CVE-2020-25096

creationtimestamp| type| source ---|---|--- 2020-12-17 07:42:35+00:00| seen| https://t.me/cibsecurity/20985 2020-12-26 14:01:51+00:00| seen| https://t.me/CyberSecurityTechnologies/2369...

CVE-2020-25094

creationtimestamp| type| source ---|---|--- 2020-12-17 07:42:32+00:00| seen| https://t.me/cibsecurity/20982 2020-12-26 14:01:51+00:00| seen| https://t.me/CyberSecurityTechnologies/2369...

Cannot Complete Your Request Error only occurs to certain users connecting from ADC with Azure MFA over to Storefront

Certain users are receiving Cannot Complete Your Request Error when accessing site via ADC url and after entering their Azure MFA credentials and user is redirected to Storefront's URL, then the error is observed. On the Storefront Server we see the following Event: Log Name: Citrix Delivery...

Design/Logic Flaw

An issue was discovered in Xen through 4.14.x. Neither xenstore implementation does any permission checks when reporting a xenstore watch event. A guest administrator can watch the root xenstored node, which will cause notifications for every created, modified, and deleted key. A guest...

UBUNTU-CVE-2020-29480

An issue was discovered in Xen through 4.14.x. Neither xenstore implementation does any permission checks when reporting a xenstore watch event. A guest administrator can watch the root xenstored node, which will cause notifications for every created, modified, and deleted key. A guest...

ALPINE-CVE-2020-29568

An issue was discovered in Xen through 4.14.x. Some OSes such as Linux, FreeBSD, and NetBSD are processing watch events using a single thread. If the events are received faster than the thread is able to handle, they will get queued. As the queue is unbounded, a guest may be able to trigger an OO...

CVE-2020-29568

An issue was discovered in Xen through 4.14.x. Some OSes such as Linux, FreeBSD, and NetBSD are processing watch events using a single thread. If the events are received faster than the thread is able to handle, they will get queued. As the queue is unbounded, a guest may be able to trigger an OO...

DEBIAN-CVE-2020-29568

An issue was discovered in Xen through 4.14.x. Some OSes such as Linux, FreeBSD, and NetBSD are processing watch events using a single thread. If the events are received faster than the thread is able to handle, they will get queued. As the queue is unbounded, a guest may be able to trigger an OO...

CVE-2020-29568

An issue was discovered in Xen through 4.14.x. Some OSes such as Linux, FreeBSD, and NetBSD are processing watch events using a single thread. If the events are received faster than the thread is able to handle, they will get queued. As the queue is unbounded, a guest may be able to trigger an OO...

UBUNTU-CVE-2020-29568

An issue was discovered in Xen through 4.14.x. Some OSes such as Linux, FreeBSD, and NetBSD are processing watch events using a single thread. If the events are received faster than the thread is able to handle, they will get queued. As the queue is unbounded, a guest may be able to trigger an OO...

CVE-2020-29568

CVE-2020-29568 affects Xen frontends/backends (Xen 4.14.x and older) where watch events are processed by a single thread. If events arrive faster than handling, the unbounded queue can exhaust backend memory, allowing a guest to trigger an OOM in the dom0 backend. The Xen issue is described in mu...

CVE-2020-29568

An issue was discovered in Xen through 4.14.x. Some OSes such as Linux, FreeBSD, and NetBSD are processing watch events using a single thread. If the events are received faster than the thread is able to handle, they will get queued. As the queue is unbounded, a guest may be able to trigger an OO...

CVE-2020-29568

An issue was discovered in Xen through 4.14.x. Some OSes such as Linux, FreeBSD, and NetBSD are processing watch events using a single thread. If the events are received faster than the thread is able to handle, they will get queued. As the queue is unbounded, a guest may be able to trigger an OO...

Input validation

In createInputConsumer of WindowManagerService.java, there is a possible way to block and intercept input events due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

CVE-2020-0475

In createInputConsumer of WindowManagerService.java, there is a possible way to block and intercept input events due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

CVE-2020-29568

An issue was discovered in Xen through 4.14.x. Some OSes such as Linux, FreeBSD, and NetBSD are processing watch events using a single thread. If the events are received faster than the thread is able to handle, they will get queued. As the queue is unbounded, a guest may be able to trigger an OO...

Xen License Issues Vulnerability

Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. A security vulnerability exists in Xen throu...

Unbreakable Enterprise kernel security update

5.4.17-2036.101.2uek - vt: Disable KDFONTOPCOPY Daniel Vetter Orabug: 32187738 CVE-2020-28974 - pagefrag: Recover from memory pressure Dongli Zhang Orabug: 32177966 - Fonts: Support FONTEXTRAWORDS macros for built-in fonts Peilin Ye Orabug: 32176254 CVE-2020-28915 - fbdev, newportcon: Move...

CVE-2020-29511

creationtimestamp| type| source ---|---|--- 2020-12-14 22:39:27+00:00| seen| https://t.me/cibsecurity/20768 2022-06-29 03:35:24+00:00| seen| https://t.me/CyberSecurityTechnologies/2330...

Unbreakable Enterprise kernel security update

4.14.35-2025.403.3 - RDMA/umem: Move to allocate SG table from pages Maor Gottlieb Orabug: 32005117 - lib/scatterlist: Add support in dynamic allocation of SG table from pages Maor Gottlieb Orabug: 32005117 - lib/scatterlist: Add SGCHAIN and SGEND macros for LSB encodings Anshuman Khandual Orabug...