deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-26823
Published: 2020-11-10
Description: SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorization checks in the Upgrade Diagnostics Agent Connection Service, this has an impact to the integrity and availability of the service.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-306
References: https://launchpad.support.sap.com/#/notes/2985866; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=562725571; https://launchpad.support.sap.com/#/notes/2985866
CVE: CVE-2020-26824
Published: 2020-11-10
Description: SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorization checks in the Upgrade Legacy Ports Service, this has an impact to the integrity and availability of the service.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-306
References: https://launchpad.support.sap.com/#/notes/2985866; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=562725571; https://launchpad.support.sap.com/#/notes/2985866
CVE: CVE-2020-6316
Published: 2020-11-10
Description: SAP ERP and SAP S/4 HANA allows an authenticated user to see cost records to objects to which he has no authorization in PS reporting, leading to Missing Authorization check.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://launchpad.support.sap.com/#/notes/2944188; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=562725571; https://launchpad.support.sap.com/#/notes/2944188
CVE: CVE-2020-27146
Published: 2020-11-10
Description: The Core component of TIBCO Software Inc.'s TIBCO iProcess Workspace (Browser) contains a vulnerability that theoretically allows an unauthenticated attacker with network access to execute a Cross Site Request Forgery (CSRF) attack on the affected system. A successful attack using this vulnerability requires human interaction from an authenticated user other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO iProcess Workspace (Browser): versions 11.6.0 and below.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-352
References: http://www.tibco.com/services/support/advisories; https://www.tibco.com/support/advisories/2020/11/tibco-security-advisory-november-10-2020-tibco-iprocess-workspace; http://www.tibco.com/services/support/advisories
CVE: CVE-2020-27403
Published: 2020-11-10
Description: A vulnerability in the TCL Android Smart TV series V8-R851T02-LF1 V295 and below and V8-T658T01-LF1 V373 and below by TCL Technology Group Corporation allows an attacker on the adjacent network to arbitrarily browse and download sensitive files over an insecure web server running on port 7989 that lists all files & directories. An unprivileged remote attacker on the adjacent network, can download most system files, leading to serious critical information disclosure. Also, some TV models and/or FW versions may expose the webserver with the entire filesystem accessible on another port. For example, nmap scan for all ports run directly from the TV model U43P6046 (Android 8.0) showed port 7983 not mentioned in the original CVE description, but containing the same directory listing of the entire filesystem. This webserver is bound (at least) to localhost interface and accessible freely to all unprivileged installed apps on the Android such as a regular web browser. Any app can therefore read any files of any other apps including Android system settings including sensitive data such as saved passwords, private keys etc.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://github.com/sickcodes; https://github.com/sickcodes/security/blob/master/advisories/SICK-2020-009.md; https://github.com/sickcodes/security/blob/master/etc/CVE-2020-27403_CVE-2020-28055_GlobalFAQ.pdf
CVE: CVE-2020-28055
Published: 2020-11-10
Description: A vulnerability in the TCL Android Smart TV series V8-R851T02-LF1 V295 and below and V8-T658T01-LF1 V373 and below by TCL Technology Group Corporation allows a local unprivileged attacker, such as a malicious App, to read & write to the /data/vendor/tcl, /data/vendor/upgrade, and /var/TerminalManager directories within the TV file system. An attacker, such as a malicious APK or local unprivileged user could perform fake system upgrades by writing to the /data/vendor/upgrage folder.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://github.com/sickcodes/security/blob/master/advisories/SICK-2020-012.md; https://github.com/sickcodes/security/blob/master/etc/CVE-2020-27403_CVE-2020-28055_GlobalFAQ.pdf; https://github.com/sickcodes/security/blob/master/etc/CVE-2020-27403_CVE-2020-28055_Press-Statement-and-Questions_11162020.pdf
