Page(s) : 1 ... 106 107 108 109 110 111 112 113 114 115 [116] 117 118 119 120 121 122 123 124 125 126 ... | Result(s) : 9846 |
Alerts
DATE | NAME | CATEGORIES | DETAIL | |
---|---|---|---|---|
2.1 | 2020-10-16 | CVE-2020-16941 | cve | An information disclosure vulnerability exists when Microsoft SharePoint Server improperly discloses its folder structure when rendering specific web pages. An attacker who took... |
2.1 | 2020-10-16 | CVE-2020-16942 | cve | An information disclosure vulnerability exists when Microsoft SharePoint Server improperly discloses its folder structure when rendering specific web pages. An attacker who took... |
2.1 | 2020-10-16 | CVE-2020-16901 | cve | An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory. To exploit this vulnerability, an authenticated attacker could r... |
3.3 | 2020-10-16 | CVE-2020-16943 | cve | An elevation of privilege vulnerability exists in Microsoft Dynamics 365 Commerce. An unauthenticated attacker who successfully exploited this vulnerability could update data wi... |
3.5 | 2020-10-16 | CVE-2020-16944 | cve | This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server. An authenticated attacker could expl... |
3.5 | 2020-10-16 | CVE-2020-16945 | cve | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. A... |
3.5 | 2020-10-16 | CVE-2020-16946 | cve | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. A... |
3.5 | 2020-10-16 | CVE-2020-16956 | cve | A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. ... |
3.5 | 2020-10-16 | CVE-2020-16978 | cve | A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. ... |
2.4 | 2020-10-14 | CVE-2020-25824 | cve | Telegram Desktop through 2.4.3 does not require passcode entry upon pushing the Export key within the Export Telegram Data wizard. The threat model is a victim who has voluntari... |
3.3 | 2020-10-14 | CVE-2020-0412 | cve | In setProcessMemoryTrimLevel of ActivityManagerService.java, there is a missing permission check. This could lead to local information disclosure of foreground processes with no... |
3.3 | 2020-10-14 | CVE-2020-0422 | cve | In constructImportFailureNotification of NotificationImportExportListener.java, there is a possible permissions bypass due to an unsafe PendingIntent. This could lead to local i... |
3.3 | 2020-10-13 | CVE-2020-25779 | cve | Trend Micro Antivirus for Mac 2020 (Consumer) has a vulnerability in which a Internationalized Domain Name homograph attack (Puny-code) could be used to add a malicious website ... |
3.3 | 2020-10-13 | CVE-2020-17411 | cve | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.0.0.35798. User interaction is required to exploit ... |
3.8 | 2020-10-09 | CVE-2020-26930 | cve | NETGEAR EX7700 devices before 1.0.0.210 are affected by incorrect configuration of security settings. |
3.2 | 2020-10-09 | CVE-2020-26925 | cve | NETGEAR GS808E devices before 1.7.1.0 are affected by denial of service. |
3.3 | 2020-10-08 | CVE-2020-2297 | cve | Jenkins SMS Notification Plugin 1.2 and earlier stores an access token unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users wit... |
3.3 | 2020-10-08 | CVE-2020-2291 | cve | Jenkins couchdb-statistics Plugin 0.3 and earlier stores its server password unencrypted in its global configuration file on the Jenkins controller where it can be viewed by use... |
2.7 | 2020-10-07 | CVE-2020-13342 | cve | An issue has been discovered in GitLab affecting versions prior to 13.2.10, 13.3.7 and 13.4.2: Lack of Rate Limiting at Re-Sending Confirmation Email |
3.2 | 2020-10-06 | CVE-2020-25742 | cve | pci_change_irq_level in hw/pci/pci.c in QEMU before 5.1.1 has a NULL pointer dereference because pci_get_bus() might not return a valid pointer. |
Page(s) : 1 ... 106 107 108 109 110 111 112 113 114 115 [116] 117 118 119 120 121 122 123 124 125 126 ... | Result(s) : 9846 |