Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2019-0351
A remote code execution vulnerability exists in the SAP NetWeaver UDDI Server (Services Registry), versions 7.10, 7.20, 7.30, 7.31, 7.40, 7.50. Because of this, an attacker can exploit Services Registry potentially enabling them to take complete control of the product, including viewing, changing, or deleting data by injecting code into the working memory which is subsequently executed by the application. It can also be used to cause a general fault in the product, causing the product to terminate.
Affected Products: SAP NetWeaver UDDI Server (Services Registry)
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523998017'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2800779'}]
CVE State: PUBLISHED
Explain CVE-2019-0352
In SAP Business Objects Business Intelligence Platform, before versions 4.1, 4.2 and 4.3, some dynamic pages (like jsp) are cached, which leads to an attacker can see the sensitive information via cache and can open the dynamic pages even after logout.
Affected Products: SAP BusinessObjects Business Intelligence Platform (CMC)
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2735924'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506'}]
CVE State: PUBLISHED
Explain CVE-2019-0353
Under certain conditions SAP Business One client (B1_ON_HANA, SAP-M-BO), before versions 9.2 and 9.3, allows an attacker to access information which would otherwise be restricted.
Affected Products: SAP Business One Client
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2768864'}]
CVE State: PUBLISHED
Explain CVE-2019-0355
SAP NetWeaver Application Server Java Web Container, ENGINEAPI (before versions 7.10, 7.20, 7.30, 7.31, 7.40, 7.50) and SAP-JEECOR (before versions 6.40, 7.0, 7.01), allows an attacker to inject code that can be executed by the application. An attacker could thereby control the behaviour of the application.
Affected Products: SAP NetWeaver AS for Java (Web Container)-ENGINEAPI
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2798336'}]
CVE State: PUBLISHED
Explain CVE-2019-0356
Under certain conditions SAP NetWeaver Process Integration Runtime Workbench – MESSAGING and SAP_XIAF (before versions 7.31, 7.40, 7.50) allows an attacker to access information which would otherwise be restricted.
Affected Products: SAP NetWeaver Process Integration Runtime Workbench – MESSAGING and SAP_XIAF
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2802521'}]
CVE State: PUBLISHED
Explain CVE-2019-0357
The administrator of SAP HANA database, before versions 1.0 and 2.0, can misuse HANA to execute commands with operating system "root" privileges.
Affected Products: SAP HANA
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2829681'}]
CVE State: PUBLISHED
Explain CVE-2019-0361
SAP Supplier Relationship Management (Master Data Management Catalog - SRM_MDM_CAT, before versions 3.73, 7.31, 7.32) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
Affected Products: SAP Supplier Relationship Management (Master Data Management Catalog) (SRM_MDM_CAT)
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2820607'}]
CVE State: PUBLISHED
Explain CVE-2019-0363
Attackers may misuse an HTTP/REST endpoint of SAP HANA Extended Application Services (Advanced model), before version 1.0.118, to overload the server or retrieve information about internal network ports.
Affected Products: SAP HANA Extended Application Services
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2817491'}]
CVE State: PUBLISHED
Explain CVE-2019-0364
Attackers may misuse an HTTP/REST endpoint of SAP HANA Extended Application Services (Advanced model), before version 1.0.118, to enumerate open ports.
Affected Products: SAP HANA Extended Application Services
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2817491'}]
CVE State: PUBLISHED
Explain CVE-2019-0365
SAP Kernel (RFC), KRNL32NUC, KRNL32UC and KRNL64NUC before versions 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64UC, before versions 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73 and KERNEL before versions 7.21, 7.49, 7.53, 7.73, 7.76 SAP GUI for Windows (BC-FES-GUI) before versions 7.5, 7.6, and SAP GUI for Java (BC-FES-JAV) before version 7.5, allow an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service.
Affected Products: SAP Kernel (KRNL32NUC)
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2786151'}]
CVE State: PUBLISHED
Explain CVE-2019-0367
SAP NetWeaver Process Integration (B2B Toolkit), before versions 1.0 and 2.0, does not perform necessary authorization checks for an authenticated user, allowing the import of B2B table content that leads to Missing Authorization Check.
Affected Products: SAP NetWeaver Process Integration (B2B Toolkit)
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2805777'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050'}]
CVE State: PUBLISHED
Explain CVE-2019-0368
SAP Customer Relationship Management (Email Management), versions: S4CRM before 1.0 and 2.0, BBPCRM before 7.0, 7.01, 7.02, 7.12, 7.13 and 7.14, does not sufficiently encode user-controlled inputs within the mail client resulting in Cross-Site Scripting vulnerability.
