VYPR

CVEs

101,977 total · page 1498 of 2,040

AllCriticalHighKEV
  • CVE-2020-0961HigApr 15, 2020
    Microsoft
    Access Connectivity Engine
    risk 0.52cvss 7.8epss 0.12

    A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'.

  • CVE-2020-0960HigApr 15, 2020
    Microsoft
    Windows
    risk 0.52cvss 7.8epss 0.12

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0889, CVE-2020-0953, CVE-2020-0959, CVE-2020-0988,…

  • CVE-2020-0959HigApr 15, 2020
    Microsoft
    Windows
    risk 0.52cvss 7.8epss 0.12

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0889, CVE-2020-0953, CVE-2020-0960, CVE-2020-0988,…

  • CVE-2020-0958HigApr 15, 2020
    Microsoft
    Windows
    risk 0.51cvss 7.8epss 0.01

    An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0956, CVE-2020-0957.

  • CVE-2020-0957HigApr 15, 2020
    Microsoft
    Windows
    risk 0.51cvss 7.8epss 0.01

    An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0956, CVE-2020-0958.

  • CVE-2020-0956HigApr 15, 2020
    Microsoft
    Windows
    risk 0.51cvss 7.8epss 0.01

    An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0957, CVE-2020-0958.

  • CVE-2020-0953HigApr 15, 2020
    Microsoft
    Windows
    risk 0.52cvss 7.8epss 0.12

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0889, CVE-2020-0959, CVE-2020-0960, CVE-2020-0988,…

  • CVE-2020-0950HigApr 15, 2020
    Microsoft
    Windows Media Foundation
    risk 0.58cvss 8.8epss 0.05

    A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0948, CVE-2020-0949.

  • CVE-2020-0949HigApr 15, 2020
    Microsoft
    Windows Media Foundation
    risk 0.58cvss 8.8epss 0.05

    A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0948, CVE-2020-0950.

  • CVE-2020-0948HigApr 15, 2020
    Microsoft
    Windows Media Foundation
    risk 0.58cvss 8.8epss 0.05

    A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0949, CVE-2020-0950.

  • CVE-2020-0944HigApr 15, 2020
    Microsoft
    Connected User Experiences and Telemetry Service
    risk 0.51cvss 7.8epss 0.01

    An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka 'Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0942,…

  • CVE-2020-0942HigApr 15, 2020
    Microsoft
    Connected User Experiences and Telemetry Service
    risk 0.46cvss 7.1epss 0.01

    An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka 'Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0944,…

  • CVE-2020-0940HigApr 15, 2020
    Microsoft
    Windows Push Notification Service
    risk 0.51cvss 7.8epss 0.01

    An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push Notification Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1001, CVE-2020-1006, CVE-2020-1017.

  • CVE-2020-0938HigKEVApr 15, 2020
    Microsoft
    Windows
    risk 0.68cvss 7.8epss 0.69

    A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format.For all systems except Windows 10, an attacker who successfully exploited the…

  • CVE-2020-0936HigApr 15, 2020
    Microsoft
    Windows
    risk 0.46cvss 7.1epss 0.01

    An elevation of privilege vulnerability exists when a Windows scheduled task improperly handles file redirections, aka 'Windows Scheduled Task Elevation of Privilege Vulnerability'.

  • CVE-2020-0934HigApr 15, 2020
    Microsoft
    Windows
    risk 0.51cvss 7.8epss 0.01

    An elevation of privilege vulnerability exists when the Windows WpcDesktopMonSvc improperly manages memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is…

  • CVE-2020-0932HigApr 15, 2020
    Microsoft
    Sharepoint Server
    risk 0.60cvss 8.8epss 0.31

    A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0920, CVE-2020-0929,…

  • CVE-2020-0931HigApr 15, 2020
    Microsoft
    Sharepoint Server
    risk 0.58cvss 8.8epss 0.11

    A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0920, CVE-2020-0929,…

  • CVE-2020-0929HigApr 15, 2020
    Microsoft
    Sharepoint Server
    risk 0.58cvss 8.8epss 0.11

    A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0920, CVE-2020-0931,…

  • CVE-2020-0920HigApr 15, 2020
    Microsoft
    Sharepoint Server
    risk 0.58cvss 8.8epss 0.10

    A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0929, CVE-2020-0931,…

  • CVE-2020-0919HigApr 15, 2020
    Microsoft
    Remote Desktop App for Mac
    risk 0.51cvss 7.8epss 0.01

    An elevation of privilege vulnerability exists in Remote Desktop App for Mac in the way it allows an attacker to load unsigned binaries, aka 'Microsoft Remote Desktop App for Mac Elevation of Privilege Vulnerability'.

