# CVEs published 2020-03-12 299 CVEs were published on March 12, 2020: 1 critical, 3 high. 2 are now in CISA KEV. Days are UTC. - [CVE-2020-1887](https://cve.now/CVE-2020-1887.md): Incorrect validation of the TLS SNI hostname in osquery versions after 2.9.0 and before 4.2.0 could allow an attacker to MITM osquery traffi (no CVSS, Facebook Osquery) - [CVE-2020-8469](https://cve.now/CVE-2020-8469.md): Trend Micro Password Manager for Windows version 5.0 is affected by a DLL hijacking vulnerability would could potentially allow an attacker (no CVSS, Trend Micro Password Manager for Windows) - [CVE-2020-10535](https://cve.now/CVE-2020-10535.md): GitLab 12.8.x before 12.8.6, when sign-up is enabled, allows remote attackers to bypass email domain restrictions within the two-day grace p (no CVSS) - [CVE-2020-7600](https://cve.now/CVE-2020-7600.md): querymen prior to 2.1.4 allows modification of object properties. (no CVSS, querymen) - [CVE-2020-10534](https://cve.now/CVE-2020-10534.md): In the GlobalBlocking extension before 2020-03-10 for MediaWiki through 1.34.0, an issue related to IP range evaluation resulted in blocked (no CVSS) - [CVE-2019-17653](https://cve.now/CVE-2019-17653.md): A Cross-Site Request Forgery (CSRF) vulnerability in the user interface of Fortinet FortiSIEM 5.2.5 could allow a remote, unauthenticated at (no CVSS, Fortinet FortiSIEM) - [CVE-2020-1863](https://cve.now/CVE-2020-1863.md): Huawei USG6000V with versions V500R001C20SPC300, V500R003C00SPC100, and V500R005C00SPC100 have an out-of-bounds read vulnerability. (no CVSS, Huawei USG6000V) - [CVE-2020-9064](https://cve.now/CVE-2020-9064.md): Huawei smartphone Honor V30 with versions earlier than OxfordS-AN00A 10.0.1.167(C00E166R4P1) have an improper authentication vulnerability. (no CVSS, Huawei Honor) - [CVE-2019-12278](https://cve.now/CVE-2019-12278.md): Opera through 53 on Android allows Address Bar Spoofing. (no CVSS) - [CVE-2019-17658](https://cve.now/CVE-2019-17658.md): An unquoted service path vulnerability in the FortiClient FortiTray component of FortiClientWindows v6.2.2 and prior allow an attacker to ga (no CVSS, Fortinet FortiClientWindows) - [CVE-2020-6643](https://cve.now/CVE-2020-6643.md): An improper neutralization of input vulnerability in the URL Description in Fortinet FortiIsolator version 1.2.2 allows a remote authenticat (no CVSS, Fortinet FortiIsolator) - [CVE-2019-16156](https://cve.now/CVE-2019-16156.md): An Improper Neutralization of Input vulnerability in the Anomaly Detection Parameter Name in Fortinet FortiWeb 6.0.5, 6.2.0, and 6.1.1 may a (no CVSS, Fortinet FortiWeb) - [CVE-2020-0583](https://cve.now/CVE-2020-0583.md): Improper access control in the subsystem for Intel(R) Smart Sound Technology may allow an authenticated user to potentially enable escalatio (no CVSS, Intel® Smart Sound Technology) - [CVE-2020-0551](https://cve.now/CVE-2020-0551.md): Load value injection in some Intel(R) Processors utilizing speculative execution may allow an authenticated user to potentially enable infor (no CVSS, Intel(R) Processors Load Value Injection) - [CVE-2020-0550](https://cve.now/CVE-2020-0550.md): Improper data forwarding in some data cache for some Intel(R) Processors may allow an authenticated user to potentially enable information d (no CVSS, Intel Snoop Assisted L1D Sampling Advisory) - [CVE-2019-11355](https://cve.now/CVE-2019-11355.md): An issue was discovered in Poly (formerly Polycom) HDX 3.1.13. (no CVSS) - [CVE-2020-0530](https://cve.now/CVE-2020-0530.md): Improper buffer restrictions in firmware for Intel(R) NUC may allow an authenticated user to potentially enable escalation of privilege via (no CVSS, Intel(R) NUC Firmware) - [CVE-2019-11343](https://cve.now/CVE-2019-11343.md): Torpedo Query before 2.5.3 mishandles the LIKE operator in ConditionBuilder.java, LikeCondition.java, and NotLikeCondition.java. (no CVSS, org.torpedoquery:org.torpedoquery) - [CVE-2020-0574](https://cve.now/CVE-2020-0574.md): Improper configuration in block design for Intel(R) MAX(R) 10 FPGA all versions may allow an authenticated user to potentially enable escala (no CVSS, Intel(R) MAX(R) 10 FPGA) - [CVE-2020-0567](https://cve.now/CVE-2020-0567.md): Improper input validation in Intel(R) Graphics Drivers before version 26.20.100.7212 may allow an authenticated user to enable denial of ser (no CVSS, Intel(R) Graphics Drivers) - [CVE-2020-0565](https://cve.now/CVE-2020-0565.md): Uncontrolled search path in Intel(R) Graphics Drivers before version 26.20.100.7158 may allow an authenticated user to potentially enable es (no CVSS, Intel(R) Graphics Drivers) - [CVE-2020-0556](https://cve.now/CVE-2020-0556.md): Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enable escalation of pri (no CVSS, Intel BlueZ) - [CVE-2020-0546](https://cve.now/CVE-2020-0546.md): Unquoted service path in Intel(R) Optane(TM) DC Persistent Memory Module Management Software before version 1.0.0.3461 may allow an authenti (no CVSS, Intel® Optane(TM) DC Persistent Memory Module Management So…) - [CVE-2015-3641](https://cve.now/CVE-2015-3641.md): bitcoind and Bitcoin-Qt prior to 0.10.2 allow attackers to cause a denial of service (disabled functionality such as a client application cr (no CVSS) - [CVE-2018-20586](https://cve.now/CVE-2018-20586.md): bitcoind and Bitcoin-Qt prior to 0.17.1 allow injection of arbitrary data into the debug log via an RPC call. (no CVSS) - [CVE-2018-19516](https://cve.now/CVE-2018-19516.md): messagepartthemes/default/defaultrenderer.cpp in messagelib in KDE Applications before 18.12.0 does not properly restrict the handling of an (no CVSS) - [CVE-2018-10704](https://cve.now/CVE-2018-10704.md): yidashi yii2cmf 2.0 has XSS via the /search q parameter. (no CVSS, yidashi/yii2cmf) - [CVE-2017-18350](https://cve.now/CVE-2017-18350.md): bitcoind and Bitcoin-Qt prior to 0.15.1 have a stack-based buffer overflow if an attacker-controlled SOCKS proxy server is used. (no CVSS) - [CVE-2020-0526](https://cve.now/CVE-2020-0526.md): Improper input validation in firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege via local a (no CVSS, Intel(R) NUC Firmware) - [CVE-2020-0520](https://cve.now/CVE-2020-0520.md): Path