CVEs published March 12, 2020
299 CVEs were published on March 12, 2020: 1 critical, 3 high. 2 are now in CISA KEV.
- Published
- 299
- Critical
- 1
- High
- 3
- Medium
- 6
- Low
- 1
- Unrated
- 288
- Now in CISA KEV
- 2
- Fix available
- 27
Most affected products
- Microsoft Windows
- 76
- Intel(R) Graphics Drivers
- 16
- Microsoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +1
- 11
- NVIDIA GPU Display Driver
- 3
- Intel(R) FPGA Programmable Acceleration Card N3000
- 2
- Intel(R) NUC Firmware
- 2
- Microsoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +2
- 2
- Microsoft Internet Explorer
- 2
- Microsoft Internet Explorer · Microsoft.ChakraCore
- 2
- Microsoft Office
- 2
Critical 1
High 3
- CVE-2020-0787An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic lMicrosoft Windows
- CVE-2019-5648LDAP Credential Exposure in Barracuda Load Balancer ADCBarracuda Load Balancer ADC
- CVE-2020-7254Privilege escalation in Advanced Threat DefenseMcAfee Advanced Threat Defense
Medium, low and unrated 295
- CVE-2020-1887Incorrect validation of the TLS SNI hostname in osquery versions after 2.9.0 and before 4.2.0 could allow an attacker to MITM osquery traffiFacebook Osquery
- CVE-2020-8469Trend Micro Password Manager for Windows version 5.0 is affected by a DLL hijacking vulnerability would could potentially allow an attacker Trend Micro Password Manager for Windows
- CVE-2020-10535GitLab 12.8.x before 12.8.6, when sign-up is enabled, allows remote attackers to bypass email domain restrictions within the two-day grace p
- CVE-2020-7600querymen prior to 2.1.4 allows modification of object properties.querymen
- CVE-2020-10534In the GlobalBlocking extension before 2020-03-10 for MediaWiki through 1.34.0, an issue related to IP range evaluation resulted in blocked
- CVE-2019-17653A Cross-Site Request Forgery (CSRF) vulnerability in the user interface of Fortinet FortiSIEM 5.2.5 could allow a remote, unauthenticated atFortinet FortiSIEM
- CVE-2020-1863Huawei USG6000V with versions V500R001C20SPC300, V500R003C00SPC100, and V500R005C00SPC100 have an out-of-bounds read vulnerability.Huawei USG6000V
- CVE-2020-9064Huawei smartphone Honor V30 with versions earlier than OxfordS-AN00A 10.0.1.167(C00E166R4P1) have an improper authentication vulnerability.Huawei Honor
- CVE-2019-12278Opera through 53 on Android allows Address Bar Spoofing.
- CVE-2019-17658An unquoted service path vulnerability in the FortiClient FortiTray component of FortiClientWindows v6.2.2 and prior allow an attacker to gaFortinet FortiClientWindows
- CVE-2020-6643An improper neutralization of input vulnerability in the URL Description in Fortinet FortiIsolator version 1.2.2 allows a remote authenticatFortinet FortiIsolator
- CVE-2019-16156An Improper Neutralization of Input vulnerability in the Anomaly Detection Parameter Name in Fortinet FortiWeb 6.0.5, 6.2.0, and 6.1.1 may aFortinet FortiWeb
- CVE-2020-0583Improper access control in the subsystem for Intel(R) Smart Sound Technology may allow an authenticated user to potentially enable escalatioIntel® Smart Sound Technology
- CVE-2020-0551Load value injection in some Intel(R) Processors utilizing speculative execution may allow an authenticated user to potentially enable inforIntel(R) Processors Load Value Injection
- CVE-2020-0550Improper data forwarding in some data cache for some Intel(R) Processors may allow an authenticated user to potentially enable information dIntel Snoop Assisted L1D Sampling Advisory
- CVE-2019-11355An issue was discovered in Poly (formerly Polycom) HDX 3.1.13.
