A Improper Access Control vulnerability in SUSE Rancher allows remote attackers impersonate arbitrary users. This issue affects: SUSE Rancher Rancher versions prior to 2.5.10.


a Improper Access Control vulnerability in SUSE Rancher allows users to keep privileges that should have been revoked. This issue affects: SUSE Rancher Rancher versions prior to 2.4.18; Rancher versions prior to 2.5.12; Rancher versions prior to 2.6.3.


An improper access control vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform a session takeover.


An improper access control vulnerability CWE-284 in FortiWLC 8.6.1 and below may allow an authenticated and remote attacker with low privileges to execute any command as an admin user with full access rights via bypassing the GUI restrictions.


An improper access control vulnerability in sspExit() in BlockchainTZService prior to SMR Sep-2021 Release 1 allows attackers to terminate BlockchainTZService.


An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) and OfficeScan XG SP1 could allow an unauthenticated user to obtain information about the SQL database.


An improper access control in ActivityManagerService prior to SMR APR-2021 Release 1 allows untrusted applications to access running processesdelete some local files.


An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) OfficeScan XG SP1 and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain x64 agent hofitx information.


An improper access control vulnerability in genericssoservice prior to SMR JUN-2021 Release 1 allows local attackers to execute protected activity with system privilege via untrusted applications.


An improper access control vulnerability in sspInit() in BlockchainTZService prior to SMR Sep-2021 Release 1 allows attackers to start BlockchainTZService.


An improper access control vulnerability in Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain various pieces of configuration informaiton.


An improper access control vulnerability in Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain various pieces of settings informaiton.


An improper access control vulnerability in TelephonyUI prior to SMR MAY-2021 Release 1 allows local attackers to write arbitrary files of telephony process via untrusted applications.


An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) OfficeScan XG SP1 and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain information about a specific configuration download file.


An improper access control vulnerability in CPLC prior to SMR Dec-2021 Release 1 allows local attackers to access CPLC information without permission.


An improper access control vulnerability in SCloudBnRReceiver in SecTelephonyProvider prior to SMR Nov-2021 Release 1 allows untrusted application to call some protected providers.


An improper access control vulnerability in Trend Micro Apex One (on-prem) could allow an unauthenticated user to obtain information about the managing port used by agents.


An improper access control vulnerability in Trend Micro Apex One (on-prem) OfficeScan XG SP1 and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain information about x86 agent hotfixes.


An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) OfficeScan XG SP1 and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain patch level information.


An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) and OfficeScan XG SP1 could allow an unauthenticated user to obtain information about the database server.


An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) OfficeScan XG SP1 and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain information about a specific hotfix history file.


An improper access control vulnerability in ScreenOffActivity in Samsung Notes prior to version 4.2.04.27 allows untrusted applications to access local files.


An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) and OfficeScan XG SP1 could allow an unauthenticated user to obtain information about a content inspection configuration file.


An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) OfficeScan XG SP1 and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain information about hotfix history.


An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) and OfficeScan XG SP1 could allow an unauthenticated user to obtain information about the contents of a scan connection exception file.


Some improper access control in Bluetooth APIs prior to SMR Sep-2021 Release 1 allows untrusted application to get Bluetooth information.


An improper access control vulnerability in stickerCenter prior to SMR APR-2021 Release 1 allows local attackers to read or write arbitrary files of system process via untrusted applications.


An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) OfficeScan XG SP1 and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain information about a specific notification configuration file.


An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) OfficeScan XG SP1 and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain version and build information.


An improper access control vulnerability in BluetoothSettingsProvider prior to SMR Oct-2021 Release 1 allows untrusted application to overwrite some Bluetooth information.


An improper access control vulnerability in sec_log file prior to SMR MAR-2021 Release 1 exposes sensitive kernel information to userspace.


An improper access control vulnerability in FortiManager versions 6.4.0 to 6.4.3 may allow an authenticated attacker with a restricted user profile to access the SD-WAN Orchestrator panel via directly visiting its URL.


An improper access control vulnerability CWE-284 in FortiWeb versions 6.4.1 and below and 6.3.15 and below in the Report Browse section of Log & Report may allow an unauthorized and unauthenticated user to access the Log reports via their URLs.


An improper access control vulnerability CWE-284 in FortiIsolator versions 2.3.2 and below may allow an authenticated non privileged attacker to regenerate the CA certificate via the regeneration URL.


An improper access control vulnerability CWE-284 in FortiManager versions 6.4.4 and 6.4.5 may allow an authenticated attacker with a restricted user profile to modify the VPN tunnel status of other VDOMs using VPN Manager.


An improper access control vulnerability in the JWT plugin in Kong Gateway prior to 2.3.2.0 allows unauthenticated users access to authenticated routes without a valid token JWT.


An improper access control vulnerability in GitLab CE/EE affecting all versions from 13.11 prior to 14.7.7 14.8 prior to 14.8.5 and 14.9 prior to 14.9.2 allows an unauthorized user to access pipeline analytics even when public pipelines are disabled


An improper access control in LiveWallpaperService prior to versions 3.0.9.0 allows to create a specific named system directory without a proper permission.


An improper access control in Fortinet FortiSOAR before 7.2.0 allows unauthenticated attackers to access gateway API data via crafted HTTP GET requests.


An Improper Access Control vulnerability exists in Citrix Workspace App for Linux 2012 - 2111 with App Protection installed that can allow an attacker to perform local privilege escalation.


A Improper Access Control vulnerability in Rancher Desktop of SUSE allows attackers in the local network to connect to the Dashboard API (steve) to carry out arbitrary actions. This issue affects: SUSE Rancher Desktop versions prior to V.


An Improper Access Control issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump Version 1.1 1.5 and 1.6. The FTP server on the pump does not require authentication if the pump is configured to allow FTP connections.


An improper access control vulnerability in ArcSight ESM and ArcSight ESM Express any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1 allows unauthorized users to retrieve or modify storage information.


An Improper Access Control issue was discovered in Trihedral VTScada 11.3.03 and prior. A local non-administrator user has privileges to read and write to the file system of the target machine.


An improper access control vulnerability in Fortinet FortiWebManager 5.8.0 allows anyone that can access the admin webUI to successfully log-in regardless the provided password.


An improper access control vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an attacker to decrypt contents of a database with information that could be used to access a vulnerable system.


An Improper Access Control vulnerability in Fortinet FortiWeb 5.6.0 up to but not including 6.1.0 under \Signed Security Mode\ allows attacker to bypass the signed user cookie protection by removing the FortiWeb own protection session cookie.


An improper access control vulnerability in synodsmnotify in Synology DiskStation Manager (DSM) before 6.1.4-15217 and before 6.0.3-8754-6 allows local users to inject arbitrary web script or HTML via the -fn option.


This improper access control vulnerability in Helpdesk allows attackers to access the system logs. To fix the vulnerability QNAP recommend updating QTS and Helpdesk to their latest versions.


An improper access control vulnerability in Fortinet FortiManager 6.0.0 5.6.5 and below versions FortiAnalyzer 6.0.0 5.6.5 and below versions allows a regular user edit the avatar picture of other users with arbitrary content.


An improper access control vulnerability has been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP cameras which could allow a full configuration download including passwords.


a Improper Access Control vulnerability in of Open Build Service allows remote attackers to read files of an OBS package where the sourceaccess/access is disabled This issue affects: Open Build Service versions prior to 2.10.5.


An improper access control vulnerability (CWE-284) in FortiSandbox versions 3.2.1 and below and 3.1.4 and below may allow an authenticated unprivileged attacker to download the device configuration file via the recovery URL.


An improper access control vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which an improper handling of the system configuration can allow an attacker to execute arbitrary code under the context of root.

improper access control
arbitrary code execution


Improper Access Control in Gurock TestRail versions < 7.2.0.3014 resulted in sensitive information exposure. A threat actor can access the /files.md5 file on the client side of a Gurock TestRail application disclosing a full list of application files and the corresponding file paths. The corresponding file paths can be tested and in some cases result in the disclosure of hardcoded credentials API keys or other sensitive data.

improper access control
information exposure


HLOS to access EL3 stack canary by just mapping imem region due to Improper access control and can lead to information exposure in Snapdragon Auto Snapdragon Compute Snapdragon Connectivity Snapdragon Consumer IOT Snapdragon Industrial IOT Snapdragon IoT Snapdragon Mobile Snapdragon Voice & Music Snapdragon Wearables Snapdragon Wired Infrastructure and Networking


An improper access control information disclosure vulnerability in Trend Micro OfficeScan XG SP1 and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain information about an agent's managing port.


An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal version build and patch information.

improper access control
information disclosure
improper access control


An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal version and build information.


An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal number of managed agents.