  • CVE-2020-0913HigApr 15, 2020
    Microsoft
    Windows Kernel
    risk 0.51cvss 7.8epss 0.01

    An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1000, CVE-2020-1003, CVE-2020-1027.

  • CVE-2020-0910HigApr 15, 2020
    Microsoft
    Windows Hyper-V
    risk 0.55cvss 8.4epss 0.09

    A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote Code Execution Vulnerability'.

  • CVE-2020-0907HigApr 15, 2020
    Microsoft
    Microsoft Graphics Components
    risk 0.52cvss 7.8epss 0.12

    A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics Components Remote Code Execution Vulnerability'.

  • CVE-2020-0906HigApr 15, 2020
    Microsoft
    Excel
    risk 0.58cvss 8.8epss 0.11

    A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0979.

  • CVE-2020-0895HigApr 15, 2020
    Microsoft
    Windows VBScript Engine
    risk 0.49cvss 7.5epss 0.08

    A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Remote Code Execution Vulnerability'.

  • CVE-2020-0889HigApr 15, 2020
    Microsoft
    Windows
    risk 0.52cvss 7.8epss 0.12

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0953, CVE-2020-0959, CVE-2020-0960, CVE-2020-0988,…

  • CVE-2020-0888HigApr 15, 2020
    Microsoft
    Directx
    risk 0.51cvss 7.8epss 0.01

    An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0784.

  • CVE-2020-0835HigApr 15, 2020
    Microsoft
    Windows Defender
    risk 0.51cvss 7.8epss 0.01

    An elevation of privilege vulnerability exists when Windows Defender antimalware platform improperly handles hard links, aka 'Windows Defender Antimalware Platform Hard Link Elevation of Privilege Vulnerability'.

  • CVE-2020-0784HigApr 15, 2020
    Microsoft
    Directx
    risk 0.51cvss 7.8epss 0.01

    An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0888.

  • CVE-2020-0760HigApr 15, 2020
    Microsoft
    Office
    risk 0.58cvss 8.8epss 0.09

    A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Office Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0991.

  • CVE-2020-0687HigApr 15, 2020
    Microsoft
    Windows
    risk 0.59cvss 8.8epss 0.19

    A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Microsoft Graphics Remote Code Execution Vulnerability'.

  • CVE-2020-2964HigApr 15, 2020
    Oracle Corporation
    Financial Services Data Foundation
    risk 0.46cvss 7.1epss 0.01

    Vulnerability in the Oracle Financial Services Data Foundation product of Oracle Financial Services Applications (component: User Interface). Supported versions that are affected are 8.0.6 - 8.0.9. Easily exploitable vulnerability allows low privileged attacker with network…

  • CVE-2020-2963HigApr 15, 2020
    Oracle Corporation
    Weblogic Server
    risk 0.47cvss 7.2epss 0.01

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows high privileged attacker with network…

  • CVE-2020-2959HigApr 15, 2020
    Oracle Corporation
    VM Virtualbox
    risk 0.56cvss 8.6epss 0.03

    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.40, prior to 6.0.20 and prior to 6.1.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via…

  • CVE-2020-2958HigApr 15, 2020
    Oracle Corporation
    VM Virtualbox
    risk 0.49cvss 7.5epss 0.00

    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.40, prior to 6.0.20 and prior to 6.1.6. Difficult to exploit vulnerability allows high privileged attacker with logon to the…

  • CVE-2020-2956HigApr 15, 2020
    Oracle Corporation
    Human Resources
    risk 0.53cvss 8.1epss 0.02

    Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Hierarchy Diagrammers). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows low privileged attacker with network access via…

  • CVE-2020-2945HigApr 15, 2020
    Oracle Corporation
    Oracle Financial Services Deposit Insurance Calculations for Liquidity Risk Management
    risk 0.46cvss 7.1epss 0.01

    Vulnerability in the Oracle Financial Services Deposit Insurance Calculations for Liquidity Risk Management product of Oracle Financial Services Applications (component: User Interfaces). Supported versions that are affected are 8.0.7 and 8.0.8. Easily exploitable vulnerability…

  • CVE-2020-2944HigApr 15, 2020
    Oracle Corporation
    Solaris
    risk 0.60cvss 8.8epss 0.02