traversal in igdkmd64.sys for Intel(R) Graphics Drivers before versions 15.45.30.5103, 15.40.44.5107, 15.36.38.5117 and 15.33.49.5100 m (no CVSS, Intel(R) Graphics Drivers) - [CVE-2020-5961](https://cve.now/CVE-2020-5961.md): NVIDIA vGPU graphics driver for guest OS contains a vulnerability in which an incorrect resource clean up on a failure path can impact the g (no CVSS, NVIDIA GPU Display Driver) - [CVE-2020-5959](https://cve.now/CVE-2020-5959.md): NVIDIA Virtual GPU Manager, all versions, contains a vulnerability in the vGPU plugin in which an input index value is incorrectly validated (no CVSS, NVIDIA GPU Display Driver) - [CVE-2020-5960](https://cve.now/CVE-2020-5960.md): NVIDIA Virtual GPU Manager contains a vulnerability in the kernel module (nvidia.ko), where a null pointer dereference may occur, which may (no CVSS, NVIDIA GPU Display Driver) - [CVE-2020-0519](https://cve.now/CVE-2020-0519.md): Improper access control for Intel(R) Graphics Drivers before versions 15.33.49.5100 and 15.36.38.5117 may allow an authenticated user to pot (no CVSS, Intel(R) Graphics Drivers) - [CVE-2020-0517](https://cve.now/CVE-2020-0517.md): Out-of-bounds write in Intel(R) Graphics Drivers before version 15.36.38.5117 may allow an authenticated user to potentially enable escalati (no CVSS, Intel(R) Graphics Drivers) - [CVE-2020-0516](https://cve.now/CVE-2020-0516.md): Improper access control in Intel(R) Graphics Drivers before version 26.20.100.7463 may allow an authenticated user to potentially enable den (no CVSS, Intel(R) Graphics Drivers) - [CVE-2020-0515](https://cve.now/CVE-2020-0515.md): Uncontrolled search path element in the installer for Intel(R) Graphics Drivers before versions 26.20.100.7584, 15.45.30.5103, 15.40.44.5107 (no CVSS, Intel(R) Graphics Drivers) - [CVE-2020-0514](https://cve.now/CVE-2020-0514.md): Improper default permissions in the installer for Intel(R) Graphics Drivers before versions 26.20.100.7463 and 15.45.30.5103 may allow an au (no CVSS, Intel(R) Graphics Drivers) - [CVE-2020-0511](https://cve.now/CVE-2020-0511.md): Uncaught exception in system driver for Intel(R) Graphics Drivers before version 15.40.44.5107 may allow an authenticated user to potentiall (no CVSS, Intel(R) Graphics Drivers) - [CVE-2020-0508](https://cve.now/CVE-2020-0508.md): Incorrect default permissions in the installer for Intel(R) Graphics Drivers before versions 15.33.49.5100, 15.36.38.5117, 15.40.44.5107, 15 (no CVSS, Intel(R) Graphics Drivers) - [CVE-2020-10532](https://cve.now/CVE-2020-10532.md): The AD Helper component in WatchGuard Fireware before 5.8.5.10317 allows remote attackers to discover cleartext passwords via the /domains/l (no CVSS) - [CVE-2020-10531](https://cve.now/CVE-2020-10531.md): An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. (no CVSS, node · node-min) - [CVE-2020-1739](https://cve.now/CVE-2020-1739.md): A flaw was found in Ansible 2.7.16 and prior, 2.8.8 and prior, and 2.9.5 and prior when a password is set with the argument "password" of sv (CVSS 3.9, Red Hat Ansible · ansible) - [CVE-2020-0503](https://cve.now/CVE-2020-0503.md): Improper access control in Intel(R) Graphics Drivers before version 26.20.100.7212 may allow an authenticated user to potentially enable inf (no CVSS, Intel(R) Graphics Drivers) - [CVE-2020-0505](https://cve.now/CVE-2020-0505.md): Improper conditions check in Intel(R) Graphics Drivers before versions 15.33.49.5100, 15.36.38.5117, 15.40.44.5107, 15.45.30.5103, and 26.20 (no CVSS, Intel(R) Graphics Drivers) - [CVE-2019-14625](https://cve.now/CVE-2019-14625.md): Improper access control in on-card storage for the Intel® FPGA Programmable Acceleration Card N3000, all versions, may allow a privileged us (no CVSS, Intel(R) FPGA Programmable Acceleration Card N3000) - [CVE-2019-14626](https://cve.now/CVE-2019-14626.md): Improper access control in PCIe function for the Intel® FPGA Programmable Acceleration Card N3000, all versions, may allow a privileged user (no CVSS, Intel(R) FPGA Programmable Acceleration Card N3000) - [CVE-2020-0501](https://cve.now/CVE-2020-0501.md): Buffer overflow in Intel(R) Graphics Drivers before version 26.20.100.6912 may allow an authenticated user to potentially enable a denial of (no CVSS, Intel(R) Graphics Drivers) - [CVE-2020-0502](https://cve.now/CVE-2020-0502.md): Improper access control in Intel(R) Graphics Drivers before version 26.20.100.6912 may allow an authenticated user to potentially enable esc (no CVSS, Intel(R) Graphics Drivers) - [CVE-2020-0504](https://cve.now/CVE-2020-0504.md): Buffer overflow in Intel(R) Graphics Drivers before versions 15.40.44.5107, 15.45.30.5103, and 26.20.100.7158 may allow an authenticated use (no CVSS, Intel(R) Graphics Drivers) - [CVE-2020-0506](https://cve.now/CVE-2020-0506.md): Improper initialization in Intel(R) Graphics Drivers before versions 15.40.44.5107, 15.45.29.5077, and 26.20.100.7000 may allow a privileged (no CVSS, Intel(R) Graphics Driver) - [CVE-2020-0507](https://cve.now/CVE-2020-0507.md): Unquoted service path in Intel(R) Graphics Drivers before versions 15.33.49.5100, 15.36.38.5117, 15.40.44.5107, 15.45.30.5103, and 26.20.100 (no CVSS, Intel(R) Graphics Drivers) - [CVE-2020-9543](https://cve.now/CVE-2020-9543.md): OpenStack Manila \<7.4.1, \>=8.0.0 \<8.1.1, and \>=9.0.0 \<9.1.1 allows attackers to view, update, delete, or share resources that do not belong (no CVSS, manila) - [CVE-2020-0905](https://cve.now/CVE-2020-0905.md): An remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution V (no CVSS, Microsoft Dynamics NAV · Microsoft Dynamics 365 BC On Pr… +2) - [CVE-2020-0902](https://cve.now/CVE-2020-0902.md): An elevation of privilege vulnerability exists in Service Fabric File Store Service under certain conditions, aka 'Service Fabric Elevation (no CVSS, Microsoft Service Fabric) - [CVE-2020-0903](https://cve.now/CVE-2020-0903.md): A cross-site-scripting (XSS) vulnerability exists when Microsoft Exchange Server does not properly sanitize a specially crafted web request (CVSS 5.4, Microsoft Exchange Server 2019 Cumulative Update · Microsof…) - [CVE-2020-0897](https://cve.now/CVE-2020-0897.md): An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work