CVEs

408,492 total · page 5478 of 8,170

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2020-0795	Microsoft Sharepoint Server	Med	0.35	5.4	0.02		Mar 12, 2020	This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.An authenticated attacker could exploit this vulnerability by sending a specially crafted request to an affected SharePoint server, aka…
CVE-2020-0793	Microsoft Diagnostics Hub Standard Collector Service	Hig	0.51	7.8	0.01		Mar 12, 2020	An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability'.
CVE-2020-0791	Microsoft Windows Graphics component	Hig	0.51	7.8	0.01		Mar 12, 2020	An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0898.
CVE-2020-0789	Microsoft Visual Studio	Hig	0.46	7.1	0.01		Mar 12, 2020	A denial of service vulnerability exists when the Visual Studio Extension Installer Service improperly handles hard links, aka 'Visual Studio Extension Installer Service Denial of Service Vulnerability'.
CVE-2020-0788	Microsoft Windows	Hig	0.51	7.8	0.01		Mar 12, 2020	An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0877, CVE-2020-0887.
CVE-2020-0787	Microsoft Windows Background Intelligent Transfer Service (BITS)	Hig	0.75	7.8	0.43	KEV	Mar 12, 2020	An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka 'Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability'.
CVE-2020-0786	Microsoft Windows Tile Object Service	Hig	0.46	7.1	0.01		Mar 12, 2020	A denial of service vulnerability exists when the Windows Tile Object Service improperly handles hard links, aka 'Windows Tile Object Service Denial of Service Vulnerability'.
CVE-2020-0785	Microsoft Windows User Profile Service	Hig	0.46	7.1	0.01		Mar 12, 2020	An elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) improperly handles symlinks, aka 'Windows User Profile Service Elevation of Privilege Vulnerability'.
CVE-2020-0783	Microsoft Windows Universal Plug and Play	Hig	0.51	7.8	0.01		Mar 12, 2020	An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly handles objects in memory, aka 'Windows UPnP Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0781.
CVE-2020-0781	Microsoft Windows Universal Plug and Play (UPnP) service	Hig	0.51	7.8	0.01		Mar 12, 2020	An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly handles objects in memory, aka 'Windows UPnP Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0783.
CVE-2020-0780	Microsoft Windows Network List Service	Hig	0.51	7.8	0.01		Mar 12, 2020	An elevation of privilege vulnerability exists in the way that the Windows Network List Service handles objects in memory, aka 'Windows Network List Service Elevation of Privilege Vulnerability'.
CVE-2020-0779	Microsoft Windows Installer	Med	0.36	5.5	0.01		Mar 12, 2020	An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0798, CVE-2020-0814, CVE-2020-0842, CVE-2020-0843.
CVE-2020-0778	Microsoft Windows Network Connections Service	Hig	0.51	7.8	0.01		Mar 12, 2020	An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0802, CVE-2020-0803,…
CVE-2020-0777	Microsoft Windows Work Folder Service	Hig	0.51	7.8	0.01		Mar 12, 2020	An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work Folder Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0797, CVE-2020-0800, CVE-2020-0864, CVE-2020-0865,…
CVE-2020-0776	Microsoft Windows	Hig	0.51	7.8	0.01		Mar 12, 2020	An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles file operations.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Elevation of Privilege Vulnerability'. This…
CVE-2020-0775	Microsoft Windows Error Reporting	Med	0.36	5.5	0.01		Mar 12, 2020	An information disclosure vulnerability exists when Windows Error Reporting improperly handles file operations.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Error Reporting Information Disclosure Vulnerability'.
CVE-2020-0774	Microsoft Windows	Med	0.43	6.5	0.06		Mar 12, 2020	An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0874, CVE-2020-0879, CVE-2020-0880, CVE-2020-0882.
