CVE-2021-1660

Remote Procedure Call Runtime Remote Code Execution Vulnerability...

CVE-2021-1660 Remote Procedure Call Runtime Remote Code Execution Vulnerability

...

CVE-2021-1660

CVE-2021-1660 is a Remote Procedure Call (RPC) Runtime remote code execution vulnerability in Windows. The connected sources confirm the flaw affects RPC components and was addressed by Microsoft security updates released in January 2021 (KB4598242/KB4598243 and related advisories), with patches ...

KB4598297: Windows Server 2012 January 2021 Security Update

The remote Windows host is missing security update 4598297 or cumulative update 4598278. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2020-17087, CVE-2021-1648, CVE-2021-1649,...

KB4598229: Windows 10 Version 1909 January 2021 Security Update

The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Windows AppX Deployment Extensions Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1685. CVE-2021-1642 - Windows DNS Query Information Disclosure Vulnerability...

KB4598242: Windows 10 Version 2004 / Windows 10 Version 20H2 January 2021 Security Update

The remote Windows host is missing security update 4598242. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2021-1637, CVE-2021-1645, CVE-2021-1656, CVE-2021-1663,...

KLA12041 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, gain privileges, spoof user interface, bypass security restrictions, cause denial of service. Below is a...

KB4598230: Windows 10 Version 1809 and Windows Server 2019 January 2021 Security Update

The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Windows AppX Deployment Extensions Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1685. CVE-2021-1642 - Windows DNS Query Information Disclosure Vulnerability...

KB4598245: Windows 10 Version 1803 January 2021 Security Update

The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Windows AppX Deployment Extensions Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1685. CVE-2021-1642 - Windows DNS Query Information Disclosure Vulnerability...

CVE-2020-1660

creationtimestamp| type| source ---|---|--- 2020-10-17 00:42:38+00:00| seen| https://t.me/cibsecurity/15348...

CVE-2020-1660

When DNS filtering is enabled on Juniper Networks Junos MX Series with one of the following cards MS-PIC, MS-MIC or MS-MPC, an incoming stream of packets processed by the Multiservices PIC Management Daemon mspmand process, responsible for managing "URL Filtering service", may crash, causing the...

CVE-2020-1660

CVE-2020-1660 affects Juniper Networks Junos OS on MX Series when DNS filtering is enabled on cards MS-PIC, MS-MIC or MS-MPC. A crafted stream processed by the Multiservices PIC Management Daemon (mspmand) may crash the Services PIC, causing the Services PIC to restart and temporarily bypass DNS ...

openSUSE: Security Advisory for nodejs10 (openSUSE-SU-2020:1660-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

en.lagomaggiore.net Cross Site Scripting vulnerability

Security Researcher g0bl1nsec Helped patch 3661 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting en.lagomaggiore.net website and its users. Following...

Debian: Security Advisory (DLA-1660-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM WebSphere Portal XSS Vulnerability (CVE-2018-1660)

The version of IBM WebSphere Portal installed on the remote Windows host is affected by a cross-site scripting vulnerability. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid117937; scriptversion"1.4"; scriptcvsdate"Date: 2019/11/01"; scriptcveid"CVE-2018-1660";...

CVE-2018-1660

IBM WebSphere Portal versions 7.0, 8.0, 8.5, and 9.0 are affected by a cross-site scripting vulnerability (CVE-2018-1660) that allows embedding arbitrary JavaScript in the Web UI and may lead to credentials disclosure within a trusted session. Root cause: XSS in the portal’s Web UI. Impact: poten...

Oracle Linux 6 : qemu-kvm (ELSA-2018-1660)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-1660 advisory. - qemu-kvm-i386-define-the-ssbd-CPUID-feature-bit-CVE-2018-3639.patch bz1574067 Tenable has extracted the preceding description block directly from the Oracle...

RHEL 6 : qemu-kvm (RHSA-2018:1660)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:1660 advisory. - hw: cpu: speculative store bypass CVE-2018-3639 Note that Nessus has not tested for this issue but has instead relied only on the application's...

Important: Red Hat Security Advisory: qemu-kvm security update

An update for qemu-kvm is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...