- CVE-2020-0530Improper buffer restrictions in firmware for Intel(R) NUC may allow an authenticated user to potentially enable escalation of privilege via Intel(R) NUC Firmware
- CVE-2019-11343Torpedo Query before 2.5.3 mishandles the LIKE operator in ConditionBuilder.java, LikeCondition.java, and NotLikeCondition.java.org.torpedoquery:org.torpedoquery
- CVE-2020-0574Improper configuration in block design for Intel(R) MAX(R) 10 FPGA all versions may allow an authenticated user to potentially enable escalaIntel(R) MAX(R) 10 FPGA
- CVE-2020-0567Improper input validation in Intel(R) Graphics Drivers before version 26.20.100.7212 may allow an authenticated user to enable denial of serIntel(R) Graphics Drivers
- CVE-2020-0565Uncontrolled search path in Intel(R) Graphics Drivers before version 26.20.100.7158 may allow an authenticated user to potentially enable esIntel(R) Graphics Drivers
- CVE-2020-0556Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enable escalation of priIntel BlueZ
- CVE-2020-0546Unquoted service path in Intel(R) Optane(TM) DC Persistent Memory Module Management Software before version 1.0.0.3461 may allow an authentiIntel® Optane(TM) DC Persistent Memory Module Management So…
- CVE-2015-3641bitcoind and Bitcoin-Qt prior to 0.10.2 allow attackers to cause a denial of service (disabled functionality such as a client application cr
- CVE-2018-20586bitcoind and Bitcoin-Qt prior to 0.17.1 allow injection of arbitrary data into the debug log via an RPC call.
- CVE-2018-19516messagepartthemes/default/defaultrenderer.cpp in messagelib in KDE Applications before 18.12.0 does not properly restrict the handling of an
- CVE-2018-10704yidashi yii2cmf 2.0 has XSS via the /search q parameter.yidashi/yii2cmf
- CVE-2017-18350bitcoind and Bitcoin-Qt prior to 0.15.1 have a stack-based buffer overflow if an attacker-controlled SOCKS proxy server is used.
- CVE-2020-0526Improper input validation in firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege via local aIntel(R) NUC Firmware
- CVE-2020-0520Path traversal in igdkmd64.sys for Intel(R) Graphics Drivers before versions 15.45.30.5103, 15.40.44.5107, 15.36.38.5117 and 15.33.49.5100 mIntel(R) Graphics Drivers
- CVE-2020-5961NVIDIA vGPU graphics driver for guest OS contains a vulnerability in which an incorrect resource clean up on a failure path can impact the gNVIDIA GPU Display Driver
- CVE-2020-5959NVIDIA Virtual GPU Manager, all versions, contains a vulnerability in the vGPU plugin in which an input index value is incorrectly validatedNVIDIA GPU Display Driver
- CVE-2020-5960NVIDIA Virtual GPU Manager contains a vulnerability in the kernel module (nvidia.ko), where a null pointer dereference may occur, which may NVIDIA GPU Display Driver
- CVE-2020-0519Improper access control for Intel(R) Graphics Drivers before versions 15.33.49.5100 and 15.36.38.5117 may allow an authenticated user to potIntel(R) Graphics Drivers
- CVE-2020-0517Out-of-bounds write in Intel(R) Graphics Drivers before version 15.36.38.5117 may allow an authenticated user to potentially enable escalatiIntel(R) Graphics Drivers
- CVE-2020-0516Improper access control in Intel(R) Graphics Drivers before version 26.20.100.7463 may allow an authenticated user to potentially enable denIntel(R) Graphics Drivers
- CVE-2020-0515Uncontrolled search path element in the installer for Intel(R) Graphics Drivers before versions 26.20.100.7584, 15.45.30.5103, 15.40.44.5107Intel(R) Graphics Drivers
- CVE-2020-0514Improper default permissions in the installer for Intel(R) Graphics Drivers before versions 26.20.100.7463 and 15.45.30.5103 may allow an auIntel(R) Graphics Drivers
- CVE-2020-0511Uncaught exception in system driver for Intel(R) Graphics Drivers before version 15.40.44.5107 may allow an authenticated user to potentiallIntel(R) Graphics Drivers
- CVE-2020-0508Incorrect default permissions in the installer for Intel(R) Graphics Drivers before versions 15.33.49.5100, 15.36.38.5117, 15.40.44.5107, 15Intel(R) Graphics Drivers
- CVE-2020-10532The AD Helper component in WatchGuard Fireware before 5.8.5.10317 allows remote attackers to discover cleartext passwords via the /domains/l
- CVE-2020-10531An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1.node · node-min
- CVE-2020-1739A flaw was found in Ansible 2.7.16 and prior, 2.8.8 and prior, and 2.9.5 and prior when a password is set with the argument "password" of svRed Hat Ansible · ansible
- CVE-2020-0503Improper access control in Intel(R) Graphics Drivers before version 26.20.100.7212 may allow an authenticated user to potentially enable infIntel(R) Graphics Drivers
- CVE-2020-0505Improper conditions check in Intel(R) Graphics Drivers before versions 15.33.49.5100, 15.36.38.5117, 15.40.44.5107, 15.45.30.5103, and 26.20Intel(R) Graphics Drivers