An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal the total agents managed by the server.


An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal server hostname and db names.


Improper access controls in Intel Unite(R) Cloud Service client before version 4.2.12212 may allow an authenticated user to potentially enable escalation of privilege via local access.

escalated privilege
improper access control


In all Android releases from CAF using the Linux kernel some interfaces were improperly exposed to QTEE applications.


In SweetScape 010 Editor 9.0.1 improper validation of arguments in the internal implementation of the StrCat function (provided by the scripting engine) allows an attacker to overwrite arbitrary memory which could lead to code execution.


In SweetScape 010 Editor 9.0.1 improper validation of arguments in the internal implementation of the Memcpy function (provided by the scripting engine) allows an attacker to overwrite arbitrary memory which could lead to code execution.


The administrative web interface in Cisco Video Surveillance Operations Manager does not properly perform authentication which allows remote attackers to watch video feeds via a crafted URL aka Bug ID CSCtg72262.


An Improper Authentication issue was discovered in General Motors (GM) and Shanghai OnStar (SOS) SOS iOS Client 7.1. Successful exploitation of this vulnerability may allow an attacker to subvert security mechanisms and reset a user account password.


An Improper Authentication issue was discovered in Phoenix Contact GmbH mGuard firmware versions 8.3.0 to 8.4.2. An attacker may be able to gain unauthorized access to the user firewall when RADIUS servers are unreachable.


An Improper Authentication issue was discovered in Envitech EnviDAS Ultimate Versions prior to v1.0.0.5. The web application lacks proper authentication which could allow an attacker to view information and modify settings or execute code remotely.


An Improper Authentication issue was discovered in JanTek JTC-200 all versions. The improper authentication could provide an undocumented BusyBox Linux shell accessible over the TELNET service without any authentication.


An Improper Authentication issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. Specially crafted requests allow a possible authentication bypass that could allow remote code execution.

improper authentication
remote code execution


An Improper Authentication issue was discovered in Newport XPS-Cx and XPS-Qx. An attacker may bypass authentication by accessing a specific uniform resource locator (URL).

improper authentication bypass authentication


An improper authentication vulnerability in CA Privileged Access Manager 3.x Web-UI jk-manager and jk-status allows a remote attacker to gain sensitive information or alter configuration.


An improper authentication vulnerability in FortiMail before 7.0.1 may allow a remote attacker to efficiently guess one administrative account's authentication token by means of the observation of certain system's properties.


An improper authentication vulnerability in FSSO Collector version 5.0.295 and below may allow an unauthenticated user to bypass a FSSO firewall policy and access the protected network via sending specifically crafted UDP login notification packets.


A improper authentication vulnerability exists in Jenkins 2.137 and earlier 2.121.2 and earlier in SecurityRealm.java TokenBasedRememberMeServices2.java that allows attackers with a valid cookie to remain logged in even if that feature is disabled.


An improper authentication vulnerability in CA Privileged Access Manager 2.x allows attackers to spoof IP addresses in a log file.


An improper authentication vulnerability exists in Pulse Connect Secure <9.1RB that allows an attacker with a users primary credentials to bypass the Google TOTP.


Profile Manager in Apple Mac OS X before 10.7.5 does not properly perform authentication for the Device Management private interface which allows attackers to enumerate managed devices via unspecified vectors.

improper authentication
enumerate managed device


A improper authorization vulnerability exists in Jenkins 2.137 and earlier 2.121.2 and earlier in UpdateCenter.java that allows attackers to cancel a Jenkins restart scheduled through the update center.


An improper authorization vulnerability exists in Jenkins Promoted Builds Plugin 2.31.1 and earlier in Status.java and ManualCondition.java that allow an attacker with read access to jobs to perform promotions.


An improper authorization vulnerability exists in Jenkins Git Plugin version 3.7.0 and earlier in GitStatus.java that allows an attacker with network access to obtain a list of nodes and users.


An improper authorization vulnerability exists in Jenkins Black Duck Hub Plugin 3.0.3 and older in PostBuildScanDescriptor.java that allows users with Overall/Read permission to read and write the Black Duck Hub plugin configuration.


An improper authorization vulnerability exists in Jenkins Subversion Plugin version 2.10.2 and earlier in SubversionStatus.java and SubversionRepositoryStatus.java that allows an attacker with network access to obtain a list of nodes and users.


An improper authorization vulnerability exists in Jenkins Google Play Android Publisher Plugin version 1.6 and earlier in GooglePlayBuildStepDescriptor.java that allow an attacker to obtain credential IDs.


An improper authorization vulnerability exists in Jenkins versions 2.106 and earlier and LTS 2.89.3 and earlier that allows an attacker to have Jenkins submit HTTP GET requests and get limited information about the response.


An improper authorization vulnerability exists in Jenkins HipChat Plugin 2.2.0 and earlier in HipChatNotifier.java that allows attackers with Overall/Read access to obtain credentials IDs for credentials stored in Jenkins.


An improper authorization vulnerability exists in Jenkins Mercurial Plugin version 2.2 and earlier in MercurialStatus.java that allows an attacker with network access to obtain a list of nodes and users.


An improper authorization vulnerability exists in Jenkins Mesos Plugin 0.17.1 and earlier in MesosCloud.java that allows attackers with Overall/Read access to obtain credentials IDs for credentials stored in Jenkins.


An improper authorization vulnerability in FortiADC may allow a remote authenticated user with low privileges to perform certain actions such as rebooting the system.


An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6 allowing an unauthorized user to access WIP details about jobs he should not have access to.


An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6 allowing an unauthorized user to access the Billing page without the appropriate privileges.


An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6 allowing an unauthorized user to access details about jobs he should not have access to via the Audit Trail Feature.


An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6 allowing an unauthorized user to access Launcher Configuration Panel.


A vulnerability in the HostScan component of Cisco AnyConnect Secure Mobility Client for Linux could allow an unauthenticated remote attacker to read sensitive information on an affected system. The vulnerability exists because the affected software performs improper bounds checks. An attacker could exploit this vulnerability by crafting HTTP traffic for the affected component to download and process. A successful exploit could allow the attacker to read sensitive information on the affected system.


In all Android releases from CAF using the Linux kernel a memory structure in a camera driver is not properly protected.


Apple Safari before 6.2.5 7.x before 7.1.5 and 8.x before 8.0.5 does not properly select X.509 client certificates which makes it easier for remote attackers to track users via a crafted web site.


In all android releases(Android for MSM Firefox OS for MSM QRD Android) from CAF using the linux kernel improper configuration of dev nodes may lead to potential security issue.


MyBB (aka MyBulletinBoard) before 1.4.12 does not properly handle a configuration with a visible forum that contains hidden threads which allows remote attackers to obtain sensitive information by reading the Latest Threads block of the Portal Page.


Possible assertion due to improper validation of OTA configuration in Snapdragon Auto Snapdragon Compute Snapdragon Connectivity Snapdragon Industrial IOT Snapdragon Mobile


Trendnet AC2600 TEW-827DRU version 2.08B01 improperly discloses credentials for the smb functionality of the device. Usernames and passwords for all smb users are revealed in plaintext on the smbserver.asp page.


A vulnerability in the implementation of Security Assertion Markup Language (SAML) 2.0 Single Sign-On (SSO) for Clientless SSL VPN (WebVPN) and AnyConnect Remote Access VPN in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated remote attacker to successfully establish a VPN session to an affected device. The vulnerability is due to improper credential management when using NT LAN Manager (NTLM) or basic authentication. An attacker could exploit this vulnerability by opening a VPN session to an affected device after another VPN user has successfully authenticated to the affected device via SAML SSO. A successful exploit could allow the attacker to connect to secured networks behind the affected device.


A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated local attacker with administrator-level credentials to install a malicious software patch on an affected device. The vulnerability is due to improper verification of digital signatures for patch images. An attacker could exploit this vulnerability by loading an unsigned software patch on an affected device. A successful exploit could allow the attacker to boot a malicious software patch image.


A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated local attacker with administrator-level credentials to install a malicious software patch on an affected device. The vulnerability is due to improper verification of digital signatures for patch images. An attacker could exploit this vulnerability by crafting an unsigned software patch to bypass signature checks and loading it on an affected device. A successful exploit could allow the attacker to boot a malicious software patch image.


A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording Format (ARF) and Webex Recording Format (WRF) files. An attacker could exploit this vulnerability by sending a user a malicious ARF or WRF file via a link or email attachment and persuading the user to open the file with the affected software. Successful exploitation could allow the attacker to execute arbitrary code on the affected system.


