rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-16290 
A buffer overflow vulnerability in jetp3852_print_page() in devices/gdev3852.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-13T02:07:58.000Z
CVE-2020-16291 
A buffer overflow vulnerability in contrib/gdevdj9.c of Artifex Software GhostScript v9.18 to v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-13T02:08:03.000Z
CVE-2020-16292 
A buffer overflow vulnerability in mj_raster_cmd() in contrib/japanese/gdevmjc.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-13T02:08:08.000Z
CVE-2020-16293 
A null pointer dereference vulnerability in compose_group_nonknockout_nonblend_isolated_allmask_common() in base/gxblend.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-13T02:08:12.000Z
CVE-2020-16294 
A buffer overflow vulnerability in epsc_print_page() in devices/gdevepsc.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-13T02:08:17.000Z
CVE-2020-16295 
A null pointer dereference vulnerability in clj_media_size() in devices/gdevclj.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-13T02:08:22.000Z
CVE-2020-16296 
A buffer overflow vulnerability in GetNumWrongData() in contrib/lips4/gdevlips.c of Artifex Software GhostScript from v9.18 to v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-13T02:08:28.000Z
CVE-2020-16297 
A buffer overflow vulnerability in FloydSteinbergDitheringC() in contrib/gdevbjca.c of Artifex Software GhostScript v9.18 to v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-13T02:08:34.000Z
CVE-2020-16298 
A buffer overflow vulnerability in mj_color_correct() in contrib/japanese/gdevmjc.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-13T02:08:40.000Z
CVE-2020-16299 
A Division by Zero vulnerability in bj10v_print_page() in contrib/japanese/gdev10v.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-13T02:08:45.000Z
CVE-2020-16300 
A buffer overflow vulnerability in tiff12_print_page() in devices/gdevtfnx.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-13T02:08:50.000Z
CVE-2020-16301 
A buffer overflow vulnerability in okiibm_print_page1() in devices/gdevokii.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-13T02:08:58.000Z
CVE-2020-16302 
A buffer overflow vulnerability in jetp3852_print_page() in devices/gdev3852.c of Artifex Software GhostScript v9.50 allows a remote attacker to escalate privileges via a crafted PDF file. This is fixed in v9.51.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-13T02:09:02.000Z
CVE-2020-16303 
A use-after-free vulnerability in xps_finish_image_path() in devices/vector/gdevxps.c of Artifex Software GhostScript v9.50 allows a remote attacker to escalate privileges via a crafted PDF file. This is fixed in v9.51.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-13T02:09:06.000Z
CVE-2020-16304 
A buffer overflow vulnerability in image_render_color_thresh() in base/gxicolor.c of Artifex Software GhostScript v9.18 to v9.50 allows a remote attacker to escalate privileges via a crafted eps file. This is fixed in v9.51.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-13T02:09:12.000Z
CVE-2020-16305 
A buffer overflow vulnerability in pcx_write_rle() in contrib/japanese/gdev10v.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-13T02:09:22.000Z
CVE-2020-16306 
A null pointer dereference vulnerability in devices/gdevtsep.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted postscript file. This is fixed in v9.51.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-13T02:09:26.000Z
CVE-2020-16307 
A null pointer dereference vulnerability in devices/vector/gdevtxtw.c and psi/zbfont.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted postscript file. This is fixed in v9.51.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-13T02:09:44.000Z
CVE-2020-16308 
A buffer overflow vulnerability in p_print_image() in devices/gdevcdj.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-13T02:09:49.000Z
CVE-2020-16309 
A buffer overflow vulnerability in lxm5700m_print_page() in devices/gdevlxm.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted eps file. This is fixed in v9.51.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-13T02:09:56.000Z
CVE-2020-16310 
A division by zero vulnerability in dot24_print_page() in devices/gdevdm24.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-13T02:10:04.000Z
CVE-2020-16587 
A heap-based buffer overflow vulnerability exists in Academy Software Foundation OpenEXR 2.3.0 in chunkOffsetReconstruction in ImfMultiPartInputFile.cpp that can cause a denial of service via a crafted EXR file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-09T00:00:00.000Z
CVE-2020-16588 