- CVE-2019-14625Improper access control in on-card storage for the Intel® FPGA Programmable Acceleration Card N3000, all versions, may allow a privileged usIntel(R) FPGA Programmable Acceleration Card N3000
- CVE-2019-14626Improper access control in PCIe function for the Intel® FPGA Programmable Acceleration Card N3000, all versions, may allow a privileged userIntel(R) FPGA Programmable Acceleration Card N3000
- CVE-2020-0501Buffer overflow in Intel(R) Graphics Drivers before version 26.20.100.6912 may allow an authenticated user to potentially enable a denial ofIntel(R) Graphics Drivers
- CVE-2020-0502Improper access control in Intel(R) Graphics Drivers before version 26.20.100.6912 may allow an authenticated user to potentially enable escIntel(R) Graphics Drivers
- CVE-2020-0504Buffer overflow in Intel(R) Graphics Drivers before versions 15.40.44.5107, 15.45.30.5103, and 26.20.100.7158 may allow an authenticated useIntel(R) Graphics Drivers
- CVE-2020-0506Improper initialization in Intel(R) Graphics Drivers before versions 15.40.44.5107, 15.45.29.5077, and 26.20.100.7000 may allow a privilegedIntel(R) Graphics Driver
- CVE-2020-0507Unquoted service path in Intel(R) Graphics Drivers before versions 15.33.49.5100, 15.36.38.5117, 15.40.44.5107, 15.45.30.5103, and 26.20.100Intel(R) Graphics Drivers
- CVE-2020-9543OpenStack Manila <7.4.1, >=8.0.0 <8.1.1, and >=9.0.0 <9.1.1 allows attackers to view, update, delete, or share resources that do not belong manila
- CVE-2020-0905An remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution VMicrosoft Dynamics NAV · Microsoft Dynamics 365 BC On Pr… +2
- CVE-2020-0902An elevation of privilege vulnerability exists in Service Fabric File Store Service under certain conditions, aka 'Service Fabric Elevation Microsoft Service Fabric
- CVE-2020-0903A cross-site-scripting (XSS) vulnerability exists when Microsoft Exchange Server does not properly sanitize a specially crafted web request Microsoft Exchange Server 2019 Cumulative Update · Microsof…
- CVE-2020-0897An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work FoMicrosoft Windows
- CVE-2020-0898An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows GraphiMicrosoft Windows
- CVE-2020-0894A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requesMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2020-0896An elevation of privilege vulnerability exists when Windows improperly handles hard links, aka 'Windows Hard Link Elevation of Privilege VulMicrosoft Windows
- CVE-2020-0892A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft WMicrosoft SharePoint Foundation · Microsoft SharePoint E… +3
- CVE-2020-0893A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requesMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2020-0885An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows Microsoft Windows
- CVE-2020-0887An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Microsoft Windows
- CVE-2020-0891This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.Microsoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2020-0883A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka Microsoft Windows
- CVE-2020-0884A spoofing vulnerability exists in Microsoft Visual Studio as it includes a reply URL that is not secured by SSL, aka 'Microsoft Visual StudMicrosoft Visual Studio
- CVE-2020-0881A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka Microsoft Windows
- CVE-2020-0882An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows Microsoft Windows
- CVE-2020-0879An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowiMicrosoft Windows
- CVE-2020-0880An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows Microsoft Windows
- CVE-2020-0876An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information DisMicrosoft Windows
- CVE-2020-0877An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Microsoft Windows
- CVE-2020-0872A remote code execution vulnerability exists in Application Inspector version v1.0.23 or earlier when the tool reflects example code snippetMicrosoft Application Inspector
- CVE-2020-0874An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowiMicrosoft Windows
- CVE-2020-0869A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory CoMicrosoft Windows
- CVE-2020-0871An information disclosure vulnerability exists when Windows Network Connections Service fails to properly handle objects in memory, aka 'WinMicrosoft Windows
- CVE-2020-0867An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file operations, aka 'WindowsMicrosoft Windows
- CVE-2020-0868An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file operations, aka 'WindowsMicrosoft Windows
- CVE-2020-0865An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work FoMicrosoft Windows
