deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2014-7969
Published: 2020-02-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-8739. Reason: This candidate is a duplicate of CVE-2014-8739. Notes: All CVE users should reference CVE-2014-8739 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2014-9753
Published: 2020-02-11
Description: confirm.php in ATutor 2.2 and earlier allows remote attackers to bypass authentication and gain access as an existing user via the auto_login parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://karmainsecurity.com/KIS-2015-06; http://seclists.org/fulldisclosure/2015/Nov/11; http://update.atutor.ca/patch/2_2/2_2-6/patch.xml
CVE: CVE-2015-2287
Published: 2020-02-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: A typo caused the wrong ID to be used. Notes: none
CVE: CVE-2020-5820
Published: 2020-02-11
Description: Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user.
CVSS Score: 7.8 (HIGH)
References: https://support.symantec.com/us/en/article.SYMSA1505.html; https://support.symantec.com/us/en/article.SYMSA1505.html
CVE: CVE-2020-5821
Published: 2020-02-11
Description: Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively, may be susceptible to a DLL injection vulnerability, which is a type of issue whereby an individual attempts to execute their own code in place of legitimate code as a means to perform an exploit.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://support.symantec.com/us/en/article.SYMSA1505.html; https://support.symantec.com/us/en/article.SYMSA1505.html
CVE: CVE-2020-5822
Published: 2020-02-11
Description: Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user.
CVSS Score: 7.8 (HIGH)
References: https://support.symantec.com/us/en/article.SYMSA1505.html; https://support.symantec.com/us/en/article.SYMSA1505.html
CVE: CVE-2020-5823
Published: 2020-02-11
Description: Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user.
CVSS Score: 7.8 (HIGH)
References: https://support.symantec.com/us/en/article.SYMSA1505.html; https://support.symantec.com/us/en/article.SYMSA1505.html
CVE: CVE-2020-5824
Published: 2020-02-11
Description: Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively, may be susceptible to a denial of service vulnerability, which is a type of issue whereby a threat actor attempts to tie up the resources of a resident application, thereby making certain functions unavailable.
CVSS Score: 5.5 (MEDIUM)
References: https://support.symantec.com/us/en/article.SYMSA1505.html; https://support.symantec.com/us/en/article.SYMSA1505.html
CVE: CVE-2020-5825
Published: 2020-02-11
Description: Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively, may be susceptible to an arbitrary file write vulnerability, which is a type of issue whereby an attacker is able to overwrite existing files on the resident system without proper privileges.
CVSS Score: 5.5 (MEDIUM)
References: https://support.symantec.com/us/en/article.SYMSA1505.html; https://support.symantec.com/us/en/article.SYMSA1505.html
CVE: CVE-2020-5826
Published: 2020-02-11
Description: Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing application reading memory outside of the bounds of the memory that had been allocated to the program.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://support.symantec.com/us/en/article.SYMSA1505.html; https://support.symantec.com/us/en/article.SYMSA1505.html
CVE: CVE-2020-5827
Published: 2020-02-11
Description: Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing application reading memory outside of the bounds of the memory that had been allocated to the program.
CVSS Score: 3.3 (LOW)
CWE: CWE-125
References: https://support.symantec.com/us/en/article.SYMSA1505.html; https://support.symantec.com/us/en/article.SYMSA1505.html
CVE: CVE-2020-5828
Published: 2020-02-11
Description: Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing application reading memory outside of the bounds of the memory that had been allocated to the program.
CVSS Score: 3.3 (LOW)
CWE: CWE-125
References: https://support.symantec.com/us/en/article.SYMSA1505.html; https://support.symantec.com/us/en/article.SYMSA1505.html
CVE: CVE-2020-5829
Published: 2020-02-11
Description: Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing application reading memory outside of the bounds of the memory that had been allocated to the program.
CVSS Score: 3.3 (LOW)
CWE: CWE-125
References: https://support.symantec.com/us/en/article.SYMSA1505.html; https://support.symantec.com/us/en/article.SYMSA1505.html
CVE: CVE-2020-5830
Published: 2020-02-11
Description: Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing application reading memory outside of the bounds of the memory that had been allocated to the program.
CVSS Score: 3.3 (LOW)
CWE: CWE-125
References: https://support.symantec.com/us/en/article.SYMSA1505.html; https://support.symantec.com/us/en/article.SYMSA1505.html
CVE: CVE-2020-5831
Published: 2020-02-11
Description: Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing application reading memory outside of the bounds of the memory that had been allocated to the program.