CVE: CVE-2020-27165
Published: 2020-11-10
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-28050. Reason: This candidate is a reservation duplicate of CVE-2020-28050. Notes: All CVE users should reference CVE-2020-28050 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2020-28368
Published: 2020-11-10
Description: Xen through 4.14.x allows guest OS administrators to obtain sensitive information (such as AES keys from outside the guest) via a side-channel attack on a power/energy monitoring interface, aka a "Platypus" attack. NOTE: there is only one logically independent fix: to change the access control for each such interface in Xen.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-862
References: http://www.openwall.com/lists/oss-security/2020/11/26/1; http://xenbits.xen.org/xsa/advisory-351.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5J66QUUHXH2RR4CNCKQRGVXVSOUFRPDA/
CVE: CVE-2019-7357
Published: 2020-11-10
Description: Subrion CMS 4.2.1 has CSRF in panel/modules/plugins/. The attacker can remotely activate/deactivate the plugins.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/intelliants/subrion/commits/develop; https://github.com/ngpentest007/CVE-2019-7357/blob/main/Subrion_4.2.1%20-%20CVE-2019-7357.pdf; https://github.com/intelliants/subrion/commits/develop
CVE: CVE-2020-23968
Published: 2020-11-10
Description: Ilex International Sign&go Workstation Security Suite 7.1 allows elevation of privileges via a symlink attack on ProgramData\Ilex\S&G\Logs\000-sngWSService1.log.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: http://ilex.com; http://signgo.com; https://ricardojba.github.io/CVE-Pending-ILEX-SignGo-EoP/
CVE: CVE-2020-24063
Published: 2020-11-10
Description: The Canto plugin 1.3.0 for WordPress allows includes/lib/download.php?subdomain= SSRF.
CVSS Score: 7.2 (HIGH)
CWE: CWE-918
References: https://gist.github.com/Hakooraevil/264cb21034f946eee62371e9111c36bb; https://github.com/CantoDAM/Canto-Wordpress-Plugin; https://wordpress.org/plugins/canto/#developers
CVE: CVE-2020-24367
Published: 2020-11-10
Description: Incorrect file permissions in BlueStacks 4 through 4.230 on Windows allow a local attacker to escalate privileges by modifying a file that is later executed by a higher-privileged user.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://support.bluestacks.com/hc/en-us/articles/[PII_REDACTED]52--Bluestacks-update-fixes-vulnerabilities; https://support.bluestacks.com/hc/en-us/articles/[PII_REDACTED]52--Bluestacks-update-fixes-vulnerabilities
CVE: CVE-2020-28408
Published: 2020-11-10
Description: The server in Dundas BI through 8.0.0.1001 allows XSS via an HTML label when creating or editing a dashboard.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://mattschmidt.net/2020/11/10/dundas-persistent-xss/; https://mattschmidt.net/2020/11/10/dundas-persistent-xss/
CVE: CVE-2020-28409
Published: 2020-11-10
Description: The server in Dundas BI through 8.0.0.1001 allows XSS via addition of a Component (e.g., a button) when events such as click, hover, etc. occur.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://mattschmidt.net/2020/11/10/dundas-persistent-xss/; https://mattschmidt.net/2020/11/10/dundas-persistent-xss/
CVE: CVE-2020-25267
Published: 2020-11-10
Description: An XSS issue exists in the question-pool file-upload preview feature in ILIAS 6.4.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://medium.com/bugbountywriteup/exploiting-ilias-learning-management-system-4eda9e120620; https://medium.com/bugbountywriteup/exploiting-ilias-learning-management-system-4eda9e120620
CVE: CVE-2020-25268
Published: 2020-11-10
Description: Remote Code Execution can occur via the external news feed in ILIAS 6.4 because of incorrect parameter sanitization for Magpie RSS data.
