rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-19987 
An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. It allows Cross-Site Request Forgery (CSRF) on any HTML form. An attacker can exploit the vulnerability to abuse functionalities such as change password, add user, add privilege, and so on.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-26T15:16:47.000Z
CVE-2019-19988 
An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. A user with valid credentials is able to create and write XML files on the filesystem via /common/vam_editXml.php in the web interface. The vulnerable PHP page checks none of these: the parameter that identifies the file name to be created, the destination path, or the extension. Thus, an attacker can manipulate the file name to create any type of file within the filesystem with arbitrary content.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-26T15:15:14.000Z
CVE-2019-19989 
An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. Several PHP pages, and other type of files, are reachable by any user without checking for user identity and authorization.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-26T15:13:42.000Z
CVE-2019-19990 
An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. Multiple Stored Cross-site scripting (XSS) vulnerabilities allow remote authenticated users to inject arbitrary web script or HTML via the web pages /monitor/s_headmodel.php and /vam/vam_user.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-26T15:12:10.000Z
CVE-2019-19991 
An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. Multiple Reflected Cross-site scripting (XSS) vulnerabilities allow remote authenticated users to inject arbitrary web script or HTML via the web pages /vam/vam_anagraphic.php, /vam/vam_vamuser.php, /common/vamp_main.php, and /wiz/change_password.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-26T15:10:29.000Z
CVE-2019-19992 
An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. A user with valid credentials is able to read XML files on the filesystem via the web interface. The PHP page /common/vam_editXml.php doesn't check the parameter that identifies the file name to be read. Thus, an attacker can manipulate the file name to access a potentially sensitive file within the filesystem.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-26T15:09:02.000Z
CVE-2019-19993 
An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. Several full path disclosure vulnerability were discovered. A user, even with no authentication, may simply send arbitrary content to the vulnerable pages to generate error messages that expose some full paths.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-26T15:06:36.000Z
CVE-2019-19994 
An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. It allows blind Command Injection. An attacker without authentication is able to execute arbitrary operating system command by injecting the vulnerable parameter in the PHP Web page /common/vam_monitor_sap.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-26T15:03:43.000Z
CVE-2019-19995 
A CSRF issue was discovered on Intelbras IWR 3000N 1.8.7 devices, leading to complete control of the router, as demonstrated by v1/system/user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-26T17:31:26.000Z
CVE-2019-19996 
An issue was discovered on Intelbras IWR 3000N 1.8.7 devices. A malformed login request allows remote attackers to cause a denial of service (reboot), as demonstrated by JSON misparsing of the \""} string to v1/system/login.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-26T17:34:12.000Z
CVE-2019-19998 
Xiuno BBS 4.0 allows XXE via plugin/xn_wechat_public/route/token.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-26T03:37:44.000Z
CVE-2019-19999 
Halo before 1.2.0-beta.1 allows Server Side Template Injection (SSTI) because TemplateClassResolver.SAFER_RESOLVER is not used in the FreeMarker configuration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-26T03:38:03.000Z
CVE-2019-1000 
An elevation of privilege vulnerability exists in Microsoft Azure Active Directory Connect build 1.3.20.0, which allows an attacker to execute two PowerShell cmdlets in context of a privileged account, and perform privileged actions.To exploit this, an attacker would need to authenticate to the AzureÃ‚Â AD Connect server, aka 'Microsoft Azure AD Connect Elevation of Privilege Vulnerability'.
Problem types: description: Elevation of Privilege
Affected products: vendor: Microsoft
product: Microsoft Azure Active Directory Connect
Published: 2019-05-16T18:24:57.000Z
CVE-2019-1001 
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1004, CVE-2019-1056, CVE-2019-1059.
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Internet Explorer 11
vendor: Microsoft
product: Internet Explorer 11 on Windows Server 2012
vendor: Microsoft
product: Internet Explorer 11 on Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Internet Explorer 11 on Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Internet Explorer 11 on Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Microsoft Edge
vendor: Microsoft
product: Microsoft Edge on Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Microsoft Edge on Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Microsoft Edge on Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: ChakraCore
Published: 2019-07-15T18:56:20.000Z
CVE-2019-1002 Chakra Scripting Engine Memory Corruption Vulnerability
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Microsoft Edge (EdgeHTML-based)
CVSS v3.1: version: 3.1
baseSeverity: MEDIUM
baseScore: 4.2
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
Published: 2019-06-12T13:49:39.000Z
CVE-2019-1003 Chakra Scripting Engine Memory Corruption Vulnerability
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Microsoft Edge (EdgeHTML-based)
vendor: Microsoft
product: ChakraCore
CVSS v3.1: version: 3.1
baseSeverity: MEDIUM
baseScore: 4.2
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
Published: 2019-06-12T13:49:39.000Z
CVE-2019-1004 
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1001, CVE-2019-1056, CVE-2019-1059.
