|
209301
|
7.8 |
HIGH
Local
|
microsoft
|
3d_viewer
|
<p>A remote code execution vulnerability exists when the Base3D rendering engine improperly handles memory.</p>
<p>An attacker who successfully exploited the vulnerability would gain execution on a v…
|
NVD-CWE-noinfo
|
CVE-2020-17003
|
2024-11-21 14:07 |
2020-10-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209302
|
4.7 |
MEDIUM
Local
|
microsoft
|
.net_framework
|
<p>An information disclosure vulnerability exists when the .NET Framework improperly handles objects in memory. An attacker who successfully exploited the vulnerability could disclose contents of an …
|
NVD-CWE-noinfo
|
CVE-2020-16937
|
2024-11-21 14:07 |
2020-10-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209303
|
7.8 |
HIGH
Local
|
microsoft
|
365_apps 3d_viewer
|
<p>A remote code execution vulnerability exists when the Base3D rendering engine improperly handles memory.</p>
<p>An attacker who successfully exploited the vulnerability would gain execution on a v…
|
NVD-CWE-noinfo
|
CVE-2020-16918
|
2024-11-21 14:07 |
2020-10-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209304
|
5.3 |
MEDIUM
Network
|
microsoft
|
azure_functions
|
<p>An elevation of privilege vulnerability exists in the way Azure Functions validate access keys.</p>
<p>An unauthenticated attacker who successfully exploited this vulnerability could invoke an HTT…
|
CWE-863
Incorrect Authorization
|
CVE-2020-16904
|
2024-11-21 14:07 |
2020-10-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209305
|
5.0 |
MEDIUM
Local
|
microsoft
|
windows_server_2016 windows_10
|
<p>An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory.</p>
<p>To exploit this vulnerability, an authenticated attacker could run a special…
|
CWE-665
Improper Initialization
|
CVE-2020-16901
|
2024-11-21 14:07 |
2020-10-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209306
|
7.8 |
HIGH
Local
|
microsoft
|
visual_studio_code
|
<p>A remote code execution vulnerability exists in Visual Studio Code when a user is tricked into opening a malicious 'package.json' file. An attacker who successfully exploited the vulnerability cou…
|
NVD-CWE-noinfo
|
CVE-2020-17023
|
2024-11-21 14:07 |
2020-10-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209307
|
7.8 |
HIGH
Local
|
microsoft
|
network_watcher_agent
|
<p>An elevation of privilege vulnerability exists in Network Watcher Agent virtual machine extension for Linux. An attacker who successfully exploited this vulnerability could execute code with eleva…
|
NVD-CWE-noinfo
|
CVE-2020-16995
|
2024-11-21 14:07 |
2020-10-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209308
|
7.8 |
HIGH
Local
|
microsoft
|
windows_server_2012 windows_server_2016 windows_server_2019
|
<p>An elevation of privilege vulnerability exists when the Windows iSCSI Target Service improperly handles file operations. An attacker who successfully exploited this vulnerability could gain elevat…
|
NVD-CWE-noinfo
|
CVE-2020-16980
|
2024-11-21 14:07 |
2020-10-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209309
|
5.4 |
MEDIUM
Network
|
microsoft
|
dynamics_365
|
<p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated at…
|
CWE-79
Cross-site Scripting
|
CVE-2020-16978
|
2024-11-21 14:07 |
2020-10-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209310
|
7.0 |
HIGH
Local
|
microsoft
|
visual_studio_code
|
<p>A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads a Jupyter notebook file. An attacker who successfully exploited the vulnerability could run arbit…
|
NVD-CWE-noinfo
|
CVE-2020-16977
|
2024-11-21 14:07 |
2020-10-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|