/CVE-2020-0825.md): A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting… (no CVSS, Microsoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +1)
- [CVE-2020-0822](https://cve.now/CVE-2020-0822.md): An elevation of privilege vulnerability exists when the Windows Language Pack Installer improperly handles file operations, aka 'Windows… (no CVSS, Microsoft Windows)
- [CVE-2020-0823](https://cve.now/CVE-2020-0823.md): A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting… (no CVSS, Microsoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +1)
- [CVE-2020-0816](https://cve.now/CVE-2020-0816.md): A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory… (no CVSS, Microsoft Edge (EdgeHTML-based) on Windows)
- [CVE-2020-0819](https://cve.now/CVE-2020-0819.md): An elevation of privilege vulnerability exists when the Windows Device Setup Manager improperly handles file operations, aka 'Windows… (no CVSS, Microsoft Windows)
- [CVE-2020-0820](https://cve.now/CVE-2020-0820.md): An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation… (no CVSS, Microsoft Windows)
- [CVE-2020-0814](https://cve.now/CVE-2020-0814.md): An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem… (no CVSS, Microsoft Windows)
- [CVE-2020-0815](https://cve.now/CVE-2020-0815.md): An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle pipeline job… (no CVSS, Microsoft Azure DevOps Server 2019 Update)
- [CVE-2020-0812](https://cve.now/CVE-2020-0812.md): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge… (no CVSS, Microsoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +1)
- [CVE-2020-0813](https://cve.now/CVE-2020-0813.md): An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an… (no CVSS, Microsoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +1)
- [CVE-2020-0810](https://cve.now/CVE-2020-0810.md): An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows… (no CVSS, Microsoft Windows · Microsoft Visual Studio)
- [CVE-2020-0811](https://cve.now/CVE-2020-0811.md): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge… (no CVSS, Microsoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +1)
- [CVE-2020-0808](https://cve.now/CVE-2020-0808.md): An elevation of privilege vulnerability exists in the way the Provisioning Runtime validates certain file operations, aka 'Provisioning… (no CVSS, Microsoft Windows)
- [CVE-2020-0809](https://cve.now/CVE-2020-0809.md): A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory… (no CVSS, Microsoft Windows)
- [CVE-2020-0806](https://cve.now/CVE-2020-0806.md): An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, aka 'Windows Error… (no CVSS, Microsoft Windows)
- [CVE-2020-0807](https://cve.now/CVE-2020-0807.md): A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory… (no CVSS, Microsoft Windows)
- [CVE-2020-0803](https://cve.now/CVE-2020-0803.md): An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka… (no CVSS, Microsoft Windows)
- [CVE-2020-0804](https://cve.now/CVE-2020-0804.md): An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka… (no CVSS, Microsoft Windows)
- [CVE-2020-0801](https://cve.now/CVE-2020-0801.md): A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory… (no CVSS, Microsoft Windows)
- [CVE-2020-0802](https://cve.now/CVE-2020-0802.md): An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka… (no CVSS, Microsoft Windows)
- [CVE-2020-0799](https://cve.now/CVE-2020-0799.md): An elevation of privilege vulnerability exists in Microsoft Windows when the Windows kernel fails to properly handle parsing of certain… (no CVSS, Microsoft Windows)
- [CVE-2020-0800](https://cve.now/CVE-2020-0800.md): An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work… (no CVSS, Microsoft Windows)
- [CVE-2020-0797](https://cve.now/CVE-2020-0797.md): An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work… (no CVSS, Microsoft Windows)
- [CVE-2020-0798](https://cve.now/CVE-2020-0798.md): An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input… (no CVSS, Microsoft Windows)
- [CVE-2020-0795](https://cve.now/CVE-2020-0795.md): This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint… (CVSS 5.4, Microsoft SharePoint Enterprise Server · Microsoft Busin… +1)
- [CVE-2020-0796](https://cve.now/CVE-2020-0796.md): A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain reque (CVSS 10.0, KEV, Microsoft Windows)
- [CVE-2020-0791](https://cve.now/CVE-2020-0791.md): An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows… (no CVSS, Microsoft Windows)