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Internet Explorer 9
vendor: Microsoft
product: Internet Explorer 11
vendor: Microsoft
product: Internet Explorer 11 on Windows Server 2012
vendor: Microsoft
product: Internet Explorer 11 on Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Internet Explorer 11 on Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Internet Explorer 11 on Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Internet Explorer 10
Published: 2019-07-15T18:56:20.000Z
CVE-2019-1005 Scripting Engine Memory Corruption Vulnerability
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Internet Explorer 10
vendor: Microsoft
product: Internet Explorer 9
vendor: Microsoft
product: Internet Explorer 11
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.5
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O
Published: 2019-06-12T13:49:39.000Z
CVE-2019-1007 Windows Audio Service Elevation of Privilege Vulnerability
Problem types: description: Elevation of Privilege
Affected products: vendor: Microsoft
product: Windows 10 Version 1703
vendor: Microsoft
product: Windows 10 Version 1803
vendor: Microsoft
product: Windows Server, version 1803  (Server Core Installation)
vendor: Microsoft
product: Windows 10 Version 1809
vendor: Microsoft
product: Windows 10 Version 1809
vendor: Microsoft
product: Windows Server 2019
vendor: Microsoft
product: Windows Server 2019 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 1709 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1709
vendor: Microsoft
product: Windows 10 Version 1507
vendor: Microsoft
product: Windows 10 Version 1607
vendor: Microsoft
product: Windows Server 2016
vendor: Microsoft
product: Windows Server 2016 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
Published: 2019-06-12T13:49:39.000Z
CVE-2019-1008 
A security feature bypass vulnerability exists in Dynamics On Premise, aka 'Microsoft Dynamics On-Premise Security Feature Bypass'.
Problem types: description: Security Feature Bypass
Affected products: vendor: Microsoft
product: Microsoft Dynamics 365 (on-premises)
vendor: Microsoft
product: Microsoft Dynamics CRM 2015 (on-premises)
Published: 2019-05-16T18:24:57.000Z
CVE-2019-1009 Windows GDI Information Disclosure Vulnerability
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft
product: Windows 7
vendor: Microsoft
product: Windows 7 Service Pack 1
vendor: Microsoft
product: Windows Server 2008 Service Pack 2
vendor: Microsoft
product: Windows Server 2008 Service Pack 2 (Server Core installation)
vendor: Microsoft
product: Windows Server 2008 Service Pack 2
vendor: Microsoft
product: Windows Server 2008  Service Pack 2
vendor: Microsoft
product: Windows Server 2008 R2 Systems Service Pack 1
vendor: Microsoft
product: Windows Server 2008 R2 Service Pack 1
vendor: Microsoft
product: Windows Server 2008 R2 Service Pack 1 (Server Core installation)
CVSS v3.1: version: 3.1
baseSeverity: MEDIUM
baseScore: 4.7
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
Published: 2019-06-12T13:49:39.000Z
CVE-2019-1010 Windows GDI Information Disclosure Vulnerability
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft
product: Windows 10 Version 1703
vendor: Microsoft
product: Windows 10 Version 1803
vendor: Microsoft
product: Windows Server, version 1803  (Server Core Installation)
vendor: Microsoft
product: Windows 10 Version 1809
vendor: Microsoft
product: Windows 10 Version 1809
vendor: Microsoft
product: Windows Server 2019
vendor: Microsoft
product: Windows Server 2019 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 1709 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1709
vendor: Microsoft
product: Windows 10 Version 1507
vendor: Microsoft
product: Windows 10 Version 1607
vendor: Microsoft
product: Windows Server 2016
vendor: Microsoft
product: Windows Server 2016 (Server Core installation)
vendor: Microsoft
product: Windows 7
vendor: Microsoft
product: Windows 7 Service Pack 1
vendor: Microsoft
product: Windows 8.1
vendor: Microsoft
product: Windows Server 2008 Service Pack 2
vendor: Microsoft
product: Windows Server 2008 Service Pack 2 (Server Core installation)
vendor: Microsoft
product: Windows Server 2008 Service Pack 2
vendor: Microsoft
product: Windows Server 2008  Service Pack 2
vendor: Microsoft
product: Windows Server 2008 R2 Systems Service Pack 1
vendor: Microsoft
product: Windows Server 2008 R2 Service Pack 1
vendor: Microsoft
product: Windows Server 2008 R2 Service Pack 1 (Server Core installation)
vendor: Microsoft
product: Windows Server 2012
vendor: Microsoft
product: Windows Server 2012 (Server Core installation)
vendor: Microsoft
product: Windows Server 2012 R2
vendor: Microsoft
product: Windows Server 2012 R2 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
CVSS v3.1: version: 3.1
baseSeverity: MEDIUM
baseScore: 4.7
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
Published: 2019-06-12T13:49:39.000Z
CVE-2019-1011 Windows GDI Information Disclosure Vulnerability
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft
product: Windows 7
vendor: Microsoft
product: Windows 7 Service Pack 1
vendor: Microsoft
product: Windows Server 2008 Service Pack 2
vendor: Microsoft
product: Windows Server 2008 Service Pack 2 (Server Core installation)
vendor: Microsoft
product: Windows Server 2008 Service Pack 2
vendor: Microsoft
product: Windows Server 2008  Service Pack 2
vendor: Microsoft
product: Windows Server 2008 R2 Systems Service Pack 1
vendor: Microsoft
product: Windows Server 2008 R2 Service Pack 1
vendor: Microsoft
product: Windows Server 2008 R2 Service Pack 1 (Server Core installation)
CVSS v3.1: version: 3.1
baseSeverity: MEDIUM
baseScore: 4.7
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
Published: 2019-06-12T13:49:39.000Z
CVE-2019-1012 Windows GDI Information Disclosure Vulnerability
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft
product: Windows 10 Version 1703
vendor: Microsoft
product: Windows 10 Version 1803
vendor: Microsoft
product: Windows Server, version 1803  (Server Core Installation)
vendor: Microsoft
product: Windows 10 Version 1809
vendor: Microsoft
product: Windows 10 Version 1809
vendor: Microsoft
product: Windows Server 2019
vendor: Microsoft
product: Windows Server 2019 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 1709 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1709
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 1507
vendor: Microsoft
product: Windows 10 Version 1607
vendor: Microsoft
product: Windows Server 2016
vendor: Microsoft
product: Windows Server 2016 (Server Core installation)
vendor: Microsoft
product: Windows 7
vendor: Microsoft
product: Windows 7 Service Pack 1
vendor: Microsoft
product: Windows 8.1
vendor: Microsoft
product: Windows Server 2008 Service Pack 2
vendor: Microsoft
product: Windows Server 2008 Service Pack 2 (Server Core installation)
vendor: Microsoft
product: Windows Server 2008 Service Pack 2
vendor: Microsoft
product: Windows Server 2008  Service Pack 2
vendor: Microsoft
product: Windows Server 2008 R2 Systems Service Pack 1
vendor: Microsoft
product: Windows Server 2008 R2 Service Pack 1
vendor: Microsoft
product: Windows Server 2008 R2 Service Pack 1 (Server Core installation)
vendor: Microsoft
product: Windows Server 2012
vendor: Microsoft
product: Windows Server 2012 (Server Core installation)
vendor: Microsoft
product: Windows Server 2012 R2
vendor: Microsoft
product: Windows Server 2012 R2 (Server Core installation)
CVSS v3.1: version: 3.1
baseSeverity: MEDIUM
baseScore: 4.7
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
Published: 2019-06-12T13:49:39.000Z
CVE-2019-1013 Windows GDI Information Disclosure Vulnerability
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft
product: Windows 7
vendor: Microsoft
product: Windows 7 Service Pack 1
vendor: Microsoft
product: Windows Server 2008 Service Pack 2
vendor: Microsoft
product: Windows Server 2008 Service Pack 2 (Server Core installation)
vendor: Microsoft
product: Windows Server 2008 Service Pack 2
vendor: Microsoft
product: Windows Server 2008  Service Pack 2
vendor: Microsoft
product: Windows Server 2008 R2 Systems Service Pack 1
vendor: Microsoft
product: Windows Server 2008 R2 Service Pack 1
vendor: Microsoft
product: Windows Server 2008 R2 Service Pack 1 (Server Core installation)
CVSS v3.1: version: 3.1
baseSeverity: MEDIUM
baseScore: 4.7
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
Published: 2019-06-12T13:49:39.000Z
CVE-2019-1014 Win32k Elevation of Privilege Vulnerability
Problem types: description: Elevation of Privilege
Affected products: vendor: Microsoft
product: Windows 10 Version 1703
vendor: Microsoft
product: Windows 10 Version 1803
vendor: Microsoft
product: Windows Server, version 1803  (Server Core Installation)
vendor: Microsoft
product: Windows 10 Version 1809
vendor: Microsoft
product: Windows 10 Version 1809
vendor: Microsoft
product: Windows Server 2019
vendor: Microsoft
product: Windows Server 2019 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 1709 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1709
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 1507
vendor: Microsoft
product: Windows 10 Version 1607
vendor: Microsoft
product: Windows Server 2016
vendor: Microsoft
