Results
17,305· Page 269/347GlobalProtect Agent 4.1.0 for Windows and GlobalProtect Agent 4.1.10 and earlier for macOS may allow a local authenticat
Symantec VIP Enterprise Gateway (all versions) may be susceptible to a cross-site scripting (XSS) exploit, which is a ty
Check Point IKEv2 IPsec VPN up to R80.30, in some less common conditions, may allow an attacker with knowledge of the in
A configuration issue has been discovered in Forcepoint Email Security 8.4.x and 8.5.x: the product is left in a vulnera
An improper access control vulnerability in FortiClientMac before 6.0.5 may allow an attacker to affect the application'
In systemd before v242-rc4, it was discovered that pam_systemd does not properly sanitize the environment before using t
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,
An information disclosure vulnerability exists when affected Open Enclave SDK versions improperly handle objects in memo
An elevation of privilege vulnerability exists when Azure DevOps Server 2019 does not properly enforce project permissio
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided inpu
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sa
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sa
A spoofing vulnerability exists in Microsoft Azure DevOps Server when it fails to properly handle web requests, aka 'Azu
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sa
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sa
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sa
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in
A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails to properly handle web
A spoofing vulnerability that could allow a security feature bypass exists in when Azure DevOps Server does not properly
A remote code execution vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Remote Code
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its m
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Wi
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,
A remote code execution vulnerability exists when the IOleCvt interface renders ASP webpage content, aka 'Windows IOleCv
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Window
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard li
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Window
An information disclosure vulnerability exists when the Terminal Services component improperly discloses the contents of
An information disclosure vulnerability exists when Windows Task Scheduler improperly discloses credentials to Windows C
An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Informati
An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), ak
An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory, aka
An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka 'Microsoft
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speciall
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speciall
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obje
A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles obj
A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles obj
A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles obj
A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles obj
A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles obj
Test your stack for 2019issues
CyberStrike tests your own apps and APIs, then verifies each finding before you see it.