|
209371
|
7.5 |
HIGH
Network
|
microsoft
|
windows_server_2008 windows_10 windows_server_2016 windows_rt_8.1 windows_server_2012 windows_server_2019 windows_8.1 windows_7
|
<p>An information disclosure vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially crafted requests. An attacker who succe…
|
NVD-CWE-noinfo
|
CVE-2020-16896
|
2024-11-21 14:07 |
2020-10-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209372
|
7.8 |
HIGH
Local
|
microsoft
|
windows_10 windows_server_2019 windows_server_2016
|
<p>An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash. An attacker who successfully exploited this vulnerability could delete a tar…
|
CWE-755
Improper Handling of Exceptional Conditions
|
CVE-2020-16895
|
2024-11-21 14:07 |
2020-10-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209373
|
7.7 |
HIGH
Network
|
microsoft
|
windows_server_2016 windows_10
|
<p>A denial of service vulnerability exists when Windows Network Address Translation (NAT) on a host server fails to properly validate input from a privileged user on a guest operating system. An att…
|
NVD-CWE-noinfo
|
CVE-2020-16894
|
2024-11-21 14:07 |
2020-10-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209374
|
7.8 |
HIGH
Local
|
microsoft
|
windows_10 windows_8.1 windows_server_2016 windows_rt_8.1 windows_server_2012 windows_server_2019
|
<p>An elevation of privilege vulnerability exists in the way that the Windows kernel image handles objects in memory.
An attacker who successfully exploited the vulnerability could execute code with …
|
NVD-CWE-noinfo
|
CVE-2020-16892
|
2024-11-21 14:07 |
2020-10-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209375
|
8.8 |
HIGH
Local
|
microsoft
|
windows_10 windows_server_2008 windows_server_2016 windows_server_2012 windows_server_2019 windows_8.1 windows_7
|
<p>A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerabi…
|
CWE-20
Improper Input Validation
|
CVE-2020-16891
|
2024-11-21 14:07 |
2020-10-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209376
|
7.8 |
HIGH
Local
|
microsoft
|
windows_10 windows_server_2019 windows_server_2016
|
<p>An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary cod…
|
NVD-CWE-noinfo
|
CVE-2020-16890
|
2024-11-21 14:07 |
2020-10-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209377
|
5.5 |
MEDIUM
Local
|
microsoft
|
windows_server_2008 windows_10 windows_8.1 windows_server_2016 windows_rt_8.1 windows_server_2012 windows_server_2019 windows_7
|
<p>An information disclosure vulnerability exists when the Windows KernelStream improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain informatio…
|
NVD-CWE-noinfo
|
CVE-2020-16889
|
2024-11-21 14:07 |
2020-10-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209378
|
7.8 |
HIGH
Local
|
microsoft
|
windows_server_2008 windows_10 windows_8.1 windows_server_2016 windows_7 windows_rt_8.1 windows_server_2012 windows_server_2019
|
<p>An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory. An attacker who successfully exploited the vulnerability could exe…
|
NVD-CWE-noinfo
|
CVE-2020-16887
|
2024-11-21 14:07 |
2020-10-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209379
|
6.1 |
MEDIUM
Network
|
olimpoks
|
olimpok
|
OLIMPOKS under 3.3.39 allows Auth/Admin ErrorMessage XSS. Remote Attacker can use discovered vulnerability to inject malicious JavaScript payload to victim’s browsers in context of vulnerable applica…
|
CWE-79
Cross-site Scripting
|
CVE-2020-16270
|
2024-11-21 14:07 |
2020-10-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209380
|
5.3 |
MEDIUM
Local
|
microsoft
|
powershellget
|
<p>A security feature bypass vulnerability exists in the PowerShellGet V2 module. An attacker who successfully exploited this vulnerability could bypass WDAC (Windows Defender Application Control) po…
|
NVD-CWE-noinfo
|
CVE-2020-16886
|
2024-11-21 14:07 |
2020-10-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|