stasvinokur/cve-and-cwe-dataset-1999-2025 huggingface dataset:
CVE-2020-1700 (severity: MEDIUM, weakness: CWE-400)
A flaw was found in the way the Ceph RGW Beast front-end handles unexpected disconnects. An authenticated attacker can abuse this flaw by making multiple disconnect attempts resulting in a permanent leak of a socket connection by radosgw. This flaw could lead to a denial of service condition by pile up of CLOSE_WAIT sockets, eventually leading to the exhaustion of available resources, preventing legitimate users from connecting to the system.
CVE-2020-17000 (severity: MEDIUM, weakness: NVD-CWE-Other)
Remote Desktop Protocol Client Information Disclosure Vulnerability
CVE-2020-17001 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2020-17002 (severity: CRITICAL, weakness: NVD-CWE-Other)
Azure SDK for C Security Feature Bypass Vulnerability
CVE-2020-17003 (severity: HIGH, weakness: NVD-CWE-Other)
<p>A remote code execution vulnerability exists when the Base3D rendering engine improperly handles memory.</p> <p>An attacker who successfully exploited the vulnerability would gain execution on a victim system.</p> <p>The security update addresses the vulnerability by correcting how the Base3D rendering engine handles memory.</p>
CVE-2020-17004 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Graphics Component Information Disclosure Vulnerability
CVE-2020-17005 (severity: MEDIUM, weakness: CWE-79)
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2020-17006 (severity: MEDIUM, weakness: CWE-79)
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2020-17007 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Error Reporting Elevation of Privilege Vulnerability
CVE-2020-1701 (severity: MEDIUM, weakness: CWE-732)
A flaw was found in the KubeVirt main virt-handler versions before 0.26.0 regarding the access permissions of virt-handler. An attacker with access to create VMs could attach any secret within their namespace, allowing them to read the contents of that secret.
CVE-2020-17010 (severity: HIGH, weakness: CWE-78)
Win32k Elevation of Privilege Vulnerability
CVE-2020-17011 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Port Class Library Elevation of Privilege Vulnerability
CVE-2020-17012 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Bind Filter Driver Elevation of Privilege Vulnerability
CVE-2020-17013 (severity: MEDIUM, weakness: NVD-CWE-Other)
Win32k Information Disclosure Vulnerability
CVE-2020-17014 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2020-17015 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft SharePoint Server Spoofing Vulnerability
CVE-2020-17016 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft SharePoint Server Spoofing Vulnerability
CVE-2020-17017 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft SharePoint Information Disclosure Vulnerability
CVE-2020-17018 (severity: MEDIUM, weakness: CWE-79)
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2020-17019 (severity: HIGH, weakness: CWE-415)
Microsoft Excel Remote Code Execution Vulnerability
CVE-2020-1702 (severity: LOW, weakness: CWE-400)
A malicious container image can consume an unbounded amount of memory when being pulled to a container runtime host, such as Red Hat Enterprise Linux using podman, or OpenShift Container Platform. An attacker can use this flaw to trick a user, with privileges to pull container images, into crashing the process responsible for pulling the image. This flaw affects containers-image versions before 5.2.0.