Affected Products: SAP Customer Relationship Management (Email Management - S4CRM)
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2751806'}]
CVE State: PUBLISHED
Explain CVE-2019-0369
SAP Financial Consolidation, before versions 10.0 and 10.1, does not sufficiently encode user-controlled inputs, which allows an attacker to execute scripts by uploading files containing malicious scripts, leading to reflected cross site scripting vulnerability.
Affected Products: SAP Financial Consolidation
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2806403'}]
CVE State: PUBLISHED
Explain CVE-2019-0370
Due to missing input validation, SAP Financial Consolidation, before versions 10.0 and 10.1, enables an attacker to use crafted input to interfere with the structure of the surrounding query leading to XPath Injection.
Affected Products: SAP Financial Consolidation
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2806403'}]
CVE State: PUBLISHED
Explain CVE-2019-0374
SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before versions 4.2 and 4.3, does not sufficiently encode user-controlled inputs and allows execution of scripts in the chart title resulting in reflected Cross-Site Scripting
Affected Products: SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface)
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2817945'}]
CVE State: PUBLISHED
Explain CVE-2019-0375
SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before versions 4.2 and 4.3, does not sufficiently encode user-controlled inputs and allows execution of scripts in the export dialog box of the report name resulting in reflected Cross-Site Scripting.
Affected Products: SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface)
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2817945'}]
CVE State: PUBLISHED
Explain CVE-2019-0376
SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before versions 4.2 and 4.3, does not sufficiently encode user-controlled inputs and allows an attacker to save malicious scripts in the publication name, which can be executed later by the victim, resulting in Stored Cross-Site Scripting.
Affected Products: SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface)
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2817945'}]
CVE State: PUBLISHED
Explain CVE-2019-0377
SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before versions 4.2, does not sufficiently encode user-controlled inputs and allows an attacker to store malicious scripts in the input controls, resulting in Stored Cross-Site Scripting.
Affected Products: SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface)
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2817945'}]
CVE State: PUBLISHED
Explain CVE-2019-0378
SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before version 4.2, does not sufficiently encode user-controlled inputs and allows an attacker to store malicious scripts in the file name of the background image resulting in Stored Cross-Site Scripting.
Affected Products: SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface)
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2817945'}]
CVE State: PUBLISHED
Explain CVE-2019-0379
SAP Process Integration, business-to-business add-on, versions 1.0, 2.0, does not perform authentication check properly when the default security provider is changed to BouncyCastle (BC), leading to Missing Authentication Check
Affected Products: SAP Process Integration, business-to-business add-on
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2826015'}]
CVE State: PUBLISHED
Explain CVE-2019-0380
Under certain conditions, SAP Landscape Management enterprise edition, before version 3.0, allows custom secure parameters’ default values to be part of the application logs leading to Information Disclosure.
Affected Products: SAP Landscape Management enterprise edition
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2828682'}]
CVE State: PUBLISHED
Explain CVE-2019-0381
A binary planting in SAP SQL Anywhere, before version 17.0, SAP IQ, before version 16.1, and SAP Dynamic Tier, before versions 1.0 and 2.0, can result in the inadvertent access of files located in directories outside of the paths specified by the user.
Affected Products: SAP IQ
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2792430'}]
CVE State: PUBLISHED
Explain CVE-2019-0382
A Cross-Site Scripting vulnerability exists in SAP BusinessObjects Business Intelligence Platform (Web Intelligence-Publication related pages); corrected in version 4.2. Privileges are required in order to exploit this vulnerability.
Affected Products: SAP BusinessObjects Business Intelligence Platform (Web Intelligence)
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528880390'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2817937'}]
CVE State: PUBLISHED
Explain CVE-2019-0383
Transaction Management in SAP Treasury and Risk Management (corrected in S4CORE versions 1.01, 1.02, 1.03, 1.04 and EA-FINSERV versions 6.0, 6.03, 6.04, 6.05, 6.06, 6.16, 6.17, 6.18, 8.0) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.
