Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-19964 State: PUBLISHED Published: 2021-10-14T14:17:30 Last Updated: 2024-08-04T14:15:28.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross Site Request Forgery (CSRF) vulnerability was discovered in PHPMyWind 5.6 which allows attackers to create a new administrator account without authentication. Additional Analyst Notes: - CVE Program Container: References: - http://phpmywind.com - https://github.com/gaozhifeng/PHPMyWind - https://github.com/gaozhifeng/PHPMyWind/issues/9
CVE ID: CVE-2020-1000 State: PUBLISHED Published: 2020-04-15T15:13:20 Last Updated: 2024-08-04T06:24:59.529Z Vendors: Microsoft Products: Windows, Windows Server, Windows 10 Version 1909 for 32-bit Systems, Windows 10 Version 1909 for x64-based Systems, Windows 10 Version 1909 for ARM64-based Systems, Windows Server, version 1909 (Server Core installation), Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation) Problem Types: Elevation of Privilege Description: An elevation of privilege vulnerability exists when the Windows kernel fails to properly hand
of Privilege Description: An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0913, CVE-2020-1003, CVE-2020-1027. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1000
CVE ID: CVE-2020-1001 State: PUBLISHED Published: 2020-04-15T15:13:20 Last Updated: 2024-08-04T06:24:59.495Z Vendors: Microsoft Products: Windows, Windows Server, Windows 10 Version 1909 for 32-bit Systems, Windows 10 Version 1909 for x64-based Systems, Windows 10 Version 1909 for ARM64-based Systems, Windows Server, version 1909 (Server Core installation), Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation) Problem Types: Elevation of Privilege Description: An elevation of privilege vulnerability exists in the way the Windows Push Notification Servi
of Privilege Description: An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push Notification Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0940, CVE-2020-1006, CVE-2020-1017. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1001
CVE ID: CVE-2020-1002 State: PUBLISHED Published: 2020-04-15T15:13:20 Last Updated: 2024-08-04T06:24:59.503Z Vendors: Microsoft Products: Microsoft Forefront Endpoint Protection, Microsoft System Center, Microsoft Security Essentials, Windows Defender on Windows 10 Version 1909 for 32-bit Systems, Windows Defender on Windows 10 Version 1909 for x64-based Systems, Windows Defender on Windows 10 Version 1909 for ARM64-based Systems, Windows Defender on Windows Server, version 1909 (Server Core installation), Windows Defender on Windows 10 Version 1803 for 32-bit Systems, Windows Defender on Windows 10 Version 1803 for x64-based Systems, Windows Defender on Windows Server, version 1803 (Server
ows Defender on Windows 10 Version 1803 for x64-based Systems, Windows Defender on Windows Server, version 1803 (Server Core Installation), Windows Defender on Windows 10 Version 1803 for ARM64-based Systems, Windows Defender on Windows 10 Version 1809 for 32-bit Systems, Windows Defender on Windows 10 Version 1809 for x64-based Systems, Windows Defender on Windows 10 Version 1809 for ARM64-based Systems, Windows Defender on Windows Server 2019, Windows Defender on Windows Server 2019 (Server Core installation), Windows Defender on Windows 10 Version 1709 for 32-bit Systems, Windows Defender on Windows 10 Version 1709 for x64-based Systems, Windows Defender on Windows 10 Version 1709 for ARM
, Windows Defender on Windows 10 Version 1709 for x64-based Systems, Windows Defender on Windows 10 Version 1709 for ARM64-based Systems, Windows Defender on Windows 10 Version 1903 for 32-bit Systems, Windows Defender on Windows 10 Version 1903 for x64-based Systems, Windows Defender on Windows 10 Version 1903 for ARM64-based Systems, Windows Defender on Windows Server, version 1903 (Server Core installation), Windows Defender on Windows 10 for 32-bit Systems, Windows Defender on Windows 10 for x64-based Systems, Windows Defender on Windows 10 Version 1607 for 32-bit Systems, Windows Defender on Windows 10 Version 1607 for x64-based Systems, Windows Defender on Windows Server 2016, Windows
ms, Windows Defender on Windows 10 Version 1607 for x64-based Systems, Windows Defender on Windows Server 2016, Windows Defender on Windows Server 2016 (Server Core installation), Windows Defender on Windows 7 for 32-bit Systems, Windows Defender on Windows 7 for x64-based Systems, Windows Defender on Windows 8.1 for 32-bit systems, Windows Defender on Windows 8.1 for x64-based systems, Windows Defender on Windows RT 8.1, Windows Defender on Windows Server 2008 for 32-bit Systems, Windows Defender on Windows Server 2008 for 32-bit Systems (Server Core installation), Windows Defender on Windows Server 2008 for Itanium-Based Systems, Windows Defender on Windows Server 2008 R2 for Itanium-Based