CVE-2020-17020 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft Word Security Feature Bypass Vulnerability
CVE-2020-17021 (severity: MEDIUM, weakness: CWE-79)
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2020-17022 (severity: HIGH, weakness: NVD-CWE-Other)
<p>A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code.</p> <p>Exploitation of the vulnerability requires that a program process a specially crafted image file.</p> <p>The update addresses the vulnerability by correcting how Microsoft Windows Codecs Library handles objects in memory.</p>
CVE-2020-17023 (severity: HIGH, weakness: NVD-CWE-Other)
<p>A remote code execution vulnerability exists in Visual Studio Code when a user is tricked into opening a malicious 'package.json' file. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>To exploit this vulnerability, an attacker would need to convince a target to clone a repository and open it in Visual Studio Code. Attacker-specified code would execute when the target opens the malicious 'package.json' file.</p> <p>The update address the vulnerability by modifying the way Visual Studio Code handles JSON files.</p>
CVE-2020-17024 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Client Side Rendering Print Provider Elevation of Privilege Vulnerability
CVE-2020-17025 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Remote Access Elevation of Privilege Vulnerability
CVE-2020-17026 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Remote Access Elevation of Privilege Vulnerability
CVE-2020-17027 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Remote Access Elevation of Privilege Vulnerability
CVE-2020-17028 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Remote Access Elevation of Privilege Vulnerability
CVE-2020-17029 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Canonical Display Driver Information Disclosure Vulnerability
CVE-2020-17030 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows MSCTF Server Information Disclosure Vulnerability
CVE-2020-17031 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Remote Access Elevation of Privilege Vulnerability
CVE-2020-17032 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Remote Access Elevation of Privilege Vulnerability
CVE-2020-17033 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Remote Access Elevation of Privilege Vulnerability
CVE-2020-17034 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Remote Access Elevation of Privilege Vulnerability
CVE-2020-17035 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Kernel Elevation of Privilege Vulnerability
CVE-2020-17036 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Function Discovery SSDP Provider Information Disclosure Vulnerability
CVE-2020-17037 (severity: HIGH, weakness: NVD-CWE-Other)
Windows WalletService Elevation of Privilege Vulnerability
CVE-2020-17038 (severity: HIGH, weakness: NVD-CWE-Other)
Win32k Elevation of Privilege Vulnerability
CVE-2020-1704 (severity: HIGH, weakness: CWE-266)
An insecure modification vulnerability in the /etc/passwd file was found in all versions of OpenShift ServiceMesh (maistra) before 1.0.8 in the openshift/istio-kialia-rhel7-operator-container. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.
CVE-2020-17040 (severity: CRITICAL, weakness: NVD-CWE-Other)
Windows Hyper-V Security Feature Bypass Vulnerability
CVE-2020-17041 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Print Configuration Elevation of Privilege Vulnerability
CVE-2020-17042 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Print Spooler Remote Code Execution Vulnerability
CVE-2020-17043 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Remote Access Elevation of Privilege Vulnerability
CVE-2020-17044 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Remote Access Elevation of Privilege Vulnerability
CVE-2020-17045 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows KernelStream Information Disclosure Vulnerability
CVE-2020-17046 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Error Reporting Denial of Service Vulnerability
CVE-2020-17047 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Network File System Denial of Service Vulnerability
CVE-2020-17048 (severity: HIGH, weakness: CWE-787)
Chakra Scripting Engine Memory Corruption Vulnerability
CVE-2020-17049 (severity: HIGH, weakness: CWE-863)
A security feature bypass vulnerability exists in the way Key Distribution Center (KDC) determines if a service ticket can be used for delegation via Kerberos Constrained Delegation (KCD). To exploit the vulnerability, a compromised service that is configured to use KCD could tamper with a service ticket that is not valid for delegation to force the KDC to accept it. The update addresses this vulnerability by changing how the KDC validates service tickets used with KCD.
CVE-2020-1705 (severity: HIGH, weakness: CWE-266)
A vulnerability was found in openshift/template-service-broker-operator in all 4.x.x versions prior to 4.3.0, where an insecure modification vulnerability in the /etc/passwd file was found in the openshift/template-service-broker-operator. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.
CVE-2020-17051 (severity: CRITICAL, weakness: NVD-CWE-Other)
Windows Network File System Remote Code Execution Vulnerability
CVE-2020-17052 (severity: HIGH, weakness: CWE-787)
Scripting Engine Memory Corruption Vulnerability
CVE-2020-17053 (severity: HIGH, weakness: CWE-787)
Internet Explorer Memory Corruption Vulnerability
CVE-2020-17054 (severity: HIGH, weakness: CWE-787)
Chakra Scripting Engine Memory Corruption Vulnerability
CVE-2020-17055 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Remote Access Elevation of Privilege Vulnerability
CVE-2020-17056 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Network File System Information Disclosure Vulnerability
CVE-2020-17057 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Win32k Elevation of Privilege Vulnerability
CVE-2020-17058 (severity: HIGH, weakness: CWE-787)
Microsoft Browser Memory Corruption Vulnerability
CVE-2020-1706 (severity: HIGH, weakness: CWE-732)
It has been found that in openshift-enterprise version 3.11 and openshift-enterprise versions 4.1 up to, including 4.3, multiple containers modify the permissions of /etc/passwd to make them modifiable by users other than root. An attacker with access to the running container can exploit this to modify /etc/passwd to add a user and escalate their privileges. This CVE is specific to the openshift/apb-tools-container.