Fo (no CVSS, Microsoft Windows) - [CVE-2020-0898](https://cve.now/CVE-2020-0898.md): An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphi (no CVSS, Microsoft Windows) - [CVE-2020-0894](https://cve.now/CVE-2020-0894.md): A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques (CVSS 5.4, Microsoft SharePoint Enterprise Server · Microsoft Share… +1) - [CVE-2020-0896](https://cve.now/CVE-2020-0896.md): An elevation of privilege vulnerability exists when Windows improperly handles hard links, aka 'Windows Hard Link Elevation of Privilege Vul (no CVSS, Microsoft Windows) - [CVE-2020-0892](https://cve.now/CVE-2020-0892.md): A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft W (no CVSS, Microsoft SharePoint Foundation · Microsoft SharePoint E… +3) - [CVE-2020-0893](https://cve.now/CVE-2020-0893.md): A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques (CVSS 5.4, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…) - [CVE-2020-0885](https://cve.now/CVE-2020-0885.md): An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows (no CVSS, Microsoft Windows) - [CVE-2020-0887](https://cve.now/CVE-2020-0887.md): An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k (no CVSS, Microsoft Windows) - [CVE-2020-0891](https://cve.now/CVE-2020-0891.md): This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server. (CVSS 5.4, Microsoft SharePoint Enterprise Server · Microsoft Share… +1) - [CVE-2020-0883](https://cve.now/CVE-2020-0883.md): A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka (no CVSS, Microsoft Windows) - [CVE-2020-0884](https://cve.now/CVE-2020-0884.md): A spoofing vulnerability exists in Microsoft Visual Studio as it includes a reply URL that is not secured by SSL, aka 'Microsoft Visual Stud (no CVSS, Microsoft Visual Studio) - [CVE-2020-0881](https://cve.now/CVE-2020-0881.md): A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka (no CVSS, Microsoft Windows) - [CVE-2020-0882](https://cve.now/CVE-2020-0882.md): An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows (no CVSS, Microsoft Windows) - [CVE-2020-0879](https://cve.now/CVE-2020-0879.md): An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowi (no CVSS, Microsoft Windows) - [CVE-2020-0880](https://cve.now/CVE-2020-0880.md): An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows (no CVSS, Microsoft Windows) - [CVE-2020-0876](https://cve.now/CVE-2020-0876.md): An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Dis (no CVSS, Microsoft Windows) - [CVE-2020-0877](https://cve.now/CVE-2020-0877.md): An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k (no CVSS, Microsoft Windows) - [CVE-2020-0872](https://cve.now/CVE-2020-0872.md): A remote code execution vulnerability exists in Application Inspector version v1.0.23 or earlier when the tool reflects example code snippet (no CVSS, Microsoft Application Inspector) - [CVE-2020-0874](https://cve.now/CVE-2020-0874.md): An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowi (no CVSS, Microsoft Windows) - [CVE-2020-0869](https://cve.now/CVE-2020-0869.md): A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Co (no CVSS, Microsoft Windows) - [CVE-2020-0871](https://cve.now/CVE-2020-0871.md): An information disclosure vulnerability exists when Windows Network Connections Service fails to properly handle objects in memory, aka 'Win (no CVSS, Microsoft Windows) - [CVE-2020-0867](https://cve.now/CVE-2020-0867.md): An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file operations, aka 'Windows (no CVSS, Microsoft Windows) - [CVE-2020-0868](https://cve.now/CVE-2020-0868.md): An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file operations, aka 'Windows (no CVSS, Microsoft Windows) - [CVE-2020-0865](https://cve.now/CVE-2020-0865.md): An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work Fo (no CVSS, Microsoft Windows) - [CVE-2020-0866](https://cve.now/CVE-2020-0866.md): An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work Fo (no CVSS, Microsoft Windows) - [CVE-2020-0863](https://cve.now/CVE-2020-0863.md): An information vulnerability exists when Windows Connected User Experiences and Telemetry Service improperly discloses file information, aka (no CVSS, Microsoft Windows) - [CVE-2020-0864](https://cve.now/CVE-2020-0864.md): An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work Fo (no CVSS, Microsoft Windows) - [CVE-2020-0860](https://cve.now/CVE-2020-0860.md): An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this vulnerab (no CVSS, Microsoft Windows) - [CVE-2020-0861](https://cve.now/CVE-2020-0861.md): An information disclosure vulnerability exists when the Windows Network Driver Interface Specification (NDIS) improperly handles memory.To e (no CVSS, Microsoft Windows) - [CVE-2020-0858](https://cve.now/CVE-2020-0858.md): An elevation of privilege vulnerability exists when the "Public Account Pictures" folder improperly handles junctions.To exploit t (no CVSS, Microsoft Windows) - [CVE-2020-0859](https://cve.now/CVE-2020-0859.md): An information vulnerability exists when Windows Modules Installer Service improperly discloses file information, aka 'Windows Modules Insta (no CVSS, Microsoft Windows) - [CVE-2020-0854](https://cve.now/CVE-2020-0854.md): An elevation of privilege vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles junctions, aka 'Wi (no CVSS, Microsoft Windows) - [CVE-2020-0855](https://cve.now/CVE-2020-0855.md): A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft W (no CVSS, Microsoft Office) - [CVE-2020-0857](https://cve.now/CVE-2020-0857.md): An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Ind (no CVSS, Microsoft Windows) - [CVE-2020-0852](https://cve.now/CVE-2020-0852.md): A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft W (no CVSS, Microsoft SharePoint Server · Microsoft Office) - [CVE-2020-0853](https://cve.now/CVE-2020-0853.md): An information disclosure vulnerability exists in Windows when the Windows Imaging Component fails to properly handle objects in memory, aka (no CVSS, Microsoft Windows) - [CVE-2020-0850](https://cve.now/CVE-2020-0850.md): A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft W (no CVSS, Microsoft SharePoint Enterprise Server · Microsoft Share… +3) - [CVE-2020-0851](https://cve.now/CVE-2020-0851.md): A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft W (no CVSS, Microsoft Office) - [CVE-2020-0848](https://cve.now/CVE-2020-0848.md): A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin (no CVSS, Microsoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +1) - [CVE-2020-0849](https://cve.now/CVE-2020-0849.md): An elevation of privilege vulnerability exists when Windows improperly handles hard links, aka 'Windows Hard Link Elevation of Privilege Vul (no CVSS, Microsoft Windows) - [CVE-2020-0845](https://cve.now/CVE-2020-0845.md): An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windo (no CVSS, Microsoft Windows) - [CVE-2020-0847](https://cve.now/CVE-2020-0847.md): A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execut (no CVSS, Microsoft Internet Explorer) - [CVE-2020-0843](https://cve.now/CVE-2020-0843.md): An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operatio (no CVSS, Microsoft Windows) - [CVE-2020-0844](https://cve.now/CVE-2020-0844.md): An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka (no CVSS, Microsoft Windows) - [CVE-2020-0841](https://cve.now/CVE-2020-0841.md): An elevation of privilege vulnerability exists when Windows improperly handles hard links, aka 'Windows Hard Link Elevation of Privilege Vul (no CVSS, Microsoft Windows) - [CVE-2020-0842](https://cve.now/CVE-2020-0842.md): An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operatio (no CVSS, Microsoft Windows) - [CVE-2020-0834](https://cve.now/CVE-2020-0834.md): An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC).An attacker who (no CVSS, Microsoft Windows) - [CVE-2020-0840](https://cve.now/CVE-2020-0840.md): An elevation of privilege vulnerability exists when Windows improperly handles hard links, aka 'Windows Hard Link Elevation of Privilege Vul (no CVSS, Microsoft Windows) - [CVE-2020-0832](https://cve.now/CVE-2020-0832.md): A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scrip (no CVSS, Microsoft Internet Explorer · Microsoft.ChakraCore) - [CVE-2020-0833](https://cve.now/CVE-2020-0833.md): A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scrip (no CVSS, Microsoft Internet Explorer · Microsoft.ChakraCore) - [CVE-2020-0830](https://cve.now/CVE-2020-0830.md): A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting (no CVSS, Microsoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +2) - [CVE-2020-0831](https://cve.now/CVE-2020-0831.md): A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin (no CVSS, Microsoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +1) - [CVE-2020-0828](https://cve.now/CVE-2020-0828.md): A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin (no CVSS, Microsoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +1) - [CVE-2020-0829](https://cve.now/CVE-2020-0829.md): A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin (no CVSS, Microsoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +1) - [CVE-2020-0826](https://cve.now/CVE-2020-0826.md): A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin (no CVSS, Microsoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +1) - [CVE-2020-0827](https://cve.now/CVE-2020-0827.md): A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin (no CVSS, Microsoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +1) - [CVE-2020-0824](https://cve.now/CVE-2020-0824.md): A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory Cor (no CVSS, Microsoft Internet Explorer) - [CVE-2020-0825](https://cve.now/CVE-2020-0825.md): A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin (no CVSS, Microsoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +1) - [CVE-2020-0822](https://cve.now/CVE-2020-0822.md): An elevation of privilege vulnerability exists when the Windows Language Pack Installer improperly handles file operations, aka 'Windows Lan (no CVSS, Microsoft Windows) - [CVE-2020-0823](https://cve.now/CVE-2020-0823.md): A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin (no CVSS, Microsoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +1) - [CVE-2020-0816](https://cve.now/CVE-2020-0816.md): A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory Corruptio (no CVSS, Microsoft Edge (EdgeHTML-based) on Windows) - [CVE-2020-0819](https://cve.now/CVE-2020-0819.md): An elevation of privilege vulnerability exists when the Windows Device Setup Manager improperly handles file operations, aka 'Windows Device (no CVSS, Microsoft Windows) - [CVE-2020-0820](https://cve.now/CVE-2020-0820.md): An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information (no CVSS, Microsoft Windows) - [CVE-2020-0814](https://cve.now/CVE-2020-0814.md): An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operatio (no CVSS, Microsoft Windows) - [CVE-2020-0815](https://cve.now/CVE-2020-0815.md): An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle pipeline job tokens, (no CVSS, Microsoft Azure DevOps Server 2019 Update) - [CVE-2020-0812](https://cve.now/CVE-2020-0812.md): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-b (no CVSS, Microsoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +1) - [CVE-2020-0813](https://cve.now/CVE-2020-0813.md): An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker (no CVSS, Microsoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +1) - [CVE-2020-0810](https://cve.now/CVE-2020-0810.md): An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows fi (no CVSS, Microsoft Windows · Microsoft Visual Studio) - [CVE-2020-0811](https://cve.now/CVE-2020-0811.md): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-b (no CVSS, Microsoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +1) - [CVE-2020-0808](https://cve.now/CVE-2020-0808.md): An elevation of privilege vulnerability exists in the way the Provisioning Runtime validates certain file operations, aka 'Provisioning Runt (no CVSS, Microsoft Windows) - [CVE-2020-0809](https://cve.now/CVE-2020-0809.md): A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Co (no CVSS, Microsoft