CVSS Score: 3.3 (LOW)
CWE: CWE-125
References: https://support.symantec.com/us/en/article.SYMSA1505.html; https://support.symantec.com/us/en/article.SYMSA1505.html
CVE: CVE-2020-8429
Published: 2020-02-11
Description: The Admin web application in Kinetica 7.0.9.2[PII_REDACTED]1947 does not properly sanitise the input for the function getLogs. This lack of sanitisation could be exploited to allow an authenticated attacker to run remote code on the underlying operating system. The logFile parameter in the getLogs function was used as a variable in a command to read log files; however, due to poor input sanitisation, it was possible to bypass a replacement and break out of the command.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://support.kinetica.com/hc/en-us/categories/[PII_REDACTED]53-Release-Notes; https://www.nccgroup.trust/uk/our-research/technical-advisory-command-injection/?research=Technical+advisories; https://support.kinetica.com/hc/en-us/categories/[PII_REDACTED]53-Release-Notes
CVE: CVE-2009-4067
Published: 2020-02-11
Description: Buffer overflow in the auerswald_probe function in the Auerswald Linux USB driver for the Linux kernel before 2.6.27 allows physically proximate attackers to execute arbitrary code, cause a denial of service via a crafted USB device, or take full control of the system.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-120
References: http://labs.mwrinfosecurity.com/files/Advisories/mwri_linux-usb-buffer-overflow_2009-10-29.pdf; https://bugzilla.redhat.com/show_bug.cgi?id=722393; http://labs.mwrinfosecurity.com/files/Advisories/mwri_linux-usb-buffer-overflow_2009-10-29.pdf
CVE: CVE-2013-5582
Published: 2020-02-11
Description: Ammyy Admin 3.2 and earlier stores the client ID at a fixed memory location, which might make it easier for user-assisted remote attackers to bypass authentication by running a local program that extracts a field from the AA_v3.2.exe file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-287
References: http://www.securityfocus.com/archive/1/530827; http://www.securityfocus.com/archive/1/530827
CVE: CVE-2013-6499
Published: 2020-02-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2014-3826
Published: 2020-02-11
Description: Cross-site scripting (XSS) vulnerability in MyBB before 1.6.13 allows remote authenticated users to inject arbitrary web script or HTML via the name parameter in the edit action of the config-profile_fields module.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://adamziaja.com/poc/201312-xss-mybb.html; http://adamziaja.com/poc/201312-xss-mybb.html
CVE: CVE-2014-3827
Published: 2020-02-11
Description: Multiple cross-site scripting (XSS) vulnerabilities in the MyBB (aka MyBulletinBoard) before 1.8.4 allow remote authenticated users to inject arbitrary web script or HTML via the title parameter in the (1) edit or (2) add action in the user-users module or the (3) finduser action or the name parameter in an (4) edit action in the user-user module or the (5) editprofile action to modcp.php.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://blog.mybb.com/2015/02/15/mybb-1-8-4-released-feature-update-security-maintenance-release/; https://adamziaja.com/poc/201312-xss-mybb.html; http://blog.mybb.com/2015/02/15/mybb-1-8-4-released-feature-update-security-maintenance-release/
CVE: CVE-2012-1124
Published: 2020-02-11
Description: SQL injection vulnerability in search.php in phxEventManager 2.0 beta 5 allows remote attackers to execute arbitrary SQL commands via the search_terms parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://seclists.org/fulldisclosure/2012/Mar/4; http://sourceforge.net/tracker/?func=detail&aid=3496086&group_id=123602&atid=697109; http://www.exploit-db.com/exploits/18549
CVE: CVE-2012-2216
Published: 2020-02-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-6720 and CVE-2012-6721. Reason: this candidate was intended for one issue, but the description and references inadvertently combined multiple issues. Notes: All CVE users should consult CVE-2012-6720 and CVE-2012-6721 to determine which ID is appropriate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2012-2452
Published: 2020-02-11
Description: Multiple cross-site scripting (XSS) vulnerabilities in pragmaMx 1.x before 1.12.2 allow remote attackers to inject arbitrary web script or HTML via the (1) name parameter to modules.php or (2) img_url to includes/wysiwyg/spaw/editor/plugins/imgpopup/img_popup.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.pragmamx.org/Forum-topic-33554.html; http://www.pragmamx.org/News-pragmaMx-1.12-Servicepack2-item-706.html; https://www.htbridge.com/advisory/HTB23090