CVE-2020-17060 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft SharePoint Server Spoofing Vulnerability
CVE-2020-17061 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft SharePoint Remote Code Execution Vulnerability
CVE-2020-17062 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability
CVE-2020-17063 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft Office Online Spoofing Vulnerability
CVE-2020-17064 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Excel Remote Code Execution Vulnerability
CVE-2020-17065 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Excel Remote Code Execution Vulnerability
CVE-2020-17066 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Excel Remote Code Execution Vulnerability
CVE-2020-17067 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Excel Security Feature Bypass Vulnerability
CVE-2020-17068 (severity: HIGH, weakness: NVD-CWE-Other)
Windows GDI+ Remote Code Execution Vulnerability
CVE-2020-17069 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows NDIS Information Disclosure Vulnerability
CVE-2020-1707 (severity: HIGH, weakness: CWE-732)
A vulnerability was found in all openshift/postgresql-apb 4.x.x versions prior to 4.3.0, where an insecure modification vulnerability in the /etc/passwd file was found in the container openshift/postgresql-apb. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.
CVE-2020-17070 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Update Medic Service Elevation of Privilege Vulnerability
CVE-2020-17071 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Delivery Optimization Information Disclosure Vulnerability
CVE-2020-17073 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Update Orchestrator Service Elevation of Privilege Vulnerability
CVE-2020-17074 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Update Orchestrator Service Elevation of Privilege Vulnerability
CVE-2020-17075 (severity: HIGH, weakness: NVD-CWE-Other)
Windows USO Core Worker Elevation of Privilege Vulnerability
CVE-2020-17076 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Update Orchestrator Service Elevation of Privilege Vulnerability
CVE-2020-17077 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Update Stack Elevation of Privilege Vulnerability
CVE-2020-17078 (severity: CRITICAL, weakness: NVD-CWE-Other)
Raw Image Extension Remote Code Execution Vulnerability
CVE-2020-17079 (severity: CRITICAL, weakness: NVD-CWE-Other)
Raw Image Extension Remote Code Execution Vulnerability
CVE-2020-1708 (severity: HIGH, weakness: CWE-266)
It has been found in openshift-enterprise version 3.11 and all openshift-enterprise versions from 4.1 to, including 4.3, that multiple containers modify the permissions of /etc/passwd to make them modifiable by users other than root. An attacker with access to the running container can exploit this to modify /etc/passwd to add a user and escalate their privileges. This CVE is specific to the openshift/mysql-apb.
CVE-2020-17081 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Raw Image Extension Information Disclosure Vulnerability
CVE-2020-17082 (severity: CRITICAL, weakness: NVD-CWE-Other)
Raw Image Extension Remote Code Execution Vulnerability
CVE-2020-17083 (severity: MEDIUM, weakness: CWE-79)
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2020-17084 (severity: HIGH, weakness: CWE-120)
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2020-17085 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft Exchange Server Denial of Service Vulnerability
CVE-2020-17086 (severity: CRITICAL, weakness: NVD-CWE-Other)
Raw Image Extension Remote Code Execution Vulnerability
CVE-2020-17087 (severity: HIGH, weakness: CWE-131)
Windows Kernel Local Elevation of Privilege Vulnerability
CVE-2020-17088 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2020-17089 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft SharePoint Elevation of Privilege Vulnerability
CVE-2020-1709 (severity: HIGH, weakness: CWE-732)
A vulnerability was found in all openshift/mediawiki 4.x.x versions prior to 4.3.0, where an insecure modification vulnerability in the /etc/passwd file was found in the openshift/mediawiki. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.