CVE-2020-0773	Microsoft Windows ActiveX Installer Service	Hig	0.51	7.8	0.01		Mar 12, 2020	An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows ActiveX Installer Service Elevation of Privilege…
CVE-2020-0772	Microsoft Windows	Hig	0.51	7.8	0.01		Mar 12, 2020	An elevation of privilege vulnerability exists when Windows Error Reporting improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'. This CVE…
CVE-2020-0771	Microsoft Windows CSC Service	Hig	0.51	7.8	0.01		Mar 12, 2020	An elevation of privilege vulnerability exists when the Windows CSC Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows CSC Service Elevation of Privilege Vulnerability'. This CVE ID…
CVE-2020-0770	Microsoft Windows ActiveX Installer Service	Hig	0.51	7.8	0.01		Mar 12, 2020	An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows ActiveX Installer Service Elevation of Privilege…
CVE-2020-0769	Microsoft Windows CSC Service	Hig	0.51	7.8	0.01		Mar 12, 2020	An elevation of privilege vulnerability exists when the Windows CSC Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows CSC Service Elevation of Privilege Vulnerability'. This CVE ID…
CVE-2020-0768	Microsoft Internet Explorer	Hig	0.49	7.5	0.09		Mar 12, 2020	A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0823, CVE-2020-0825, CVE-2020-0826, CVE-2020-0827,…
CVE-2020-0765	Microsoft Remote Desktop Connection Manager	Med	0.36	5.5	0.05		Mar 12, 2020	An information disclosure vulnerability exists in the Remote Desktop Connection Manager (RDCMan) application when it improperly parses XML input containing a reference to an external entity, aka 'Remote Desktop Connection Manager Information Disclosure Vulnerability'.
CVE-2020-0763	Microsoft Windows Defender Security Center	Hig	0.51	7.8	0.01		Mar 12, 2020	An elevation of privilege vulnerability exists when Windows Defender Security Center handles certain objects in memory.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Windows Defender Security Center Elevation of Privilege Vulnerability'.…
CVE-2020-0762	Microsoft Windows Defender Security Center	Hig	0.51	7.8	0.01		Mar 12, 2020	An elevation of privilege vulnerability exists when Windows Defender Security Center handles certain objects in memory.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Windows Defender Security Center Elevation of Privilege Vulnerability'.…
CVE-2020-0758	Microsoft Azure Devops Server	Hig	0.49	7.5	0.02		Mar 12, 2020	An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle pipeline job tokens, aka 'Azure DevOps Server and Team Foundation Services Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0815.
CVE-2020-0700	Microsoft Azure Devops Server	Med	0.35	5.4	0.01		Mar 12, 2020	A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site Scripting Vulnerability'.
CVE-2020-0690	Microsoft Directx	Cri	0.64	9.8	0.07		Mar 12, 2020	An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vulnerability'.
CVE-2020-0684	Microsoft Windows	Hig	0.58	8.8	0.09		Mar 12, 2020	A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attacker who successfully exploited this vulnerability could gain the same user rights as the local user, aka 'LNK Remote Code Execution…
CVE-2020-0645	Microsoft IIS Server	Hig	0.49	7.5	0.04		Mar 12, 2020	A tampering vulnerability exists when Microsoft IIS Server improperly handles malformed request headers, aka 'Microsoft IIS Server Tampering Vulnerability'.
CVE-2020-9464	Beckhoff Ethernet TCP/IP Bus Coupler BK9000	Hig	0.49	7.5	0.01		Mar 12, 2020	A Denial-of-Service vulnerability exists in BECKHOFF Ethernet TCP/IP Bus Coupler BK9000. After an attack has occurred, the device's functionality can be restored by rebooting.