A Null Pointer Deference issue exists in Academy Software Foundation OpenEXR 2.3.0 in generatePreview in makePreview.cpp that can cause a denial of service via a crafted EXR file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-09T00:00:00.000Z
CVE-2020-16589 
A head-based buffer overflow exists in Academy Software Foundation OpenEXR 2.3.0 in writeTileData in ImfTiledOutputFile.cpp that can cause a denial of service via a crafted EXR file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-09T00:00:00.000Z
CVE-2020-16590 
A double free vulnerability exists in the Binary File Descriptor (BFD) (aka libbrd) in GNU Binutils 2.35 in the process_symbol_table, as demonstrated in readelf, via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-09T21:05:04.000Z
CVE-2020-16591 
A Denial of Service vulnerability exists in the Binary File Descriptor (BFD) in GNU Binutils 2.35 due to an invalid read in process_symbol_table, as demonstrated in readeif.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-09T21:05:24.000Z
CVE-2020-16592 
A use after free issue exists in the Binary File Descriptor (BFD) library (aka libbfd) in GNU Binutils 2.34 in bfd_hash_lookup, as demonstrated in nm-new, that can cause a denial of service via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-09T21:05:46.000Z
CVE-2020-16593 
A Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35, in scan_unit_for_symbols, as demonstrated in addr2line, that can cause a denial of service via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-09T21:06:03.000Z
CVE-2020-16599 
A Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35, in _bfd_elf_get_symbol_version_string, as demonstrated in nm-new, that can cause a denial of service via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-09T21:06:35.000Z
CVE-2020-16600 
A Use After Free vulnerability exists in Artifex Software, Inc. MuPDF library 1.17.0-rc1 and earlier when a valid page was followed by a page with invalid pixmap dimensions, causing bander - a static - to point to previously freed memory instead of a newband_writer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-09T21:06:55.000Z
CVE-2020-16602 
Razer Chroma SDK Rest Server through 3.12.17 allows remote attackers to execute arbitrary programs because there is a race condition in which a file created under "%PROGRAMDATA%\Razer Chroma\SDK\Apps" can be replaced before it is executed by the server. The attacker must have access to port 54236 for a registration step.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-02T12:57:41.000Z
CVE-2020-16608 
Notable 1.8.4 allows XSS via crafted Markdown text, with resultant remote code execution (because nodeIntegration in webPreferences is true).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-10T21:08:35.000Z
CVE-2020-16610 
Hoosk Codeigniter CMS before 1.7.2 is affected by a Cross Site Request Forgery (CSRF). When an attacker induces authenticated admin user to a malicious web page, any accounts can be deleted without admin user's intention.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-28T16:06:00.000Z
CVE-2020-16629 
PhpOK 5.4.137 contains a SQL injection vulnerability that can inject an attachment data through SQL, and then call the attachment replacement function through api.php to write a PHP file to the target path.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-08T14:33:34.000Z
CVE-2020-16630 
TI’s BLE stack caches and reuses the LTK’s property for a bonded mobile. A LTK can be an unauthenticated-and-no-MITM-protection key created by Just Works or an authenticated-and-MITM-protection key created by Passkey Entry, Numeric Comparison or OOB. Assume that a victim mobile uses secure pairing to pair with a victim BLE device based on TI chips and generate an authenticated-and-MITM-protection LTK. If a fake mobile with the victim mobile’s MAC address uses Just Works and pairs with the victim device, the generated LTK still has the property of authenticated-and-MITM-protection. Therefore, the fake mobile can access attributes with the authenticated read/write permission.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T19:20:50.000Z
CVE-2020-16632 
A XSS Vulnerability in /uploads/dede/action_search.php in DedeCMS V5.7 SP2 allows an authenticated user to execute remote arbitrary code via the keyword parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-14T23:20:13.000Z
CVE-2020-16839 
On Crestron DM-NVX-DIR, DM-NVX-DIR80, and DM-NVX-ENT devices before the DM-XIO/1-0-3-802 patch, the password can be changed by sending an unauthenticated WebSocket request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-27T14:20:25.000Z
