Windows Common Log File System Driver Information Disclosure Vulnerability

An information disclosure vulnerability exists in the Windows Common Log File System CLFS driver when it fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could potentially read data that was not intended to be disclosed. Note that this...

Microsoft Excel Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...

CVE-2020-0701: Undefined Security Weakness

An elevation of privilege vulnerability exists in the way that the Windows Client License Service ClipSVC handles objects in memory, aka 'Windows Client License Service Elevation of Privilege Vulnerability'...

PT-2020-20322

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF version 9.6.0.25114 Description This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The...

PT-2020-20333

Name of the Vulnerable Software and Affected Versions Foxit Reader version 9.7.0.29455 Description This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The flaw...

PT-2020-1629

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in handling memory objects, which can be exploited to elevate privileges. This allows an attacker to affect the system. Recommendations At the moment, there is ...

PT-2020-1660

Name of the Vulnerable Software and Affected Versions Microsoft Excel affected versions not specified Description A remote code execution issue exists in Microsoft Excel software due to improper handling of objects in memory. This can be exploited by an attacker to run arbitrary code in the conte...

PT-2020-1698

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to an elevation of privilege vulnerability in the way the dssvc.dll handles file creation, allowing for a file overwrite or creation in a secured location. This...

CVE-2020-0732: Undefined Security Weakness

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0709...

PT-2020-1696

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description An information disclosure issue exists due to the Windows kernel's improper handling of objects in memory. This could allow an attacker to disclose protected information using a specially...

CVE-2020-0662: Undefined Security Weakness

A remote code execution vulnerability exists in the way that Windows handles objects in memory, aka 'Windows Remote Code Execution Vulnerability'...

CVE-2020-0668: Incorrect Permission Assignment for Critical Resource

An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0669, CVE-2020-0670, CVE-2020-0671, CVE-2020-0672...

CVE-2020-0743: Undefined Security Weakness

An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory, aka 'Connected Devices Platform Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0740, CVE-2020-0741, CVE-2020-0742, CVE-2020-0749,...

Foxit Reader Annotations AcroForm Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of form...

Remote code execution

A Code Execution vulnerability exists in Android prior to 4.4.0 related to the addJavascriptInterface method and the accessibility and accessibilityTraversal objects, which could let a remote malicious user execute arbitrary code...

CVE-2014-7224

A Code Execution vulnerability exists in Android prior to 4.4.0 related to the addJavascriptInterface method and the accessibility and accessibilityTraversal objects, which could let a remote malicious user execute arbitrary code...

Unspecified Vulnerability in Oracle PeopleSoft Enterprise CC Common Application Objects

Oracle PeopleSoft Products is a set of enterprise human capital management solutions from Oracle Oracle. The product provides human capital management, financial management, supplier relationship management and other functions. An unspecified vulnerability exists in Oracle PeopleSoft Enterprise C...

CVE-2020-8116

Prototype pollution vulnerability in dot-prop npm package versions before 4.2.1 and versions 5.x before 5.1.1 allows an attacker to add arbitrary properties to JavaScript language constructs such as objects...

Code injection

Prototype pollution vulnerability in dot-prop npm package versions before 4.2.1 and versions 5.x before 5.1.1 allows an attacker to add arbitrary properties to JavaScript language constructs such as objects...

CVE-2020-8116

Prototype pollution vulnerability in dot-prop npm package versions before 4.2.1 and versions 5.x before 5.1.1 allows an attacker to add arbitrary properties to JavaScript language constructs such as objects...