- CVE-2020-0866An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work FoMicrosoft Windows
- CVE-2020-0863An information vulnerability exists when Windows Connected User Experiences and Telemetry Service improperly discloses file information, akaMicrosoft Windows
- CVE-2020-0864An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work FoMicrosoft Windows
- CVE-2020-0860An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this vulnerabMicrosoft Windows
- CVE-2020-0861An information disclosure vulnerability exists when the Windows Network Driver Interface Specification (NDIS) improperly handles memory.To eMicrosoft Windows
- CVE-2020-0858An elevation of privilege vulnerability exists when the "Public Account Pictures" folder improperly handles junctions.To exploit tMicrosoft Windows
- CVE-2020-0859An information vulnerability exists when Windows Modules Installer Service improperly discloses file information, aka 'Windows Modules InstaMicrosoft Windows
- CVE-2020-0854An elevation of privilege vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles junctions, aka 'WiMicrosoft Windows
- CVE-2020-0855A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft WMicrosoft Office
- CVE-2020-0857An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search IndMicrosoft Windows
- CVE-2020-0852A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft WMicrosoft SharePoint Server · Microsoft Office
- CVE-2020-0853An information disclosure vulnerability exists in Windows when the Windows Imaging Component fails to properly handle objects in memory, akaMicrosoft Windows
- CVE-2020-0850A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft WMicrosoft SharePoint Enterprise Server · Microsoft Share… +3
- CVE-2020-0851A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft WMicrosoft Office
- CVE-2020-0848A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting EnginMicrosoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +1
- CVE-2020-0849An elevation of privilege vulnerability exists when Windows improperly handles hard links, aka 'Windows Hard Link Elevation of Privilege VulMicrosoft Windows
- CVE-2020-0845An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'WindoMicrosoft Windows
- CVE-2020-0847A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code ExecutMicrosoft Internet Explorer
- CVE-2020-0843An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operatioMicrosoft Windows
- CVE-2020-0844An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, akaMicrosoft Windows
- CVE-2020-0841An elevation of privilege vulnerability exists when Windows improperly handles hard links, aka 'Windows Hard Link Elevation of Privilege VulMicrosoft Windows
- CVE-2020-0842An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operatioMicrosoft Windows
- CVE-2020-0834An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC).An attacker whoMicrosoft Windows
- CVE-2020-0840An elevation of privilege vulnerability exists when Windows improperly handles hard links, aka 'Windows Hard Link Elevation of Privilege VulMicrosoft Windows
- CVE-2020-0832A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'ScripMicrosoft Internet Explorer · Microsoft.ChakraCore
- CVE-2020-0833A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'ScripMicrosoft Internet Explorer · Microsoft.ChakraCore
- CVE-2020-0830A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'ScriptingMicrosoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +2
- CVE-2020-0831A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting EnginMicrosoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +1
- CVE-2020-0828A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting EnginMicrosoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +1
- CVE-2020-0829A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting EnginMicrosoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +1
- CVE-2020-0826A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting EnginMicrosoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +1
- CVE-2020-0827A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting EnginMicrosoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +1
- CVE-2020-0824A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory CorMicrosoft Internet Explorer
- CVE-2020-0825A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting EnginMicrosoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +1
- CVE-2020-0822An elevation of privilege vulnerability exists when the Windows Language Pack Installer improperly handles file operations, aka 'Windows LanMicrosoft Windows
- CVE-2020-0823A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting EnginMicrosoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +1