Affected Products: SAP Treasury and Risk Management (S4CORE)
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2819170'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528880390'}]
CVE State: PUBLISHED
Explain CVE-2019-0384
Transaction Management in SAP Treasury and Risk Management (corrected in S4CORE versions 1.01, 1.02, 1.03, 1.04 and EA-FINSERV versions 6.0, 6.03, 6.04, 6.05, 6.06, 6.16, 6.17, 6.18, 8.0) does not perform necessary authorization checks for functionalities that require user identity.
Affected Products: SAP Treasury and Risk Management (S4CORE)
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528880390'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2828981'}]
CVE State: PUBLISHED
Explain CVE-2019-0385
SAP Enable Now, before version 1908, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
Affected Products: SAP Enable Now
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2833771'}, {'tags': ['x_refsource_MISC'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528880390'}]
CVE State: PUBLISHED
Explain CVE-2019-0386
Order processing in SAP ERP Sales (corrected in SAP_APPL 6.0, 6.02, 6.03, 6.04, 6.05, 6.06, 6.16, 6.17, 6.18) and S4HANA Sales (corrected in S4CORE 1.0, 1.01, 1.02, 1.03, 1.04) does not execute the required authorization checks for an authenticated user, which can result in an escalation of privileges.
Affected Products: SAP ERP Sales (SAP_APPL)
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528880390'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2840520'}]
CVE State: PUBLISHED
Explain CVE-2019-0388
SAP UI5 HTTP Handler (corrected in SAP_UI versions 7.5, 7.51, 7.52, 7.53, 7.54 and SAP UI_700 version 2.0) allows an attacker to manipulate content due to insufficient URL validation.
Affected Products: SAP UI
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528880390'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2843016'}]
CVE State: PUBLISHED
Explain CVE-2019-0389
An administrator of SAP NetWeaver Application Server Java (J2EE-Framework), (corrected in versions 7.1, 7.2, 7.3, 7.31, 7.4, 7.5), may change privileges for all or some functions in Java Server, and enable users to execute functions, they are not allowed to execute otherwise.
Affected Products: SAP NetWeaver Application Server Java (J2EE-Framework)
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2814357'}, {'tags': ['x_refsource_MISC'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528880390'}]
CVE State: PUBLISHED
Explain CVE-2019-0390
Under certain conditions SAP Data Hub (corrected in DH_Foundation version 2) allows an attacker to access information which would otherwise be restricted. Connection details that are maintained in Connection Manager are visible to users.
Affected Products: SAP Data Hub (DH_Foundation)
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528880390'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2842034'}]
CVE State: PUBLISHED
Explain CVE-2019-0391
Under certain conditions SAP NetWeaver AS Java (corrected in 7.10, 7.20, 7.30, 7.31, 7.40, 7.50) allows an attacker to access information which would otherwise be restricted.
Affected Products: SAP NetWeaver AS Java
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528880390'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2835226'}]
CVE State: PUBLISHED
Explain CVE-2019-0393
An SQL Injection vulnerability in SAP Quality Management (corrected in S4CORE versions 1.0, 1.01, 1.02, 1.03) allows an attacker to carry out targeted database queries that can read individual fields of historical inspection results.
Affected Products: SAP Quality Management (S4CORE)
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528880390'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2816035'}]
CVE State: PUBLISHED
Explain CVE-2019-0395
SAP BusinessObjects Business Intelligence Platform (Fiori BI Launchpad), before version 4.2, allows execution of JavaScript in a text module in Fiori BI Launchpad, leading to Stored Cross Site Scripting vulnerability.
Affected Products: SAP BusinessObjects Business Intelligence Platform (Fiori BI Launchpad)
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://launchpad.support.sap.com/#/notes/2830578'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=533660397'}]
CVE State: PUBLISHED
Explain CVE-2019-0396
SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), corrected in versions 4.1 and 4.2, does not sufficiently validate an XML document accepted from an untrusted source. An attacker can craft a message that contains malicious elements that will not be correctly filtered by Web Intelligence HTML interface in some specific workflows.
Affected Products: SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface)
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528880390'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpad.support.sap.com/#/notes/2814007'}]
CVE State: PUBLISHED
Explain CVE-2019-0398
Due to insufficient CSRF protection, SAP BusinessObjects Business Intelligence Platform (Monitoring Application), before versions 4.1, 4.2 and 4.3, may lead to an authenticated user to send unintended request to the web server, leading to Cross Site Request Forgery.