- [CVE-2020-0793](https://cve.now/CVE-2020-0793.md): An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka… (no CVSS, Microsoft Windows · Microsoft Visual Studio)
- [CVE-2020-0787](https://cve.now/CVE-2020-0787.md): An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic l (CVSS 7.8, KEV, Microsoft Windows)
- [CVE-2020-0788](https://cve.now/CVE-2020-0788.md): An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka… (no CVSS, Microsoft Windows)
- [CVE-2020-0789](https://cve.now/CVE-2020-0789.md): A denial of service vulnerability exists when the Visual Studio Extension Installer Service improperly handles hard links, aka 'Visual… (no CVSS, Microsoft Visual Studio)
- [CVE-2020-0785](https://cve.now/CVE-2020-0785.md): An elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) improperly handles symlinks, aka 'Windows… (no CVSS, Microsoft Windows)
- [CVE-2020-0786](https://cve.now/CVE-2020-0786.md): A denial of service vulnerability exists when the Windows Tile Object Service improperly handles hard links, aka 'Windows Tile Object… (no CVSS, Microsoft Windows)
- [CVE-2020-0781](https://cve.now/CVE-2020-0781.md): An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly handles objects in… (no CVSS, Microsoft Windows)
- [CVE-2020-0783](https://cve.now/CVE-2020-0783.md): An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly handles objects in… (no CVSS, Microsoft Windows)
- [CVE-2020-0779](https://cve.now/CVE-2020-0779.md): An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer… (no CVSS, Microsoft Windows)
- [CVE-2020-0780](https://cve.now/CVE-2020-0780.md): An elevation of privilege vulnerability exists in the way that the Windows Network List Service handles objects in memory, aka 'Windows… (no CVSS, Microsoft Windows)
- [CVE-2020-0777](https://cve.now/CVE-2020-0777.md): An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work… (no CVSS, Microsoft Windows)
- [CVE-2020-0778](https://cve.now/CVE-2020-0778.md): An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka… (no CVSS, Microsoft Windows)
- [CVE-2020-0776](https://cve.now/CVE-2020-0776.md): An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles file operations.To exploit this… (no CVSS, Microsoft Windows)
- [CVE-2020-0774](https://cve.now/CVE-2020-0774.md): An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka… (no CVSS, Microsoft Windows)
- [CVE-2020-0775](https://cve.now/CVE-2020-0775.md): An information disclosure vulnerability exists when Windows Error Reporting improperly handles file operations.To exploit this… (no CVSS, Microsoft Windows)
- [CVE-2020-0772](https://cve.now/CVE-2020-0772.md): An elevation of privilege vulnerability exists when Windows Error Reporting improperly handles memory.To exploit this vulnerability, an… (no CVSS, Microsoft Windows)
- [CVE-2020-0773](https://cve.now/CVE-2020-0773.md): An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this… (no CVSS, Microsoft Windows)
- [CVE-2020-0770](https://cve.now/CVE-2020-0770.md): An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this… (no CVSS, Microsoft Windows)
- [CVE-2020-0771](https://cve.now/CVE-2020-0771.md): An elevation of privilege vulnerability exists when the Windows CSC Service improperly handles memory.To exploit this vulnerability, an… (no CVSS, Microsoft Windows)
- [CVE-2020-0768](https://cve.now/CVE-2020-0768.md): A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka… (no CVSS, Microsoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +2)
- [CVE-2020-0769](https://cve.now/CVE-2020-0769.md): An elevation of privilege vulnerability exists when the Windows CSC Service improperly handles memory.To exploit this vulnerability, an… (no CVSS, Microsoft Windows)
- [CVE-2020-0763](https://cve.now/CVE-2020-0763.md): An elevation of privilege vulnerability exists when Windows Defender Security Center handles certain objects in memory.To exploit the… (no CVSS, Microsoft Windows)
- [CVE-2020-0765](https://cve.now/CVE-2020-0765.md): An information disclosure vulnerability exists in the Remote Desktop Connection Manager (RDCMan) application when it improperly parses XML… (no CVSS, Microsoft Remote Desktop Connection Manager)
- [CVE-2020-0758](https://cve.now/CVE-2020-0758.md): An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle pipeline job… (no CVSS, Microsoft Team Foundation Server · Microsoft Azure DevOps S…)
- [CVE-2020-0762](https://cve.now/CVE-2020-0762.md): An elevation of privilege vulnerability exists when Windows Defender Security Center handles certain objects in memory.To exploit the… (no CVSS, Microsoft Windows Server, · Microsoft Windows)