    Vulnerability in the Oracle Solaris product of Oracle Systems (component: Common Desktop Environment). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris…

  • CVE-2020-2943HigApr 15, 2020
    Oracle Corporation
    Financial Services Liquidity Risk Measurement And Management
    risk 0.46cvss 7.1epss 0.01

    Vulnerability in the Oracle Financial Services Liquidity Risk Measurement and Management product of Oracle Financial Services Applications (component: User Interface). Supported versions that are affected are 8.0.7 and 8.0.8. Easily exploitable vulnerability allows low…

  • CVE-2020-2942HigApr 15, 2020
    Oracle Corporation
    Financial Services Price Creation And Discovery
    risk 0.46cvss 7.1epss 0.01

    Vulnerability in the Oracle Financial Services Price Creation and Discovery product of Oracle Financial Services Applications (component: User Interface). The supported version that is affected is 8.0.7. Easily exploitable vulnerability allows low privileged attacker with…

  • CVE-2020-2941HigApr 15, 2020
    Oracle Corporation
    Financial Services Funds Transfer Pricing
    risk 0.46cvss 7.1epss 0.01

    Vulnerability in the Oracle Financial Services Funds Transfer Pricing product of Oracle Financial Services Applications (component: User Interface). Supported versions that are affected are 8.0.6 and 8.0.7. Easily exploitable vulnerability allows low privileged attacker with…

  • CVE-2020-2940HigApr 15, 2020
    Oracle Corporation
    Financial Services Profitability Management
    risk 0.46cvss 7.1epss 0.01

    Vulnerability in the Oracle Financial Services Profitability Management product of Oracle Financial Services Applications (component: User Interface). Supported versions that are affected are 8.0.6 and 8.0.7. Easily exploitable vulnerability allows low privileged attacker with…

  • CVE-2020-2939HigApr 15, 2020
    Oracle Corporation
    Financial Services Asset Liability Management
    risk 0.46cvss 7.1epss 0.01

    Vulnerability in the Oracle Financial Services Asset Liability Management product of Oracle Financial Services Applications (component: User Interface). Supported versions that are affected are 8.0.6 and 8.0.7. Easily exploitable vulnerability allows low privileged attacker with…

  • CVE-2020-2938HigApr 15, 2020
    Oracle Corporation
    Financial Services Loan Loss Forecasting And Provisioning
    risk 0.46cvss 7.1epss 0.01

    Vulnerability in the Oracle Financial Services Loan Loss Forecasting and Provisioning product of Oracle Financial Services Applications (component: User Interface). Supported versions that are affected are 8.0.6 - 8.0.8. Easily exploitable vulnerability allows low privileged…

  • CVE-2020-2937HigApr 15, 2020
    Oracle Corporation
    Insurance Accounting Analyzer
    risk 0.46cvss 7.1epss 0.01

    Vulnerability in the Oracle Insurance Accounting Analyzer product of Oracle Financial Services Applications (component: User Interface). Supported versions that are affected are 8.0.6 - 8.0.9. Easily exploitable vulnerability allows low privileged attacker with network access…

  • CVE-2020-2936HigApr 15, 2020
    Oracle Corporation
    Financial Services Balance Sheet Planning
    risk 0.46cvss 7.1epss 0.01

    Vulnerability in the Oracle Financial Services Balance Sheet Planning product of Oracle Financial Services Applications (component: User Interface). The supported version that is affected is 8.0.8. Easily exploitable vulnerability allows low privileged attacker with network…

  • CVE-2020-2935HigApr 15, 2020
    Oracle Corporation
    Financial Services Hedge Management And Ifrs Valuations
    risk 0.46cvss 7.1epss 0.01

    Vulnerability in the Oracle Financial Services Hedge Management and IFRS Valuations product of Oracle Financial Services Applications (component: User Interface). Supported versions that are affected are 8.0.6 - 8.0.8. Easily exploitable vulnerability allows low privileged…

  • CVE-2020-2929HigApr 15, 2020
    Oracle Corporation
    VM Virtualbox
    risk 0.51cvss 7.8epss 0.01

    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.40, prior to 6.0.20 and prior to 6.1.6. Easily exploitable vulnerability allows low privileged attacker with logon to the…

  • CVE-2020-2927HigApr 15, 2020
    Oracle Corporation
    Solaris
    risk 0.51cvss 7.8epss 0.00

    Vulnerability in the Oracle Solaris product of Oracle Systems (component: Common Desktop Environment). Supported versions that are affected are 10 and 11. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris…