213680 matches found
Input validation
modauthopenidc is an OpenID Certifiedâ„¢ authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. In affected versions missing input validation on modauthopenidcsessionchunks cookie value makes the server vulnerable to a...
Command injection
A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the appliance when configuring SAML settings. Exploitation of this vulnerability required access to the GitHub Enterprise...
Path traversal
A path traversal vulnerability was identified in GitHub Enterprise Server that allowed an attacker to gain unauthorized read permission to files by deploying arbitrary symbolic links to a GitHub Pages site with a specially crafted artifact tarball. To exploit this vulnerability, an attacker would...
Remote code execution
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...
Remote code execution
Microsoft Outlook Remote Code Execution Vulnerability...
Remote code execution
Windows USB Generic Parent Driver Remote Code Execution Vulnerability...
Remote code execution
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...
Privilege escalation
Microsoft Defender for Endpoint Protection Elevation of Privilege Vulnerability...
Remote code execution
Windows OLE Remote Code Execution Vulnerability...
Privilege escalation
Microsoft Entra Jira Single-Sign-On Plugin Elevation of Privilege Vulnerability...
Remote code execution
Microsoft Outlook Remote Code Execution Vulnerability...
Denial of service
.NET Denial of Service Vulnerability...
Spoofing
Windows Printing Service Spoofing Vulnerability...
Remote code execution
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...
Privilege escalation
Microsoft Message Queuing MSMQ Elevation of Privilege Vulnerability...
Privilege escalation
Trusted Compute Base Elevation of Privilege Vulnerability...
Privilege escalation
Windows Kernel Elevation of Privilege Vulnerability...
Privilege escalation
Azure Connected Machine Agent Elevation of Privilege Vulnerability...
Spoofing
Dynamics 365 Field Service Spoofing Vulnerability...
Remote code execution
Microsoft ODBC Driver Remote Code Execution Vulnerability...
Privilege escalation
Microsoft Azure Site Recovery Elevation of Privilege Vulnerability...
Security feature bypass
Internet Shortcut Files Security Feature Bypass Vulnerability...
Cross site scripting
Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...
Denial of service
Internet Connection Sharing ICS Denial of Service Vulnerability...
Remote code execution
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...
Remote code execution
Microsoft Office Remote Code Execution Vulnerability...
Privilege escalation
Microsoft Message Queuing MSMQ Elevation of Privilege Vulnerability...
Cross site scripting
Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...
Authorization
Insufficient verification of data authenticity in the configuration state machine may allow a local attacker to potentially load arbitrary bitstreams...
Spoofing
Azure Stack Hub Spoofing Vulnerability...
Privilege escalation
Windows Kernel Elevation of Privilege Vulnerability...
Privilege escalation
Microsoft Azure File Sync Elevation of Privilege Vulnerability...
Remote code execution
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...
Privilege escalation
Windows Kernel Elevation of Privilege Vulnerability...
Remote code execution
Windows Kernel Remote Code Execution Vulnerability...
Information disclosure
Windows Kernel Information Disclosure Vulnerability...
Remote code execution
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...
Remote code execution
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...
Cross site scripting
Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability...
Remote code execution
Microsoft Word Remote Code Execution Vulnerability...
Remote code execution
Microsoft ActiveX Data Objects Remote Code Execution Vulnerability...
Remote code execution
Microsoft Azure Kubernetes Service Confidential Container Remote Code Execution Vulnerability...
Denial of service
Windows Network Address Translation NAT Denial of Service Vulnerability...
Remote code execution
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...
Privilege escalation
Microsoft Outlook Elevation of Privilege Vulnerability...
Privilege escalation
Microsoft Exchange Server Elevation of Privilege Vulnerability...
Spoofing
Dynamics 365 Sales Spoofing Vulnerability...
Cross site scripting
Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...