CentOS 8 : icedtea-web (CESA-2019:2004)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:2004 advisory. - icedtea-web: unsigned code injection in a signed JAR file CVE-2019-10181 - icedtea-web: path traversal while processing elements of JNLP files result...

Exploit for CVE-2020-1034

This is a PoC Proof of Concept exploit for CVE-2020-1034, a vulnerability discovered by Microsoft and fixed on August 9, 2020. The exploit targets an unpatched Windows 10 2004, build 19041.488. The exploit code is written in C++ and uses the Windows API to manipulate the system's Event Tracing fo...

CVE-2021-2004

creationtimestamp| type| source ---|---|--- 2021-01-20 18:37:46+00:00| seen| https://t.me/cibsecurity/22392...

CVE-2021-2004

Vulnerability in the Siebel Core - Server BizLogic Script product of Oracle Siebel CRM component: Integration - Scripting. Supported versions that are affected are 20.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Co...

2021-01 Dynamic Cumulative Update for Windows 10 Version 2004 for x86-based Systems (KB4598242)

ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...

2021-01 Dynamic Cumulative Update for Windows 10 Version 2004 for x64-based Systems (KB4598242)

ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...

2021-01 Cumulative Update for Windows 10 Version 2004 for x86-based Systems (KB4598242)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

Microsoft Hyper-V Security Vulnerability

Microsoft Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization. A security vulnerability exists in Microsoft Hyper-V. The following products and versions are affected:Windows Server, version 2004 Server Core...

Microsoft Projected File System Information Disclosure Vulnerability

Microsoft Projected File System is an application system from Microsoft USA. It projects hierarchical data into the file system so that it appears as files and directories in the file system. An information disclosure vulnerability exists in the Windows Projected File System FS Filter Driver, no...

Servicing stack update for Windows 10, version 2004 and 20H2: January 12, 2021

None None...

Microsoft Windows DNS Information Disclosure Vulnerability

Microsoft Windows DNS is a domain name resolution service from Microsoft. The Domain Name System DNS is one of the industry-standard suite of protocols that encompasses TCP/IP, and DNS clients and DNS servers work together to provide name resolution services for computers and users that map...

Microsoft Windows Event Tracing Security Vulnerability

Microsoft Windows Event Tracing is an application from Microsoft Corporation USA. It provides a mechanism for tracking and logging events raised by user-mode applications and kernel-mode drivers. A security vulnerability exists in Microsoft Windows Event Tracing, for which no information is...

Microsoft Windows AppX Deployment Extensions Security Vulnerability

Microsoft Windows AppX Deployment Extensions is an AppX Deployment Extensions DLL from Microsoft Corporation USA that is part of the Microsoft Windows operating system. A security vulnerability exists in Microsoft Windows AppX Deployment Extensions. The following products and editions are...

Microsoft Projected File System Information Disclosure Vulnerability

Microsoft Projected File System is an application system from Microsoft USA. Projects hierarchical data into the file system so that it appears as files and directories in the file system. An information disclosure vulnerability exists in Microsoft Projected File System. The following products an...

Setup Dynamic Update for Windows 10, version 2004 and 20H2: January 12, 2021

None None...

Microsoft Windows Bluetooth Service Security Vulnerability

Microsoft Windows Bluetooth Service is a Bluetooth driver from Microsoft. A security vulnerability exists in Microsoft Windows Bluetooth Service. No information about this vulnerability is available at this time, so please stay tuned to CNNVD or the vendor's announcement. The following products a...

Microsoft Diagnostics Hub Standard Collector Service Control Error Vulnerability

Microsoft Diagnostics Hub Standard Collector Service is a Win32 service from Microsoft USA. It is used to collect real-time ETW events and process them. An access control error vulnerability exists in Microsoft Diagnostics Hub Standard Collector Service. The following products and versions are...

Microsoft Windows Bluetooth Service Security Vulnerability

Microsoft Windows Bluetooth Service is a Bluetooth driver from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Bluetooth Service. The following products and versions are affected:Windows Server, version 1909 Server Core installation,Windows 10 Version 1909 for...

Backdoor.Win32.NinjaSpy.c Remote Stack Buffer Overflow

Discovery / credits: malvuln - Malvuln.com c 2021 Original source: https://malvuln.com/advisory/6eece319bc108576bd1f4a8364616264.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.NinjaSpy.c Vulnerability: Remote Stack Buffer Overflow Description: The specimen drop...

2020-12 Dynamic Cumulative Update for Windows 10 Version 2004 for ARM64-based Systems (KB4592438)

ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...