product: Windows Server 2016 (Server Core installation)
vendor: Microsoft
product: Windows 7
vendor: Microsoft
product: Windows 7 Service Pack 1
vendor: Microsoft
product: Windows 8.1
vendor: Microsoft
product: Windows Server 2008 Service Pack 2
vendor: Microsoft
product: Windows Server 2008 Service Pack 2 (Server Core installation)
vendor: Microsoft
product: Windows Server 2008 Service Pack 2
vendor: Microsoft
product: Windows Server 2008  Service Pack 2
vendor: Microsoft
product: Windows Server 2008 R2 Systems Service Pack 1
vendor: Microsoft
product: Windows Server 2008 R2 Service Pack 1
vendor: Microsoft
product: Windows Server 2008 R2 Service Pack 1 (Server Core installation)
vendor: Microsoft
product: Windows Server 2012
vendor: Microsoft
product: Windows Server 2012 (Server Core installation)
vendor: Microsoft
product: Windows Server 2012 R2
vendor: Microsoft
product: Windows Server 2012 R2 (Server Core installation)
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
Published: 2019-06-12T13:49:39.000Z
CVE-2019-1015 Windows GDI Information Disclosure Vulnerability
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft
product: Windows 7
vendor: Microsoft
product: Windows 7 Service Pack 1
vendor: Microsoft
product: Windows Server 2008 Service Pack 2
vendor: Microsoft
product: Windows Server 2008 Service Pack 2 (Server Core installation)
vendor: Microsoft
product: Windows Server 2008 Service Pack 2
vendor: Microsoft
product: Windows Server 2008  Service Pack 2
vendor: Microsoft
product: Windows Server 2008 R2 Systems Service Pack 1
vendor: Microsoft
product: Windows Server 2008 R2 Service Pack 1
vendor: Microsoft
product: Windows Server 2008 R2 Service Pack 1 (Server Core installation)
vendor: Microsoft
product: Windows Server 2012
vendor: Microsoft
product: Windows Server 2012 (Server Core installation)
CVSS v3.1: version: 3.1
baseSeverity: MEDIUM
baseScore: 4.7
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
Published: 2019-06-12T13:49:39.000Z
CVE-2019-1016 Windows GDI Information Disclosure Vulnerability
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft
product: Windows 7
vendor: Microsoft
product: Windows 7 Service Pack 1
vendor: Microsoft
product: Windows Server 2008 Service Pack 2
vendor: Microsoft
product: Windows Server 2008 Service Pack 2 (Server Core installation)
vendor: Microsoft
product: Windows Server 2008 Service Pack 2
vendor: Microsoft
product: Windows Server 2008  Service Pack 2
vendor: Microsoft
product: Windows Server 2008 R2 Systems Service Pack 1
vendor: Microsoft
product: Windows Server 2008 R2 Service Pack 1
vendor: Microsoft
product: Windows Server 2008 R2 Service Pack 1 (Server Core installation)
CVSS v3.1: version: 3.1
baseSeverity: MEDIUM
baseScore: 4.7
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
Published: 2019-06-12T13:49:39.000Z
CVE-2019-1017 Win32k Elevation of Privilege Vulnerability
Problem types: description: Elevation of Privilege
Affected products: vendor: Microsoft
product: Windows 10 Version 1703
vendor: Microsoft
product: Windows 10 Version 1803
vendor: Microsoft
product: Windows Server, version 1803  (Server Core Installation)
vendor: Microsoft
product: Windows 10 Version 1809
vendor: Microsoft
product: Windows 10 Version 1809
vendor: Microsoft
product: Windows Server 2019
vendor: Microsoft
product: Windows Server 2019 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 1709 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1709
vendor: Microsoft
product: Windows 10 Version 1507
vendor: Microsoft
product: Windows 10 Version 1607
vendor: Microsoft
product: Windows Server 2016
vendor: Microsoft
product: Windows Server 2016 (Server Core installation)
vendor: Microsoft
product: Windows 7
vendor: Microsoft
product: Windows 7 Service Pack 1
vendor: Microsoft
product: Windows 8.1
vendor: Microsoft
product: Windows Server 2008 Service Pack 2
vendor: Microsoft
product: Windows Server 2008 Service Pack 2 (Server Core installation)
vendor: Microsoft
product: Windows Server 2008 Service Pack 2
vendor: Microsoft
product: Windows Server 2008  Service Pack 2
vendor: Microsoft
product: Windows Server 2008 R2 Systems Service Pack 1
vendor: Microsoft
product: Windows Server 2008 R2 Service Pack 1
vendor: Microsoft
product: Windows Server 2008 R2 Service Pack 1 (Server Core installation)
vendor: Microsoft
product: Windows Server 2012
vendor: Microsoft
product: Windows Server 2012 (Server Core installation)
vendor: Microsoft
product: Windows Server 2012 R2
vendor: Microsoft
product: Windows Server 2012 R2 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
Published: 2019-06-12T13:49:39.000Z