Windows) - [CVE-2020-0806](https://cve.now/CVE-2020-0806.md): An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, aka 'Windows Error Repo (no CVSS, Microsoft Windows) - [CVE-2020-0807](https://cve.now/CVE-2020-0807.md): A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Co (no CVSS, Microsoft Windows) - [CVE-2020-0803](https://cve.now/CVE-2020-0803.md): An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windo (no CVSS, Microsoft Windows) - [CVE-2020-0804](https://cve.now/CVE-2020-0804.md): An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windo (no CVSS, Microsoft Windows) - [CVE-2020-0801](https://cve.now/CVE-2020-0801.md): A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Co (no CVSS, Microsoft Windows) - [CVE-2020-0802](https://cve.now/CVE-2020-0802.md): An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windo (no CVSS, Microsoft Windows) - [CVE-2020-0799](https://cve.now/CVE-2020-0799.md): An elevation of privilege vulnerability exists in Microsoft Windows when the Windows kernel fails to properly handle parsing of certain symb (no CVSS, Microsoft Windows) - [CVE-2020-0800](https://cve.now/CVE-2020-0800.md): An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work Fo (no CVSS, Microsoft Windows) - [CVE-2020-0797](https://cve.now/CVE-2020-0797.md): An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work Fo (no CVSS, Microsoft Windows) - [CVE-2020-0798](https://cve.now/CVE-2020-0798.md): An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading (no CVSS, Microsoft Windows) - [CVE-2020-0795](https://cve.now/CVE-2020-0795.md): This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server. (CVSS 5.4, Microsoft SharePoint Enterprise Server · Microsoft Busin… +1) - [CVE-2020-0796](https://cve.now/CVE-2020-0796.md): A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain reque (CVSS 10.0, KEV, Microsoft Windows) - [CVE-2020-0791](https://cve.now/CVE-2020-0791.md): An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphi (no CVSS, Microsoft Windows) - [CVE-2020-0793](https://cve.now/CVE-2020-0793.md): An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka ' (no CVSS, Microsoft Windows · Microsoft Visual Studio) - [CVE-2020-0787](https://cve.now/CVE-2020-0787.md): An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic l (CVSS 7.8, KEV, Microsoft Windows) - [CVE-2020-0788](https://cve.now/CVE-2020-0788.md): An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k (no CVSS, Microsoft Windows) - [CVE-2020-0789](https://cve.now/CVE-2020-0789.md): A denial of service vulnerability exists when the Visual Studio Extension Installer Service improperly handles hard links, aka 'Visual Studi (no CVSS, Microsoft Visual Studio) - [CVE-2020-0785](https://cve.now/CVE-2020-0785.md): An elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) improperly handles symlinks, aka 'Windows Use (no CVSS, Microsoft Windows) - [CVE-2020-0786](https://cve.now/CVE-2020-0786.md): A denial of service vulnerability exists when the Windows Tile Object Service improperly handles hard links, aka 'Windows Tile Object Servic (no CVSS, Microsoft Windows) - [CVE-2020-0781](https://cve.now/CVE-2020-0781.md): An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly handles objects in memory, (no CVSS, Microsoft Windows) - [CVE-2020-0783](https://cve.now/CVE-2020-0783.md): An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly handles objects in memory, (no CVSS, Microsoft Windows) - [CVE-2020-0779](https://cve.now/CVE-2020-0779.md): An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Ele (no CVSS, Microsoft Windows) - [CVE-2020-0780](https://cve.now/CVE-2020-0780.md): An elevation of privilege vulnerability exists in the way that the Windows Network List Service handles objects in memory, aka 'Windows Netw (no CVSS, Microsoft Windows) - [CVE-2020-0777](https://cve.now/CVE-2020-0777.md): An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work Fo (no CVSS, Microsoft Windows) - [CVE-2020-0778](https://cve.now/CVE-2020-0778.md): An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windo (no CVSS, Microsoft Windows) - [CVE-2020-0776](https://cve.now/CVE-2020-0776.md): An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles file operations.To exploit this vu (no CVSS, Microsoft Windows) - [CVE-2020-0774](https://cve.now/CVE-2020-0774.md): An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows (no CVSS, Microsoft Windows) - [CVE-2020-0775](https://cve.now/CVE-2020-0775.md): An information disclosure vulnerability exists when Windows Error Reporting improperly handles file operations.To exploit this vulnerability (no CVSS, Microsoft Windows) - [CVE-2020-0772](https://cve.now/CVE-2020-0772.md): An elevation of privilege vulnerability exists when Windows Error Reporting improperly handles memory.To exploit this vulnerability, an atta (no CVSS, Microsoft Windows) - [CVE-2020-0773](https://cve.now/CVE-2020-0773.md): An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this vulnerab (no CVSS, Microsoft Windows) - [CVE-2020-0770](https://cve.now/CVE-2020-0770.md): An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this vulnerab (no CVSS, Microsoft Windows) - [CVE-2020-0771](https://cve.now/CVE-2020-0771.md): An elevation of privilege vulnerability exists when the Windows CSC Service improperly handles memory.To exploit this vulnerability, an atta (no CVSS, Microsoft Windows) - [CVE-2020-0768](https://cve.now/CVE-2020-0768.md): A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting (no CVSS, Microsoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +2) - [CVE-2020-0769](https://cve.now/CVE-2020-0769.md): An elevation of privilege vulnerability exists when the Windows CSC Service improperly handles memory.To exploit this vulnerability, an atta (no CVSS, Microsoft Windows) - [CVE-2020-0763](https://cve.now/CVE-2020-0763.md): An elevation of privilege vulnerability exists when Windows Defender Security Center handles certain objects in memory.To exploit the vulner (no CVSS, Microsoft Windows) - [CVE-2020-0765](https://cve.now/CVE-2020-0765.md): An information disclosure vulnerability exists in the Remote Desktop Connection Manager (RDCMan) application when it improperly parses XML i (no