CVE-2020-17090 (severity: CRITICAL, weakness: NVD-CWE-Other)
Microsoft Defender for Endpoint Security Feature Bypass Vulnerability
CVE-2020-17091 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Teams Remote Code Execution Vulnerability
CVE-2020-17092 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Network Connections Service Elevation of Privilege Vulnerability
CVE-2020-17094 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Error Reporting Information Disclosure Vulnerability
CVE-2020-17095 (severity: CRITICAL, weakness: NVD-CWE-Other)
Windows Hyper-V Remote Code Execution Vulnerability
CVE-2020-17096 (severity: HIGH, weakness: NVD-CWE-Other)
Windows NTFS Remote Code Execution Vulnerability
CVE-2020-17097 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Digital Media Receiver Elevation of Privilege Vulnerability
CVE-2020-17098 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows GDI+ Information Disclosure Vulnerability
CVE-2020-17099 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Lock Screen Security Feature Bypass Vulnerability
CVE-2020-1710 (severity: MEDIUM, weakness: NVD-CWE-Other)
The issue appears to be that JBoss EAP 6.4.21 does not parse the field-name in accordance to RFC7230[1] as it returns a 200 instead of a 400.
CVE-2020-17100 (severity: MEDIUM, weakness: NVD-CWE-Other)
Visual Studio Tampering Vulnerability
CVE-2020-17101 (severity: HIGH, weakness: NVD-CWE-Other)
HEIF Image Extensions Remote Code Execution Vulnerability
CVE-2020-17102 (severity: MEDIUM, weakness: NVD-CWE-Other)
WebP Image Extensions Information Disclosure Vulnerability
CVE-2020-17103 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2020-17104 (severity: HIGH, weakness: NVD-CWE-Other)
Visual Studio Code JSHint Extension Remote Code Execution Vulnerability
CVE-2020-17105 (severity: CRITICAL, weakness: NVD-CWE-Other)
AV1 Video Extension Remote Code Execution Vulnerability
CVE-2020-17106 (severity: HIGH, weakness: NVD-CWE-Other)
HEVC Video Extensions Remote Code Execution Vulnerability
CVE-2020-17107 (severity: HIGH, weakness: NVD-CWE-Other)
HEVC Video Extensions Remote Code Execution Vulnerability
CVE-2020-17108 (severity: HIGH, weakness: NVD-CWE-Other)
HEVC Video Extensions Remote Code Execution Vulnerability
CVE-2020-17109 (severity: HIGH, weakness: NVD-CWE-Other)
HEVC Video Extensions Remote Code Execution Vulnerability
CVE-2020-1711 (severity: MEDIUM, weakness: CWE-122)
An out-of-bounds heap buffer access flaw was found in the way the iSCSI Block driver in QEMU versions 2.12.0 before 4.2.1 handled a response coming from an iSCSI server while checking the status of a Logical Address Block (LBA) in an iscsi_co_block_status() routine. A remote user could use this flaw to crash the QEMU process, resulting in a denial of service or potential execution of arbitrary code with privileges of the QEMU process on the host.
CVE-2020-17110 (severity: HIGH, weakness: NVD-CWE-Other)
HEVC Video Extensions Remote Code Execution Vulnerability
CVE-2020-17113 (severity: MEDIUM, weakness: CWE-125)
Windows Camera Codec Information Disclosure Vulnerability
CVE-2020-17115 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft SharePoint Server Spoofing Vulnerability
CVE-2020-17117 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Exchange Remote Code Execution Vulnerability
CVE-2020-17118 (severity: CRITICAL, weakness: NVD-CWE-Other)
Microsoft SharePoint Remote Code Execution Vulnerability
CVE-2020-17119 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Outlook Information Disclosure Vulnerability
CVE-2020-1712 (severity: HIGH, weakness: CWE-416)
A heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries are performed while handling dbus messages. A local unprivileged attacker can abuse this flaw to crash systemd services or potentially execute code and elevate their privileges, by sending specially crafted dbus messages.
