deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-0847
Published: 2020-03-12
Description: A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.
CVSS Score: 7.5 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0847; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0847
CVE: CVE-2020-0848
Published: 2020-03-12
Description: A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825, CVE-2020-0826, CVE-2020-0827, CVE-2020-0828, CVE-2020-0829, CVE-2020-0830, CVE-2020-0831, CVE-2020-0832, CVE-2020-0833.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0848; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0848
CVE: CVE-2020-0849
Published: 2020-03-12
Description: An elevation of privilege vulnerability exists when Windows improperly handles hard links, aka 'Windows Hard Link Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0840, CVE-2020-0841, CVE-2020-0896.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0849; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0849
CVE: CVE-2020-0850
Published: 2020-03-12
Description: A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0851, CVE-2020-0852, CVE-2020-0855, CVE-2020-0892.
CVSS Score: 8.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0850; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0850
CVE: CVE-2020-0851
Published: 2020-03-12
Description: A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0850, CVE-2020-0852, CVE-2020-0855, CVE-2020-0892.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0851; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0851
CVE: CVE-2020-0852
Published: 2020-03-12
Description: A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0850, CVE-2020-0851, CVE-2020-0855, CVE-2020-0892.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0852; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0852
CVE: CVE-2020-0853
Published: 2020-03-12
Description: An information disclosure vulnerability exists in Windows when the Windows Imaging Component fails to properly handle objects in memory, aka 'Windows Imaging Component Information Disclosure Vulnerability'.
CVSS Score: 6.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0853; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0853
CVE: CVE-2020-0854
Published: 2020-03-12
Description: An elevation of privilege vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles junctions, aka 'Windows Mobile Device Management Diagnostics Elevation of Privilege Vulnerability'.
CVSS Score: 7.1 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0854; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0854
CVE: CVE-2020-0855
Published: 2020-03-12
Description: A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0850, CVE-2020-0851, CVE-2020-0852, CVE-2020-0892.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0855; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0855
CVE: CVE-2020-0857
Published: 2020-03-12
Description: An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0857; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0857
CVE: CVE-2020-0858
Published: 2020-03-12
Description: An elevation of privilege vulnerability exists when the &quot;Public Account Pictures&quot; folder improperly handles junctions.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0776.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0858; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0858
CVE: CVE-2020-0859
Published: 2020-03-12
Description: An information vulnerability exists when Windows Modules Installer Service improperly discloses file information, aka 'Windows Modules Installer Service Information Disclosure Vulnerability'.
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0859; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0859
CVE: CVE-2020-0860
Published: 2020-03-12
Description: An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows ActiveX Installer Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0770, CVE-2020-0773.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0860; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0860
CVE: CVE-2020-0861
Published: 2020-03-12
Description: An information disclosure vulnerability exists when the Windows Network Driver Interface Specification (NDIS) improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Network Driver Interface Specification (NDIS) Information Disclosure Vulnerability'.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0861; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0861
CVE: CVE-2020-0863
Published: 2020-03-12
Description: An information vulnerability exists when Windows Connected User Experiences and Telemetry Service improperly discloses file information, aka 'Connected User Experiences and Telemetry Service Information Disclosure Vulnerability'.
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0863; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0863
CVE: CVE-2020-0864
Published: 2020-03-12
Description: An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work Folder Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0777, CVE-2020-0797, CVE-2020-0800, CVE-2020-0865, CVE-2020-0866, CVE-2020-0897.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0864; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0864
CVE: CVE-2020-0865
Published: 2020-03-12
Description: An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work Folder Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0777, CVE-2020-0797, CVE-2020-0800, CVE-2020-0864, CVE-2020-0866, CVE-2020-0897.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0865; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0865
CVE: CVE-2020-0866
Published: 2020-03-12
Description: An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work Folder Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0777, CVE-2020-0797, CVE-2020-0800, CVE-2020-0864, CVE-2020-0865, CVE-2020-0897.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0866; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0866
CVE: CVE-2020-0867
Published: 2020-03-12
Description: An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file operations, aka 'Windows Update Orchestrator Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0868.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0867; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0867
CVE: CVE-2020-0868
Published: 2020-03-12
Description: An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file operations, aka 'Windows Update Orchestrator Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0867.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0868; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0868
CVE: CVE-2020-0869
Published: 2020-03-12
Description: A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0801, CVE-2020-0807, CVE-2020-0809.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0869; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0869
CVE: CVE-2020-0871
Published: 2020-03-12
Description: An information disclosure vulnerability exists when Windows Network Connections Service fails to properly handle objects in memory, aka 'Windows Network Connections Service Information Disclosure Vulnerability'.
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0871; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0871
CVE: CVE-2020-0872
Published: 2020-03-12
Description: A remote code execution vulnerability exists in Application Inspector version v1.0.23 or earlier when the tool reflects example code snippets from third-party source files into its HTML output, aka 'Remote Code Execution Vulnerability in Application Inspector'.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-79
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0872; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0872
CVE: CVE-2020-0874
Published: 2020-03-12
Description: An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowing an attacker to retrieve information from a targeted system, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0774, CVE-2020-0879, CVE-2020-0880, CVE-2020-0882.