A vulnerability in the web-based management interface of Cisco RV110W RV130W and RV215W Routers could allow an unauthenticated remote attacker to disconnect clients that are connected to the guest network on an affected router. The vulnerability is due to improper authorization of an HTTP request. An attacker could exploit this vulnerability by accessing the URL for device disconnection and providing the connected device information. A successful exploit could allow the attacker to deny service to specific clients that are connected to the guest network.


A vulnerability in Cisco Remote PHY Device Software could allow an authenticated local attacker to execute commands on the underlying Linux shell of an affected device with root privileges. The vulnerability occurs because the affected software improperly sanitizes user-supplied input. An attacker who has valid administrator access to an affected device could exploit this vulnerability by supplying various CLI commands with crafted arguments. A successful exploit could allow the attacker to run arbitrary commands as the root user allowing complete compromise of the system.


A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager software could allow an authenticated remote attacker to download and view files within the application that should be restricted. This vulnerability is due to improper sanitization of user-supplied input in HTTP request parameters that describe filenames. An attacker could exploit this vulnerability by using directory traversal techniques to submit a path to a desired file location. A successful exploit could allow the attacker to view application files that may contain sensitive information.


A vulnerability in the web-based user interface (Web UI) of Cisco IOS XE Software could allow an authenticated remote attacker to execute commands on the underlying Linux shell of an affected device with root privileges. The vulnerability occurs because the affected software improperly sanitizes user-supplied input. An attacker who has valid administrator access to an affected device could exploit this vulnerability by supplying a crafted input parameter on a form in the Web UI and then submitting that form. A successful exploit could allow the attacker to run arbitrary commands on the device with root privileges which may lead to complete system compromise.


Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when the device retrieves updates scripts from the internet.


Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the devices wifi configuration via the bssid parameter.


A improper input sanitization vulnerability exists in Rocket.Chat server 3.11 3.12 & 3.13 that could lead to unauthenticated NoSQL injection resulting potentially in RCE.


In all android releases(Android for MSM Firefox OS for MSM QRD Android) from CAF using the linux kernel improper input validation can lead to an improper access to already freed up dci client entries while closing dci client.


A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated remote attacker to execute code with root-level privileges on the underlying operating system. This vulnerability exist because the software improperly validates user-supplied input. An attacker could exploit this vulnerability by uploading a malicious file to the administrative web interface. A successful exploit could allow the attacker to execute code with root-level privileges on the underlying operating system.


A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated but unprivileged (level 1) remote attacker to run privileged Cisco IOS commands by using the web UI. The vulnerability is due to a failure to validate and sanitize input in Web Services Management Agent (WSMA) functions. An attacker could exploit this vulnerability by submitting a malicious payload to the affected device's web UI. A successful exploit could allow the lower-privileged attacker to execute arbitrary commands with higher privileges on the affected device.


A vulnerability in Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow an authenticated remote attacker to access sensitive information. The vulnerability occurs because the affected software does not properly validate user-supplied input. An attacker could exploit this vulnerability by issuing certain commands with filtered query results on the device. This action may cause returned messages to display confidential system information. A successful exploit could allow the attacker to read sensitive information on the device.


A vulnerability in the client application for iOS of Cisco Webex Teams could allow an authenticated remote attacker to upload arbitrary files within the scope of the iOS application. The vulnerability is due to improper input validation in the client application. An attacker could exploit this vulnerability by sending a malicious file to a targeted user and persuading the user to manually open it. An exploit could allow the attacker to overwrite sensitive application files and eventually cause a denial of service (DoS) condition by foreclosing future access to the system to the targeted user. This vulnerability is fixed in version 3.13.26920.


A vulnerability in Cisco Small Business SPA500 Series IP Phones could allow a physically proximate attacker to execute arbitrary commands on the device. The vulnerability is due to improper input validation in the device configuration interface. An attacker could exploit this vulnerability by accessing the configuration interface which may require a password and then accessing the device's physical interface and inserting a USB storage device. A successful exploit could allow the attacker to execute arbitrary commands on the device in an elevated security context. At the time of publication this vulnerability affected Cisco Small Business SPA500 Series IP Phones firmware releases 7.6.2SR5 and prior.


A vulnerability in the Cisco Connected Mobile Experiences (CMX) software could allow an unauthenticated adjacent attacker to access sensitive data on an affected device. The vulnerability is due to a lack of input and validation checking mechanisms for certain GET requests to API's on an affected device. An attacker could exploit this vulnerability by sending HTTP GET requests to an affected device. An exploit could allow the attacker to use this information to conduct additional reconnaissance attacks.


A vulnerability in the CLI of Cisco Aironet Series Access Points (APs) could allow an authenticated local attacker to gain access to the underlying Linux operating system (OS) without the proper authentication. The attacker would need valid administrator device credentials. The vulnerability is due to improper validation of user-supplied input for certain CLI commands. An attacker could exploit this vulnerability by authenticating to an affected device and submitting crafted input for a CLI command. A successful exploit could allow the attacker to obtain access to the underlying Linux OS without proper authentication.


A vulnerability in the handling of Inter-Access Point Protocol (IAPP) messages by Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated adjacent attacker to cause a denial of service (DoS) condition. The vulnerability exist because the software improperly validates input on fields within IAPP messages. An attacker could exploit the vulnerability by sending malicious IAPP messages to an affected device. A successful exploit could allow the attacker to cause the Cisco WLC Software to reload resulting in a DoS condition. Software versions prior to 8.2.170.0 8.5.150.0 and 8.8.100.0 are affected.


A vulnerability in the web UI framework of Cisco IOS XE Software could allow an authenticated remote attacker to make unauthorized changes to the filesystem of the affected device. The vulnerability is due to improper input validation. An attacker could exploit this vulnerability by crafting a malicious file and uploading it to the device. An exploit could allow the attacker to gain elevated privileges on the affected device.


A vulnerability in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated remote attacker to read arbitrary files on the underlying operating system (OS) of an affected device. The vulnerability is due to the improper input validation of tar packages uploaded through the Web Portal to the Image Repository. An attacker could exploit this vulnerability by uploading a crafted tar package and viewing the log entries that are generated. A successful exploit could allow the attacker to read arbitrary files on the underlying OS.


An Improper Input Validation weakness allows a malicious local attacker to elevate their permissions to take control of other portions of the NFX platform they should not be able to access and execute commands outside their authorized scope of control. This leads to the attacker being able to take control of the entire system. This issue affects: Juniper Networks Junos OS versions prior to 18.2R1 on NFX Series.


Improper

validation

for

inputs

received

from

firmware

can

lead

to

an

out

of

bound

write

issue

in

video

driver.

in

Snapdragon

Auto

Snapdragon

Compute

Snapdragon

Consumer

IOT

Snapdragon

Industrial

IOT

Snapdragon

Mobile

Snapdragon

Voice

Music

Snapdragon

Wearables

in

Qualcomm

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD


Improper

validation

of

read

and

write

index

of

tx

and

rx

fifo`s

before

calculating

pointer

can

lead

to

out-of-bound

access

in

Snapdragon

Auto

Snapdragon

Compute

Snapdragon

Consumer

IOT

Snapdragon

Industrial

IOT

Snapdragon

Mobile

Snapdragon

Voice

Music

Snapdragon

Wearables

in

Qualcomm

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD


Nessus versions 8.4.0 and earlier were found to contain a reflected XSS vulnerability due to improper validation of user-supplied input. An unauthenticated remote attacker could potentially exploit this vulnerability via a specially crafted request to execute arbitrary script code in a users browser session.


Dell EMC OpenManage Server Administrator (OMSA) versions prior to 9.1.0.3 and prior to 9.2.0.4 contain a web parameter tampering vulnerability. A remote unauthenticated attacker could potentially manipulate parameters of web requests to OMSA to create arbitrary files with empty content or delete the contents of any existing file due to improper input parameter validation


An issue was discovered on LG mobile devices with Android OS 7.0 7.1 7.2 8.0 8.1 and 9.0 software. The Backup subsystem does not properly restrict operations or validate their input. The LG ID is LVE-SMP-190004 (June 2019).


This improper input validation vulnerability allows remote attackers to inject arbitrary code to the system. To fix the vulnerability QNAP recommend updating QTS to their latest versions.


An improper input validation vulnerability in FortiOS 6.2.1 6.2.0 6.0.8 and below until 5.4.0 under admin webUI may allow an attacker to perform an URL redirect attack via a specifically crafted request to the admin initial password change webpage.


An improper input validation in FortiAP-S/W2 6.2.0 to 6.2.2 6.0.5 and below FortiAP-U 6.0.1 and below CLI admin console may allow unauthorized administrators to overwrite system files via specially crafted tcpdump commands in the CLI.


An Improper Input Validation vulnerability in the SSL VPN portal of FortiOS versions 6.2.1 and below and 6.0.6 and below may allow an unauthenticated remote attacker to crash the SSL VPN service by sending a crafted POST request.