CVE-2020-9436	Phoenixcontact TC ROUTER 3002T-4G	Hig	0.57	8.8	0.03		Mar 12, 2020	PHOENIX CONTACT TC ROUTER 3002T-4G through 2.05.3, TC ROUTER 2002T-3G through 2.05.3, TC ROUTER 3002T-4G VZW through 2.05.3, TC ROUTER 3002T-4G ATT through 2.05.3, TC CLOUD CLIENT 1002-4G through 2.03.17, and TC CLOUD CLIENT 1002-TXTX through 1.03.17 devices allow authenticated…
CVE-2020-9435	Phoenixcontact TC ROUTER 3002T-4G	Hig	0.49	7.5	0.01		Mar 12, 2020	PHOENIX CONTACT TC ROUTER 3002T-4G through 2.05.3, TC ROUTER 2002T-3G through 2.05.3, TC ROUTER 3002T-4G VZW through 2.05.3, TC ROUTER 3002T-4G ATT through 2.05.3, TC CLOUD CLIENT 1002-4G through 2.03.17, and TC CLOUD CLIENT 1002-TXTX through 1.03.17 devices contain a hardcoded…
CVE-2020-8436	WordPress Registrationmagic	Med	0.40	6.1	0.01		Mar 12, 2020	XSS was discovered in the RegistrationMagic plugin 4.6.0.0 for WordPress via the rm_form_id, rm_tr, or form_name parameter.
CVE-2020-8435	WordPress Registrationmagic	Hig	0.53	8.1	0.02		Mar 12, 2020	An issue was discovered in the RegistrationMagic plugin 4.6.0.0 for WordPress. There is SQL injection via the rm_analytics_show_form rm_form_id parameter.
CVE-2020-6858	Hotels Styx	Med	0.42	6.5	0.01		Mar 12, 2020	Hotels Styx through 1.0.0.beta8 allows HTTP response splitting due to CRLF Injection. This is exploitable if untrusted user input can appear in a response header.
CVE-2020-10504	Chadha PHPKB Standard Multi-Language	Med	0.28	4.3	0.00		Mar 12, 2020	CSRF in admin/edit-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a comment, given the id, via a crafted request.
CVE-2020-10503	Chadha PHPKB Standard Multi-Language	Med	0.28	4.3	0.00		Mar 12, 2020	CSRF in admin/manage-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to disapprove any comment, given the id, via a crafted request.
CVE-2020-10502	Chadha PHPKB Standard Multi-Language	Med	0.28	4.3	0.00		Mar 12, 2020	CSRF in admin/manage-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to approve any comment, given the id, via a crafted request.
CVE-2020-10501	Chadha PHPKB Standard Multi-Language	Med	0.42	6.5	0.01		Mar 12, 2020	CSRF in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a department, given the id, via a crafted request.
CVE-2020-10500	Chadha PHPKB Standard Multi-Language	Med	0.28	4.3	0.00		Mar 12, 2020	CSRF in admin/reply-ticket.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to reply to any ticket, given the id, via a crafted request.
CVE-2020-10499	Chadha PHPKB Standard Multi-Language	Med	0.28	4.3	0.00		Mar 12, 2020	CSRF in admin/manage-tickets.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to close any ticket, given the id, via a crafted request.
CVE-2020-10498	Chadha PHPKB Standard Multi-Language	Med	0.42	6.5	0.01		Mar 12, 2020	CSRF in admin/edit-category.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a category, given the id, via a crafted request.
CVE-2020-10497	Chadha PHPKB Standard Multi-Language	Med	0.42	6.5	0.01		Mar 12, 2020	CSRF in admin/manage-categories.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a category via a crafted request.
CVE-2020-10496	Chadha PHPKB Standard Multi-Language	Med	0.28	4.3	0.00		Mar 12, 2020	CSRF in admin/edit-article.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit an article, given the id, via a crafted request.
CVE-2020-10495	Chadha PHPKB Standard Multi-Language	Med	0.28	4.3	0.00		Mar 12, 2020	CSRF in admin/edit-template.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit an article template, given the id, via a crafted request.
CVE-2020-10494	Chadha PHPKB Standard Multi-Language	Med	0.28	4.3	0.00		Mar 12, 2020	CSRF in admin/edit-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a news article, given the id, via a crafted request.
CVE-2020-10493	Chadha PHPKB Standard Multi-Language	Med	0.28	4.3	0.00		Mar 12, 2020	CSRF in admin/edit-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a glossary term, given the id, via a crafted request.