Affected Products: SAP BusinessObjects Business Intelligence Platform (Monitoring Application)
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=533660397'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://launchpad.support.sap.com/#/notes/2701027'}]
CVE State: PUBLISHED
Explain CVE-2019-0399
SAP Portfolio and Project Management, before versions S4CORE 102, 103, EPPM 100 and CPRXRPM 500_702, 600_740, 610_740; unintentionally allows a user to discover accounting information of the Projects in Project dashboard, leading to Information Disclosure.
Affected Products: SAP Portfolio and Project Management (S4CORE)
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=533660397'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://launchpad.support.sap.com/#/notes/2803554'}]
CVE State: PUBLISHED
Explain CVE-2019-0402
SAP Adaptive Server Enterprise, before versions 15.7 and 16.0, under certain conditions exposes some sensitive information to the admin, leading to Information Disclosure.
Affected Products: SAP Adaptive Server Enterprise
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=533660397'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://launchpad.support.sap.com/#/notes/2845780'}]
CVE State: PUBLISHED
Explain CVE-2019-0403
SAP Enable Now, before version 1911, allows an attacker to input commands into the CSV files, which will be executed when opened, leading to CSV Command Injection.
Affected Products: SAP Enable Now
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=533660397'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://launchpad.support.sap.com/#/notes/2845183'}]
CVE State: PUBLISHED
Explain CVE-2019-0404
SAP Enable Now, before version 1911, leaks information about network configuration in the server error messages, leading to Information Disclosure.
Affected Products: SAP Enable Now
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=533660397'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://launchpad.support.sap.com/#/notes/2845183'}]
CVE State: PUBLISHED
Explain CVE-2019-0405
SAP Enable Now, before version 1911, leaks information about the existence of a particular user which can be used to construct a list of users, leading to a user enumeration vulnerability and Information Disclosure.
Affected Products: SAP Enable Now
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=533660397'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://launchpad.support.sap.com/#/notes/2845183'}]
CVE State: PUBLISHED
Explain CVE-2019-0536
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2019-0549, CVE-2019-0554, CVE-2019-0569.
Affected Products: Windows 7
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0536'}, {'name': '106406', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106406'}]
CVE State: PUBLISHED
Explain CVE-2019-0537
An information disclosure vulnerability exists when Visual Studio improperly discloses arbitrary file contents if the victim opens a malicious .vscontent file, aka "Microsoft Visual Studio Information Disclosure Vulnerability." This affects Microsoft Visual Studio.
Affected Products: Microsoft Visual Studio
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0537'}, {'name': '106390', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106390'}]
CVE State: PUBLISHED
Explain CVE-2019-0538
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2019-0575, CVE-2019-0576, CVE-2019-0577, CVE-2019-0578, CVE-2019-0579, CVE-2019-0580, CVE-2019-0581, CVE-2019-0582, CVE-2019-0583, CVE-2019-0584.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0538'}, {'name': '106419', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106419'}]
CVE State: PUBLISHED
Explain CVE-2019-0539
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2019-0567, CVE-2019-0568.
Affected Products: Microsoft Edge
References: [{'name': '46204', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/46204/'}, {'name': '46485', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/46485/'}, {'name': '106401', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106401'}, {'name': '46203', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/46203/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0539'}]
CVE State: PUBLISHED
Explain CVE-2019-0540
A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a specially crafted file, which could trick the victim into entering credentials, aka 'Microsoft Office Security Feature Bypass Vulnerability'.
Affected Products: Microsoft Office
References: [{'name': '106863', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106863'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0540'}]
CVE State: PUBLISHED
Explain CVE-2019-0541
A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML Engine Remote Code Execution Vulnerability." This affects Microsoft Office, Microsoft Office Word Viewer, Internet Explorer 9, Internet Explorer 11, Microsoft Excel Viewer, Internet Explorer 10, Office 365 ProPlus.
Affected Products: Microsoft Office
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0541'}, {'name': '46536', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/46536/'}, {'name': '106402', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106402'}]
CVE State: PUBLISHED
Explain CVE-2019-0542
A remote code execution vulnerability exists in Xterm.js when the component mishandles special characters, aka "Xterm Remote Code Execution Vulnerability." This affects xterm.js.