An improper input validation vulnerability in the web server CGI facilities of FortiMail before 7.0.1 may allow an unauthenticated attacker to alter the environment of the underlying script interpreter via specifically crafted HTTP requests.


An improper input validation vulnerability in NPU firmware prior to SMR MAY-2021 Release 1 allows arbitrary memory write and code execution.


An improper input validation vulnerability in LDFW prior to SMR Dec-2021 Release 1 allows attackers to perform arbitrary code execution.


An improper input validation vulnerability in DSP driver prior to SMR Sep-2021 Release 1 allows local attackers to get a limited kernel memory information.


An improper input validation in FortiAI v1.4.0 and earlier may allow an authenticated user to gain system shell access via a malicious payload in the \diagnose\ command.


An improper input validation leading to arbitrary file creation was discovered in copy method of Nexacro platform. Remote attackers use copy method to execute arbitrary command after the file creation included malicious code.


An improper input validation leading to arbitrary file creation was discovered in ToWord of ToOffice. Remote attackers use this vulnerability to execute arbitrary file included malicious code.


An improper input validation vulnerability in the service of ezPDFReader allows attacker to execute arbitrary command. This issue occurred when the ezPDF launcher received and executed crafted input values through JSON-RPC communication.


An improper input validation in SMC_SRPMB_WSM handler of RPMB ldfw prior to SMR Feb-2022 Release 1 allows arbitrary memory write and code execution.


An Improper Input Validation issue was discovered in Advantech WebAccess versions prior to 8.3. WebAccess allows some inputs that may cause the program to crash.


An improper input validation vulnerability in HPE Insight Control version 7.6 LR1 was found.


An improper input validation vulnerability in HPE Matrix Operating Environment version 7.6 LR1 was found.


An improper input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to conduct SQL injection attacks.


A Improper Input Validation vulnerability in Open Build Service allows remote attackers to extract files from the system where the service runs. Affected releases are openSUSE Open Build Service: status of is unknown.


An Improper Input Validation issue was discovered in OSIsoft PI Data Archive versions 2017 and prior. Unauthenticated users may use unvalidated custom requests to crash the server.


An Improper Input Validation vulnerability exists in Pro-Face GP-Pro EX v4.08 and previous versions which could cause the execution arbitrary executable when GP-Pro EX is launched.


A improper input validation in Fortinet FortiGate version 6.4.3 and below version 6.2.5 and below version 6.0.11 and below version 5.6.13 and below allows attacker to disclose sensitive information via SNI Client Hello TLS packets.


An improper input validation vulnerability in the sniffer interface of FortiSandbox before 3.2.2 may allow an authenticated attacker to silently halt the sniffer via specifically crafted requests.


In overlay notifications there is a possible hidden notification due to improper input validation. This could lead to a local escalation of privilege because the user is not notified of an overlaying app with User execution privileges needed. User interaction is needed for exploitation.Product: Android Versions: Android-10 Android ID: A-38390530

improper input validation
escalated privilege


improper

input

validation

in

allocation

request

for

secure

allocations

can

lead

to

page

fault.

in

Snapdragon

Auto

Snapdragon

Compute

Snapdragon

Consumer

IOT

Snapdragon

Industrial

IOT

Snapdragon

Mobile

Snapdragon

Voice

Music

Snapdragon

Wearables

Snapdragon

Wired

Infrastructure

and

Networking

in

Qualcomm

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD


In call of SliceProvider.java there is a possible permissions bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10Android ID: A-138441555


An improper input validation vulnerability in libsapeextractor library prior to SMR Sep-2021 Release 1 allows attackers to execute arbitrary code in mediaextractor process.

improper input validation
arbitrary code execution


An improper input validation vulnerability in sdfffd_parse_chunk_FVER() in libsdffextractor library prior to SMR MAY-2021 Release 1 allows attackers to execute arbitrary code on mediaextractor process.


An improper input validation vulnerability in sflacfd_get_frm() in libsflacextractor library prior to SMR MAY-2021 Release 1 allows attackers to execute arbitrary code on mediaextractor process.


An improper input validation vulnerability in scmn_mfal_read() in libsapeextractor library prior to SMR MAY-2021 Release 1 allows attackers to execute arbitrary code on mediaextractor process.


An improper input validation vulnerability in sdfffd_parse_chunk_PROP() in libsdffextractor library prior to SMR MAY-2021 Release 1 allows attackers to execute arbitrary code on mediaextractor process.


An improper input validation vulnerability in libswmfextractor library prior to SMR APR-2021 Release 1 allows attackers to execute arbitrary code on mediaextractor process.


An improper input validation vulnerability in sdfffd_parse_chunk_PROP() with Sample Rate Chunk in libsdffextractor library prior to SMR MAY-2021 Release 1 allows attackers to execute arbitrary code on mediaextractor process.


An improper input validation vulnerability in CA Privileged Access Manager 2.4.4.4 and earlier allows remote attackers to execute arbitrary commands.

improper input validation
arbitrary command execution


An improper input validation vulnerability in loading graph file in DSP driver prior to SMR Sep-2021 Release 1 allows attackers to perform permanent denial of service on the device.

improper input validation
denial of service


An improper input validation before calling java readLine() method may impact IBM Curam Social Program Management 7.0.9 and 7.0.10 which could result in a denial of service. IBM X-Force ID: 189159.


An improper input validation vulnerability in the UEM Core of BlackBerry UEM version(s) 12.13.0 12.12.1a QF2 (and earlier) and 12.11.1 QF3 (and earlier) could allow an attacker to potentially cause a Denial of Service (DoS) of the UEM Core service.

improper input validation
denial of service
dos


A

Improper

Input

Validation

vulnerability

in

Open

Build

Service

allows

remote

attackers

to

cause

DoS

by

specifying

crafted

request

IDs.

Affected

releases

are

openSUSE

Open

Build

Service:

versions

prior

to


Cisco AnyConnect Secure Mobility Client before 3.1(8009) and 4.x before 4.0(2052) on Linux does not properly implement unspecified internal functions which allows local users to obtain root privileges via crafted vpnagent options aka Bug ID CSCus86790.

improper internal function implementation


In all android releases (Android for MSM Firefox OS for MSM QRD Android) from CAF using the linux kernel improper length check Validation in WLAN function can lead to driver writes the default rsn capabilities to the memory not allocated to the frame.


An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory aka \Windows Runtime Elevation of Privilege Vulnerability.\ This affects Windows Server 2012 R2 Windows RT 8.1 Windows Server 2012 Windows Server 2019 Windows Server 2016 Windows 8.1 Windows 10 Windows 10 Servers.


An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory aka \Windows Kernel Information Disclosure Vulnerability.\ This affects Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2019 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers. This CVE ID is unique from CVE-2019-0536 CVE-2019-0554 CVE-2019-0569.


An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory.An attacker who successfully exploited this vulnerability could test for the presence of files on disk aka 'Internet Explorer Information Disclosure Vulnerability'.

improper memory object handle
information disclosure


An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory aka \Windows Kernel Information Disclosure Vulnerability.\ This affects Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2019 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers. This CVE ID is unique from CVE-2019-0536 CVE-2019-0549 CVE-2019-0569.


An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0840.


An information disclosure vulnerability exists when the Human Interface Devices (HID) component improperly handles objects in memory aka 'HID Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0600.


A denial of service vulnerability exists when Windows improperly handles objects in memory aka 'Windows Denial of Service Vulnerability'.

improper memory object handle
denial of service


The Microsoft Windows Subsystem for Linux on Microsoft Windows 10 1703 allows a denial of service vulnerability when it improperly handles objects in memory aka \Windows Subsystem for Linux Denial of Service Vulnerability\.


A denial of service vulnerability exists when Windows improperly handles objects in memory aka \Windows Denial of Service Vulnerability.\ This affects Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers.


A denial of service vulnerability exists when Windows improperly handles objects in memory aka \Windows Denial of Service Vulnerability.\ This affects Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers.


Microsoft Windows 8.1 and Windows RT 8.1 Windows Server 2012 R2 Windows 10 Gold 1511 1607 and 1703 and Windows Server 2016 allow an attacker to run processes in an elevated context when the Windows kernel improperly handles objects in memory aka \Win32k Elevation of Privilege Vulnerability.\ This CVE ID is unique from CVE-2017-8465.

improper memory object handle
elevated privilege vulnerability


Microsoft Windows 8.1 and Windows RT 8.1 Windows Server 2012 R2 Windows 10 Gold 1511 1607 and 1703 and Windows Server 2016 allow an attacker to run processes in an elevated context when the Windows kernel improperly handles objects in memory aka \Win32k Elevation of Privilege Vulnerability.\ This CVE ID is unique from CVE-2017-8468.