- [CVE-2020-0690](https://cve.now/CVE-2020-0690.md): An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege… (no CVSS, Microsoft Windows)
- [CVE-2020-0700](https://cve.now/CVE-2020-0700.md): A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure… (no CVSS, Microsoft Azure DevOps Server · Microsoft Team Foundation S…)
- [CVE-2020-0645](https://cve.now/CVE-2020-0645.md): A tampering vulnerability exists when Microsoft IIS Server improperly handles malformed request headers, aka 'Microsoft IIS Server… (no CVSS, Microsoft Windows)
- [CVE-2020-0684](https://cve.now/CVE-2020-0684.md): A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An… (no CVSS, Microsoft Windows)
- [CVE-2020-6858](https://cve.now/CVE-2020-6858.md): Hotels Styx through 1.0.0.beta8 allows HTTP response splitting due to CRLF Injection. (no CVSS, com.hotels.styx:styx-api)
- [CVE-2020-8435](https://cve.now/CVE-2020-8435.md): An issue was discovered in the RegistrationMagic plugin 4.6.0.0 for WordPress. (no CVSS)
- [CVE-2020-8436](https://cve.now/CVE-2020-8436.md): XSS was discovered in the RegistrationMagic plugin 4.6.0.0 for WordPress via the rm\_form\_id, rm\_tr, or form\_name parameter. (no CVSS)
- [CVE-2020-9464](https://cve.now/CVE-2020-9464.md): A Denial-of-Service vulnerability exists in BECKHOFF Ethernet TCP/IP Bus Coupler BK9000. (no CVSS)
- [CVE-2020-9435](https://cve.now/CVE-2020-9435.md): PHOENIX CONTACT TC ROUTER 3002T-4G through 2.05.3, TC ROUTER 2002T-3G through 2.05.3, TC ROUTER 3002T-4G VZW through 2.05.3, TC ROUTER… (no CVSS)
- [CVE-2020-9436](https://cve.now/CVE-2020-9436.md): PHOENIX CONTACT TC ROUTER 3002T-4G through 2.05.3, TC ROUTER 2002T-3G through 2.05.3, TC ROUTER 3002T-4G VZW through 2.05.3, TC ROUTER… (no CVSS)
- [CVE-2020-10504](https://cve.now/CVE-2020-10504.md): CSRF in admin/edit-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a comment, given the id, via a crafted… (no CVSS)
- [CVE-2020-10503](https://cve.now/CVE-2020-10503.md): CSRF in admin/manage-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to disapprove any comment, given the id, via… (no CVSS)
- [CVE-2020-10502](https://cve.now/CVE-2020-10502.md): CSRF in admin/manage-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to approve any comment, given the id, via a… (no CVSS)
- [CVE-2020-10501](https://cve.now/CVE-2020-10501.md): CSRF in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a department, given the id, via a… (no CVSS)
- [CVE-2020-10500](https://cve.now/CVE-2020-10500.md): CSRF in admin/reply-ticket.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to reply to any ticket, given the id, via a… (no CVSS)
- [CVE-2020-10499](https://cve.now/CVE-2020-10499.md): CSRF in admin/manage-tickets.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to close any ticket, given the id, via a… (no CVSS)
- [CVE-2020-10498](https://cve.now/CVE-2020-10498.md): CSRF in admin/edit-category.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a category, given the id, via a crafted… (no CVSS)
- [CVE-2020-10497](https://cve.now/CVE-2020-10497.md): CSRF in admin/manage-categories.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a category via a crafted request. (no CVSS)
- [CVE-2020-10496](https://cve.now/CVE-2020-10496.md): CSRF in admin/edit-article.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit an article, given the id, via a crafted… (no CVSS)
- [CVE-2020-10495](https://cve.now/CVE-2020-10495.md): CSRF in admin/edit-template.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit an article template, given the id, via… (no CVSS)
- [CVE-2020-10494](https://cve.now/CVE-2020-10494.md): CSRF in admin/edit-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a news article, given the id, via a crafted… (no CVSS)
- [CVE-2020-10493](https://cve.now/CVE-2020-10493.md): CSRF in admin/edit-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a glossary term, given the id, via a… (no CVSS)
- [CVE-2020-10492](https://cve.now/CVE-2020-10492.md): CSRF in admin/manage-templates.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete an article template via a crafted… (no CVSS)
- [CVE-2020-10491](https://cve.now/CVE-2020-10491.md): CSRF in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a department via a crafted request. (no CVSS)
- [CVE-2020-10490](https://cve.now/CVE-2020-10490.md): CSRF in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a department via a crafted… (no CVSS)
