Baza CVE

Use of uninitialized resource in Microsoft Graphics Component allows an authorized attacker to disclose information locally.

SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to view…

Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Out-of-bounds read in Microsoft Defender allows an authorized attacker to disclose information locally.

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over an adjacent network.

Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

Use after free in HID class driver allows an unauthorized attacker to elevate privileges with a physical attack.

Adobe Framemaker is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the…

Adobe Framemaker is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive…

Adobe Framemaker is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive…

Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.

Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.

Improper authorization in DNS Server allows an authorized attacker to perform tampering locally.

Buffer over-read in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.

Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Incorrect privilege assignment in Visual Studio Code allows an authorized attacker to bypass a security feature locally.

Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an authorized attacker to disclose information over a network.

No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

Heap-based buffer overflow in Windows Portable Device MTP Driver allows an unauthorized attacker to elevate privileges with a physical attack.

Out-of-bounds read in Windows Remote Desktop Protocol allows an authorized attacker to disclose information over a network.

Stack-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to deny service over a network.

Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally.