|
222721
|
5.4 |
MEDIUM
Network
|
microsoft
|
sharepoint_enterprise_server
|
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office S…
|
CWE-79
Cross-site Scripting
|
CVE-2019-1070
|
2024-11-21 13:35 |
2019-10-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222722
|
8.8 |
HIGH
Network
|
microsoft
|
windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_rt_8.1 windows_server_2019
|
A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'.
|
CWE-611
XXE
|
CVE-2019-1060
|
2024-11-21 13:35 |
2019-10-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222723
|
5.5 |
MEDIUM
Local
|
microsoft
|
windows_server_2008 windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_7 windows_rt_8.1 windows_server_2019
|
An information disclosure vulnerability exists when the Windows Graphics component improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain informa…
|
CWE-200
Information Exposure
|
CVE-2019-1078
|
2024-11-21 13:35 |
2019-08-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222724
|
7.5 |
HIGH
Network
|
microsoft
|
windows_server_2008 windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_7 windows_rt_8.1 windows_server_2019
|
A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input. An attacker who successfully exploited the vulnerability could run malicious code …
|
CWE-611
XXE
|
CVE-2019-1057
|
2024-11-21 13:35 |
2019-08-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222725
|
4.3 |
MEDIUM
Network
|
microsoft
|
edge
|
An information disclosure vulnerability exists when Microsoft Edge based on Edge HTML improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain infor…
|
CWE-200
Information Exposure
|
CVE-2019-1030
|
2024-11-21 13:35 |
2019-08-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222726
|
7.5 |
HIGH
Network
|
microsoft
|
chakracore edge
|
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. Th…
|
CWE-787
Out-of-bounds Write
|
CVE-2019-1092
|
2024-11-21 13:35 |
2019-07-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222727
|
5.5 |
MEDIUM
Local
|
microsoft
|
windows_10 windows_server_2016 windows_server_2019
|
An information disclosure vulnerability exists when Unistore.dll fails to properly handle objects in memory, aka 'Microsoft unistore.dll Information Disclosure Vulnerability'.
|
CWE-200
Information Exposure
|
CVE-2019-1091
|
2024-11-21 13:35 |
2019-07-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222728
|
7.8 |
HIGH
Local
|
microsoft
|
windows_10 windows_server_2016 windows_server_2019
|
An elevation of privilege vulnerability exists in the way that the dnsrslvr.dll handles objects in memory, aka 'Windows dnsrlvr.dll Elevation of Privilege Vulnerability'.
|
NVD-CWE-noinfo
|
CVE-2019-1090
|
2024-11-21 13:35 |
2019-07-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222729
|
7.8 |
HIGH
Local
|
microsoft
|
windows_server_2008 windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_7 windows_rt_8.1 windows_server_2019
|
An elevation of privilege exists in Windows Audio Service, aka 'Windows Audio Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1086, CVE-2019-1087.
|
NVD-CWE-noinfo
|
CVE-2019-1088
|
2024-11-21 13:35 |
2019-07-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222730
|
7.8 |
HIGH
Local
|
microsoft
|
windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_7 windows_rt_8.1 windows_server_2019
|
An elevation of privilege exists in Windows Audio Service, aka 'Windows Audio Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1086, CVE-2019-1088.
|
NVD-CWE-noinfo
|
CVE-2019-1087
|
2024-11-21 13:35 |
2019-07-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|