CVE-2020-16843 
In Firecracker 0.20.x before 0.20.1 and 0.21.x before 0.21.2, the network stack can freeze under heavy ingress traffic. This can result in a denial of service on the microVM when it is configured with a single network interface, and an availability problem for the microVM network interface on which the issue is triggered.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-04T19:39:04.000Z
CVE-2020-16844 
In Istio 1.5.0 though 1.5.8 and Istio 1.6.0 through 1.6.7, when users specify an AuthorizationPolicy resource with DENY actions using wildcard suffixes (e.g. *-some-suffix) for source principals or namespace fields, callers will never be denied access, bypassing the intended policy.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-01T16:32:38.000Z
CVE-2020-16845 
Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-06T17:03:33.000Z
CVE-2020-16846 
An issue was discovered in SaltStack Salt through 3002. Sending crafted web requests to the Salt API, with the SSH client enabled, can result in shell injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-06T07:27:24.000Z
CVE-2020-16847 
Extreme Analytics in Extreme Management Center before 8.5.0.169 allows unauthenticated reflected XSS via a parameter in a GET request, aka CFD-4887.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-04T20:15:05.000Z
CVE-2020-16849 
An issue was discovered on Canon MF237w 06.07 devices. An "Improper Handling of Length Parameter Inconsistency" issue in the IPv4/ICMPv4 component, when handling a packet sent by an unauthenticated network attacker, may expose Sensitive Information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-30T21:27:58.000Z
CVE-2020-16850 
Mitsubishi MELSEC iQ-R Series PLCs with firmware 49 allow an unauthenticated attacker to halt the industrial process by sending a crafted packet over the network. This denial of service attack exposes Improper Input Validation. After halting, physical access to the PLC is required in order to restore production, and the device state is lost. This is related to R04CPU, RJ71GF11-T2, R04CPU, and RJ71GF11-T2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-30T21:34:28.000Z
CVE-2020-16851 OneDrive for Windows Elevation of Privilege Vulnerability
Problem types: description: Denial of Service
Affected products: vendor: Microsoft
product: OneDrive for Windows
cpes: cpe:2.3:a:microsoft:onedrive:-:*:*:*:*:windows:*:*
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C
Published: 2020-09-11T17:08:35.000Z
CVE-2020-16852 OneDrive for Windows Elevation of Privilege Vulnerability
Problem types: description: Denial of Service
Affected products: vendor: Microsoft
product: OneDrive for Windows
cpes: cpe:2.3:a:microsoft:onedrive:-:*:*:*:*:windows:*:*
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C
Published: 2020-09-11T17:08:35.000Z
CVE-2020-16853 OneDrive for Windows Elevation of Privilege Vulnerability
Problem types: description: Denial of Service
Affected products: vendor: Microsoft
product: OneDrive for Windows
cpes: cpe:2.3:a:microsoft:onedrive:-:*:*:*:*:windows:*:*
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C
Published: 2020-09-11T17:08:36.000Z
CVE-2020-16855 Microsoft Office Information Disclosure Vulnerability
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft
product: Microsoft Office 2019 for Mac
cpes: cpe:2.3:a:microsoft:office:2019:*:*:*:*:macos:*:*
vendor: Microsoft
product: Microsoft Office 2016 for Mac
cpes: cpe:2.3:a:microsoft:office:2016:*:*:*:*:mac_os:*:*
CVSS v3.1: version: 3.1
baseSeverity: MEDIUM
baseScore: 5.5
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
Published: 2020-09-11T17:08:38.000Z
CVE-2020-16856 Visual Studio Remote Code Execution Vulnerability
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6)
cpes: cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
cpes: cpe:2.3:a:microsoft:visual_studio_2017:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Visual Studio 2019 version 16.0
cpes: cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)
cpes: cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Visual Studio 2012 Update 5
cpes: cpe:2.3:a:microsoft:visual_studio:2012:update_5:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Visual Studio 2013 Update 5
cpes: cpe:2.3:a:microsoft:visual_studio:2013:update_5:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Visual Studio 2015 Update 3
cpes: cpe:2.3:a:microsoft:visual_studio:2015:update3:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
Published: 2020-09-11T17:08:40.000Z
CVE-2020-16857 Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Dynamics 365 for Finance and Operations