- [CVE-2020-10489](https://cve.now/CVE-2020-10489.md): CSRF in admin/manage-tickets.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a ticket via a crafted request. (no CVSS)
- [CVE-2020-10488](https://cve.now/CVE-2020-10488.md): CSRF in admin/manage-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a news article via a crafted request. (no CVSS)
- [CVE-2020-10487](https://cve.now/CVE-2020-10487.md): CSRF in admin/manage-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a glossary term via a crafted… (no CVSS)
- [CVE-2020-10486](https://cve.now/CVE-2020-10486.md): CSRF in admin/manage-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a comment via a crafted request. (no CVSS)
- [CVE-2020-10485](https://cve.now/CVE-2020-10485.md): CSRF in admin/manage-articles.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete an article via a crafted request. (no CVSS)
- [CVE-2020-10484](https://cve.now/CVE-2020-10484.md): CSRF in admin/add-field.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to create a custom field via a crafted request. (no CVSS)
- [CVE-2020-10483](https://cve.now/CVE-2020-10483.md): CSRF in admin/ajax-hub.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to post a comment on any article via a crafted… (no CVSS)
- [CVE-2020-10482](https://cve.now/CVE-2020-10482.md): CSRF in admin/add-template.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a new article template via a crafted… (no CVSS)
- [CVE-2020-10481](https://cve.now/CVE-2020-10481.md): CSRF in admin/add-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a new glossary term via a crafted request. (no CVSS)
- [CVE-2020-10480](https://cve.now/CVE-2020-10480.md): CSRF in admin/add-category.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a new category via a crafted request. (no CVSS)
- [CVE-2020-10479](https://cve.now/CVE-2020-10479.md): CSRF in admin/add-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a new news article via a crafted request. (no CVSS)
- [CVE-2020-10478](https://cve.now/CVE-2020-10478.md): CSRF in admin/manage-settings.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to change the global settings, potentially… (no CVSS)
- [CVE-2020-10477](https://cve.now/CVE-2020-10477.md): Reflected XSS in admin/manage-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML… (no CVSS)
- [CVE-2020-10476](https://cve.now/CVE-2020-10476.md): Reflected XSS in admin/manage-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or… (no CVSS)
- [CVE-2020-10475](https://cve.now/CVE-2020-10475.md): Reflected XSS in admin/manage-tickets.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or… (no CVSS)
- [CVE-2020-10474](https://cve.now/CVE-2020-10474.md): Reflected XSS in admin/manage-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or… (no CVSS)
- [CVE-2020-10473](https://cve.now/CVE-2020-10473.md): Reflected XSS in admin/manage-categories.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or… (no CVSS)
- [CVE-2020-10472](https://cve.now/CVE-2020-10472.md): Reflected XSS in admin/manage-templates.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or… (no CVSS)
- [CVE-2020-10471](https://cve.now/CVE-2020-10471.md): Reflected XSS in admin/manage-articles.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or… (no CVSS)
- [CVE-2020-10470](https://cve.now/CVE-2020-10470.md): Reflected XSS in admin/manage-fields.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML… (no CVSS)
- [CVE-2020-10469](https://cve.now/CVE-2020-10469.md): Reflected XSS in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or… (no CVSS)
- [CVE-2020-10468](https://cve.now/CVE-2020-10468.md): Reflected XSS in admin/edit-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via… (no CVSS)
- [CVE-2020-10467](https://cve.now/CVE-2020-10467.md): Reflected XSS in admin/edit-comment.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML… (no CVSS)
- [CVE-2020-10466](https://cve.now/CVE-2020-10466.md): Reflected XSS in admin/edit-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML… (no CVSS)
- [CVE-2020-10465](https://cve.now/CVE-2020-10465.md): Reflected XSS in admin/edit-category.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML… (no CVSS)
- [CVE-2020-10464](https://cve.now/CVE-2020-10464.md): Reflected XSS in admin/edit-article.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML… (no CVSS)
- [CVE-2020-10463](https://cve.now/CVE-2020-10463.md): Reflected XSS in admin/edit-template.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML… (no CVSS)