An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory aka \DirectX Graphics Kernel Elevation of Privilege Vulnerability.\ This affects Windows Server 2012 R2 Windows RT 8.1 Windows Server 2012 Windows Server 2019 Windows Server 2016 Windows 8.1 Windows 10 Windows 10 Servers.


An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory aka \DirectX Graphics Kernel Elevation of Privilege Vulnerability.\ This affects Windows Server 2016 Windows 10 Windows 10 Servers. This CVE ID is unique from CVE-2018-8400 CVE-2018-8401 CVE-2018-8405.


An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory aka \DirectX Elevation of Privilege Vulnerability.\ This affects Windows Server 2012 R2 Windows RT 8.1 Windows Server 2012 Windows Server 2019 Windows Server 2016 Windows 8.1 Windows 10 Windows 10 Servers. This CVE ID is unique from CVE-2018-8554 CVE-2018-8561.


An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory aka \Windows Common Log File System Driver Elevation of Privilege Vulnerability.\ This affects Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers.


An elevation of privilege vulnerability exists when the (Human Interface Device) HID Parser Library driver improperly handles objects in memory aka \HIDParser Elevation of Privilege Vulnerability.\ This affects Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers.


An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory aka \DirectX Graphics Kernel Elevation of Privilege Vulnerability.\ This affects Windows Server 2016 Windows 10 Windows 10 Servers.


An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory aka \DirectX Graphics Kernel Elevation of Privilege Vulnerability.\ This affects Windows 10 Servers Windows 10. This CVE ID is unique from CVE-2018-8401 CVE-2018-8405 CVE-2018-8406.


An Elevation of Privilege vulnerability exists in Filter Manager when it improperly handles objects in memory aka \Microsoft Filter Manager Elevation Of Privilege Vulnerability.\ This affects Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2019 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers.


An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory aka \DirectX Elevation of Privilege Vulnerability.\ This affects Windows Server 2012 R2 Windows RT 8.1 Windows Server 2012 Windows Server 2019 Windows Server 2016 Windows 8.1 Windows 10 Windows 10 Servers. This CVE ID is unique from CVE-2018-8485 CVE-2018-8554.


An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory aka \DirectX Graphics Kernel Elevation of Privilege Vulnerability.\ This affects Windows Server 2012 R2 Windows RT 8.1 Windows Server 2016 Windows 8.1 Windows 10 Windows 10 Servers. This CVE ID is unique from CVE-2018-8400 CVE-2018-8401 CVE-2018-8406.


An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory aka \DirectX Graphics Kernel Elevation of Privilege Vulnerability.\ This affects Windows Server 2016 Windows 10 Windows 10 Servers. This CVE ID is unique from CVE-2018-8400 CVE-2018-8405 CVE-2018-8406.


An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory aka \DirectX Elevation of Privilege Vulnerability.\ This affects Windows 10 Servers Windows 10 Windows Server 2019. This CVE ID is unique from CVE-2018-8485 CVE-2018-8561.


An elevation of privilege vulnerability exists when Windows improperly handles objects in memory and incorrectly maps kernel memory aka \Microsoft DirectX Graphics Kernel Subsystem Elevation of Privilege Vulnerability.\ This affects Windows Server 2012 R2 Windows RT 8.1 Windows Server 2012 Windows Server 2016 Windows 8.1 Windows 10 Windows 10 Servers.


An elevation of privilege vulnerability exists when the Windows Event System improperly handles objects in memory.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows Event System Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows Delivery Optimization service improperly handles objects in memory aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0934 CVE-2020-1009 CVE-2020-1011 CVE-2020-1015.


An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1077 CVE-2020-1090 CVE-2020-1125 CVE-2020-1139 CVE-2020-1149 CVE-2020-1151 CVE-2020-1155 CVE-2020-1156 CVE-2020-1157 CVE-2020-1158 CVE-2020-1164.


An elevation of privilege vulnerability exists when Windows Error Reporting improperly handles objects in memory.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows Error Reporting Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1086 CVE-2020-1090 CVE-2020-1125 CVE-2020-1139 CVE-2020-1149 CVE-2020-1151 CVE-2020-1155 CVE-2020-1156 CVE-2020-1157 CVE-2020-1158 CVE-2020-1164.


An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1077 CVE-2020-1086 CVE-2020-1090 CVE-2020-1125 CVE-2020-1139 CVE-2020-1149 CVE-2020-1151 CVE-2020-1155 CVE-2020-1156 CVE-2020-1157 CVE-2020-1164.


An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1249 CVE-2020-1353 CVE-2020-1370 CVE-2020-1399 CVE-2020-1413 CVE-2020-1414 CVE-2020-1415 CVE-2020-1422.


An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory aka 'Windows State Repository Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1124 CVE-2020-1131 CVE-2020-1134 CVE-2020-1184 CVE-2020-1185 CVE-2020-1186 CVE-2020-1187 CVE-2020-1188 CVE-2020-1189 CVE-2020-1190 CVE-2020-1191.


An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory aka 'Windows State Repository Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1124 CVE-2020-1131 CVE-2020-1134 CVE-2020-1144 CVE-2020-1185 CVE-2020-1186 CVE-2020-1187 CVE-2020-1188 CVE-2020-1189 CVE-2020-1190 CVE-2020-1191.


An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory aka 'Windows State Repository Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1124 CVE-2020-1131 CVE-2020-1134 CVE-2020-1144 CVE-2020-1184 CVE-2020-1185 CVE-2020-1186 CVE-2020-1187 CVE-2020-1189 CVE-2020-1190 CVE-2020-1191.


An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1249 CVE-2020-1353 CVE-2020-1370 CVE-2020-1399 CVE-2020-1404 CVE-2020-1413 CVE-2020-1415 CVE-2020-1422.


An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory aka 'Windows State Repository Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1124 CVE-2020-1131 CVE-2020-1134 CVE-2020-1144 CVE-2020-1184 CVE-2020-1185 CVE-2020-1186 CVE-2020-1187 CVE-2020-1188 CVE-2020-1189 CVE-2020-1191.


An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1231 CVE-2020-1233 CVE-2020-1235 CVE-2020-1265 CVE-2020-1304 CVE-2020-1306 CVE-2020-1334.


An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1077 CVE-2020-1086 CVE-2020-1090 CVE-2020-1125 CVE-2020-1139 CVE-2020-1149 CVE-2020-1155 CVE-2020-1156 CVE-2020-1157 CVE-2020-1158 CVE-2020-1164.


An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1249 CVE-2020-1353 CVE-2020-1370 CVE-2020-1404 CVE-2020-1413 CVE-2020-1414 CVE-2020-1415 CVE-2020-1422.


An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1249 CVE-2020-1353 CVE-2020-1399 CVE-2020-1404 CVE-2020-1413 CVE-2020-1414 CVE-2020-1415 CVE-2020-1422.


An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory aka 'Windows State Repository Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1124 CVE-2020-1131 CVE-2020-1134 CVE-2020-1144 CVE-2020-1184 CVE-2020-1185 CVE-2020-1186 CVE-2020-1187 CVE-2020-1188 CVE-2020-1190 CVE-2020-1191.


An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1249 CVE-2020-1353 CVE-2020-1370 CVE-2020-1399 CVE-2020-1404 CVE-2020-1413 CVE-2020-1414 CVE-2020-1422.


An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1077 CVE-2020-1086 CVE-2020-1090 CVE-2020-1125 CVE-2020-1139 CVE-2020-1151 CVE-2020-1155 CVE-2020-1156 CVE-2020-1157 CVE-2020-1158 CVE-2020-1164.


An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory aka 'Windows State Repository Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1124 CVE-2020-1131 CVE-2020-1134 CVE-2020-1144 CVE-2020-1184 CVE-2020-1185 CVE-2020-1186 CVE-2020-1187 CVE-2020-1188 CVE-2020-1189 CVE-2020-1190.


An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1077 CVE-2020-1086 CVE-2020-1090 CVE-2020-1125 CVE-2020-1139 CVE-2020-1149 CVE-2020-1151 CVE-2020-1155 CVE-2020-1156 CVE-2020-1157 CVE-2020-1158.


An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1077 CVE-2020-1086 CVE-2020-1090 CVE-2020-1125 CVE-2020-1139 CVE-2020-1149 CVE-2020-1151 CVE-2020-1156 CVE-2020-1157 CVE-2020-1158 CVE-2020-1164.


An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1231 CVE-2020-1233 CVE-2020-1265 CVE-2020-1282 CVE-2020-1304 CVE-2020-1306 CVE-2020-1334.