cpes: cpe:2.3:a:microsoft:dynamics_365:-:*:*:*:*:finance_and_operations:*:*
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.1
vectorString: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:N/E:P/RL:O/RC:C
Published: 2020-09-11T17:08:41.000Z
CVE-2020-16858 Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability
Problem types: description: Spoofing
Affected products: vendor: Microsoft
product: Microsoft Dynamics 365 (on-premises) version 9.0
cpes: cpe:2.3:a:microsoft:dynamics_365:9.0:*:*:*:on-premises:*:*:*
CVSS v3.1: version: 3.1
baseSeverity: MEDIUM
baseScore: 5.4
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C
Published: 2020-09-11T17:08:42.000Z
CVE-2020-16859 Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability
Problem types: description: Spoofing
Affected products: vendor: Microsoft
product: Microsoft Dynamics 365 (on-premises) version 9.0
cpes: cpe:2.3:a:microsoft:dynamics_365:9.0:*:*:*:on-premises:*:*:*
CVSS v3.1: version: 3.1
baseSeverity: MEDIUM
baseScore: 5.4
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C
Published: 2020-09-11T17:08:42.000Z
CVE-2020-16860 Microsoft Dynamics 365 (on-premises) Remote Code Execution Vulnerability
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Microsoft Dynamics 365 (on-premises) version 9.0
cpes: cpe:2.3:a:microsoft:dynamics_365:9.0:*:*:*:on-premises:*:*:*
CVSS v3.1: version: 3.1
baseSeverity: MEDIUM
baseScore: 6.8
vectorString: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C
Published: 2020-09-11T17:08:43.000Z
CVE-2020-16861 Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability
Problem types: description: Spoofing
Affected products: vendor: Microsoft
product: Microsoft Dynamics 365 (on-premises) version 8.2
cpes: cpe:2.3:a:microsoft:dynamics_365:8.2:*:*:*:on-premises:*:*:*
vendor: Microsoft
product: Microsoft Dynamics 365 (on-premises) version 9.0
cpes: cpe:2.3:a:microsoft:dynamics_365:9.0:*:*:*:on-premises:*:*:*
CVSS v3.1: version: 3.1
baseSeverity: MEDIUM
baseScore: 5.4
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C
Published: 2020-09-11T17:08:43.000Z
CVE-2020-16862 Microsoft Dynamics 365 (on-premises) Remote Code Execution Vulnerability
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Microsoft Dynamics 365 (on-premises) version 9.0
cpes: cpe:2.3:a:microsoft:dynamics_365:9.0:*:*:*:on-premises:*:*:*
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.1
vectorString: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C
Published: 2020-09-11T17:08:44.000Z
CVE-2020-16863 Windows Remote Desktop Service Denial of Service Vulnerability
Problem types: description: Denial of Service
Affected products: vendor: Microsoft
product: Windows 7
cpes: cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:x86:*
vendor: Microsoft
product: Windows 7 Service Pack 1
cpes: cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:x64:*
vendor: Microsoft
product: Windows Server 2008 R2 Service Pack 1
cpes: cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*
vendor: Microsoft
product: Windows Server 2008 R2 Service Pack 1 (Server Core installation)
cpes: cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.5
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
Published: 2020-10-16T22:17:33.000Z
CVE-2020-16864 Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability
Problem types: description: Spoofing
Affected products: vendor: Microsoft
product: Microsoft Dynamics 365 (on-premises) version 9.0
cpes: cpe:2.3:a:microsoft:dynamics_365:9.0:*:*:*:on-premises:*:*:*
CVSS v3.1: version: 3.1
baseSeverity: MEDIUM
baseScore: 5.4
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C
Published: 2020-09-11T17:08:45.000Z
CVE-2020-16871 Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability
Problem types: description: Spoofing
Affected products: vendor: Microsoft
product: Microsoft Dynamics 365 (on-premises) version 8.2
cpes: cpe:2.3:a:microsoft:dynamics_365:8.2:*:*:*:on-premises:*:*:*
vendor: Microsoft
product: Microsoft Dynamics 365 (on-premises) version 9.0
cpes: cpe:2.3:a:microsoft:dynamics_365:9.0:*:*:*:on-premises:*:*:*
CVSS v3.1: version: 3.1
baseSeverity: MEDIUM
baseScore: 5.4
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C
Published: 2020-09-11T17:08:45.000Z
CVE-2020-16872 Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability
Problem types: description: Spoofing
Affected products: vendor: Microsoft
product: Microsoft Dynamics 365 (on-premises) version 9.0
cpes: cpe:2.3:a:microsoft:dynamics_365:9.0:*:*:*:on-premises:*:*:*
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.6
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N/E:P/RL:O/RC:C
Published: 2020-09-11T17:08:46.000Z