- CVE-2020-0816A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory CorruptioMicrosoft Edge (EdgeHTML-based) on Windows
- CVE-2020-0819An elevation of privilege vulnerability exists when the Windows Device Setup Manager improperly handles file operations, aka 'Windows DeviceMicrosoft Windows
- CVE-2020-0820An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation InformationMicrosoft Windows
- CVE-2020-0814An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operatioMicrosoft Windows
- CVE-2020-0815An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle pipeline job tokens, Microsoft Azure DevOps Server 2019 Update
- CVE-2020-0812A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-bMicrosoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +1
- CVE-2020-0813An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker Microsoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +1
- CVE-2020-0810An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows fiMicrosoft Windows · Microsoft Visual Studio
- CVE-2020-0811A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-bMicrosoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +1
- CVE-2020-0808An elevation of privilege vulnerability exists in the way the Provisioning Runtime validates certain file operations, aka 'Provisioning RuntMicrosoft Windows
- CVE-2020-0809A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory CoMicrosoft Windows
- CVE-2020-0806An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, aka 'Windows Error RepoMicrosoft Windows
- CVE-2020-0807A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory CoMicrosoft Windows
- CVE-2020-0803An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'WindoMicrosoft Windows
- CVE-2020-0804An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'WindoMicrosoft Windows
- CVE-2020-0801A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory CoMicrosoft Windows
- CVE-2020-0802An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'WindoMicrosoft Windows
- CVE-2020-0799An elevation of privilege vulnerability exists in Microsoft Windows when the Windows kernel fails to properly handle parsing of certain symbMicrosoft Windows
- CVE-2020-0800An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work FoMicrosoft Windows
- CVE-2020-0797An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work FoMicrosoft Windows
- CVE-2020-0798An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading Microsoft Windows
- CVE-2020-0795This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.Microsoft SharePoint Enterprise Server · Microsoft Busin… +1
- CVE-2020-0791An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows GraphiMicrosoft Windows
- CVE-2020-0793An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Microsoft Windows · Microsoft Visual Studio
- CVE-2020-0788An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Microsoft Windows
- CVE-2020-0789A denial of service vulnerability exists when the Visual Studio Extension Installer Service improperly handles hard links, aka 'Visual StudiMicrosoft Visual Studio
- CVE-2020-0785An elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) improperly handles symlinks, aka 'Windows UseMicrosoft Windows
- CVE-2020-0786A denial of service vulnerability exists when the Windows Tile Object Service improperly handles hard links, aka 'Windows Tile Object ServicMicrosoft Windows
- CVE-2020-0781An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly handles objects in memory,Microsoft Windows
- CVE-2020-0783An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly handles objects in memory,Microsoft Windows
- CVE-2020-0779An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer EleMicrosoft Windows
- CVE-2020-0780An elevation of privilege vulnerability exists in the way that the Windows Network List Service handles objects in memory, aka 'Windows NetwMicrosoft Windows
- CVE-2020-0777An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work FoMicrosoft Windows
- CVE-2020-0778An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'WindoMicrosoft Windows
- CVE-2020-0776An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles file operations.To exploit this vuMicrosoft Windows
- CVE-2020-0774An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows Microsoft Windows
- CVE-2020-0775An information disclosure vulnerability exists when Windows Error Reporting improperly handles file operations.To exploit this vulnerabilityMicrosoft Windows
- CVE-2020-0772An elevation of privilege vulnerability exists when Windows Error Reporting improperly handles memory.To exploit this vulnerability, an attaMicrosoft Windows
- CVE-2020-0773An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this vulnerabMicrosoft Windows
- CVE-2020-0770An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this vulnerabMicrosoft Windows
