CVE-2020-8364
Last Modified: 7 Nov 2023DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE-2020-8362
Last Modified: 7 Nov 2023DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE-2020-8363
Last Modified: 7 Nov 2023DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE-2020-8360
Last Modified: 7 Nov 2023DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE-2020-8361
Last Modified: 7 Nov 2023DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE-2020-8359
Last Modified: 7 Nov 2023DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE-2020-8358
Last Modified: 7 Nov 2023DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE-2021-29440
Last Modified: 21 Nov 2024Grav is a file based Web-platform. Twig processing of static pages can be enabled in the front matter by any administrative user allowed to create or edit pages. As the Twig processor runs unsandboxed, this behavior can be used to gain arbitrary code execution and elevate privileges on the instance. The issue was addressed in version 1.7.11.
CVE-2021-29439
Last Modified: 21 Nov 2024The Grav admin plugin prior to version 1.10.11 does not correctly verify caller's privileges. As a consequence, users with the permission `admin.login` can install third-party plugins and their dependencies. By installing the right plugin, an attacker can obtain an arbitrary code execution primitive and elevate their privileges on the instance. The vulnerability has been addressed in version 1.10.11. As a mitigation blocking access to the `/admin` path from untrusted sources will reduce the probability of exploitation.
CVE-2021-28483
Last Modified: 21 Nov 2024Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-28481
Last Modified: 21 Nov 2024Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-28482
Last Modified: 21 Nov 2024Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-28480
Last Modified: 21 Nov 2024Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-28477
Last Modified: 21 Nov 2024Visual Studio Code Remote Code Execution Vulnerability
CVE-2021-28475
Last Modified: 21 Nov 2024Visual Studio Code Remote Code Execution Vulnerability
CVE-2021-28473
Last Modified: 21 Nov 2024Visual Studio Code Remote Code Execution Vulnerability
CVE-2021-28471
Last Modified: 21 Nov 2024Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability
CVE-2021-28472
Last Modified: 21 Nov 2024Visual Studio Code Maven for Java Extension Remote Code Execution Vulnerability
CVE-2021-28470
Last Modified: 21 Nov 2024Visual Studio Code GitHub Pull Requests and Issues Extension Remote Code Execution Vulnerability
CVE-2021-28468
Last Modified: 21 Nov 2024Raw Image Extension Remote Code Execution Vulnerability
CVE-2021-28469
Last Modified: 21 Nov 2024Visual Studio Code Remote Code Execution Vulnerability
CVE-2021-28466
Last Modified: 21 Nov 2024Raw Image Extension Remote Code Execution Vulnerability
CVE-2021-28464
Last Modified: 28 May 2026VP9 Video Extensions Remote Code Execution Vulnerability
CVE-2021-28460
Last Modified: 21 Nov 2024Azure Sphere Unsigned Code Execution Vulnerability
CVE-2021-28459
Last Modified: 21 Nov 2024Azure DevOps Server Spoofing Vulnerability
CVE-2021-28458
Last Modified: 21 Nov 2024Azure ms-rest-nodeauth Library Elevation of Privilege Vulnerability
CVE-2021-28457
Last Modified: 21 Nov 2024Visual Studio Code Remote Code Execution Vulnerability
CVE-2021-28454
Last Modified: 21 Nov 2024Microsoft Excel Remote Code Execution Vulnerability
CVE-2021-28456
Last Modified: 21 Nov 2024Microsoft Excel Information Disclosure Vulnerability
CVE-2021-28453
Last Modified: 21 Nov 2024Microsoft Word Remote Code Execution Vulnerability
CVE-2021-28452
Last Modified: 21 Nov 2024Microsoft Outlook Memory Corruption Vulnerability
CVE-2021-28451
Last Modified: 21 Nov 2024Microsoft Excel Remote Code Execution Vulnerability
CVE-2021-28450
Last Modified: 21 Nov 2024Microsoft SharePoint Denial of Service Vulnerability
CVE-2021-28449
Last Modified: 21 Nov 2024Microsoft Office Remote Code Execution Vulnerability
CVE-2021-28447
Last Modified: 21 Nov 2024Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability
CVE-2021-28448
Last Modified: 21 Nov 2024Visual Studio Code Kubernetes Tools Remote Code Execution Vulnerability
CVE-2021-28446
Last Modified: 13 Feb 2025Windows Portmapping Information Disclosure Vulnerability
CVE-2021-28445
Last Modified: 21 Nov 2024Windows Network File System Remote Code Execution Vulnerability
CVE-2021-28444
Last Modified: 21 Nov 2024Windows Hyper-V Security Feature Bypass Vulnerability
CVE-2021-28443
Last Modified: 21 Nov 2024Windows Console Driver Denial of Service Vulnerability
CVE-2021-28441
Last Modified: 21 Nov 2024Windows Hyper-V Information Disclosure Vulnerability
CVE-2021-28442
Last Modified: 21 Nov 2024Windows TCP/IP Information Disclosure Vulnerability
CVE-2021-28440
Last Modified: 21 Nov 2024Windows Installer Elevation of Privilege Vulnerability
CVE-2021-28439
Last Modified: 21 Nov 2024Windows TCP/IP Driver Denial of Service Vulnerability
CVE-2021-28438
Last Modified: 21 Nov 2024Windows Console Driver Denial of Service Vulnerability
CVE-2021-28437
Last Modified: 21 Nov 2024Windows Installer Information Disclosure Vulnerability
CVE-2021-28435
Last Modified: 21 Nov 2024Windows Event Tracing Information Disclosure Vulnerability
CVE-2021-28436
Last Modified: 21 Nov 2024Windows Speech Runtime Elevation of Privilege Vulnerability
CVE-2021-28434
Last Modified: 21 Nov 2024Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-28357
Last Modified: 21 Nov 2024Remote Procedure Call Runtime Remote Code Execution Vulnerability
