Windows Performance Counters Information Disclosure Vulnerability
Buffer over-read in Windows Performance Counters allows an authorized attacker to disclose information locally.
Buffer over-read in Windows Performance Counters allows an authorized attacker to disclose information locally.
Missing release of memory after effective lifetime in Windows Kerberos allows an unauthorized attacker to deny service over a network.
Use after free in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges locally.
Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.
Double free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
Authentication bypass by capture-replay in SQL Server allows an unauthorized attacker to disclose information over a network.
Buffer over-read in Windows iSCSI Target Service allows an unauthorized attacker to disclose information over a network.
Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
Processor optimization removal or modification of security-critical code in AMD Zen allows an authorized attacker to disclose information locally.
Processor optimization removal or modification of security-critical code in AMD Zen allows an authorized attacker to disclose information locally.
Use after free in RPC Runtime allows an authorized attacker to elevate privileges locally.
This is rejected.
This is rejected.
This is rejected.
IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a local attacker to cause a denial of service due to uncontrolled resource consumption.
IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to obtain sensitive information due to missing required cryptographic step.
Cross-Site Request Forgery (CSRF) vulnerability in WisdmLabs Edwiser Bridge edwiser-bridge allows Cross Site Request Forgery.This issue affects Edwiser Bridge: from n/a through 4.3.4.
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in John-Michael L'Allier Create mediavine-create allows Stored XSS.This issue affects Create: from n/a through 3.1.1.