- CVE-2020-0771An elevation of privilege vulnerability exists when the Windows CSC Service improperly handles memory.To exploit this vulnerability, an attaMicrosoft Windows
- CVE-2020-0768A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'ScriptingMicrosoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +2
- CVE-2020-0769An elevation of privilege vulnerability exists when the Windows CSC Service improperly handles memory.To exploit this vulnerability, an attaMicrosoft Windows
- CVE-2020-0763An elevation of privilege vulnerability exists when Windows Defender Security Center handles certain objects in memory.To exploit the vulnerMicrosoft Windows
- CVE-2020-0765An information disclosure vulnerability exists in the Remote Desktop Connection Manager (RDCMan) application when it improperly parses XML iMicrosoft Remote Desktop Connection Manager
- CVE-2020-0758An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle pipeline job tokens, Microsoft Team Foundation Server · Microsoft Azure DevOps S…
- CVE-2020-0762An elevation of privilege vulnerability exists when Windows Defender Security Center handles certain objects in memory.To exploit the vulnerMicrosoft Windows Server, · Microsoft Windows
- CVE-2020-0690An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege VulnerMicrosoft Windows
- CVE-2020-0700A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOpsMicrosoft Azure DevOps Server · Microsoft Team Foundation S…
- CVE-2020-0645A tampering vulnerability exists when Microsoft IIS Server improperly handles malformed request headers, aka 'Microsoft IIS Server TamperingMicrosoft Windows
- CVE-2020-0684A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attaMicrosoft Windows
- CVE-2020-6858Hotels Styx through 1.0.0.beta8 allows HTTP response splitting due to CRLF Injection.com.hotels.styx:styx-api
- CVE-2020-8435An issue was discovered in the RegistrationMagic plugin 4.6.0.0 for WordPress.
- CVE-2020-8436XSS was discovered in the RegistrationMagic plugin 4.6.0.0 for WordPress via the rm_form_id, rm_tr, or form_name parameter.
- CVE-2020-9464A Denial-of-Service vulnerability exists in BECKHOFF Ethernet TCP/IP Bus Coupler BK9000.
- CVE-2020-9435PHOENIX CONTACT TC ROUTER 3002T-4G through 2.05.3, TC ROUTER 2002T-3G through 2.05.3, TC ROUTER 3002T-4G VZW through 2.05.3, TC ROUTER 3002T
- CVE-2020-9436PHOENIX CONTACT TC ROUTER 3002T-4G through 2.05.3, TC ROUTER 2002T-3G through 2.05.3, TC ROUTER 3002T-4G VZW through 2.05.3, TC ROUTER 3002T
- CVE-2020-10504CSRF in admin/edit-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a comment, given the id, via a crafted re
- CVE-2020-10503CSRF in admin/manage-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to disapprove any comment, given the id, via a
- CVE-2020-10502CSRF in admin/manage-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to approve any comment, given the id, via a cra
- CVE-2020-10501CSRF in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a department, given the id, via a cr
- CVE-2020-10500CSRF in admin/reply-ticket.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to reply to any ticket, given the id, via a crafte
- CVE-2020-10499CSRF in admin/manage-tickets.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to close any ticket, given the id, via a crafted
- CVE-2020-10498CSRF in admin/edit-category.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a category, given the id, via a crafted r
- CVE-2020-10497CSRF in admin/manage-categories.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a category via a crafted request.
- CVE-2020-10496CSRF in admin/edit-article.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit an article, given the id, via a crafted re
- CVE-2020-10495CSRF in admin/edit-template.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit an article template, given the id, via a
- CVE-2020-10494CSRF in admin/edit-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a news article, given the id, via a crafted r
- CVE-2020-10493CSRF in admin/edit-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a glossary term, given the id, via a craf
- CVE-2020-10492CSRF in admin/manage-templates.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete an article template via a crafted re
- CVE-2020-10491CSRF in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a department via a crafted request.
- CVE-2020-10490CSRF in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a department via a crafted request
- CVE-2020-10489CSRF in admin/manage-tickets.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a ticket via a crafted request.
- CVE-2020-10488CSRF in admin/manage-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a news article via a crafted request.
