| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| Improper Control of a Resource Through its Lifetime. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15. The vulnerabilities are grouped by Common Weakness Enumeration (CWE), with one Common Vulnerabilities and Exposures (CVE) identifier assigned to each group. See Details for more information. |
| Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to perform spoofing locally. |
| Incorrect authorization in DNS Server allows an authorized attacker to bypass a security feature locally. |
| Incorrect authorization in DNS Server allows an authorized attacker to perform tampering locally. |
| Missing authorization in DNS Server allows an authorized attacker to perform tampering locally. |
| Uncaught exception in Windows DNS allows an unauthorized attacker to deny service over a network. |
| Incorrect authorization in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to bypass a security feature locally. |
| Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network. |
| Out-of-bounds read in Windows Kernel allows an unauthorized attacker to deny service over a network. |
| Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally. |
| Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally. |
| Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. |
| Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. |
| Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized attacker to execute code over a network. |
| Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally. |
| Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network. |
| Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
| Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. |
| Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. |