Affected Products: xterm.js
References: [{'name': '106434', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106434'}, {'name': 'RHBA-2019:0959', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHBA-2019:0959'}, {'name': 'RHSA-2019:1422', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2019:1422'}, {'name': 'RHSA-2019:2552', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2019:2552'}, {'name': 'RHSA-2019:2551', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2019:2551'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/xtermjs/xterm.js/releases'}]
CVE State: PUBLISHED
Explain CVE-2019-0543
An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka "Microsoft Windows Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
Affected Products: n/a
References: [{'name': '106408', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106408'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0543'}, {'name': '46156', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/46156/'}]
CVE State: PUBLISHED
Explain CVE-2019-0545
An information disclosure vulnerability exists in .NET Framework and .NET Core which allows bypassing Cross-origin Resource Sharing (CORS) configurations, aka ".NET Framework Information Disclosure Vulnerability." This affects Microsoft .NET Framework 2.0, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.6, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.7/4.7.1/4.7.2, .NET Core 2.1, Microsoft .NET Framework 4.7.1/4.7.2, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2, .NET Core 2.2, Microsoft .NET Framework 4.7.2.
Affected Products: .NET Core
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0545'}, {'name': '106405', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106405'}, {'name': 'RHSA-2019:0040', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2019:0040'}]
CVE State: PUBLISHED
Explain CVE-2019-0546
A remote code execution vulnerability exists in Visual Studio when the C++ compiler improperly handles specific combinations of C++ constructs, aka "Visual Studio Remote Code Execution Vulnerability." This affects Microsoft Visual Studio.
Affected Products: Microsoft Visual Studio
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0546'}, {'name': '106391', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106391'}]
CVE State: PUBLISHED
Explain CVE-2019-0547
A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka "Windows DHCP Client Remote Code Execution Vulnerability." This affects Windows 10, Windows 10 Servers.
Affected Products: Windows 10
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0547'}, {'name': '106394', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106394'}]
CVE State: PUBLISHED
Explain CVE-2019-0548
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerability." This affects ASP.NET Core 2.2, ASP.NET Core 2.1. This CVE ID is unique from CVE-2019-0564.
Affected Products: ASP.NET Core
References: [{'name': '106410', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106410'}, {'name': 'RHSA-2019:0040', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2019:0040'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0548'}]
CVE State: PUBLISHED
Explain CVE-2019-0549
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2019-0536, CVE-2019-0554, CVE-2019-0569.
Affected Products: Windows 7
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0549'}, {'name': '106409', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106409'}]
CVE State: PUBLISHED
Explain CVE-2019-0550
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Windows Hyper-V Remote Code Execution Vulnerability." This affects Windows 10 Servers, Windows 10, Windows Server 2019. This CVE ID is unique from CVE-2019-0551.
Affected Products: Windows 10 Servers
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0550'}, {'name': '106385', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106385'}]
CVE State: PUBLISHED
Explain CVE-2019-0551
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Windows Hyper-V Remote Code Execution Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers. This CVE ID is unique from CVE-2019-0550.
Affected Products: Windows Server 2016
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0551'}, {'name': '106386', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106386'}]
CVE State: PUBLISHED
Explain CVE-2019-0552
An elevation of privilege exists in Windows COM Desktop Broker, aka "Windows COM Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2019, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers.
Affected Products: Windows Server 2012 R2
References: [{'name': '46162', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/46162/'}, {'name': '106407', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106407'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0552'}]
CVE State: PUBLISHED
Explain CVE-2019-0553
An information disclosure vulnerability exists when Windows Subsystem for Linux improperly handles objects in memory, aka "Windows Subsystem for Linux Information Disclosure Vulnerability." This affects Windows 10 Servers, Windows 10, Windows Server 2019.
Affected Products: Windows 10 Servers
References: [{'name': '106412', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106412'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0553'}]
CVE State: PUBLISHED
Explain CVE-2019-0554
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2019-0536, CVE-2019-0549, CVE-2019-0569.
Affected Products: Windows 7
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0554'}, {'name': '106411', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106411'}]
CVE State: PUBLISHED
Explain CVE-2019-0555
An elevation of privilege vulnerability exists in the Microsoft XmlDocument class that could allow an attacker to escape from the AppContainer sandbox in the browser, aka "Microsoft XmlDocument Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows Server 2019, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers.
Affected Products: n/a
References: [{'name': '46185', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/46185/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0555'}, {'name': '106395', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106395'}]
CVE State: PUBLISHED
Explain CVE-2019-0556
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability." This affects Microsoft SharePoint. This CVE ID is unique from CVE-2019-0557, CVE-2019-0558.
