213680 matches found
Command injection
A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the appliance when configuring SAML settings. Exploitation of this vulnerability required access to the GitHub Enterprise...
Path traversal
A path traversal vulnerability was identified in GitHub Enterprise Server that allowed an attacker to gain unauthorized read permission to files by deploying arbitrary symbolic links to a GitHub Pages site with a specially crafted artifact tarball. To exploit this vulnerability, an attacker would...
Input validation
modauthopenidc is an OpenID Certifiedâ„¢ authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. In affected versions missing input validation on modauthopenidcsessionchunks cookie value makes the server vulnerable to a...
Remote code execution
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...
Remote code execution
Microsoft Outlook Remote Code Execution Vulnerability...
Remote code execution
Windows USB Generic Parent Driver Remote Code Execution Vulnerability...
Privilege escalation
Microsoft Defender for Endpoint Protection Elevation of Privilege Vulnerability...
Privilege escalation
Microsoft Entra Jira Single-Sign-On Plugin Elevation of Privilege Vulnerability...
Remote code execution
Microsoft Outlook Remote Code Execution Vulnerability...
Privilege escalation
Microsoft Message Queuing MSMQ Elevation of Privilege Vulnerability...
Cross site scripting
Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...
Spoofing
Windows Printing Service Spoofing Vulnerability...
Privilege escalation
Trusted Compute Base Elevation of Privilege Vulnerability...
Privilege escalation
Azure Connected Machine Agent Elevation of Privilege Vulnerability...
Spoofing
Dynamics 365 Field Service Spoofing Vulnerability...
Remote code execution
Microsoft ODBC Driver Remote Code Execution Vulnerability...
Remote code execution
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...
Privilege escalation
Microsoft Message Queuing MSMQ Elevation of Privilege Vulnerability...
Denial of service
.NET Denial of Service Vulnerability...
Remote code execution
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...
Privilege escalation
Microsoft Azure Site Recovery Elevation of Privilege Vulnerability...
Security feature bypass
Internet Shortcut Files Security Feature Bypass Vulnerability...
Cross site scripting
Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...
Denial of service
Internet Connection Sharing ICS Denial of Service Vulnerability...
Privilege escalation
Windows Kernel Elevation of Privilege Vulnerability...
Remote code execution
Microsoft Office Remote Code Execution Vulnerability...
Remote code execution
Windows OLE Remote Code Execution Vulnerability...
Remote code execution
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...
Authorization
Insufficient verification of data authenticity in the configuration state machine may allow a local attacker to potentially load arbitrary bitstreams...
Spoofing
Azure Stack Hub Spoofing Vulnerability...
Privilege escalation
Windows Kernel Elevation of Privilege Vulnerability...
Remote code execution
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...
Remote code execution
Windows Kernel Remote Code Execution Vulnerability...
Information disclosure
Windows Kernel Information Disclosure Vulnerability...
Remote code execution
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...
Remote code execution
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...
Cross site scripting
Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability...
Denial of service
Windows Network Address Translation NAT Denial of Service Vulnerability...
Information disclosure
Windows DNS Information Disclosure Vulnerability...
Remote code execution
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...
Privilege escalation
Microsoft Azure File Sync Elevation of Privilege Vulnerability...
Cross site scripting
Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...
Information disclosure
Skype for Business Information Disclosure Vulnerability...
Information disclosure
Microsoft Teams for Android Information Disclosure Vulnerability...
Design/Logic Flaw
Zimbra Collaboration before Kepler 9.0.0 Patch 38 GA allows DOM-based JavaScript injection in the Modern UI...
Remote code execution
Microsoft Word Remote Code Execution Vulnerability...
Remote code execution
Microsoft ActiveX Data Objects Remote Code Execution Vulnerability...
Remote code execution
Microsoft Azure Kubernetes Service Confidential Container Remote Code Execution Vulnerability...