CVE-2020-10492	Chadha PHPKB Standard Multi-Language	Med	0.28	4.3	0.00		Mar 12, 2020	CSRF in admin/manage-templates.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete an article template via a crafted request.

CVE-2020-0795MedMar 12, 2020
Microsoft
Sharepoint Server
risk 0.35cvss 5.4epss 0.02
This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.An authenticated attacker could exploit this vulnerability by sending a specially crafted request to an affected SharePoint server, aka…
CVE-2020-0793HigMar 12, 2020
Microsoft
Diagnostics Hub Standard Collector Service
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability'.
CVE-2020-0791HigMar 12, 2020
Microsoft
Windows Graphics component
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0898.
CVE-2020-0789HigMar 12, 2020
Microsoft
Visual Studio
risk 0.46cvss 7.1epss 0.01
A denial of service vulnerability exists when the Visual Studio Extension Installer Service improperly handles hard links, aka 'Visual Studio Extension Installer Service Denial of Service Vulnerability'.
CVE-2020-0788HigMar 12, 2020
Microsoft
Windows
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0877, CVE-2020-0887.
CVE-2020-0787HigKEVMar 12, 2020
Microsoft
Windows Background Intelligent Transfer Service (BITS)
risk 0.75cvss 7.8epss 0.43
An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka 'Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability'.
CVE-2020-0786HigMar 12, 2020
Microsoft
Windows Tile Object Service
risk 0.46cvss 7.1epss 0.01
A denial of service vulnerability exists when the Windows Tile Object Service improperly handles hard links, aka 'Windows Tile Object Service Denial of Service Vulnerability'.
CVE-2020-0785HigMar 12, 2020
Microsoft
Windows User Profile Service
risk 0.46cvss 7.1epss 0.01
An elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) improperly handles symlinks, aka 'Windows User Profile Service Elevation of Privilege Vulnerability'.
CVE-2020-0783HigMar 12, 2020
Microsoft
Windows Universal Plug and Play
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly handles objects in memory, aka 'Windows UPnP Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0781.
CVE-2020-0781HigMar 12, 2020
Microsoft
Windows Universal Plug and Play (UPnP) service
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly handles objects in memory, aka 'Windows UPnP Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0783.
CVE-2020-0780HigMar 12, 2020
Microsoft
Windows Network List Service
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the way that the Windows Network List Service handles objects in memory, aka 'Windows Network List Service Elevation of Privilege Vulnerability'.
CVE-2020-0779MedMar 12, 2020
Microsoft
Windows Installer
risk 0.36cvss 5.5epss 0.01
An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0798, CVE-2020-0814, CVE-2020-0842, CVE-2020-0843.
CVE-2020-0778HigMar 12, 2020
Microsoft
Windows Network Connections Service
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0802, CVE-2020-0803,…
CVE-2020-0777HigMar 12, 2020
Microsoft
Windows Work Folder Service
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work Folder Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0797, CVE-2020-0800, CVE-2020-0864, CVE-2020-0865,…
CVE-2020-0776HigMar 12, 2020
Microsoft
Windows
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles file operations.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Elevation of Privilege Vulnerability'. This…
CVE-2020-0775MedMar 12, 2020
Microsoft
Windows Error Reporting
risk 0.36cvss 5.5epss 0.01
An information disclosure vulnerability exists when Windows Error Reporting improperly handles file operations.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Error Reporting Information Disclosure Vulnerability'.
CVE-2020-0774MedMar 12, 2020
Microsoft
Windows
risk 0.43cvss 6.5epss 0.06
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0874, CVE-2020-0879, CVE-2020-0880, CVE-2020-0882.
