|
209251
|
7.4 |
HIGH
Network
|
microsoft
|
sharepoint_foundation sharepoint_enterprise_server sharepoint_server
|
<p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated att…
|
CWE-79
Cross-site Scripting
|
CVE-2020-1198
|
2024-11-21 14:09 |
2020-09-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209252
|
7.8 |
HIGH
Local
|
microsoft
|
office 365_apps
|
<p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability coul…
|
NVD-CWE-noinfo
|
CVE-2020-1193
|
2024-11-21 14:09 |
2020-09-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209253
|
4.2 |
MEDIUM
Network
|
microsoft
|
chakracore edge
|
<p>A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could …
|
CWE-787
Out-of-bounds Write
|
CVE-2020-1180
|
2024-11-21 14:09 |
2020-09-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209254
|
4.2 |
MEDIUM
Network
|
microsoft
|
chakracore edge
|
<p>A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could …
|
CWE-787
Out-of-bounds Write
|
CVE-2020-1172
|
2024-11-21 14:09 |
2020-09-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209255
|
7.8 |
HIGH
Local
|
microsoft
|
windows_10 windows_server_2019 windows_server_2016
|
<p>An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in …
|
NVD-CWE-noinfo
|
CVE-2020-1169
|
2024-11-21 14:09 |
2020-09-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209256
|
6.6 |
MEDIUM
Local
|
microsoft
|
windows_server_2016 windows_10
|
<p>An elevation of privilege vulnerability exists in the way that the StartTileData.dll handles file creation in protected locations. An attacker who successfully exploited the vulnerability could ex…
|
NVD-CWE-noinfo
|
CVE-2020-1159
|
2024-11-21 14:09 |
2020-09-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209257
|
5.8 |
MEDIUM
Local
|
microsoft
|
windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_rt_8.1 windows_server_2019
|
<p>An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys. An attacker who successfully exploited the vulnerability could gain elevated privileges on a tar…
|
NVD-CWE-noinfo
|
CVE-2020-1152
|
2024-11-21 14:09 |
2020-09-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209258
|
5.5 |
MEDIUM
Local
|
microsoft
|
windows_10 windows_server_2016 visual_studio windows_server_2019 visual_studio_2019 visual_studio_2017
|
<p>An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles file operations. An attacker who successfully exploited this vulnerability could run p…
|
NVD-CWE-noinfo
|
CVE-2020-1133
|
2024-11-21 14:09 |
2020-09-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209259
|
6.6 |
MEDIUM
Local
|
microsoft
|
windows_10 windows_server_2016 visual_studio windows_server_2019 visual_studio_2019 visual_studio_2017
|
<p>An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles data operations. An attacker who successfully exploited this vulnerability could run p…
|
NVD-CWE-noinfo
|
CVE-2020-1130
|
2024-11-21 14:09 |
2020-09-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209260
|
8.8 |
HIGH
Network
|
microsoft
|
windows_10 windows_server_2016 windows_server_2019
|
<p>A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who successfully exploited this vulnerability could take contro…
|
NVD-CWE-noinfo
|
CVE-2020-1129
|
2024-11-21 14:09 |
2020-09-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|