An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1233 CVE-2020-1235 CVE-2020-1265 CVE-2020-1282 CVE-2020-1304 CVE-2020-1306 CVE-2020-1334.


An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1231 CVE-2020-1233 CVE-2020-1235 CVE-2020-1265 CVE-2020-1282 CVE-2020-1304 CVE-2020-1334.


An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory aka 'Windows State Repository Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1124 CVE-2020-1131 CVE-2020-1134 CVE-2020-1144 CVE-2020-1184 CVE-2020-1186 CVE-2020-1187 CVE-2020-1188 CVE-2020-1189 CVE-2020-1190 CVE-2020-1191.


An elevation of privilege vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles objects in memory aka 'Windows Mobile Device Management Diagnostics Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1405.


An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory aka 'Windows State Repository Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1124 CVE-2020-1134 CVE-2020-1144 CVE-2020-1184 CVE-2020-1185 CVE-2020-1186 CVE-2020-1187 CVE-2020-1188 CVE-2020-1189 CVE-2020-1190 CVE-2020-1191.


An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1077 CVE-2020-1086 CVE-2020-1090 CVE-2020-1125 CVE-2020-1139 CVE-2020-1149 CVE-2020-1151 CVE-2020-1155 CVE-2020-1156 CVE-2020-1158 CVE-2020-1164.


An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1249 CVE-2020-1353 CVE-2020-1370 CVE-2020-1399 CVE-2020-1404 CVE-2020-1413 CVE-2020-1414 CVE-2020-1415.


An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1249 CVE-2020-1353 CVE-2020-1370 CVE-2020-1399 CVE-2020-1404 CVE-2020-1414 CVE-2020-1415 CVE-2020-1422.


An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1249 CVE-2020-1370 CVE-2020-1399 CVE-2020-1404 CVE-2020-1413 CVE-2020-1414 CVE-2020-1415 CVE-2020-1422.


An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1077 CVE-2020-1086 CVE-2020-1090 CVE-2020-1125 CVE-2020-1149 CVE-2020-1151 CVE-2020-1155 CVE-2020-1156 CVE-2020-1157 CVE-2020-1158 CVE-2020-1164.


An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1231 CVE-2020-1235 CVE-2020-1265 CVE-2020-1282 CVE-2020-1304 CVE-2020-1306 CVE-2020-1334.


An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1353 CVE-2020-1370 CVE-2020-1399 CVE-2020-1404 CVE-2020-1413 CVE-2020-1414 CVE-2020-1415 CVE-2020-1422.


An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1077 CVE-2020-1086 CVE-2020-1090 CVE-2020-1139 CVE-2020-1149 CVE-2020-1151 CVE-2020-1155 CVE-2020-1156 CVE-2020-1157 CVE-2020-1158 CVE-2020-1164.


An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1231 CVE-2020-1233 CVE-2020-1235 CVE-2020-1265 CVE-2020-1282 CVE-2020-1306 CVE-2020-1334.


An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory aka 'Windows State Repository Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1124 CVE-2020-1131 CVE-2020-1134 CVE-2020-1144 CVE-2020-1184 CVE-2020-1185 CVE-2020-1186 CVE-2020-1188 CVE-2020-1189 CVE-2020-1190 CVE-2020-1191.


An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1231 CVE-2020-1233 CVE-2020-1235 CVE-2020-1282 CVE-2020-1304 CVE-2020-1306 CVE-2020-1334.


An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory aka 'Windows State Repository Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1131 CVE-2020-1134 CVE-2020-1144 CVE-2020-1184 CVE-2020-1185 CVE-2020-1186 CVE-2020-1187 CVE-2020-1188 CVE-2020-1189 CVE-2020-1190 CVE-2020-1191.


An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory aka 'Windows State Repository Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1124 CVE-2020-1131 CVE-2020-1134 CVE-2020-1144 CVE-2020-1184 CVE-2020-1185 CVE-2020-1187 CVE-2020-1188 CVE-2020-1189 CVE-2020-1190 CVE-2020-1191.


An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1231 CVE-2020-1233 CVE-2020-1235 CVE-2020-1265 CVE-2020-1282 CVE-2020-1304 CVE-2020-1306.


An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1077 CVE-2020-1086 CVE-2020-1125 CVE-2020-1139 CVE-2020-1149 CVE-2020-1151 CVE-2020-1155 CVE-2020-1156 CVE-2020-1157 CVE-2020-1158 CVE-2020-1164.


An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1077 CVE-2020-1086 CVE-2020-1090 CVE-2020-1125 CVE-2020-1139 CVE-2020-1149 CVE-2020-1151 CVE-2020-1155 CVE-2020-1157 CVE-2020-1158 CVE-2020-1164.


An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory aka 'Windows State Repository Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1124 CVE-2020-1131 CVE-2020-1144 CVE-2020-1184 CVE-2020-1185 CVE-2020-1186 CVE-2020-1187 CVE-2020-1188 CVE-2020-1189 CVE-2020-1190 CVE-2020-1191.


An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0844.


An information disclosure vulnerability exists in Windows 8.1 Windows RT 8.1 Windows Server 2012 R2 Windows 10 and Windows Server 2016 when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user's system a.k.a. \Windows Kernel Information Disclosure Vulnerability.\


Microsoft XML Core Services (MSXML) in Windows 10 Gold 1511 and 1607; Windows 7 SP1; Windows 8.1; Windows RT 8.1; Windows Server 2008 SP2 and R2 SP1; Windows Server 2012 Gold and R2; Windows Server 2016; and Windows Vista SP2 improperly handles objects in memory allowing attackers to test for files on disk via a crafted web site aka \Microsoft XML Information Disclosure Vulnerability.\


The Microsoft Windows Kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 1607 and 1703 and Windows Server 2016 allows an information disclosure vulnerability when it improperly handles objects in memory aka \Windows Kernel Information Disclosure Vulnerability\. This CVE ID is unique from CVE-2017-11765 CVE-2017-11784 and CVE-2017-11785.


The Microsoft Windows Kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 1607 and 1703 and Windows Server 2016 allows an information disclosure vulnerability when it improperly handles objects in memory aka \Windows Kernel Information Disclosure Vulnerability\. This CVE ID is unique from CVE-2017-11765 CVE-2017-11784 and CVE-2017-11814.


The Windows kernel component on Windows 7 SP1 Windows Server 2008 SP2 and R2 SP1 Windows 8.1 and RT 8.1 Windows Server 2012 and R2 Windows 10 Gold 1511 1607 1703 and 1709 Windows Server 2016 and Windows Server version 1709 allows an information disclosure vulnerability when it improperly handles objects in memory aka \Windows Kernel Information Disclosure Vulnerability\. This CVE ID is unique from CVE-2017-11842 CVE-2017-11849 and CVE-2017-11853.


The Microsoft Windows Kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 1607 and 1703 and Windows Server 2016 allows an information disclosure vulnerability when it improperly handles objects in memory aka \Windows Kernel Information Disclosure Vulnerability\. This CVE ID is unique from CVE-2017-11784 CVE-2017-11785 and CVE-2017-11814.


The Microsoft Windows Kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 and Windows 10 Gold allows an information disclosure vulnerability when it improperly handles objects in memory aka \Windows Kernel Information Disclosure Vulnerability\. This CVE ID is unique from CVE-2017-11765 CVE-2017-11785 and CVE-2017-11814.


The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 1607 and 1703 and Windows Server 2016 allows an information disclosure vulnerability when it improperly handles objects in memory aka \Windows Kernel Information Disclosure Vulnerability\. This CVE ID is unique from CVE-2017-8679 CVE-2017-8709 and CVE-2017-8719.


An information disclosure vulnerability exists in Microsoft Windows Server 2008 SP2 and R2 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 and Windows Server 2016 when the Windows kernel improperly handles objects in memory aka \GDI Information Disclosure Vulnerability\.


The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 1607 and 1703 and Windows Server 2016 allows an information disclosure vulnerability when it improperly handles objects in memory aka \Win32k Information Disclosure Vulnerability\. This CVE ID is unique from CVE-2017-8678 CVE-2017-8680 CVE-2017-8677 and CVE-2017-8687.


The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 1607 and 1703 and Windows Server 2016 allows an information disclosure vulnerability when it improperly handles objects in memory aka \Win32k Information Disclosure Vulnerability\. This CVE ID is unique from CVE-2017-8677 CVE-2017-8680 CVE-2017-8681 and CVE-2017-8687.


The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 1607 and 1703 and Windows Server 2016 allows an information disclosure vulnerability when it improperly handles objects in memory aka \Windows Kernel Information Disclosure Vulnerability\. This CVE ID is unique from CVE-2017-8708 CVE-2017-8709 and CVE-2017-8679.