CVE-2020-0773HigMar 12, 2020
Microsoft
Windows ActiveX Installer Service
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows ActiveX Installer Service Elevation of Privilege…
CVE-2020-0772HigMar 12, 2020
Microsoft
Windows
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when Windows Error Reporting improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'. This CVE…
CVE-2020-0771HigMar 12, 2020
Microsoft
Windows CSC Service
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows CSC Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows CSC Service Elevation of Privilege Vulnerability'. This CVE ID…
CVE-2020-0770HigMar 12, 2020
Microsoft
Windows ActiveX Installer Service
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows ActiveX Installer Service Elevation of Privilege…
CVE-2020-0769HigMar 12, 2020
Microsoft
Windows CSC Service
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows CSC Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows CSC Service Elevation of Privilege Vulnerability'. This CVE ID…
CVE-2020-0768HigMar 12, 2020
Microsoft
Internet Explorer
risk 0.49cvss 7.5epss 0.09
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0823, CVE-2020-0825, CVE-2020-0826, CVE-2020-0827,…
CVE-2020-0765MedMar 12, 2020
Microsoft
Remote Desktop Connection Manager
risk 0.36cvss 5.5epss 0.05
An information disclosure vulnerability exists in the Remote Desktop Connection Manager (RDCMan) application when it improperly parses XML input containing a reference to an external entity, aka 'Remote Desktop Connection Manager Information Disclosure Vulnerability'.
CVE-2020-0763HigMar 12, 2020
Microsoft
Windows Defender Security Center
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when Windows Defender Security Center handles certain objects in memory.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Windows Defender Security Center Elevation of Privilege Vulnerability'.…
CVE-2020-0762HigMar 12, 2020
Microsoft
Windows Defender Security Center
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when Windows Defender Security Center handles certain objects in memory.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Windows Defender Security Center Elevation of Privilege Vulnerability'.…
CVE-2020-0758HigMar 12, 2020
Microsoft
Azure Devops Server
risk 0.49cvss 7.5epss 0.02
An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle pipeline job tokens, aka 'Azure DevOps Server and Team Foundation Services Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0815.
CVE-2020-0700MedMar 12, 2020
Microsoft
Azure Devops Server
risk 0.35cvss 5.4epss 0.01
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site Scripting Vulnerability'.
CVE-2020-0690CriMar 12, 2020
Microsoft
Directx
risk 0.64cvss 9.8epss 0.07
An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vulnerability'.
CVE-2020-0684HigMar 12, 2020
Microsoft
Windows
risk 0.58cvss 8.8epss 0.09
A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attacker who successfully exploited this vulnerability could gain the same user rights as the local user, aka 'LNK Remote Code Execution…
CVE-2020-0645HigMar 12, 2020
Microsoft
IIS Server
risk 0.49cvss 7.5epss 0.04
A tampering vulnerability exists when Microsoft IIS Server improperly handles malformed request headers, aka 'Microsoft IIS Server Tampering Vulnerability'.
CVE-2020-9464HigMar 12, 2020
Beckhoff
Ethernet TCP/IP Bus Coupler BK9000
risk 0.49cvss 7.5epss 0.01
A Denial-of-Service vulnerability exists in BECKHOFF Ethernet TCP/IP Bus Coupler BK9000. After an attack has occurred, the device's functionality can be restored by rebooting.
CVE-2020-9436HigMar 12, 2020
Phoenixcontact
TC ROUTER 3002T-4G
risk 0.57cvss 8.8epss 0.03
PHOENIX CONTACT TC ROUTER 3002T-4G through 2.05.3, TC ROUTER 2002T-3G through 2.05.3, TC ROUTER 3002T-4G VZW through 2.05.3, TC ROUTER 3002T-4G ATT through 2.05.3, TC CLOUD CLIENT 1002-4G through 2.03.17, and TC CLOUD CLIENT 1002-TXTX through 1.03.17 devices allow authenticated…
CVE-2020-9435HigMar 12, 2020
Phoenixcontact
TC ROUTER 3002T-4G
risk 0.49cvss 7.5epss 0.01
PHOENIX CONTACT TC ROUTER 3002T-4G through 2.05.3, TC ROUTER 2002T-3G through 2.05.3, TC ROUTER 3002T-4G VZW through 2.05.3, TC ROUTER 3002T-4G ATT through 2.05.3, TC CLOUD CLIENT 1002-4G through 2.03.17, and TC CLOUD CLIENT 1002-TXTX through 1.03.17 devices contain a hardcoded…
CVE-2020-8436MedMar 12, 2020
WordPress
Registrationmagic
risk 0.40cvss 6.1epss 0.01
XSS was discovered in the RegistrationMagic plugin 4.6.0.0 for WordPress via the rm_form_id, rm_tr, or form_name parameter.