CVE-2020-17120 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft SharePoint Information Disclosure Vulnerability
CVE-2020-17121 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft SharePoint Remote Code Execution Vulnerability
CVE-2020-17122 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Excel Remote Code Execution Vulnerability
CVE-2020-17123 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Excel Remote Code Execution Vulnerability
CVE-2020-17124 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft PowerPoint Remote Code Execution Vulnerability
CVE-2020-17125 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Excel Remote Code Execution Vulnerability
CVE-2020-17126 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft Excel Information Disclosure Vulnerability
CVE-2020-17127 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Excel Remote Code Execution Vulnerability
CVE-2020-17128 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Excel Remote Code Execution Vulnerability
CVE-2020-17129 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Excel Remote Code Execution Vulnerability
CVE-2020-17130 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft Excel Security Feature Bypass Vulnerability
CVE-2020-17131 (severity: HIGH, weakness: CWE-787)
Chakra Scripting Engine Memory Corruption Vulnerability
CVE-2020-17132 (severity: CRITICAL, weakness: NVD-CWE-Other)
Microsoft Exchange Remote Code Execution Vulnerability
CVE-2020-17133 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft Dynamics Business Central/NAV Information Disclosure
CVE-2020-17134 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2020-17135 (severity: MEDIUM, weakness: NVD-CWE-Other)
Azure DevOps Server Spoofing Vulnerability
CVE-2020-17136 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2020-17137 (severity: HIGH, weakness: NVD-CWE-Other)
DirectX Graphics Kernel Elevation of Privilege Vulnerability
CVE-2020-17138 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Error Reporting Information Disclosure Vulnerability
CVE-2020-17139 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Overlay Filter Security Feature Bypass Vulnerability
CVE-2020-1714 (severity: HIGH, weakness: CWE-20)
A flaw was found in Keycloak before version 11.0.0, where the code base contains usages of ObjectInputStream without type checks. This flaw allows an attacker to inject arbitrarily serialized Java Objects, which would then get deserialized in a privileged context and potentially lead to remote code execution.
CVE-2020-17140 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows SMB Information Disclosure Vulnerability
CVE-2020-17141 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Exchange Remote Code Execution Vulnerability
CVE-2020-17142 (severity: CRITICAL, weakness: NVD-CWE-Other)
Microsoft Exchange Remote Code Execution Vulnerability
CVE-2020-17143 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Exchange Server Information Disclosure Vulnerability
CVE-2020-17144 (severity: HIGH, weakness: CWE-502)
Microsoft Exchange Remote Code Execution Vulnerability
CVE-2020-17145 (severity: MEDIUM, weakness: NVD-CWE-Other)
Azure DevOps Server and Team Foundation Services Spoofing Vulnerability
CVE-2020-17147 (severity: MEDIUM, weakness: CWE-79)
Dynamics CRM Webclient Cross-site Scripting Vulnerability
CVE-2020-17148 (severity: HIGH, weakness: NVD-CWE-Other)
Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability
CVE-2020-17150 (severity: HIGH, weakness: NVD-CWE-Other)
Visual Studio Code Remote Code Execution Vulnerability
CVE-2020-17152 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability
CVE-2020-17153 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft Edge for Android Spoofing Vulnerability
CVE-2020-17156 (severity: HIGH, weakness: NVD-CWE-Other)
Visual Studio Remote Code Execution Vulnerability
CVE-2020-17158 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability
CVE-2020-17159 (severity: HIGH, weakness: NVD-CWE-Other)
Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability
CVE-2020-1716 (severity: HIGH, weakness: CWE-798)
A flaw was found in the ceph-ansible playbook where it contained hardcoded passwords that were being used as default passwords while deploying Ceph services. Any authenticated attacker can abuse this flaw to brute-force Ceph deployments, and gain administrator access to Ceph clusters via the Ceph dashboard to initiate read, write, and delete Ceph clusters and also modify Ceph cluster configurations. Versions before ceph-ansible 6.0.0alpha1 are affected.
CVE-2020-17162 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Windows Security Feature Bypass Vulnerability
CVE-2020-17163 (severity: HIGH, weakness: NVD-CWE-Other)
Visual Studio Code Python Extension Remote Code Execution Vulnerability
CVE-2020-1717 (severity: LOW, weakness: CWE-209)
A flaw was found in Keycloak 7.0.1. A logged in user can do an account email enumeration attack.