Menu

Star on GitHub · 3.2k

2020

18,349 vulnerabilities published in 2020.

Results

18,349· Page 356/367
9.1
CVE-2020-0654

A security feature bypass vulnerability exists in Microsoft OneDrive App for Android.This could allow an attacker to byp

7.8
CVE-2020-0653

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obje

7.8
CVE-2020-0652

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle obj

7.8
CVE-2020-0651

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obje

7.8
CVE-2020-0650

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obje

5.4
CVE-2020-0647

A spoofing vulnerability exists when Office Online does not validate origin in cross-origin communications correctly, ak

9.8
CVE-2020-0646KEV

A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.N

7.8
CVE-2020-0644

An elevation of privilege vulnerability exists when Microsoft Windows implements predictable memory section names, aka '

5.5
CVE-2020-0643

An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface Plus (GDI+) handles

7.8
CVE-2020-0642

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in

7.8
CVE-2020-0641

An elevation of privilege vulnerability exists in Windows Media Service that allows file creation in arbitrary locations

7.5
CVE-2020-0640

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet

5.5
CVE-2020-0639

An information disclosure vulnerability exists in the Windows Common Log File System (CLFS) driver when it fails to prop

7.8
CVE-2020-0638KEV

An elevation of privilege vulnerability exists in the way the Update Notification Manager handles files.To exploit this

6.5
CVE-2020-0637

An information disclosure vulnerability exists when Remote Desktop Web Access improperly handles credential information,

7.8
CVE-2020-0636

An elevation of privilege vulnerability exists in the way that the Windows Subsystem for Linux handles files, aka 'Windo

7.8
CVE-2020-0635

An elevation of privilege vulnerability exists in Microsoft Windows when Windows fails to properly handle certain symbol

7.8
CVE-2020-0634

An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles

7.8
CVE-2020-0633

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka

7.8
CVE-2020-0632

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka

7.8
CVE-2020-0631

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka

7.8
CVE-2020-0630

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka

7.8
CVE-2020-0629

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka

7.8
CVE-2020-0628

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka

7.8
CVE-2020-0627

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka

7.8
CVE-2020-0626

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka

7.8
CVE-2020-0625

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka

7.8
CVE-2020-0624

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in

7.8
CVE-2020-0623

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka

5.5
CVE-2020-0622

An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects

4.4
CVE-2020-0621

A security feature bypass vulnerability exists in Windows 10 when third party filters are called during a password updat

7.8
CVE-2020-0620

An elevation of privilege vulnerability exists when Microsoft Cryptographic Services improperly handles files, aka 'Micr

6.0
CVE-2020-0617

A denial of service vulnerability exists when Microsoft Hyper-V Virtual PCI on a host server fails to properly validate

5.5
CVE-2020-0616

A denial of service vulnerability exists when Windows improperly handles hard links, aka 'Microsoft Windows Denial of Se

5.5
CVE-2020-0615

An information disclosure vulnerability exists in the Windows Common Log File System (CLFS) driver when it fails to prop

7.8
CVE-2020-0614

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka

7.8
CVE-2020-0613

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka

7.5
CVE-2020-0612

A denial of service vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an attacker connects to the

7.5
CVE-2020-0611

A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious se

9.8
CVE-2020-0610

A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated atta

9.8
CVE-2020-0609

A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated atta

5.5
CVE-2020-0608

An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Wi

5.5
CVE-2020-0607

An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, a

8.8
CVE-2020-0606

A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a fi

8.8
CVE-2020-0605

A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a fi

8.8
CVE-2020-0603

A remote code execution vulnerability exists in ASP.NET Core software when the software fails to handle objects in memor

7.5
CVE-2020-0602

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of

8.1
CVE-2020-0601KEV

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

5.3
CVE-2020-7057

Hikvision DVR DS-7204HGHI-F1 V4.0.1 build 180903 Web Version sends a different response for failed ISAPI/Security/sessio

9.8
CVE-2011-2715

An SQL Injection vulnerability exists in Drupal 6.20 with Data 6.x-1.0-alpha14 due to insufficient sanitization of table

Test your stack for 2020issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.