CVSS Score: 8.8 (HIGH)
CWE: CWE-88
References: https://medium.com/bugbountywriteup/exploiting-ilias-learning-management-system-4eda9e120620; https://medium.com/bugbountywriteup/exploiting-ilias-learning-management-system-4eda9e120620
CVE: CVE-2020-16126
Published: 2020-11-11
Description: An Ubuntu-specific modification to AccountsService in versions before 0.6.55-0ubuntu13.2, among other earlier versions, improperly dropped the ruid, allowing untrusted users to send signals to AccountService, thus stopping it from handling D-Bus messages in a timely fashion.
CVSS Score: 3.3 (LOW)
CWE: CWE-269
References: https://securitylab.github.com/advisories/GHSL-2020-187-accountsservice-drop-privs-DOS; https://securitylab.github.com/advisories/GHSL-2020-187-accountsservice-drop-privs-DOS
CVE: CVE-2020-16127
Published: 2020-11-11
Description: An Ubuntu-specific modification to AccountsService in versions before 0.6.55-0ubuntu13.2, among other earlier versions, would perform unbounded read operations on user-controlled ~/.pam_environment files, allowing an infinite loop if /dev/zero is symlinked to this location.
CVSS Score: 2.8 (LOW)
CWE: CWE-20, CWE-835
References: https://securitylab.github.com/advisories/GHSL-2020-187-accountsservice-drop-privs-DOS; https://securitylab.github.com/advisories/GHSL-2020-187-accountsservice-drop-privs-DOS
CVE: CVE-2020-16970
Published: 2020-11-11
Description: Azure Sphere Unsigned Code Execution Vulnerability
CVSS Score: 8.1 (HIGH)
CWE: CWE-415
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16970; https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1118; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16970
CVE: CVE-2020-16979
Published: 2020-11-11
Description: Microsoft SharePoint Information Disclosure Vulnerability
CVSS Score: 5.3 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16979; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16979
CVE: CVE-2020-16981
Published: 2020-11-11
Description: Azure Sphere Elevation of Privilege Vulnerability
CVSS Score: 6.1 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16981; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16981
CVE: CVE-2020-16982
Published: 2020-11-11
Description: Azure Sphere Unsigned Code Execution Vulnerability
CVSS Score: 6.1 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16982; https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1131; https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1132
CVE: CVE-2020-16983
Published: 2020-11-11
Description: Azure Sphere Tampering Vulnerability
CVSS Score: 5.7 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16983; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16983
CVE: CVE-2020-16984
Published: 2020-11-11
Description: Azure Sphere Unsigned Code Execution Vulnerability
CVSS Score: 7.3 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16984; https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1128; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16984
CVE: CVE-2020-16985
Published: 2020-11-11
Description: Azure Sphere Information Disclosure Vulnerability
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-908
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16985; https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1130; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16985
CVE: CVE-2020-16986
Published: 2020-11-11
Description: Azure Sphere Denial of Service Vulnerability
CVSS Score: 6.2 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16986; https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1129; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16986
CVE: CVE-2020-16987
Published: 2020-11-11
Description: Azure Sphere Unsigned Code Execution Vulnerability
CVSS Score: 7.3 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16987; https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1138; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16987
CVE: CVE-2020-16988
Published: 2020-11-11
Description: Azure Sphere Elevation of Privilege Vulnerability
CVSS Score: 6.9 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16988; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16988
CVE: CVE-2020-16989
Published: 2020-11-11
Description: Azure Sphere Elevation of Privilege Vulnerability
CVSS Score: 5.4 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16989; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16989
CVE: CVE-2020-16990
Published: 2020-11-11
Description: Azure Sphere Information Disclosure Vulnerability
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-732
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16990; https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1089; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16990
CVE: CVE-2020-16991
Published: 2020-11-11
Description: Azure Sphere Unsigned Code Execution Vulnerability
CVSS Score: 7.3 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16991; https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1090; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16991
CVE: CVE-2020-16992
Published: 2020-11-11
Description: Azure Sphere Elevation of Privilege Vulnerability
CVSS Score: 7.5 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16992; https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1133; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16992
CVE: CVE-2020-16993
Published: 2020-11-11
Description: Azure Sphere Elevation of Privilege Vulnerability
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-269
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16993; https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1137; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16993
CVE: CVE-2020-16994
Published: 2020-11-11