Defender on Windows Server 2008 for Itanium-Based Systems, Windows Defender on Windows Server 2008 R2 for Itanium-Based Systems, Windows Defender on Windows Server 2008 R2 for x64-based Systems, Windows Defender on Windows Server 2008 R2 for x64-based Systems (Server Core installation), Windows Defender on Windows Server 2012, Windows Defender on Windows Server 2012 (Server Core installation), Windows Defender on Windows Server 2012 R2, Windows Defender on Windows Server 2012 R2 (Server Core installation) Problem Types: Elevation of Privilege Description: An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary locations.To exploit
rivilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Defender Elevation of Privilege Vulnerability'. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1002
CVE ID: CVE-2020-1003 State: PUBLISHED Published: 2020-04-15T15:13:21 Last Updated: 2024-08-04T06:24:59.547Z Vendors: Microsoft Products: Windows, Windows Server, Windows 10 Version 1909 for 32-bit Systems, Windows 10 Version 1909 for x64-based Systems, Windows 10 Version 1909 for ARM64-based Systems, Windows Server, version 1909 (Server Core installation), Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation) Problem Types: Elevation of Privilege Description: An elevation of privilege vulnerability exists when the Windows kernel fails to properly hand
of Privilege Description: An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0913, CVE-2020-1000, CVE-2020-1027. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1003
CVE ID: CVE-2020-1004 State: PUBLISHED Published: 2020-04-15T15:13:21 Last Updated: 2024-08-04T06:24:59.535Z Vendors: Microsoft Products: Windows, Windows Server, Windows 10 Version 1909 for 32-bit Systems, Windows 10 Version 1909 for x64-based Systems, Windows 10 Version 1909 for ARM64-based Systems, Windows Server, version 1909 (Server Core installation), Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation) Problem Types: Elevation of Privilege Description: An elevation of privilege vulnerability exists when the Windows Graphics Component improperly
of Privilege Description: An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevation of Privilege Vulnerability'. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1004
CVE ID: CVE-2020-1005 State: PUBLISHED Published: 2020-04-15T15:13:22 Last Updated: 2024-08-04T06:24:59.516Z Vendors: Microsoft Products: Windows, Windows Server, Windows 10 Version 1909 for 32-bit Systems, Windows 10 Version 1909 for x64-based Systems, Windows 10 Version 1909 for ARM64-based Systems, Windows Server, version 1909 (Server Core installation), Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation) Problem Types: Information Disclosure Description: An information disclosure vulnerability exists when the Microsoft Windows Graphics Component
on Disclosure Description: An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory, aka 'Microsoft Graphics Component Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0982, CVE-2020-0987. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1005
CVE ID: CVE-2020-1006 State: PUBLISHED Published: 2020-04-15T15:13:22 Last Updated: 2024-08-04T06:24:59.531Z Vendors: Microsoft Products: Windows, Windows Server, Windows 10 Version 1909 for 32-bit Systems, Windows 10 Version 1909 for x64-based Systems, Windows 10 Version 1909 for ARM64-based Systems, Windows Server, version 1909 (Server Core installation), Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation) Problem Types: Elevation of Privilege Description: An elevation of privilege vulnerability exists in the way the Windows Push Notification Servi
of Privilege Description: An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push Notification Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0940, CVE-2020-1001, CVE-2020-1017. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1006
CVE ID: CVE-2020-1007 State: PUBLISHED Published: 2020-04-15T15:13:23 Last Updated: 2024-08-04T06:24:59.558Z Vendors: Microsoft Products: Windows, Windows Server, Windows 10 Version 1909 for 32-bit Systems, Windows 10 Version 1909 for x64-based Systems, Windows 10 Version 1909 for ARM64-based Systems, Windows Server, version 1909 (Server Core installation), Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation) Problem Types: Information Disclosure Description: An information disclosure vulnerability exists when the Windows kernel improperly handles obj