- [CVE-2020-10462](https://cve.now/CVE-2020-10462.md): Reflected XSS in admin/edit-field.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML… (no CVSS)
- [CVE-2020-10461](https://cve.now/CVE-2020-10461.md): The way comments in article.php (vulnerable function in include/functions-article.php) are handled in Chadha PHPKB Standard Multi-Language… (no CVSS)
- [CVE-2020-10460](https://cve.now/CVE-2020-10460.md): admin/include/operations.php (via admin/email-harvester.php) in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject… (no CVSS)
- [CVE-2020-10459](https://cve.now/CVE-2020-10459.md): Path Traversal in admin/assetmanager/assetmanager.php (vulnerable function saved in admin/assetmanager/functions.php) in Chadha PHPKB… (no CVSS)
- [CVE-2020-10458](https://cve.now/CVE-2020-10458.md): Path Traversal in admin/imagepaster/operations.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete any folder on the… (no CVSS)
- [CVE-2020-10457](https://cve.now/CVE-2020-10457.md): Path Traversal in admin/imagepaster/image-renaming.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to rename any file on… (no CVSS)
- [CVE-2020-10456](https://cve.now/CVE-2020-10456.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10455](https://cve.now/CVE-2020-10455.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10454](https://cve.now/CVE-2020-10454.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10453](https://cve.now/CVE-2020-10453.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10452](https://cve.now/CVE-2020-10452.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10451](https://cve.now/CVE-2020-10451.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10450](https://cve.now/CVE-2020-10450.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10449](https://cve.now/CVE-2020-10449.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10448](https://cve.now/CVE-2020-10448.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10447](https://cve.now/CVE-2020-10447.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10446](https://cve.now/CVE-2020-10446.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10445](https://cve.now/CVE-2020-10445.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10444](https://cve.now/CVE-2020-10444.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10443](https://cve.now/CVE-2020-10443.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10442](https://cve.now/CVE-2020-10442.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10441](https://cve.now/CVE-2020-10441.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10440](https://cve.now/CVE-2020-10440.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10439](https://cve.now/CVE-2020-10439.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10438](https://cve.now/CVE-2020-10438.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10437](https://cve.now/CVE-2020-10437.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10436](https://cve.now/CVE-2020-10436.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10435](https://cve.now/CVE-2020-10435.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10434](https://cve.now/CVE-2020-10434.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10433](https://cve.now/CVE-2020-10433.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10432](https://cve.now/CVE-2020-10432.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10431](https://cve.now/CVE-2020-10431.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10430](https://cve.now/CVE-2020-10430.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10429](https://cve.now/CVE-2020-10429.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10428](https://cve.now/CVE-2020-10428.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10427](https://cve.now/CVE-2020-10427.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10426](https://cve.now/CVE-2020-10426.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10425](https://cve.now/CVE-2020-10425.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10424](https://cve.now/CVE-2020-10424.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10423](https://cve.now/CVE-2020-10423.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10422](https://cve.now/CVE-2020-10422.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10421](https://cve.now/CVE-2020-10421.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10420](https://cve.now/CVE-2020-10420.