CVSS, Microsoft Remote Desktop Connection Manager) - [CVE-2020-0758](https://cve.now/CVE-2020-0758.md): An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle pipeline job tokens, (no CVSS, Microsoft Team Foundation Server · Microsoft Azure DevOps S…) - [CVE-2020-0762](https://cve.now/CVE-2020-0762.md): An elevation of privilege vulnerability exists when Windows Defender Security Center handles certain objects in memory.To exploit the vulner (no CVSS, Microsoft Windows Server, · Microsoft Windows) - [CVE-2020-0690](https://cve.now/CVE-2020-0690.md): An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vulner (no CVSS, Microsoft Windows) - [CVE-2020-0700](https://cve.now/CVE-2020-0700.md): A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps (no CVSS, Microsoft Azure DevOps Server · Microsoft Team Foundation S…) - [CVE-2020-0645](https://cve.now/CVE-2020-0645.md): A tampering vulnerability exists when Microsoft IIS Server improperly handles malformed request headers, aka 'Microsoft IIS Server Tampering (no CVSS, Microsoft Windows) - [CVE-2020-0684](https://cve.now/CVE-2020-0684.md): A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An atta (no CVSS, Microsoft Windows) - [CVE-2020-6858](https://cve.now/CVE-2020-6858.md): Hotels Styx through 1.0.0.beta8 allows HTTP response splitting due to CRLF Injection. (no CVSS, com.hotels.styx:styx-api) - [CVE-2020-8435](https://cve.now/CVE-2020-8435.md): An issue was discovered in the RegistrationMagic plugin 4.6.0.0 for WordPress. (no CVSS) - [CVE-2020-8436](https://cve.now/CVE-2020-8436.md): XSS was discovered in the RegistrationMagic plugin 4.6.0.0 for WordPress via the rm\_form\_id, rm\_tr, or form\_name parameter. (no CVSS) - [CVE-2020-9464](https://cve.now/CVE-2020-9464.md): A Denial-of-Service vulnerability exists in BECKHOFF Ethernet TCP/IP Bus Coupler BK9000. (no CVSS) - [CVE-2020-9435](https://cve.now/CVE-2020-9435.md): PHOENIX CONTACT TC ROUTER 3002T-4G through 2.05.3, TC ROUTER 2002T-3G through 2.05.3, TC ROUTER 3002T-4G VZW through 2.05.3, TC ROUTER 3002T (no CVSS) - [CVE-2020-9436](https://cve.now/CVE-2020-9436.md): PHOENIX CONTACT TC ROUTER 3002T-4G through 2.05.3, TC ROUTER 2002T-3G through 2.05.3, TC ROUTER 3002T-4G VZW through 2.05.3, TC ROUTER 3002T (no CVSS) - [CVE-2020-10504](https://cve.now/CVE-2020-10504.md): CSRF in admin/edit-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a comment, given the id, via a crafted re (no CVSS) - [CVE-2020-10503](https://cve.now/CVE-2020-10503.md): CSRF in admin/manage-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to disapprove any comment, given the id, via a (no CVSS) - [CVE-2020-10502](https://cve.now/CVE-2020-10502.md): CSRF in admin/manage-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to approve any comment, given the id, via a cra (no CVSS) - [CVE-2020-10501](https://cve.now/CVE-2020-10501.md): CSRF in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a department, given the id, via a cr (no CVSS) - [CVE-2020-10500](https://cve.now/CVE-2020-10500.md): CSRF in admin/reply-ticket.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to reply to any ticket, given the id, via a crafte (no CVSS) - [CVE-2020-10499](https://cve.now/CVE-2020-10499.md): CSRF in admin/manage-tickets.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to close any ticket, given the id, via a crafted (no CVSS) - [CVE-2020-10498](https://cve.now/CVE-2020-10498.md): CSRF in admin/edit-category.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a category, given the id, via a crafted r (no CVSS) - [CVE-2020-10497](https://cve.now/CVE-2020-10497.md): CSRF in admin/manage-categories.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a category via a crafted request. (no CVSS) - [CVE-2020-10496](https://cve.now/CVE-2020-10496.md): CSRF in admin/edit-article.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit an article, given the id, via a crafted re (no CVSS) - [CVE-2020-10495](https://cve.now/CVE-2020-10495.md): CSRF in admin/edit-template.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit an article template, given the id, via a (no CVSS) - [CVE-2020-10494](https://cve.now/CVE-2020-10494.md): CSRF in admin/edit-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a news article, given the id, via a crafted r (no CVSS) - [CVE-2020-10493](https://cve.now/CVE-2020-10493.md): CSRF in admin/edit-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a glossary term, given the id, via a craf (no CVSS) - [CVE-2020-10492](https://cve.now/CVE-2020-10492.md): CSRF in admin/manage-templates.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete an article template via a crafted re (no CVSS) - [CVE-2020-10491](https://cve.now/CVE-2020-10491.md): CSRF in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a department via a crafted request. (no CVSS) - [CVE-2020-10490](https://cve.now/CVE-2020-10490.md): CSRF in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a department via a crafted request (no CVSS) - [CVE-2020-10489](https://cve.now/CVE-2020-10489.md): CSRF in admin/manage-tickets.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a ticket via a crafted request. (no CVSS) - [CVE-2020-10488](https://cve.now/CVE-2020-10488.md): CSRF in admin/manage-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a news article via a crafted request. (no CVSS) - [CVE-2020-10487](https://cve.now/CVE-2020-10487.md): CSRF in admin/manage-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a glossary term via a crafted request (no CVSS) - [CVE-2020-10486](https://cve.now/CVE-2020-10486.md): CSRF in admin/manage-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a comment via a crafted request. (no CVSS) - [CVE-2020-10485](https://cve.now/CVE-2020-10485.md): CSRF in admin/manage-articles.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete an article via a crafted request. (no CVSS) - [CVE-2020-10484](https://cve.now/CVE-2020-10484.md): CSRF in admin/add-field.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to create a custom field via a crafted request. (no CVSS) - [CVE-2020-10483](https://cve.now/CVE-2020-10483.md): CSRF in admin/ajax-hub.