213680 matches found
Command injection
A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the appliance when setting up an HTTP proxy. Exploitation of this vulnerability required access to the GitHub Enterprise...
Input validation
modauthopenidc is an OpenID Certifiedâ„¢ authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. In affected versions missing input validation on modauthopenidcsessionchunks cookie value makes the server vulnerable to a...
Design/Logic Flaw
sidekiq-unique-jobs is an open source project which prevents simultaneous Sidekiq jobs with the same unique arguments to run. Specially crafted GET request parameters handled by any of the following endpoints of sidekiq-unique-jobs' "admin" web UI, allow a super-user attacker, or an unwitting, bu...
Remote code execution
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...
Remote code execution
Microsoft Outlook Remote Code Execution Vulnerability...
Privilege escalation
Microsoft Message Queuing MSMQ Elevation of Privilege Vulnerability...
Remote code execution
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...
Remote code execution
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...
Remote code execution
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...
Remote code execution
Microsoft ODBC Driver Remote Code Execution Vulnerability...
Privilege escalation
Microsoft Azure Site Recovery Elevation of Privilege Vulnerability...
Denial of service
Internet Connection Sharing ICS Denial of Service Vulnerability...
Privilege escalation
Microsoft Defender for Endpoint Protection Elevation of Privilege Vulnerability...
Privilege escalation
Microsoft Message Queuing MSMQ Elevation of Privilege Vulnerability...
Cross site scripting
Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...
Spoofing
Windows Printing Service Spoofing Vulnerability...
Privilege escalation
Microsoft Entra Jira Single-Sign-On Plugin Elevation of Privilege Vulnerability...
Spoofing
Dynamics 365 Field Service Spoofing Vulnerability...
Privilege escalation
Azure Connected Machine Agent Elevation of Privilege Vulnerability...
Privilege escalation
Trusted Compute Base Elevation of Privilege Vulnerability...
Authorization
Insufficient verification of data authenticity in the configuration state machine may allow a local attacker to potentially load arbitrary bitstreams...
Remote code execution
Microsoft Office Remote Code Execution Vulnerability...
Security feature bypass
Internet Shortcut Files Security Feature Bypass Vulnerability...
Remote code execution
Windows OLE Remote Code Execution Vulnerability...
Remote code execution
Microsoft Outlook Remote Code Execution Vulnerability...
Remote code execution
Windows USB Generic Parent Driver Remote Code Execution Vulnerability...
Denial of service
.NET Denial of Service Vulnerability...
Cross site scripting
Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...
Privilege escalation
Windows Kernel Elevation of Privilege Vulnerability...
Information disclosure
Microsoft Teams for Android Information Disclosure Vulnerability...
Privilege escalation
Microsoft Outlook Elevation of Privilege Vulnerability...
Remote code execution
Windows Kernel Remote Code Execution Vulnerability...
Denial of service
Windows Network Address Translation NAT Denial of Service Vulnerability...
Cross site scripting
Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability...
Remote code execution
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...
Remote code execution
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...
Cross site scripting
Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...
Privilege escalation
Windows Kernel Elevation of Privilege Vulnerability...
Remote code execution
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...
Remote code execution
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...
Spoofing
Dynamics 365 Sales Spoofing Vulnerability...
Privilege escalation
Windows Kernel Elevation of Privilege Vulnerability...
Spoofing
Azure Stack Hub Spoofing Vulnerability...
Information disclosure
Skype for Business Information Disclosure Vulnerability...
Remote code execution
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...
Remote code execution
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...
Privilege escalation
Microsoft Azure File Sync Elevation of Privilege Vulnerability...
Remote code execution
Microsoft Azure Kubernetes Service Confidential Container Remote Code Execution Vulnerability...