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10419](https://cve.now/CVE-2020-10419.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10418](https://cve.now/CVE-2020-10418.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10417](https://cve.now/CVE-2020-10417.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10416](https://cve.now/CVE-2020-10416.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10415](https://cve.now/CVE-2020-10415.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10414](https://cve.now/CVE-2020-10414.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10413](https://cve.now/CVE-2020-10413.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10412](https://cve.now/CVE-2020-10412.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10411](https://cve.now/CVE-2020-10411.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10410](https://cve.now/CVE-2020-10410.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10409](https://cve.now/CVE-2020-10409.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10408](https://cve.now/CVE-2020-10408.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10407](https://cve.now/CVE-2020-10407.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10406](https://cve.now/CVE-2020-10406.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10405](https://cve.now/CVE-2020-10405.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10404](https://cve.now/CVE-2020-10404.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10403](https://cve.now/CVE-2020-10403.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10402](https://cve.now/CVE-2020-10402.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10401](https://cve.now/CVE-2020-10401.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10400](https://cve.now/CVE-2020-10400.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10399](https://cve.now/CVE-2020-10399.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10398](https://cve.now/CVE-2020-10398.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10397](https://cve.now/CVE-2020-10397.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10396](https://cve.now/CVE-2020-10396.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10395](https://cve.now/CVE-2020-10395.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10394](https://cve.now/CVE-2020-10394.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10393](https://cve.now/CVE-2020-10393.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10392](https://cve.now/CVE-2020-10392.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10391](https://cve.now/CVE-2020-10391.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web… (no CVSS)
- [CVE-2020-10390](https://cve.now/CVE-2020-10390.md): OS Command Injection in export.php (vulnerable function called from include/functions-article.php) in Chadha PHPKB Standard Multi-Language… (no CVSS)
- [CVE-2020-10389](https://cve.now/CVE-2020-10389.md): admin/save-settings.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to achieve Code Execution by injecting PHP code… (no CVSS)
- [CVE-2020-10388](https://cve.now/CVE-2020-10388.md): The way the Referer header in article.php is handled in Chadha PHPKB Standard Multi-Language 9 allows attackers to execute Stored (Blind)… (no CVSS)
- [CVE-2020-10387](https://cve.now/CVE-2020-10387.md): Path Traversal in admin/download.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to download files from the server… (no CVSS)
- [CVE-2020-10386](https://cve.now/CVE-2020-10386.md): admin/imagepaster/image-upload.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to achieve Code Execution by… (no CVSS)
- [CVE-2019-5648](https://cve.now/CVE-2019-5648.md): LDAP Credential Exposure in Barracuda Load Balancer ADC (CVSS 8.7, Barracuda Load Balancer ADC)
- [CVE-2020-10108](https://cve.now/CVE-2020-10108.md): In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability. (no CVSS, twisted)
- [CVE-2020-10109](https://cve.now/CVE-2020-10109.md): In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability. (no CVSS, twisted)
- [CVE-2020-7254](https://cve.now/CVE-2020-7254.md): Privilege escalation in Advanced Threat Defense (CVSS 7.7, McAfee Advanced Threat Defense)
- [CVE-2020-7253](https://cve.now/CVE-2020-7253.md): Improper access control vulnerability in McAfee Agent (CVSS 5.7, McAfee Agent)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2020-03-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.