NVD-CWE-noinfo

An issue was discovered in Mattermost Mobile Apps before 1.30.0. Authorization tokens can sometimes be disclosed to third-party servers, aka MMSA-2020-0018.

An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka ‘Microsoft Office Information Disclosure Vulnerability’. This CVE ID is unique from CVE-2020-1342.

An issue was discovered in Mattermost Server before 5.22.0. The markdown renderer allows attackers to cause a denial of service (client-side), aka MMSA-2020-0017.

An elevation of privilege vulnerability exists in the way that the Windows Network Location Awareness Service handles objects in memory, aka ‘Windows Network Location Awareness Service Elevation of Privilege Vulnerability’.

An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka ‘Windows Network Connections Service Elevation of Privilege Vulnerability’. This CVE ID is unique from CVE-2020-1373, CVE-2020-1390, CVE-2020-1427, CVE-2020-1428.

A flaw was found in JBossWeb in versions before 7.5.31.Final-redhat-3. The fix for CVE-2020-13935 was incomplete in JBossWeb, leaving it vulnerable to a denial of service attack when sending multiple requests with invalid payload length in a WebSocket frame. The highest threat from this vulnerability is to system availability.