- CVE-2020-10487CSRF in admin/manage-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a glossary term via a crafted request
- CVE-2020-10486CSRF in admin/manage-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a comment via a crafted request.
- CVE-2020-10485CSRF in admin/manage-articles.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete an article via a crafted request.
- CVE-2020-10484CSRF in admin/add-field.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to create a custom field via a crafted request.
- CVE-2020-10483CSRF in admin/ajax-hub.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to post a comment on any article via a crafted request
- CVE-2020-10482CSRF in admin/add-template.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a new article template via a crafted reques
- CVE-2020-10481CSRF in admin/add-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a new glossary term via a crafted request.
- CVE-2020-10480CSRF in admin/add-category.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a new category via a crafted request.
- CVE-2020-10479CSRF in admin/add-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a new news article via a crafted request.
- CVE-2020-10478CSRF in admin/manage-settings.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to change the global settings, potentially gain
- CVE-2020-10477Reflected XSS in admin/manage-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via
- CVE-2020-10476Reflected XSS in admin/manage-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML
- CVE-2020-10475Reflected XSS in admin/manage-tickets.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML
- CVE-2020-10474Reflected XSS in admin/manage-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML
- CVE-2020-10473Reflected XSS in admin/manage-categories.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HT
- CVE-2020-10472Reflected XSS in admin/manage-templates.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTM
- CVE-2020-10471Reflected XSS in admin/manage-articles.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML
- CVE-2020-10470Reflected XSS in admin/manage-fields.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML v
- CVE-2020-10469Reflected XSS in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or H
- CVE-2020-10468Reflected XSS in admin/edit-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via t
- CVE-2020-10467Reflected XSS in admin/edit-comment.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML vi
- CVE-2020-10466Reflected XSS in admin/edit-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML v
- CVE-2020-10465Reflected XSS in admin/edit-category.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML v
- CVE-2020-10464Reflected XSS in admin/edit-article.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML vi
- CVE-2020-10463Reflected XSS in admin/edit-template.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML v
- CVE-2020-10462Reflected XSS in admin/edit-field.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via
- CVE-2020-10461The way comments in article.php (vulnerable function in include/functions-article.php) are handled in Chadha PHPKB Standard Multi-Language 9
- CVE-2020-10460admin/include/operations.php (via admin/email-harvester.php) in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject untrusted
- CVE-2020-10459Path Traversal in admin/assetmanager/assetmanager.php (vulnerable function saved in admin/assetmanager/functions.php) in Chadha PHPKB Standa
- CVE-2020-10458Path Traversal in admin/imagepaster/operations.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete any folder on the we
- CVE-2020-10457Path Traversal in admin/imagepaster/image-renaming.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to rename any file on the
- CVE-2020-10456The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10455The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10454The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10453The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10452The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10451The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10450The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10449The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10448The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10447The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10446The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10445The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10444The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10443The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10442The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10441The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10440The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10439The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10438The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10437The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10436The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10435The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10434The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10433The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10432The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10431The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10430The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10429The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10428The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10427The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10426The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10425The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10424The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10423The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10422The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10421The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10420The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10419The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10418The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10417The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10416The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10415The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10414The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10413The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10412The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10411The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10410The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10409The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10408The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10407The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10406The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10405The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10404The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10403The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10402The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10401The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10400The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10399The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10398The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10397The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10396The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10395The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10394The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10393The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10392The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10391The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script
- CVE-2020-10390OS Command Injection in export.php (vulnerable function called from include/functions-article.php) in Chadha PHPKB Standard Multi-Language 9
- CVE-2020-10389admin/save-settings.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to achieve Code Execution by injecting PHP code in
- CVE-2020-10388The way the Referer header in article.php is handled in Chadha PHPKB Standard Multi-Language 9 allows attackers to execute Stored (Blind) XS
- CVE-2020-10387Path Traversal in admin/download.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to download files from the server usi
- CVE-2020-10386admin/imagepaster/image-upload.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to achieve Code Execution by uploading
- CVE-2020-10108In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability.twisted
- CVE-2020-10109In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability.twisted
- CVE-2020-7253Improper access control vulnerability in McAfee AgentMcAfee Agent