CVE-2020-8435HigMar 12, 2020
WordPress
Registrationmagic
risk 0.53cvss 8.1epss 0.02
An issue was discovered in the RegistrationMagic plugin 4.6.0.0 for WordPress. There is SQL injection via the rm_analytics_show_form rm_form_id parameter.
CVE-2020-6858MedMar 12, 2020
Hotels
Styx
risk 0.42cvss 6.5epss 0.01
Hotels Styx through 1.0.0.beta8 allows HTTP response splitting due to CRLF Injection. This is exploitable if untrusted user input can appear in a response header.
CVE-2020-10504MedMar 12, 2020
Chadha
PHPKB Standard Multi-Language
risk 0.28cvss 4.3epss 0.00
CSRF in admin/edit-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a comment, given the id, via a crafted request.
CVE-2020-10503MedMar 12, 2020
Chadha
PHPKB Standard Multi-Language
risk 0.28cvss 4.3epss 0.00
CSRF in admin/manage-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to disapprove any comment, given the id, via a crafted request.
CVE-2020-10502MedMar 12, 2020
Chadha
PHPKB Standard Multi-Language
risk 0.28cvss 4.3epss 0.00
CSRF in admin/manage-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to approve any comment, given the id, via a crafted request.
CVE-2020-10501MedMar 12, 2020
Chadha
PHPKB Standard Multi-Language
risk 0.42cvss 6.5epss 0.01
CSRF in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a department, given the id, via a crafted request.
CVE-2020-10500MedMar 12, 2020
Chadha
PHPKB Standard Multi-Language
risk 0.28cvss 4.3epss 0.00
CSRF in admin/reply-ticket.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to reply to any ticket, given the id, via a crafted request.
CVE-2020-10499MedMar 12, 2020
Chadha
PHPKB Standard Multi-Language
risk 0.28cvss 4.3epss 0.00
CSRF in admin/manage-tickets.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to close any ticket, given the id, via a crafted request.
CVE-2020-10498MedMar 12, 2020
Chadha
PHPKB Standard Multi-Language
risk 0.42cvss 6.5epss 0.01
CSRF in admin/edit-category.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a category, given the id, via a crafted request.
CVE-2020-10497MedMar 12, 2020
Chadha
PHPKB Standard Multi-Language
risk 0.42cvss 6.5epss 0.01
CSRF in admin/manage-categories.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a category via a crafted request.
CVE-2020-10496MedMar 12, 2020
Chadha
PHPKB Standard Multi-Language
risk 0.28cvss 4.3epss 0.00
CSRF in admin/edit-article.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit an article, given the id, via a crafted request.
CVE-2020-10495MedMar 12, 2020
Chadha
PHPKB Standard Multi-Language
risk 0.28cvss 4.3epss 0.00
CSRF in admin/edit-template.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit an article template, given the id, via a crafted request.
CVE-2020-10494MedMar 12, 2020
Chadha
PHPKB Standard Multi-Language
risk 0.28cvss 4.3epss 0.00
CSRF in admin/edit-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a news article, given the id, via a crafted request.
CVE-2020-10493MedMar 12, 2020
Chadha
PHPKB Standard Multi-Language
risk 0.28cvss 4.3epss 0.00
CSRF in admin/edit-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a glossary term, given the id, via a crafted request.
CVE-2020-10492MedMar 12, 2020
Chadha
PHPKB Standard Multi-Language
risk 0.28cvss 4.3epss 0.00
CSRF in admin/manage-templates.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete an article template via a crafted request.