CVE: CVE-2012-2517
Published: 2020-02-11
Description: Cross-site scripting (XSS) vulnerability in PrestaShop before 1.4.9 allows remote attackers to inject arbitrary web script or HTML via the index of the product[] parameter to ajax.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.htbridge.com/advisory/HTB23091; https://www.prestashop.com/download/old/changelog_1.4.9.0.txt; https://www.htbridge.com/advisory/HTB23091
CVE: CVE-2012-6720
Published: 2020-02-11
Description: Multiple cross-site scripting (XSS) vulnerabilities in SocialEngine before 4.2.4 allow remote attackers to inject arbitrary web script or HTML via the (1) title parameter to music/create, (2) location parameter to events/create, or (3) search parameter to widget/index/content_id/*.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/oss-sec/2012/q2/396; http://seclists.org/oss-sec/2012/q2/396
CVE: CVE-2012-6721
Published: 2020-02-11
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the (1) Forum, (2) Event, and (3) Classifieds plugins in SocialEngine before 4.2.4.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-352
References: https://seclists.org/oss-sec/2012/q2/396; https://seclists.org/oss-sec/2012/q2/396
CVE: CVE-2013-2120
Published: 2020-02-11
Description: The %{password(...)} macro in pastemacroexpander.cpp in the KDE Paste Applet before 4.10.5 in kdeplasma-addons does not properly generate passwords, which allows context-dependent attackers to bypass authentication via a brute-force attack.
CVSS Score: 8.4 (HIGH)
CWE: CWE-287
References: http://archives.neohapsis.com/archives/bugtraq/2013-05/0114.html; http://openwall.com/lists/oss-security/2013/05/28/5; http://openwall.com/lists/oss-security/2013/05/29/6
CVE: CVE-2013-2213
Published: 2020-02-11
Description: The KRandom::random function in KDE Paste Applet after 4.10.5 in kdeplasma-addons uses the GNU C Library rand function's linear congruential generator, which makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms by predicting the generator output.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-327
References: http://openwall.com/lists/oss-security/2013/06/13/1; http://openwall.com/lists/oss-security/2013/06/26/2; https://bugzilla.redhat.com/show_bug.cgi?id=978243
CVE: CVE-2020-1711
Published: 2020-02-11
Description: An out-of-bounds heap buffer access flaw was found in the way the iSCSI Block driver in QEMU versions 2.12.0 before 4.2.1 handled a response coming from an iSCSI server while checking the status of a Logical Address Block (LBA) in an iscsi_co_block_status() routine. A remote user could use this flaw to crash the QEMU process, resulting in a denial of service or potential execution of arbitrary code with privileges of the QEMU process on the host.
CVSS Score: 7.7 (HIGH)
CWE: CWE-122, CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00007.html; https://access.redhat.com/errata/RHSA-2020:0669; https://access.redhat.com/errata/RHSA-2020:0730
CVE: CVE-2020-1726
Published: 2020-02-11
Description: A flaw was discovered in Podman where it incorrectly allows containers when created to overwrite existing files in volumes, even if they are mounted as read-only. When a user runs a malicious container or a container based on a malicious image with an attached volume that is used for the first time, it is possible to trigger the flaw and overwrite files in the volume.This issue was introduced in version 1.6.0.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-552, CWE-552
References: http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00097.html; http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00103.html; https://access.redhat.com/errata/RHSA-2020:0680
CVE: CVE-2011-4938
Published: 2020-02-11
Description: Multiple cross-site scripting (XSS) vulnerabilities in Ariadne 2.7.6 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO parameter to (1) index.php and (2) loader.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://bugs.ariadne-cms.org/view.php?id=277; http://www.openwall.com/lists/oss-security/2012/03/09/4; http://www.openwall.com/lists/oss-security/2012/03/10/6
CVE: CVE-2013-4225
Published: 2020-02-11
Description: The RESTful Web Services (restws) module 7.x-1.x before 7.x-1.4 and 7.x-2.x before 7.x-2.1 for Drupal does not properly restrict access to entity write operations, which makes it easier for remote authenticated users with the "access resource node" and "create page content" permissions (or equivalents) to conduct cross-site scripting (XSS) or execute arbitrary PHP code via a crafted text field.