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0874; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0874
CVE: CVE-2020-0876
Published: 2020-03-12
Description: An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'.
CVSS Score: 7.5 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0876; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0876
CVE: CVE-2020-0877
Published: 2020-03-12
Description: An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0788, CVE-2020-0887.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0877; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0877
CVE: CVE-2020-0879
Published: 2020-03-12
Description: An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowing an attacker to retrieve information from a targeted system, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0774, CVE-2020-0874, CVE-2020-0880, CVE-2020-0882.
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0879; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0879
CVE: CVE-2020-0880
Published: 2020-03-12
Description: An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0774, CVE-2020-0874, CVE-2020-0879, CVE-2020-0882.
CVSS Score: 6.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0880; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0880
CVE: CVE-2020-0881
Published: 2020-03-12
Description: A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0883.
CVSS Score: 8.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0881; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0881
CVE: CVE-2020-0882
Published: 2020-03-12
Description: An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0774, CVE-2020-0874, CVE-2020-0879, CVE-2020-0880.
CVSS Score: 6.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0882; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0882
CVE: CVE-2020-0883
Published: 2020-03-12
Description: A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0881.
CVSS Score: 8.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0883; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0883
CVE: CVE-2020-0884
Published: 2020-03-12
Description: A spoofing vulnerability exists in Microsoft Visual Studio as it includes a reply URL that is not secured by SSL, aka 'Microsoft Visual Studio Spoofing Vulnerability'.
CVSS Score: 3.7 (LOW)
CWE: CWE-319
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0884; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0884
CVE: CVE-2020-0885
Published: 2020-03-12
Description: An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows Graphics Component Information Disclosure Vulnerability'.
CVSS Score: 4.3 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0885; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0885
CVE: CVE-2020-0887
Published: 2020-03-12
Description: An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0788, CVE-2020-0877.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0887; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0887
CVE: CVE-2020-0891
Published: 2020-03-12
Description: This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.An authenticated attacker could exploit this vulnerability by sending a specially crafted request to an affected SharePoint server, aka 'Microsoft SharePoint Reflective XSS Vulnerability'. This CVE ID is unique from CVE-2020-0795.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0891; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0891
CVE: CVE-2020-0892
Published: 2020-03-12
Description: A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0850, CVE-2020-0851, CVE-2020-0852, CVE-2020-0855.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0892; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0892
CVE: CVE-2020-0893
Published: 2020-03-12
Description: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0894.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0893; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0893
CVE: CVE-2020-0894
Published: 2020-03-12
Description: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0893.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0894; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0894
CVE: CVE-2020-0896
Published: 2020-03-12
Description: An elevation of privilege vulnerability exists when Windows improperly handles hard links, aka 'Windows Hard Link Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0840, CVE-2020-0841, CVE-2020-0849.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0896; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0896
CVE: CVE-2020-0897
Published: 2020-03-12
Description: An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work Folder Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0777, CVE-2020-0797, CVE-2020-0800, CVE-2020-0864, CVE-2020-0865, CVE-2020-0866.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0897; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0897
CVE: CVE-2020-0898
Published: 2020-03-12
Description: An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0791.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0898; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0898
CVE: CVE-2020-0902
Published: 2020-03-12
Description: An elevation of privilege vulnerability exists in Service Fabric File Store Service under certain conditions, aka 'Service Fabric Elevation of Privilege'.
CVSS Score: 9.8 (CRITICAL)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0902; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0902
CVE: CVE-2020-0903
Published: 2020-03-12
Description: A cross-site-scripting (XSS) vulnerability exists when Microsoft Exchange Server does not properly sanitize a specially crafted web request to an affected Exchange server, aka 'Microsoft Exchange Server Spoofing Vulnerability'.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0903; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0903
CVE: CVE-2020-0905
Published: 2020-03-12
Description: An remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution Vulnerability'.
CVSS Score: 8.0 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0905; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0905
CVE: CVE-2020-9543
Published: 2020-03-12
Description: OpenStack Manila <7.4.1, >=8.0.0 <8.1.1, and >=9.0.0 <9.1.1 allows attackers to view, update, delete, or share resources that do not belong to them, because of a context-free lookup of a UUID. Attackers may also create resources, such as shared file systems and groups of shares on such share networks.
CVSS Score: 8.3 (HIGH)
CWE: CWE-276
References: http://www.openwall.com/lists/oss-security/2020/03/12/1; http://www.openwall.com/lists/oss-security/2020/03/12/1; https://bugs.launchpad.net/manila/+bug/1861485
CVE: CVE-2019-14625
Published: 2020-03-12
Description: Improper access control in on-card storage for the Intel® FPGA Programmable Acceleration Card N3000, all versions, may allow a privileged user to potentially enable denial of service via local access.
CVSS Score: 4.4 (MEDIUM)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00319.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00319.html
CVE: CVE-2019-14626
Published: 2020-03-12
Description: Improper access control in PCIe function for the Intel® FPGA Programmable Acceleration Card N3000, all versions, may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00319.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00319.html
CVE: CVE-2020-0501
Published: 2020-03-12
Description: Buffer overflow in Intel(R) Graphics Drivers before version 26.20.100.6912 may allow an authenticated user to potentially enable a denial of service via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00315.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/