Microsoft Edge Elevation of Privilege Vulnerability (CNVD-2020-61595)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. An elevation of privilege vulnerability exists in Microsoft Edge that stems from the program failing to properly enforce cross-domain policies. An attacker could exploit the vulnerability...

Microsoft Windows Multiple Vulnerabilities (KB4556812)

This host is missing a critical security update according to Microsoft KB4556812 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-6253

Under certain conditions, SAP Adaptive Server Enterprise Web Services, versions 15.7, 16.0, allows an authenticated user to execute crafted database queries to elevate their privileges, modify database objects, or execute commands they are not otherwise authorized to execute, leading to SQL...

Sql injection

SAP Adaptive Server Enterprise, version 16.0, allows an authenticated user to execute crafted database queries to elevate privileges of users in the system, leading to SQL Injection...

CVE-2020-6241

SAP Adaptive Server Enterprise (ASE) 16.0 is affected by CVE-2020-6241. The vulnerability is a SQL injection in global temporary tables that an authenticated user can exploit to elevate privileges within ASE. The issue is confirmed by Red Hat’s CVE entry and ThreatPost reporting alongside SAP/Tru...

CVE-2020-6253

Under certain conditions, SAP Adaptive Server Enterprise Web Services, versions 15.7, 16.0, allows an authenticated user to execute crafted database queries to elevate their privileges, modify database objects, or execute commands they are not otherwise authorized to execute, leading to SQL...

.NET Framework Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in .NET Framework which could allow an attacker to elevate their privilege level. To exploit the vulnerability, an attacker would first have to access the local machine, and then run a malicious program. The update addresses the vulnerability by...

Windows GDI Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface GDI handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete...

KLA11773 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of...

PT-2020-2339

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in handling objects in memory within the Windows Runtime component of the Windows operating system. This can be exploited by an attacker to potentially elevate...

PT-2020-2829

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description The issue is related to errors in handling objects in memory. It allows an attacker to elevate their privileges, potentially gaining access to modify, add, or delete data using a...

PT-2020-2340

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in handling objects in memory within the State Repository Service component of the Windows operating system. This can be exploited by an attacker to elevate the...

PT-2020-2355

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in handling calls, which can be exploited to elevate privileges or gain access to modify, add, or delete data. It allows attackers to affect the system...

PT-2020-2696 · Microsoft · Visual Studio Code +2

Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: A remote code execution issue exists when the Python extension loads workspace settings from a notebook file. This is due to insufficient input validation, which can allow an...

PT-2020-2488

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in handling objects in memory within the State Repository Service component of the Windows operating system. This can be exploited by an attacker to elevate...

PT-2020-2686

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description The issue is related to insecure privilege management in the Windows operating system, which can be exploited to elevate privileges. This could allow an attacker to affect the syste...

PT-2020-2835

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in handling objects in memory within the State Repository Service component of the Windows operating system. This can be exploited by an attacker to elevate the...

PT-2020-2836

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in handling objects in memory within the State Repository Service component of the Windows operating system. This can be exploited by an attacker to elevate the...

PT-2020-2456

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to insecure privilege management in the Windows operating system, which can be exploited to elevate privileges or execute arbitrary code using a specially crafted...

PT-2020-2345

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in handling objects in memory within the Windows kernel. It allows an attacker to potentially elevate their privileges or modify, add, or delete data using a...