Affected Products: Microsoft SharePoint
References: [{'name': '106387', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106387'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0556'}]
CVE State: PUBLISHED
Explain CVE-2019-0557
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability." This affects Microsoft SharePoint. This CVE ID is unique from CVE-2019-0556, CVE-2019-0558.
Affected Products: Microsoft SharePoint
References: [{'name': '106388', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106388'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0557'}]
CVE State: PUBLISHED
Explain CVE-2019-0558
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability." This affects Microsoft SharePoint Server, Microsoft SharePoint, Microsoft Business Productivity Servers. This CVE ID is unique from CVE-2019-0556, CVE-2019-0557.
Affected Products: Microsoft SharePoint Server
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0558'}, {'name': '106389', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106389'}]
CVE State: PUBLISHED
Explain CVE-2019-0559
An information disclosure vulnerability exists when Microsoft Outlook improperly handles certain types of messages, aka "Microsoft Outlook Information Disclosure Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Outlook.
Affected Products: Microsoft Office
References: [{'name': '106397', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106397'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0559'}]
CVE State: PUBLISHED
Explain CVE-2019-0560
An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka "Microsoft Office Information Disclosure Vulnerability." This affects Office 365 ProPlus, Microsoft Office.
Affected Products: Microsoft Office
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0560'}, {'name': '106398', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106398'}]
CVE State: PUBLISHED
Explain CVE-2019-0561
An information disclosure vulnerability exists when Microsoft Word macro buttons are used improperly, aka "Microsoft Word Information Disclosure Vulnerability." This affects Microsoft Word, Office 365 ProPlus, Microsoft Office, Word.
Affected Products: Microsoft Word
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0561'}, {'name': '106399', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106399'}]
CVE State: PUBLISHED
Explain CVE-2019-0562
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint Server, Microsoft SharePoint.
Affected Products: Microsoft SharePoint Server
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0562'}, {'name': '106400', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106400'}]
CVE State: PUBLISHED
Explain CVE-2019-0564
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerability." This affects ASP.NET Core 2.1. This CVE ID is unique from CVE-2019-0548.
Affected Products: ASP.NET Core
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0564'}, {'name': '106413', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106413'}, {'name': 'RHSA-2019:0040', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2019:0040'}]
CVE State: PUBLISHED
Explain CVE-2019-0565
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This affects Microsoft Edge.
Affected Products: Microsoft Edge
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0565'}, {'name': '106416', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106416'}]
CVE State: PUBLISHED
Explain CVE-2019-0566
An elevation of privilege vulnerability exists in Microsoft Edge Browser Broker COM object, aka "Microsoft Edge Elevation of Privilege Vulnerability." This affects Microsoft Edge.
Affected Products: Microsoft Edge
References: [{'name': '106417', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106417'}, {'name': '46161', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/46161/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0566'}]
CVE State: PUBLISHED
Explain CVE-2019-0567
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2019-0539, CVE-2019-0568.
Affected Products: Microsoft Edge
References: [{'name': '46203', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/46203/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0567'}, {'name': '106418', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106418'}]
CVE State: PUBLISHED
Explain CVE-2019-0568
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2019-0539, CVE-2019-0567.
Affected Products: Microsoft Edge
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0568'}, {'name': '106420', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106420'}, {'name': '46205', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/46205/'}]
CVE State: PUBLISHED
Explain CVE-2019-0569
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2019-0536, CVE-2019-0549, CVE-2019-0554.
Affected Products: Windows 7
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0569'}, {'name': '106414', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106414'}]
CVE State: PUBLISHED
Explain CVE-2019-0570
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka "Windows Runtime Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows Server 2019, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers.
Affected Products: Windows Server 2012 R2
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0570'}, {'name': '106415', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106415'}, {'name': '46184', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/46184/'}]
CVE State: PUBLISHED
Explain CVE-2019-0571
An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data Sharing Service Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers. This CVE ID is unique from CVE-2019-0572, CVE-2019-0573, CVE-2019-0574.
Affected Products: Windows Server 2016
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0571'}, {'name': '106426', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106426'}, {'name': '46159', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/46159/'}]
CVE State: PUBLISHED
Explain CVE-2019-0572
An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data Sharing Service Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers. This CVE ID is unique from CVE-2019-0571, CVE-2019-0573, CVE-2019-0574.
Affected Products: Windows Server 2016
References: [{'name': '46157', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/46157/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0572'}, {'name': '106428', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106428'}]
CVE State: PUBLISHED