CVSS Score: 8.8 (HIGH)
CWE: CWE-79, CWE-94
References: http://www.openwall.com/lists/oss-security/2013/08/10/1; https://drupal.org/node/2059591; https://drupal.org/node/2059593
CVE: CVE-2020-1942
Published: 2020-02-11
Description: In Apache NiFi 0.0.1 to 1.11.0, the flow fingerprint factory generated flow fingerprints which included sensitive property descriptor values. In the event a node attempted to join a cluster and the cluster flow was not inheritable, the flow fingerprint of both the cluster and local flow was printed, potentially containing sensitive values in plaintext.
CVSS Score: 7.5 (HIGH)
CWE: CWE-532
References: https://nifi.apache.org/security.html#CVE-2020-1942; https://nifi.apache.org/security.html#CVE-2020-1942
CVE: CVE-2020-6063
Published: 2020-02-11
Description: An exploitable out-of-bounds write vulnerability exists in the uncompress_scan_line function of the igcore19d.dll library of Accusoft ImageGear, version 19.5.0. A specially crafted PCX file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the victim to trigger the vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-0986; https://talosintelligence.com/vulnerability_reports/TALOS-2020-0986
CVE: CVE-2020-6064
Published: 2020-02-11
Description: An exploitable out-of-bounds write vulnerability exists in the uncompress_scan_line function of the igcore19d.dll library of Accusoft ImageGear, version 19.5.0. A specially crafted PCX file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the victim to trigger the vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-0987; https://talosintelligence.com/vulnerability_reports/TALOS-2020-0987
CVE: CVE-2020-6065
Published: 2020-02-11
Description: An exploitable out-of-bounds write vulnerability exists in the bmp_parsing function of the igcore19d.dll library of Accusoft ImageGear, version 19.5.0. A specially crafted BMP file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the victim to trigger the vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-0989; https://talosintelligence.com/vulnerability_reports/TALOS-2020-0989
CVE: CVE-2020-6066
Published: 2020-02-11
Description: An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll JPEG SOFx parser of the Accusoft ImageGear 19.5.0 library. A specially crafted JPEG file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the victim to trigger the vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-0990; https://talosintelligence.com/vulnerability_reports/TALOS-2020-0990
CVE: CVE-2020-6067
Published: 2020-02-11
Description: An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll TIFF tifread parser of the Accusoft ImageGear 19.5.0 library. A specially crafted TIFF file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the victim to trigger the vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-0991; https://talosintelligence.com/vulnerability_reports/TALOS-2020-0991
CVE: CVE-2020-6069
Published: 2020-02-11
Description: An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll JPEG jpegread precision parser of the Accusoft ImageGear 19.5.0 library. A specially crafted JPEG file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the victim to trigger the vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-0993; https://talosintelligence.com/vulnerability_reports/TALOS-2020-0993
CVE: CVE-2020-0618
Published: 2020-02-11
Description: A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka 'Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability'.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502, CWE-502
References: http://packetstormsecurity.com/files/156707/SQL-Server-Reporting-Services-SSRS-ViewState-Deserialization.html; http://packetstormsecurity.com/files/159216/Microsoft-SQL-Server-Reporting-Services-2016-Remote-Code-Execution.html; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0618
CVE: CVE-2020-0655
Published: 2020-02-11
Description: A remote code execution vulnerability exists in Remote Desktop Services â€“ formerly known as Terminal Services â€“ when an authenticated attacker abuses clipboard redirection, aka 'Remote Desktop ServicesÂ Remote Code Execution Vulnerability'.
CVSS Score: 8.0 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0655; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0655
CVE: CVE-2020-0657
Published: 2020-02-11
Description: An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aka 'Windows Common Log File System Driver Elevation of Privilege Vulnerability'.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0657; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0657
CVE: CVE-2020-0658
Published: 2020-02-11
Description: An information disclosure vulnerability exists in the Windows Common Log File System (CLFS) driver when it fails to properly handle objects in memory, aka 'Windows Common Log File System Driver Information Disclosure Vulnerability'.
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0658; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0658
CVE: CVE-2020-0659
Published: 2020-02-11
Description: An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka 'Windows Data Sharing Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0747.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0659; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0659
CVE: CVE-2020-0660
Published: 2020-02-11
Description: A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Protocol (RDP) Denial of Service Vulnerability'.
CVSS Score: 7.5 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0660; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0660