July 13, 2021 Public preview security update (KB5004243)

None None...

March 9, 2021—KB5000848 (Monthly Rollup)

None None...

March 9, 2021—KB5000847 (Monthly Rollup)

None None...

Microsoft Windows Multiple Vulnerabilities (KB4592449)

This host is missing a critical security update according to Microsoft KB4592449 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Kerberos KDC の脆弱性 (CVE-2020-17049) に対応するためのガイダンス

マイクロソフトは、2020 年 11 月 10 日 米国時間 に、Kerberos KDC Key Distribution Center に対する脆弱性情報 CVE-2020-17049 を公...

November 19, 2020—KB4594443 (OS Builds 18362.1199 and 18363.1199) Out-of-band

None None...

November 19, 2020—KB4594441 (OS Build 14393.4048) Out-of-band

None None...

November 19, 2020—KB4594440 (OS Builds 19041.631 and 19042.631) Out-of-band

None None...

CVE-2020-17049

creationtimestamp| type| source ---|---|--- 2020-11-18 14:28:35+00:00| seen| https://t.me/BleepingComputer/8566 2020-11-19 11:32:03+00:00| seen| https://t.me/cKure/2902 2020-11-19 17:05:31+00:00| seen| https://t.me/tomhunter/178 2020-11-25 11:20:19+00:00| seen| https://t.me/CyberGovIL/956...

Kerberos authentication and ticket renewal issues on Windows Server 2012 - Out-of-band

Kerberos authentication and ticket renewal issues on Windows Server 2012 - Out-of-band Applies to: Windows Server 2012 Windows Server 2012 Server Core installation NEW 11/17/20 For information about Windows update terminology, see the article about the types of Windows updates and the monthly...

November 17, 2020—KB4594442 (OS Build 17763.1579) Out-of-band

None None...

CVE-2020-17049

A security feature bypass vulnerability exists in the way Key Distribution Center KDC determines if a service ticket can be used for delegation via Kerberos Constrained Delegation KCD. To exploit the vulnerability, a compromised service that is configured to use KCD could tamper with a service...

CVE-2020-17049 Kerberos KDC Security Feature Bypass Vulnerability

...

CVE-2020-17049

CVE-2020-17049 is a Kerberos KDC service-ticket delegation bypass in IBM Application Gateway, enabling a compromised service using Kerberos Constrained Delegation to tamper with service tickets and force KDC acceptance. The vulnerability affects IBM Application Gateway versions 19.12–24.06. IBM’s...

CVE-2020-17049 Kerberos KDC Security Feature Bypass Vulnerability

...

Microsoft Windows Multiple Vulnerabilities (KB4586834)

This host is missing a critical security update according to Microsoft KB4586834 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

KB4586823: Windows 8.1 and Windows Server 2012 R2 November 2020 Security Update

The Windows installation on the remote host is missing security update 4586781. It is, therefore, affected by multiple vulnerabilities. Please review the vendor advisory for more details. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from t...

CVE-2019-17049

NETGEAR SRX5308 vulnerable to SQL Injection in firmware 4.3.5-3. The issue arises from lack of validation of externally supplied SQL statements in database-based applications, enabling an attacker to execute arbitrary SQL and add a new user account (exploit observed in the wild in Sep 2019). Affe...

CVE-2019-17049

NETGEAR SRX5308 4.3.5-3 devices allow SQL Injection, as exploited in the wild in September 2019 to add a new user account...

CVE-2018-17049

CVE-2018-17049 affects CQU-LANKERS up to 2017-11-02. Vulnerability: cross-site scripting (XSS) via the public/api.php callback parameter in the uploadpic action. Root cause: unsanitized callback parameter leading to script injection. Impact: enables injection of client-side scripts (as documented...