Description: Azure Sphere Unsigned Code Execution Vulnerability
CVSS Score: 7.3 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16994; https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1093; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16994
CVE: CVE-2020-16997
Published: 2020-11-11
Description: Remote Desktop Protocol Server Information Disclosure Vulnerability
CVSS Score: 7.7 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16997; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16997
CVE: CVE-2020-16998
Published: 2020-11-11
Description: DirectX Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16998; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16998
CVE: CVE-2020-16999
Published: 2020-11-11
Description: Windows WalletService Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16999; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16999
CVE: CVE-2020-17000
Published: 2020-11-11
Description: Remote Desktop Protocol Client Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17000; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17000
CVE: CVE-2020-17001
Published: 2020-11-11
Description: Windows Print Spooler Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17001; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17001
CVE: CVE-2020-17004
Published: 2020-11-11
Description: Windows Graphics Component Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17004; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17004
CVE: CVE-2020-17005
Published: 2020-11-11
Description: Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17005; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17005
CVE: CVE-2020-17006
Published: 2020-11-11
Description: Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17006; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17006
CVE: CVE-2020-17007
Published: 2020-11-11
Description: Windows Error Reporting Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17007; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17007
CVE: CVE-2020-17010
Published: 2020-11-11
Description: Win32k Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17010; https://www.zerodayinitiative.com/advisories/ZDI-20-1423/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17010
CVE: CVE-2020-17011
Published: 2020-11-11
Description: Windows Port Class Library Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17011; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17011
CVE: CVE-2020-17012
Published: 2020-11-11
Description: Windows Bind Filter Driver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17012; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17012
CVE: CVE-2020-17013
Published: 2020-11-11
Description: Win32k Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17013; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17013
CVE: CVE-2020-17014
Published: 2020-11-11
Description: Windows Print Spooler Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17014; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17014
CVE: CVE-2020-17015
Published: 2020-11-11
Description: Microsoft SharePoint Server Spoofing Vulnerability
CVSS Score: 4.3 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17015; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17015
CVE: CVE-2020-17016
Published: 2020-11-11
Description: Microsoft SharePoint Server Spoofing Vulnerability
CVSS Score: 8.0 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17016; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17016
CVE: CVE-2020-17017
Published: 2020-11-11
Description: Microsoft SharePoint Information Disclosure Vulnerability
CVSS Score: 5.3 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17017; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17017
CVE: CVE-2020-17018
Published: 2020-11-11
Description: Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17018; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17018
CVE: CVE-2020-17019
Published: 2020-11-11
Description: Microsoft Excel Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-415
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17019; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17019
CVE: CVE-2020-17020
Published: 2020-11-11
Description: Microsoft Word Security Feature Bypass Vulnerability
CVSS Score: 3.3 (LOW)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17020; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17020
CVE: CVE-2020-17021
Published: 2020-11-11
Description: Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17021; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17021
CVE: CVE-2020-17024
Published: 2020-11-11
Description: Windows Client Side Rendering Print Provider Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17024; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17024
CVE: CVE-2020-17025
Published: 2020-11-11
Description: Windows Remote Access Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17025; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17025
CVE: CVE-2020-17026
Published: 2020-11-11
Description: Windows Remote Access Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17026; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17026
CVE: CVE-2020-17027
Published: 2020-11-11
Description: Windows Remote Access Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17027; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17027
CVE: CVE-2020-17028
Published: 2020-11-11
Description: Windows Remote Access Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17028; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17028
CVE: CVE-2020-17029
Published: 2020-11-11
Description: Windows Canonical Display Driver Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17029; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17029