2019

includes/wizard/wizard.php in the Ocean Extra plugin through 1.5.8 for WordPress allows unauthenticated options changes

OpenCV 4.1.1 has an out-of-bounds read in hal_baseline::v_load in core/hal/intrin_sse.hpp when called from computeSSDMea

The "delete for" feature in Telegram before 5.11 on Android does not delete shared media files from the Telegram Images

An exploitable denial-of-service vulnerability exists in the Host Access Point Daemon (hostapd) on the NETGEAR N300 (WNR

An exploitable denial-of-service vulnerability exists in the session handling functionality of the NETGEAR N300 (WNR2000

A remote code execution vulnerability exists when Azure DevOps Server (ADO) and Team Foundation Server (TFS) fail to val

A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided i

An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To e

An elevation of privilege vulnerability exists when a ASP.NET Core web application, created using vulnerable project tem

A denial of service vulnerability exists when .NET Core improperly handles web requests, aka '.NET Core Denial of Servic

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

An information disclosure vulnerability exists when Microsoft Edge based on Edge HTML improperly handles objects in memo

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obje

A remote code execution vulnerability exists in Microsoft SharePoint where APIs aren't properly protected from unsafe da

A remote code execution vulnerability exists in Microsoft SharePoint where APIs aren't properly protected from unsafe da

A security feature bypass exists when Windows Secure Boot improperly restricts access to debugging functionality, aka 'W

An information disclosure vulnerability exists in Windows when the Windows SMB Client kernel-mode driver fails to proper

A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Servi

A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious se

A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious se

An elevation of privilege vulnerability exists when the Windows Update Delivery Optimization does not properly enforce f

An elevation of privilege vulnerability exists in the way that the Windows Network Connectivity Assistant handles object

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its m

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation

An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, a

An information disclosure exists in the Windows Common Log File System (CLFS) driver when it fails to properly handle sa

A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file

An elevation of privilege vulnerability exists in the way that the unistore.dll handles objects in memory, aka 'Windows

An elevation of privilege vulnerability exists in Windows Audio Service when a malformed parameter is processed, aka 'Wi

An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, ak

A cross-site-scripting (XSS) vulnerability exists when Active Directory Federation Services (ADFS) does not properly san

An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (A

An elevation of privilege exists in hdAudio.sys which may lead to an out of band write, aka 'Windows Media Elevation of

An elevation of privilege vulnerability exists in Windows store installer where WindowsApps directory is vulnerable to s

An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (A

An elevation of privilege exists when Winlogon does not properly handle file path information, aka 'Winlogon Elevation o

An elevation of privilege vulnerability exists in Microsoft Compatibility Appraiser where a configuration file, with loc

A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web App (OWA) fails to properly handle web req

A security feature bypass vulnerability exists when Microsoft Yammer App for Android fails to apply the correct Intune M

A security feature bypass vulnerability exists when Microsoft Office improperly handles input, aka 'Microsoft Office Sec

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speciall

A spoofing vulnerability exists in Microsoft SharePoint when it improperly handles requests to authorize applications, r

An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privilege

A spoofing vulnerability exists in Microsoft SharePoint when it improperly handles requests to authorize applications, r

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in

An information disclosure vulnerability exists when Windows Hyper-V writes uninitialized memory to disk, aka 'Windows Hy