on Disclosure Description: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0821. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1007
CVE ID: CVE-2020-1008 State: PUBLISHED Published: 2020-04-15T15:13:23 Last Updated: 2024-08-04T06:25:00.835Z Vendors: Microsoft Products: Windows, Windows Server, Windows 10 Version 1909 for 32-bit Systems, Windows 10 Version 1909 for x64-based Systems, Windows 10 Version 1909 for ARM64-based Systems, Windows Server, version 1909 (Server Core installation), Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation) Problem Types: Remote Code Execution Description: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly h
de Execution Description: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0889, CVE-2020-0953, CVE-2020-0959, CVE-2020-0960, CVE-2020-0988, CVE-2020-0992, CVE-2020-0994, CVE-2020-0995, CVE-2020-0999. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1008
CVE ID: CVE-2020-1009 State: PUBLISHED Published: 2020-04-15T15:13:24 Last Updated: 2024-08-04T06:24:59.547Z Vendors: Microsoft Products: Windows, Windows Server, Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation), Windows 10 Version 1909 for 32-bit Systems, Windows 10 Version 1909 for x64-based Systems, Windows 10 Version 1909 for ARM64-based Systems, Windows Server, version 1909 (Server Core installation) Problem Types: Elevation of Privilege Description: An elevation of privilege vulnerability exists in the way that the Microsoft Store Install Se
of Privilege Description: An elevation of privilege vulnerability exists in the way that the Microsoft Store Install Service handles file operations in protected locations, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0934, CVE-2020-0983, CVE-2020-1011, CVE-2020-1015. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1009
CVE ID: CVE-2020-1010 State: PUBLISHED Published: 2020-05-21T22:52:46 Last Updated: 2024-08-04T06:24:59.546Z Vendors: Microsoft Products: Windows, Windows Server, Windows 10 Version 1909 for 32-bit Systems, Windows 10 Version 1909 for x64-based Systems, Windows 10 Version 1909 for ARM64-based Systems, Windows Server, version 1909 (Server Core installation), Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation) Problem Types: Elevation of Privilege Description: An elevation of privilege vulnerability exists in Windows Block Level Backup Engine Service (
of Privilege Description: An elevation of privilege vulnerability exists in Windows Block Level Backup Engine Service (wbengine) that allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1068, CVE-2020-1079. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1010
CVE ID: CVE-2020-1011 State: PUBLISHED Published: 2020-04-15T15:13:24 Last Updated: 2024-08-04T06:25:00.802Z Vendors: Microsoft Products: Windows, Windows Server, Windows 10 Version 1909 for 32-bit Systems, Windows 10 Version 1909 for x64-based Systems, Windows 10 Version 1909 for ARM64-based Systems, Windows Server, version 1909 (Server Core installation), Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation) Problem Types: Elevation of Privilege Description: An elevation of privilege vulnerability exists when the Windows System Assessment Tool improp
of Privilege Description: An elevation of privilege vulnerability exists when the Windows System Assessment Tool improperly handles file operations, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0934, CVE-2020-0983, CVE-2020-1009, CVE-2020-1015. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1011
CVE ID: CVE-2020-1012 State: PUBLISHED Published: 2020-09-11T17:08:50 Last Updated: 2024-08-04T06:24:59.552Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: Internet Explorer 11 Problem Types: Elevation of Privilege Description: <p>An elevation of privilege vulnerability exists in the way that the Wininit.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.</p> <p>There are multiple ways an attacker could exploit the vulnerability:</p> <ul> <li><p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed t
