SUSE-SU-2020:3473-2 Security update for ceph

This update for ceph fixes the following issues: - CVE-2020-25660: Bring back CEPHXV2 authorizer challenges bsc1177843. - Added --container-init feature bsc1177319, bsc1163764 - Made journald as the logdriver again bsc1177933 - Fixes a condition check for copytree, copyfiles, and movefiles in...

CVE-2020-29058

An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, FD1204SN-R2, FD1208S-R2, FD1216S-R1, FD1608GS, FD1608SN, FD1616GS, FD1616SN, and FD8000 devices...

CVE-2020-7556

creationtimestamp| type| source ---|---|--- 2020-11-20 00:42:08+00:00| seen| https://t.me/cibsecurity/16649...

CVE-2020-11831

creationtimestamp| type| source ---|---|--- 2020-11-19 18:41:33+00:00| seen| https://t.me/cibsecurity/16587...

CVE-2020-8278

creationtimestamp| type| source ---|---|--- 2020-11-19 07:41:03+00:00| seen| https://t.me/cibsecurity/16572...

The vulnerability of the Windows Common Log File System Driver in the Windows operating system allows a hacker to increase their privileges.

The vulnerability of the Windows Common Log File System Driver component of the operating system is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to enhance their privileges...

fence security update

CentOS Errata and Security Advisory CESA-2020:5003 An update for fence-agents is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

CVE-2020-28692

creationtimestamp| type| source ---|---|--- 2020-11-16 20:38:06+00:00| seen| https://t.me/cibsecurity/16389...

Remote Code Execution

dependabot-common is vulnerable to remote code execution. An attacker is able to inject arbitrary Shell commands via a branch name URL during cloning of the source repository...

CVE-2020-13638

creationtimestamp| type| source ---|---|--- 2020-11-13 22:33:58+00:00| seen| https://t.me/cibsecurity/16323 2024-12-29 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-12-29 2025-01-07 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities -...

CVE-2020-6150

creationtimestamp| type| source ---|---|--- 2020-11-13 18:33:58+00:00| seen| https://t.me/cibsecurity/16304...

CVE-2020-25557

creationtimestamp| type| source ---|---|--- 2020-11-13 18:33:51+00:00| seen| https://t.me/cibsecurity/16297...

Remote Code Execution (RCE)

Overview dependabot-common is an Automated dependency management. Affected versions of this package are vulnerable to Remote Code Execution RCE by cloning source branch containing malicious injectable bash code. Remediation Upgrade dependabot-common to version 0.125.1 or higher. References - GitH...

CVE-2020-15783

creationtimestamp| type| source ---|---|--- 2020-11-12 22:32:11+00:00| seen| https://t.me/cibsecurity/16264...

BELL-CVE-2020-8695 CVE-2020-8695 does not affect BellSoft software

Bulletin has no description...

14 bug fix and enhancement update

An update is available for nodejs-nodemon, nodejs-packaging. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Node.js is a software development platform for...

Microsoft Windows/Windows Server Elevation of Privilege Vulnerability (CNVD-2021-90796)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server, a server operating system. An elevation of privilege vulnerability exists in the Common Log File System driver in Microsoft...

Microsoft Releases Windows Security Updates For Critical Flaws

Microsoft formally released fixes for 112 newly discovered security vulnerabilities as part of its November 2020 Patch Tuesday, including an actively exploited zero-day flaw disclosed by Google's security team last week. The rollout addresses flaws, 17 of which are rated as Critical, 93 are rated...

CVE-2020-17088

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2020-17088

CVE-2020-17088 is a Windows elevation-of-privilege vulnerability in the Common Log File System (CLFS) driver. The connected CNVD entry explicitly attributes an EoP issue to the CLFS component in Microsoft Windows/Windows Server, indicating a local attacker could exploit it to compromise confident...