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to post a comment on any article via a crafted request (no CVSS) - [CVE-2020-10482](https://cve.now/CVE-2020-10482.md): CSRF in admin/add-template.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a new article template via a crafted reques (no CVSS) - [CVE-2020-10481](https://cve.now/CVE-2020-10481.md): CSRF in admin/add-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a new glossary term via a crafted request. (no CVSS) - [CVE-2020-10480](https://cve.now/CVE-2020-10480.md): CSRF in admin/add-category.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a new category via a crafted request. (no CVSS) - [CVE-2020-10479](https://cve.now/CVE-2020-10479.md): CSRF in admin/add-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a new news article via a crafted request. (no CVSS) - [CVE-2020-10478](https://cve.now/CVE-2020-10478.md): CSRF in admin/manage-settings.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to change the global settings, potentially gain (no CVSS) - [CVE-2020-10477](https://cve.now/CVE-2020-10477.md): Reflected XSS in admin/manage-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via (no CVSS) - [CVE-2020-10476](https://cve.now/CVE-2020-10476.md): Reflected XSS in admin/manage-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML (no CVSS) - [CVE-2020-10475](https://cve.now/CVE-2020-10475.md): Reflected XSS in admin/manage-tickets.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML (no CVSS) - [CVE-2020-10474](https://cve.now/CVE-2020-10474.md): Reflected XSS in admin/manage-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML (no CVSS) - [CVE-2020-10473](https://cve.now/CVE-2020-10473.md): Reflected XSS in admin/manage-categories.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HT (no CVSS) - [CVE-2020-10472](https://cve.now/CVE-2020-10472.md): Reflected XSS in admin/manage-templates.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTM (no CVSS) - [CVE-2020-10471](https://cve.now/CVE-2020-10471.md): Reflected XSS in admin/manage-articles.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML (no CVSS) - [CVE-2020-10470](https://cve.now/CVE-2020-10470.md): Reflected XSS in admin/manage-fields.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML v (no CVSS) - [CVE-2020-10469](https://cve.now/CVE-2020-10469.md): Reflected XSS in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or H (no CVSS) - [CVE-2020-10468](https://cve.now/CVE-2020-10468.md): Reflected XSS in admin/edit-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via t (no CVSS) - [CVE-2020-10467](https://cve.now/CVE-2020-10467.md): Reflected XSS in admin/edit-comment.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML vi (no CVSS) - [CVE-2020-10466](https://cve.now/CVE-2020-10466.md): Reflected XSS in admin/edit-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML v (no CVSS) - [CVE-2020-10465](https://cve.now/CVE-2020-10465.md): Reflected XSS in admin/edit-category.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML v (no CVSS) - [CVE-2020-10464](https://cve.now/CVE-2020-10464.md): Reflected XSS in admin/edit-article.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML vi (no CVSS) - [CVE-2020-10463](https://cve.now/CVE-2020-10463.md): Reflected XSS in admin/edit-template.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML v (no CVSS) - [CVE-2020-10462](https://cve.now/CVE-2020-10462.md): Reflected XSS in admin/edit-field.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via (no CVSS) - [CVE-2020-10461](https://cve.now/CVE-2020-10461.md): The way comments in article.php (vulnerable function in include/functions-article.php) are handled in Chadha PHPKB Standard Multi-Language 9 (no CVSS) - [CVE-2020-10460](https://cve.now/CVE-2020-10460.md): admin/include/operations.php (via admin/email-harvester.php) in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject untrusted (no CVSS) - [CVE-2020-10459](https://cve.now/CVE-2020-10459.md): Path Traversal in admin/assetmanager/assetmanager.php (vulnerable function saved in admin/assetmanager/functions.php) in Chadha PHPKB Standa (no CVSS) - [CVE-2020-10458](https://cve.now/CVE-2020-10458.md): Path Traversal in admin/imagepaster/operations.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete any folder on the we (no CVSS) - [CVE-2020-10457](https://cve.now/CVE-2020-10457.md): Path Traversal in admin/imagepaster/image-renaming.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to rename any file on the (no CVSS) - [CVE-2020-10456](https://cve.now/CVE-2020-10456.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10455](https://cve.now/CVE-2020-10455.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10454](https://cve.now/CVE-2020-10454.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10453](https://cve.now/CVE-2020-10453.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10452](https://cve.now/CVE-2020-10452.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10451](https://cve.now/CVE-2020-10451.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10450](https://cve.now/CVE-2020-10450.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10449](https://cve.now/CVE-2020-10449.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10448](https://cve.now/CVE-2020-10448.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10447](https://cve.now/CVE-2020-10447.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10446](https://cve.now/CVE-2020-10446.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10445](https://cve.now/CVE-2020-10445.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10444](https://cve.now/CVE-2020-10444.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10443](https://cve.now/CVE-2020-10443.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10442](https://cve.now/CVE-2020-10442.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10441](https://cve.now/CVE-2020-10441.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10440](https://cve.now/CVE-2020-10440.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10439](https://cve.now/CVE-2020-10439.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10438](https://cve.now/CVE-2020-10438.