|
209651
|
7.8 |
HIGH
Local
|
microsoft
|
windows_server_2008 windows_10 windows_8.1 windows_server_2016 windows_7 windows_rt_8.1 windows_server_2012 windows_server_2019
|
<p>An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory. An attacker who successfully exploited the vulnerability could exe…
|
NVD-CWE-noinfo
|
CVE-2020-16887
|
2024-11-21 14:07 |
2020-10-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209652
|
6.1 |
MEDIUM
Network
|
olimpoks
|
olimpok
|
OLIMPOKS under 3.3.39 allows Auth/Admin ErrorMessage XSS. Remote Attacker can use discovered vulnerability to inject malicious JavaScript payload to victim’s browsers in context of vulnerable applica…
|
CWE-79
Cross-site Scripting
|
CVE-2020-16270
|
2024-11-21 14:07 |
2020-10-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209653
|
5.3 |
MEDIUM
Local
|
microsoft
|
powershellget
|
<p>A security feature bypass vulnerability exists in the PowerShellGet V2 module. An attacker who successfully exploited this vulnerability could bypass WDAC (Windows Defender Application Control) po…
|
NVD-CWE-noinfo
|
CVE-2020-16886
|
2024-11-21 14:07 |
2020-10-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209654
|
7.8 |
HIGH
Local
|
microsoft
|
windows_10 windows_server_2016 windows_server_2019
|
<p>An elevation of privilege vulnerability exists when the Windows Storage VSP Driver improperly handles file operations. An attacker who successfully exploited this vulnerability could gain elevated…
|
NVD-CWE-noinfo
|
CVE-2020-16885
|
2024-11-21 14:07 |
2020-10-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209655
|
7.1 |
HIGH
Local
|
microsoft
|
windows_server_2016 windows_10
|
<p>An elevation of privilege vulnerability exists when Microsoft Windows improperly handles reparse points. An attacker who successfully exploited this vulnerability could overwrite or delete a targe…
|
NVD-CWE-noinfo
|
CVE-2020-16877
|
2024-11-21 14:07 |
2020-10-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209656
|
7.1 |
HIGH
Local
|
microsoft
|
windows_10 windows_server_2016 windows_server_2019
|
<p>An elevation of privilege vulnerability exists when the Windows Application Compatibility Client Library improperly handles registry operations. An attacker who successfully exploited this vulnera…
|
NVD-CWE-noinfo
|
CVE-2020-16876
|
2024-11-21 14:07 |
2020-10-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209657
|
7.5 |
HIGH
Network
|
microsoft
|
windows_server_2008 windows_7
|
<p>A denial of service vulnerability exists in Windows Remote Desktop Service when an attacker connects to the target system using RDP and sends specially crafted requests. An attacker who successful…
|
NVD-CWE-noinfo
|
CVE-2020-16863
|
2024-11-21 14:07 |
2020-10-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209658
|
8.8 |
HIGH
Network
|
zohocorp
|
manageengine_applications_manager
|
Zoho ManageEngine Applications Manager version 14740 and prior allows an authenticated SQL Injection via a crafted jsp request in the RCA module.
|
CWE-89
SQL Injection
|
CVE-2020-16267
|
2024-11-21 14:07 |
2020-10-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209659
|
7.8 |
HIGH
Local
|
msi
|
ambientlink_mslo64_firmware
|
The MSI AmbientLink MsIo64 driver 1.0.0.8 has a Buffer Overflow (0x80102040, 0x80102044, 0x80102050,and 0x80102054).
|
CWE-787
Out-of-bounds Write
|
CVE-2020-17382
|
2024-11-21 14:07 |
2020-10-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209660
|
6.8 |
MEDIUM
Network
|
istio
|
istio
|
In Istio 1.5.0 though 1.5.8 and Istio 1.6.0 through 1.6.7, when users specify an AuthorizationPolicy resource with DENY actions using wildcard suffixes (e.g. *-some-suffix) for source principals or n…
|
NVD-CWE-noinfo
|
CVE-2020-16844
|
2024-11-21 14:07 |
2020-10-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|