HTTP.sys in Microsoft Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 1607 and 1703 and Windows Server 2016 allows an information disclosure vulnerability when the component improperly handles objects in memory aka \Https.sys Information Disclosure Vulnerability\.


The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 1607 and 1703 and Windows Server 2016 allows an information disclosure vulnerability when it improperly handles objects in memory aka \Windows Kernel Information Disclosure Vulnerability\. This CVE ID is unique from CVE-2017-8708 CVE-2017-8709 and CVE-2017-8719.


The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 1607 and 1703 and Windows Server 2016 allows an information disclosure vulnerability when it improperly handles objects in memory aka \Windows Kernel Information Disclosure Vulnerability\. This CVE ID is unique from CVE-2017-8708 CVE-2017-8679 and CVE-2017-8719.


The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 and Windows RT 8.1 allows an information disclosure vulnerability when it improperly handles objects in memory aka \Win32k Information Disclosure Vulnerability\. This CVE ID is unique from CVE-2017-8678 CVE-2017-8677 CVE-2017-8681 and CVE-2017-8687.


The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 1607 and 1703 and Windows Server 2016 allows an information disclosure vulnerability when it improperly handles objects in memory aka \Win32k Information Disclosure Vulnerability\. This CVE ID is unique from CVE-2017-8678 CVE-2017-8680 CVE-2017-8677 and CVE-2017-8681.


An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory aka \Microsoft Edge Information Disclosure Vulnerability.\ This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8289 CVE-2018-8297 CVE-2018-8324.


An information disclosure vulnerability exists when DirectX improperly handles objects in memory aka \DirectX Information Disclosure Vulnerability.\ This affects Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2012 Windows 8.1 Windows Server 2008 R2.


An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory aka \Windows Kernel Information Disclosure Vulnerability.\ This affects Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2012 Windows 8.1 Windows Server 2008 R2. This CVE ID is unique from CVE-2018-8477 CVE-2018-8621.


An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory aka \Microsoft Edge Information Disclosure Vulnerability.\ This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8297 CVE-2018-8324 CVE-2018-8325.


An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory aka \Windows Kernel Information Disclosure Vulnerability.\ This affects Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers. This CVE ID is unique from CVE-2018-8121.


An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory aka \Windows Kernel Information Disclosure Vulnerability.\ This affects Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2019 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers.


An information disclosure vulnerability exists when the Windows Graphics component improperly handles objects in memory aka \Microsoft Graphics Component Information Disclosure Vulnerability.\ This affects Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers.


An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory aka \Windows Kernel Information Disclosure Vulnerability.\ This affects Windows 10 Windows 10 Servers. This CVE ID is unique from CVE-2018-8336 CVE-2018-8419 CVE-2018-8442 CVE-2018-8443 CVE-2018-8446.


An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory aka \Microsoft Edge Information Disclosure Vulnerability.\ This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8289 CVE-2018-8297 CVE-2018-8325.


An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory aka \Windows Kernel Information Disclosure Vulnerability.\ This affects Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers. This CVE ID is unique from CVE-2018-8341.


An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory aka \Windows Kernel Information Disclosure Vulnerability.\ This affects Windows Server 2012 Windows 7 Windows Server 2008 R2. This CVE ID is unique from CVE-2018-8477 CVE-2018-8622.


An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory aka \Windows Kernel Information Disclosure Vulnerability.\ This affects Windows Server 2008 Windows 7 Windows Server 2008 R2. This CVE ID is unique from CVE-2018-8419 CVE-2018-8442 CVE-2018-8443 CVE-2018-8445 CVE-2018-8446.


An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory aka \Windows Kernel Information Disclosure Vulnerability.\ This affects Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers. This CVE ID is unique from CVE-2018-8336 CVE-2018-8419 CVE-2018-8442 CVE-2018-8445 CVE-2018-8446.


An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory aka \Windows Kernel Information Disclosure Vulnerability.\ This affects Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2019 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers. This CVE ID is unique from CVE-2018-8621 CVE-2018-8622.


An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory aka \Windows Kernel Information Disclosure Vulnerability.\ This affects Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers. This CVE ID is unique from CVE-2018-8348.


An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory aka \Windows Kernel Information Disclosure Vulnerability.\ This affects Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers. This CVE ID is unique from CVE-2018-8336 CVE-2018-8419 CVE-2018-8442 CVE-2018-8443 CVE-2018-8445.


An information disclosure vulnerability exists when DirectX improperly handles objects in memory aka \DirectX Information Disclosure Vulnerability.\ This affects Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2019 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers.


An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory aka \Windows Kernel Information Disclosure Vulnerability.\ This affects Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers. This CVE ID is unique from CVE-2018-8336 CVE-2018-8419 CVE-2018-8443 CVE-2018-8445 CVE-2018-8446.


An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory aka \Microsoft Edge Information Disclosure Vulnerability.\ This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8289 CVE-2018-8324 CVE-2018-8325.


An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory aka \Windows Kernel Information Disclosure Vulnerability.\ This affects Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers. This CVE ID is unique from CVE-2018-8141.


An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory aka \Windows Kernel Information Disclosure Vulnerability.\ This affects Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers. This CVE ID is unique from CVE-2018-0887 CVE-2018-0968 CVE-2018-0969 CVE-2018-0970 CVE-2018-0971 CVE-2018-0972 CVE-2018-0973 CVE-2018-0974 CVE-2018-0975.


An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory aka 'Microsoft Graphics Component Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0982 CVE-2020-1005.


An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory aka 'Microsoft Graphics Component Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0987 CVE-2020-1005.


An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory aka 'Microsoft Graphics Component Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0982 CVE-2020-0987.


Microsoft Edge in Microsoft Windows 10 Gold 1511 1607 and 1703 and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system when Microsoft Edge improperly handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8499 CVE-2017-8520 CVE-2017-8521 and CVE-2017-8549.

improper memory object handle
memory corruption


Microsoft Edge in Microsoft Windows 10 Gold 1511 1607 and 1703 and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system when Microsoft Edge improperly handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8499 CVE-2017-8520 CVE-2017-8521 and CVE-2017-8548.


A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory aka \Media Foundation Memory Corruption Vulnerability.\ This affects Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers.


A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1477 CVE-2020-1478 CVE-2020-1492 CVE-2020-1525 CVE-2020-1554.


A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1379 CVE-2020-1478 CVE-2020-1492 CVE-2020-1525 CVE-2020-1554.


A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1379 CVE-2020-1477 CVE-2020-1478 CVE-2020-1525 CVE-2020-1554.


A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1379 CVE-2020-1477 CVE-2020-1478 CVE-2020-1492 CVE-2020-1525.


A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1379 CVE-2020-1477 CVE-2020-1492 CVE-2020-1525 CVE-2020-1554.


A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1379 CVE-2020-1477 CVE-2020-1478 CVE-2020-1492 CVE-2020-1554.


In all android releases(Android for MSM Firefox OS for MSM QRD Android) from CAF using the linux kernel improper mounting lead to device node and executable to be run from /dsp/ which presents a potential security issue.


An improper neutralization of input vulnerability in Fortinet FortiADC 5.3.3 and earlier may allow an attacker to execute a stored Cross Site Scripting (XSS) via a field in the traffic group interface.


A improper neutralization of Special Elements used in an SQL Command ('SQL Injection') in Fortinet FortiWLM version 8.6.1 and below allows attacker to disclosure device users and database information via crafted HTTP requests.


A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWLM version 8.6.1 and below allows attacker to disclose sensitive information from DB tables via crafted requests.


Multiple improper neutralization of special elements of SQL commands vulnerabilities in FortiMail before 6.4.4 may allow a non-authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests.


An improper neutralization of special elements used in an OS Command vulnerability in the administrative interface of FortiMail before 6.4.4 may allow an authenticated attacker to execute unauthorized commands via specifically crafted HTTP requests.


Multiple improper neutralization of special elements used in an SQL command vulnerabilities in FortiWAN before 4.5.9 may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests.


An improper neutralization of input vulnerability in FortiWLC 8.5.1 allows a remote authenticated attacker to perform a stored cross site scripting attack (XSS) via the ESS profile or the Radius Profile.


An improper neutralization of input vulnerability in the Admin Profile of FortiAnalyzer may allow a remote authenticated attacker to perform a stored cross site scripting attack (XSS) via the Description Area.


An improper neutralization of input vulnerability in FortiWeb allows a remote authenticated attacker to perform a stored cross site scripting attack (XSS) via the Disclaimer Description of a Replacement Message.


An improper neutralization of input vulnerability in the dashboard of FortiADC may allow an authenticated attacker to perform a cross site scripting attack (XSS) via the name parameter.