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10437](https://cve.now/CVE-2020-10437.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10436](https://cve.now/CVE-2020-10436.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10435](https://cve.now/CVE-2020-10435.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10434](https://cve.now/CVE-2020-10434.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10433](https://cve.now/CVE-2020-10433.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10432](https://cve.now/CVE-2020-10432.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10431](https://cve.now/CVE-2020-10431.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10430](https://cve.now/CVE-2020-10430.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10429](https://cve.now/CVE-2020-10429.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10428](https://cve.now/CVE-2020-10428.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10427](https://cve.now/CVE-2020-10427.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10426](https://cve.now/CVE-2020-10426.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10425](https://cve.now/CVE-2020-10425.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10424](https://cve.now/CVE-2020-10424.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10423](https://cve.now/CVE-2020-10423.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10422](https://cve.now/CVE-2020-10422.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10421](https://cve.now/CVE-2020-10421.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10420](https://cve.now/CVE-2020-10420.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10419](https://cve.now/CVE-2020-10419.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10418](https://cve.now/CVE-2020-10418.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10417](https://cve.now/CVE-2020-10417.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10416](https://cve.now/CVE-2020-10416.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10415](https://cve.now/CVE-2020-10415.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10414](https://cve.now/CVE-2020-10414.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10413](https://cve.now/CVE-2020-10413.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10412](https://cve.now/CVE-2020-10412.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10411](https://cve.now/CVE-2020-10411.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10410](https://cve.now/CVE-2020-10410.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10409](https://cve.now/CVE-2020-10409.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10408](https://cve.now/CVE-2020-10408.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10407](https://cve.now/CVE-2020-10407.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10406](https://cve.now/CVE-2020-10406.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10405](https://cve.now/CVE-2020-10405.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10404](https://cve.now/CVE-2020-10404.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10403](https://cve.now/CVE-2020-10403.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10402](https://cve.now/CVE-2020-10402.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10401](https://cve.now/CVE-2020-10401.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10400](https://cve.now/CVE-2020-10400.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10399](https://cve.now/CVE-2020-10399.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10398](https://cve.now/CVE-2020-10398.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10397](https://cve.now/CVE-2020-10397.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10396](https://cve.now/CVE-2020-10396.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10395](https://cve.now/CVE-2020-10395.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10394](https://cve.now/CVE-2020-10394.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10393](https://cve.now/CVE-2020-10393.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10392](https://cve.now/CVE-2020-10392.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10391](https://cve.now/CVE-2020-10391.md): The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script (no CVSS) - [CVE-2020-10390](https://cve.now/CVE-2020-10390.md): OS Command Injection in export.php (vulnerable function called from include/functions-article.php) in Chadha PHPKB Standard Multi-Language 9 (no CVSS) - [CVE-2020-10389](https://cve.now/CVE-2020-10389.md): admin/save-settings.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to achieve Code Execution by injecting PHP code in (no CVSS) - [CVE-2020-10388](https://cve.now/CVE-2020-10388.md): The way the Referer header in article.php is handled in Chadha PHPKB Standard Multi-Language 9 allows attackers to execute Stored (Blind) XS (no CVSS) - [CVE-2020-10387](https://cve.now/CVE-2020-10387.md): Path Traversal in admin/download.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to download files from the server usi (no CVSS) - [CVE-2020-10386](https://cve.now/CVE-2020-10386.md): admin/imagepaster/image-upload.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to achieve Code Execution by uploading (no CVSS) - [CVE-2019-5648](https://cve.now/CVE-2019-5648.md): LDAP Credential Exposure in Barracuda Load Balancer ADC (CVSS 8.7, Barracuda Load Balancer ADC) - [CVE-2020-10108](https://cve.now/CVE-2020-10108.md): In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability. (no CVSS, twisted) - [CVE-2020-10109](https://cve.now/CVE-2020-10109.md): In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability. (no CVSS, twisted) - [CVE-2020-7254](https://cve.now/CVE-2020-7254.md): Privilege escalation in Advanced Threat Defense (CVSS 7.7, McAfee Advanced Threat Defense) - [CVE-2020-7253](https://cve.now/CVE-2020-7253.md): Improper access control vulnerability in McAfee Agent (CVSS 5.7, McAfee Agent) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2020-03-12 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.