Lucene search
+L

12139 matches found

CVE
CVE
added 2020/09/14 3:11 p.m.52 views

CVE-2020-25375

WP SMART CRM (SoftradeWeb SNC) version 1.8.7 is affected by stored Cross Site Scripting via multiple customer fields (Business Name, Tax Code, First Name, Address, Town, Phone, Mobile, Place of Birth, Web Site, VAT Number, Last Name, Fax, Email, Skype). Root cause: inadequate input sanitization i...

5.4CVSS5.5AI score0.00717EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2020/09/14 12:00 a.m.9 views

PT-2020-16074 · Mike Rooijackers · Recall Products

Name of the Vulnerable Software and Affected Versions: Wordpress Plugin Store / Mike Rooijackers Recall Products version 0.8 Description: The issue allows an authenticated attacker to inject a malicious SQL query due to the failure to sanitize input from the Manufacturer parameter. Recommendation...

8.8CVSS8.9AI score0.01928EPSS
SaveExploits2References3
OSV
OSV
added 2020/09/11 5:15 p.m.13 views

CVE-2020-1146

An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The...

6.6CVSS7AI score0.00777EPSS
SaveExploits0References1
NVD
NVD
added 2020/09/11 5:15 p.m.28 views

CVE-2020-1146

An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The...

7.8CVSS0.00777EPSS
SaveExploits0References1
OSV
OSV
added 2020/09/11 5:15 p.m.9 views

CVE-2020-0766

An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The...

7.8CVSS7.4AI score0.00931EPSS
SaveExploits0References1
NVD
NVD
added 2020/09/11 5:15 p.m.19 views

CVE-2020-0766

An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The...

7.8CVSS0.00931EPSS
SaveExploits0References1
Prion
Prion
added 2020/09/11 5:15 p.m.27 views

Privilege escalation

An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The...

4.6CVSS7.3AI score0.00931EPSS
SaveExploits0References1Affected Software2
Prion
Prion
added 2020/09/11 5:15 p.m.27 views

Privilege escalation

An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The...

4.6CVSS7.3AI score0.00777EPSS
SaveExploits0References1Affected Software2
CVE
CVE
added 2020/09/11 5:09 p.m.118 views

CVE-2020-1146

CVE-2020-1146 is an elevation of privilege affecting the Microsoft Store Runtime, caused by improper memory handling. The vulnerability requires the attacker to gain code execution on the victim machine and then run a crafted application to elevate privileges. Microsoft addresses the issue via a ...

7.8CVSS7.3AI score0.00777EPSS
SaveExploits0References1Affected Software3
Cvelist
Cvelist
added 2020/09/11 5:09 p.m.48 views

CVE-2020-1146 Microsoft Store Runtime Elevation of Privilege Vulnerability

...

6.6CVSS7.3AI score0.00777EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/09/11 5:08 p.m.29 views

CVE-2020-0766 Microsoft Store Runtime Elevation of Privilege Vulnerability

...

7.8CVSS8.1AI score0.00931EPSS
SaveExploits0References1
CVE
CVE
added 2020/09/11 5:08 p.m.119 views

CVE-2020-0766

CVE-2020-0766 is an elevation-of-privilege vulnerability in the Microsoft Store Runtime caused by improper memory handling. An attacker would need remote execution on the target to run a crafted program that could escalate privileges locally; the issue is mitigated by a security update that corre...

7.8CVSS7.9AI score0.00931EPSS
SaveExploits0References1Affected Software3
CNVD
CNVD
added 2020/09/10 12:00 a.m.62 views

Microsoft Windows/Windows Server Elevation of Privilege Vulnerability (CNVD-2021-68744)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server, a server operating system. An elevation of privilege vulnerability exists in Microsoft Windows/Windows Server, which stems from a...

7.8CVSS4.2AI score0.00777EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/09/10 12:00 a.m.45 views

Microsoft Windows/Windows Server Elevation of Privilege Vulnerability (CNVD-2021-68745)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server, a server operating system. An elevation of privilege vulnerability exists in Microsoft Windows/Windows Server, which stems from a...

7.8CVSS4.2AI score0.00931EPSS
SaveExploits0References1
ThreatPost
ThreatPost
added 2020/09/08 2:36 p.m.75 views

Cryptobugs Found in Numerous Google Play Store Apps

Researchers have discovered more than 300 apps on the Google Play Store breaking basic cryptography code using a new tool they developed to dynamically analyze it. Academics from Columbia University developed a custom tool, CRYLOGGER, that analyzes Android applications for unsafe use of...

7.2AI score
SaveExploits0References13
Microsoft CVE
Microsoft CVE
added 2020/09/08 7:00 a.m.48 views

Microsoft Store Runtime Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The...

7.8CVSS3.7AI score0.00777EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2020/09/08 7:00 a.m.25 views

Microsoft Store Runtime Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The...

7.8CVSS3.7AI score0.00931EPSS
SaveExploits0
Apple
Apple
added 2020/09/08 3:53 a.m.100 views

About the security content of iOS 11.2 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

9.3CVSS0.1AI score0.84172EPSS
SaveExploits38Affected Software1
Microsoft KB
Microsoft KB
added 2020/09/08 12:00 a.m.48 views

September 8, 2020—KB4577021 (OS Build 15063.2500)

None None...

9CVSS7AI score0.06185EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2020/09/08 12:00 a.m.5 views

PT-2020-4086 · Microsoft · Store Runtime +1

Name of the Vulnerable Software and Affected Versions: Microsoft Store Runtime affected versions not specified Description: The issue is related to an elevation of privilege vulnerability that occurs when the Microsoft Store Runtime improperly handles memory. To exploit this, an attacker would...

7.8CVSS6.5AI score0.00777EPSS
SaveExploits0References5
Rows per page
Query Builder