An improper neutralization of input vulnerability in the URL Description in Fortinet FortiIsolator version 1.2.2 allows a remote authenticated attacker to perform a cross site scripting attack (XSS).


An improper neutralization of input vulnerability CWE-79 in FortiClientEMS versions 6.4.1 and below and 6.2.9 and below may allow a remote authenticated attacker to inject malicious script/tags via the name parameter of various sections of the server.


An improper neutralization of input vulnerability in FortiGate version 6.2.x below 6.2.5 and 6.4.x below 6.4.1 may allow a remote attacker to perform a stored cross site scripting attack (XSS) via the IPS and WAF logs dashboard.


An improper neutralization of input vulnerability in FortiAnalyzer before 6.4.1 and 6.2.5 may allow a remote authenticated attacker to inject script related HTML tags via Name parameter of Storage Connectors.


An improper neutralization of input vulnerability in FortiNAC before 8.7.2 may allow a remote authenticated attacker to perform a stored cross site scripting attack (XSS) via the UserID of Admin Users.


An improper neutralization of input vulnerability in FortiTester before 3.9.0 may allow a remote authenticated attacker to inject script related HTML tags via IPv4/IPv6 address fields.


Cloud Foundry Routing all versions before 0.193.0 does not properly validate nonce input. A remote unauthenticated malicious user could forge an HTTP route service request using an invalid nonce that will cause the Gorouter to crash.


Possible assertion due to improper handling of IPV6 packet with invalid length in destination options header in Snapdragon Auto Snapdragon Compute Snapdragon Consumer IOT Snapdragon Industrial IOT Snapdragon Wearables


Shindig-Integrator 5.x a module for Drupal does not properly restrict generated page access which allows remote attackers to gain privileges via unspecified vectors.


In all Qualcomm products with Android releases from CAF using the Linux kernel due to a type downcast a value may improperly pass validation and cause an out of bounds write later.


Cisco AnyConnect Secure Mobility Client 3.1(60) on Windows does not properly validate pathnames which allows local users to gain privileges via a crafted INF file aka Bug ID CSCus65862.


Cisco AnyConnect Secure Mobility Client 4.1(8) on OS X and Linux does not verify pathnames before installation actions which allows local users to obtain root privileges via a crafted installation file aka Bug ID CSCuv11947.


In WordPress before 4.7.5 there is improper handling of post meta data values in the XML-RPC API.


Microsoft Word 2002 2000 97 and 98(J) does not properly check certain properties of a document which allows attackers to bypass the macro security model and automatically execute arbitrary macros via a malicious document.


libmysofa before 2019-11-24 does not properly restrict recursive function calls as demonstrated by reports of stack consumption in readOHDRHeaderMessageDatatype in dataobject.c and directblockRead in fractalhead.c. NOTE: a download of v0.9 after 2019-12-06 should fully remediate this issue.


In all Android releases from CAF using the Linux kernel an array index in an ALSA routine is not properly validating potentially leading to kernel stack corruption.


A vulnerability in the web server of Cisco Integrated Management Controller (IMC) could allow an authenticated remote attacker to set sensitive configuration values and gain elevated privileges. The vulnerability is due to improper handling of substring comparison operations that are performed by the affected software. An attacker could exploit this vulnerability by sending a crafted HTTP request to the affected software. A successful exploit could allow the attacker with read-only privileges to gain administrator privileges.


In all android releases(Android for MSM Firefox OS for MSM QRD Android) from CAF using the linux kernel a partition name-check variable is not reset for every iteration which may cause improper termination in the META image.


A vulnerability in the packet filtering features of Cisco SD-WAN Solution could allow an unauthenticated remote attacker to bypass L3 and L4 traffic filters. The vulnerability is due to improper traffic filtering conditions on an affected device. An attacker could exploit this vulnerability by crafting a malicious TCP packet with specific characteristics and sending it to a target device. A successful exploit could allow the attacker to bypass the L3 and L4 traffic filters and inject an arbitrary packet in the network.


Writer in Microsoft Windows Essentials 2011 and 2012 allows remote attackers to bypass proxy settings and overwrite arbitrary files via crafted URL parameters aka \Windows Essentials Improper URI Handling Vulnerability.\


A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager software could allow an authenticated remote attacker to download and view files within the application that should be restricted. This vulnerability is due to improper sanitization of user-supplied input in HTTP request parameters that describe filenames. An attacker could exploit this vulnerability by using directory traversal techniques to submit a path to a desired file location. A successful exploit could allow the attacker to view application files that may contain sensitive information.


A vulnerability in Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated remote attacker to bypass access controls and conduct a server-side request forgery (SSRF) attack on a targeted system. The vulnerability is due to improper validation of user-supplied input on the affected system. An attacker could exploit this vulnerability by sending the user of the web application a crafted request. If the request is processed the attacker could access the system and perform unauthorized actions.


Chamilo 1.9.4 has XSS due to improper validation of user-supplied input by the chat.php script.


Insta HMS before 12.4.10 is vulnerable to XSS because of improper validation of user-supplied input by multiple scripts. A remote attacker could exploit this vulnerability via a crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials.


IBM Robotic Process Automation 21.0.1 and 21.0.2 is vulnerable to External Service Interaction attack caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to induce the application to perform server-side DNS lookups or HTTP requests to arbitrary domain names. By submitting suitable payloads an attacker can cause the application server to attack other systems that it can interact with. IBM X-Force ID: 224156.


IBM WebSphere Cast Iron Solution 7.0.0 and 7.5.0.0 is vulnerable to External Service Interaction attack caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to induce the application to perform server-side DNS lookups or HTTP requests to arbitrary domain names. By submitting suitable payloads an attacker can cause the application server to attack other systems that it can interact with. IBM X-Force ID: 119516.


IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to arbitrary delete a directory caused by improper validation of user-supplied input. IBM X-Force ID: 175026.


IBM WebSphere Application Server 7.0 8.0 8.5 and 9.0 Admin Console is vulnerable to cross-site request forgery caused by improper validation of user-supplied input. By persuading a user to visit a malicious URL a remote attacker could send a specially-crafted request. An attacker could exploit this vulnerability to perform CSRF attack and update available applications. IBM X-Force ID: 152992.

improper user input validation
cross site request forgery


IBM Sametime Meeting Server 8.5.2 and 9.0 is vulnerable to cross-site request forgery caused by improper validation of user-supplied input. By persuading a user to visit a malicious link a remote attacker could force the user to log out of Sametime. IBM X-Force ID: 113846.


Nessus versions 8.2.1 and earlier were found to contain a stored XSS vulnerability due to improper validation of user-supplied input. An authenticated remote attacker could potentially exploit this vulnerability via a specially crafted request to execute arbitrary script code in a user's browser session. Tenable has released Nessus 8.2.2 to address this issue.


In all Qualcomm products with Android releases from CAF using the Linux kernel in a driver function a value from userspace is not properly validated potentially leading to an out of bounds heap write.


A vulnerability in the Identity Services Engine (ISE) integration feature of Cisco Prime Infrastructure (PI) could allow an unauthenticated remote attacker to perform a man-in-the-middle attack against the Secure Sockets Layer (SSL) tunnel established between ISE and PI. The vulnerability is due to improper validation of the server SSL certificate when establishing the SSL tunnel with ISE. An attacker could exploit this vulnerability by using a crafted SSL certificate and could then intercept communications between the ISE and PI. A successful exploit could allow the attacker to view and alter potentially sensitive information that the ISE maintains about clients that are connected to the network. This vulnerability affects Cisco Prime Infrastructure Software Releases 2.2 through 3.4.0 when the PI server is integrated with ISE which is disabled by default.


Cisco Webex Business Suite before 39.1.0 contains a vulnerability that could allow an unauthenticated remote attacker to affect the integrity of the application. The vulnerability is due to improper validation of host header values. An attacker with a privileged network position either a man-in-the-middle or by intercepting wireless network traffic could exploit this vulnerability to manipulate header values sent by a client to the affected application. The attacker could cause the application to use input from the header to redirect a user from the Cisco Webex Meetings Online site to an arbitrary site of the attacker's choosing.


Possible assertion due to improper validation of symbols configured for PDCCH monitoring in Snapdragon Auto Snapdragon Compute Snapdragon Connectivity Snapdragon Industrial IOT Snapdragon Mobile


An issue was discovered in Mattermost Server before 5.13.0. Incoming webhook creation is not properly restricted.


An issue was discovered in Mattermost Server before 5.8.0. The first user is sometimes inadvertently a system admin.


An inconsistent user interface issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.6 Safari 12.1.2. Visiting a malicious website may lead to address bar spoofing.


An inconsistent user interface issue was addressed with improved state management. This issue is fixed in Safari 13.0.1. Visiting a malicious website may lead to user interface spoofing.