Continuous surveillance of newly registered CVE advisories with CVSS threat scores, attack vector metrics, and impacted software libraries.
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network....
Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network....
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network....
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network....
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network....
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network....
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network....
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network....
Heap-based buffer overflow in Minecraft Bedrock Dedicated Server allows an unauthorized attacker to execute code over a network....
Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network....
Improper authorization in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges over a network....
Access of resource using incompatible type ('type confusion') in SQL Server allows an authorized attacker to disclose information over a network....
Access of resource using incompatible type ('type confusion') in Windows OLE allows an unauthorized attacker to execute code over a network....
Double free in Windows DHCP Server allows an authorized attacker to execute code over a network....
Improper neutralization of input during web page generation ('cross-site scripting') in Active Directory Federation Services (AD FS) allows an authorized attacker to perform spoofing over a network....
Out-of-bounds read in Windows Active Directory allows an authorized attacker to deny service over a network....
Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges over a network....
Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network....
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network....
Use after free in Windows Message Queuing allows an authorized attacker to execute code over a network....
Buffer over-read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network....
Insufficient granularity of access control in Windows Event Logging Service allows an authorized attacker to execute code over a network....
Use after free in Windows Netlogon allows an authorized attacker to elevate privileges over a network....
Off-by-one error in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network....