PT-2020-5246 · Microsoft · Windows Backup Engine +1

Name of the Vulnerable Software and Affected Versions: Windows Backup Engine affected versions not specified Description: The issue is related to insecure privilege management in the Windows Backup Engine component of the Windows operating system. Exploitation of this issue may allow an attacker ...

PT-2020-5255 · Microsoft · Windows Backup Engine +1

Name of the Vulnerable Software and Affected Versions: Windows Backup Engine affected versions not specified Description: The issue is related to insecure privilege management in the Windows Backup Engine component of the Windows operating system. Exploitation of this issue may allow an attacker ...

PT-2020-6330 · Schneider Electric · Modicon M340 +2

Name of the Vulnerable Software and Affected Versions: Modicon M340, Modicon Quantum, Modicon Premium affected versions not specified Description: The issue is related to improper limitation of a pathname to a restricted directory, which could allow a remote attacker to gain unauthorized access t...

PT-2020-5217 · Microsoft · Tslint +1

Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: The issue is related to incorrect code generation management in the TSLint static code analyzer of Visual Studio Code. Exploitation of this issue may allow an attacker to execute...

PT-2020-5231 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to errors in handling objects in memory, which can allow a remote attacker to gain access to protected information. This can lead to the disclosure of...

PT-2020-5294 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a lack of protection for system data in the Windows operating system. It allows an attacker to disclose protected information in Windows error reports. This can...

PT-2020-5271 · Microsoft · Windows Backup Engine +1

Name of the Vulnerable Software and Affected Versions: Windows Backup Engine affected versions not specified Description: The issue is related to insecure privilege management in the Windows Backup Engine component of the Windows operating system. Exploitation of this issue may allow an attacker ...

PT-2020-5272 · Microsoft · Windows Backup Engine +1

Name of the Vulnerable Software and Affected Versions: Windows Backup Engine affected versions not specified Description: The issue is related to insecure privilege management in the Windows Backup Engine component of the Windows operating system. Exploitation of this issue may allow an attacker ...

PT-2020-5254 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in the code of the Windows GDI+ component, which can allow an attacker to disclose protected information. It enables attackers to obtain sensitive information...

PT-2020-5213 · Microsoft · Chakra Scripting Engine +1

Name of the Vulnerable Software and Affected Versions: Chakra Scripting Engine affected versions not specified Description: The issue is related to a memory corruption vulnerability in the Chakra Scripting Engine, which can be exploited by an attacker to gain access to protected information. This...

PT-2020-5236 · Microsoft · Windows Error Reporting +1

Name of the Vulnerable Software and Affected Versions: Windows Error Reporting affected versions not specified Description: The issue is related to errors in handling objects in memory within the Windows Error Reporting service of Windows operating systems. This can allow an attacker to obtain...

PT-2020-5230 · Microsoft · Dynamics 365

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 affected versions not specified Description: The issue is related to a lack of protection for the web page structure in Microsoft Dynamics 365, which can be exploited by a remote attacker to perform a cross-site scripti...

PT-2020-5300 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange affected versions not specified Description: The issue is related to errors in the code of the Microsoft Exchange Server, which can be exploited by a remote attacker to execute arbitrary code. This allows the attacker to...

PT-2020-5232 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to incorrect code generation management in Microsoft Exchange Server, allowing a remote attacker to execute arbitrary code. This can be exploited by a...

CVE-2020-4129

HCL Domino is susceptible to a lockout policy bypass vulnerability in the LDAP service. An unauthenticated attacker could use this vulnerability to mount a brute force attack against the LDAP service. Fixes are available in HCL Domino versions 9.0.1 FP10 IF6, 10.0.1 FP6 and 11.0.1 FP1 and later...

PT-2020-16109 · Cmsuno · Cmsuno

Name of the Vulnerable Software and Affected Versions: CMSuno version 1.6.2 Description: The issue allows an attacker to inject malicious PHP code as a username while changing their username and password. After the attacker logs in to the application, their code will be executed, enabling an...

PT-2020-5738 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows Update Stack, which is caused by insecure privilege management. This vulnerability can be exploited to allow a...

PT-2020-5730 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a denial-of-service vulnerability in the User Profile Service of Windows operating systems, caused by a buffer overflow in memory. This vulnerability can be exploite...

PT-2020-4872 · Microsoft · Windows Error Reporting +1

Name of the Vulnerable Software and Affected Versions: Windows Error Reporting affected versions not specified Description: The issue is related to insecure privilege management in the Windows Error Reporting service, which can be exploited to elevate privileges. This could allow an attacker to...

PT-2020-4769 · Microsoft · Dynamics 365

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 on-premises affected versions not specified Description: The issue is related to a lack of protection for the web page structure in Microsoft Dynamics 365, which can be exploited by a remote attacker to perform a...