Win32k Information Disclosure Vulnerability

An information disclosure vulnerability exists when the win32k component improperly provides kernel information. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit the vulnerability, an attacker would have to eithe...

PT-2020-1909

Name of the Vulnerable Software and Affected Versions Windows Universal Plug and Play UPnP service affected versions not specified Description The issue is related to an elevation of privilege vulnerability in the Windows Universal Plug and Play UPnP service. This vulnerability occurs due to the...

PT-2020-1908

Name of the Vulnerable Software and Affected Versions Windows Universal Plug and Play UPnP service affected versions not specified Description The issue is related to an elevation of privilege vulnerability in the Windows Universal Plug and Play UPnP service. This vulnerability occurs due to the...

PT-2020-1840

Name of the Vulnerable Software and Affected Versions Microsoft Word affected versions not specified Description A remote code execution issue exists in Microsoft Word software due to improper handling of objects in memory. An attacker could exploit this issue by using a specially crafted file to...

CVE-2020-0735

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0666, CVE-2020-0667, CVE-2020-0752...

CVE-2020-0701

An elevation of privilege vulnerability exists in the way that the Windows Client License Service ClipSVC handles objects in memory, aka 'Windows Client License Service Elevation of Privilege Vulnerability'...

CVE-2020-0682

An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory, aka 'Windows Function Discovery Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0679, CVE-2020-0680...

PT-2020-1660

Name of the Vulnerable Software and Affected Versions Microsoft Excel affected versions not specified Description A remote code execution issue exists in Microsoft Excel software due to improper handling of objects in memory. This can be exploited by an attacker to run arbitrary code in the conte...

PT-2020-1696

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description An information disclosure issue exists due to the Windows kernel's improper handling of objects in memory. This could allow an attacker to disclose protected information using a specially...

Centreon Poller Authenticated Remote Command Execution

An authenticated user with sufficient administrative rights to manage pollers can use this functionality to execute arbitrary commands remotely. Usually, the miscellaneous commands are used by the additional modules to perform certain actions, by the scheduler for data processing, etc. This modul...

VulnCheck KEV: CVE-2020-0650

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0651, CVE-2020-0653...

Unspecified Vulnerability in Oracle Coherence

Oracle Fusion Middleware, the digital business platform for enterprise and cloud computing, is a comprehensive family of middleware products that enable organizations to create and run agile, intelligent business applications and maximize IT efficiency by leveraging modern hardware and software...

CVE-2020-0628

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613, CVE-2020-0614, CVE-2020-0623, CVE-2020-0625, CVE-2020-0626,...

Windows Search Indexer Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could run a...

Microsoft Access Database Unauthorized Access

The vulnerability of the relational database management system used in Microsoft Access programs from Microsoft Office and Office 365 is related to errors in object processing in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information throu...

PT-2019-4179

Name of the Vulnerable Software and Affected Versions Microsoft Access affected versions not specified Description An information disclosure issue exists due to improper handling of objects in memory. This could allow an attacker to obtain unauthorized access to protected information using a...

Config software interface Code Execution

The vulnerability of the Config software interface of the Apache Solr search server lies in the rehydration of unreliable data in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the Solr side through HTTP POST requests after deserialization...

Windows GDI Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could explo...

CVE-2019-1359

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1358...

CVE-2019-1358

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1359...