y:</p> <ul> <li><p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit this vulnerability and then convince a user to view the website. An attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by getting them to click a link in an email message or in an Instant Messenger message that takes users to the attacker's website, or by opening an attachment sent through email.</p> </li> <li><p>In a file sharing attack scenario, an attacker could provide a specially crafted document file that is designed to exploit this vulnerability, and
enario, an attacker could provide a specially crafted document file that is designed to exploit this vulnerability, and then convince a user to open the document file.</p> </li> </ul> <p>The security update addresses the vulnerability by ensuring the Wininit.dll properly handles objects in memory.</p> Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1012
CVE ID: CVE-2020-1013 State: PUBLISHED Published: 2020-09-11T17:08:51 Last Updated: 2024-08-04T06:25:00.644Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 1803, Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows Server, version 1909 (Server Core installation), Windows 10 Version 1709 for 32-bit Systems, Windows 10 Version 1709, Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Serve
Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Elevation of Privilege Description: <p>An elevation of privilege vulnerability exists when Microsoft Windows processes group policy updates. An attacker who successfully exploited this vulnerability could potentially escalate permissions or perform additional privileged actions on the target machine.</p> <p>To exploit this vulnerability, an attacker would need to launch a man-in-the-middle (MiTM) attack against the traffic passing between a domain controller and the target machine. An attacker could then create a group policy to grant administ
ssing between a domain controller and the target machine. An attacker could then create a group policy to grant administrator rights to a standard user.</p> <p>The security update addresses the vulnerability by enforcing Kerberos authentication for certain calls over LDAP.</p> Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1013
CVE ID: CVE-2020-1014 State: PUBLISHED Published: 2020-04-15T15:13:25 Last Updated: 2024-08-04T06:25:00.684Z Vendors: Microsoft Products: Windows, Windows Server, Windows 10 Version 1909 for 32-bit Systems, Windows 10 Version 1909 for x64-based Systems, Windows 10 Version 1909 for ARM64-based Systems, Windows Server, version 1909 (Server Core installation), Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation) Problem Types: Elevation of Privilege Description: An elevation of privilege vulnerability exists in the Microsoft Windows Update Client when it
of Privilege Description: An elevation of privilege vulnerability exists in the Microsoft Windows Update Client when it does not properly handle privileges, aka 'Microsoft Windows Update Client Elevation of Privilege Vulnerability'. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1014
CVE ID: CVE-2020-1015 State: PUBLISHED Published: 2020-04-15T15:13:25 Last Updated: 2024-08-04T06:24:59.540Z Vendors: Microsoft Products: Windows, Windows Server, Windows 10 Version 1909 for 32-bit Systems, Windows 10 Version 1909 for x64-based Systems, Windows 10 Version 1909 for ARM64-based Systems, Windows Server, version 1909 (Server Core installation), Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation) Problem Types: Elevation of Privilege Description: An elevation of privilege vulnerability exists in the way that the User-Mode Power Service (U
of Privilege Description: An elevation of privilege vulnerability exists in the way that the User-Mode Power Service (UMPS) handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0934, CVE-2020-0983, CVE-2020-1009, CVE-2020-1011. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1015
CVE ID: CVE-2020-1016 State: PUBLISHED Published: 2020-04-15T15:13:26 Last Updated: 2024-08-04T06:24:59.529Z Vendors: Microsoft Products: Windows, Windows Server, Windows 10 Version 1909 for 32-bit Systems, Windows 10 Version 1909 for x64-based Systems, Windows 10 Version 1909 for ARM64-based Systems, Windows Server, version 1909 (Server Core installation), Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation) Problem Types: Information Disclosure Description: An information disclosure vulnerability exists when the Windows Push Notification Service imp
on Disclosure Description: An information disclosure vulnerability exists when the Windows Push Notification Service improperly handles objects in memory, aka 'Windows Push Notification Service Information Disclosure Vulnerability'. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1016