2241 matches found
CVE-2019-7357
creationtimestamp| type| source ---|---|--- 2020-11-10 22:27:56+00:00| seen| https://t.me/cibsecurity/16126...
CVE-2020-27017
creationtimestamp| type| source ---|---|--- 2020-11-06 12:36:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2051...
DEBIAN-CVE-2020-15975
Integer overflow in SwiftShader in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
OPENSUSE-SU-2020:1814-1 Security update for singularity
This update for singularity fixes the following issues: Update to new version 3.6.4: - CVE-2020-15229: Due to insecure handling of path traversal and the lack of path sanitization within unsquashfs, it is possible to overwrite/create files on the host filesystem during the extraction of a crafted...
CVE-2020-14895
creationtimestamp| type| source ---|---|--- 2020-10-21 19:04:39+00:00| seen| https://t.me/cibsecurity/15481...
Setup Dynamic Update for Windows 10, version 2004: October 13, 2020
None None...
CVE-2020-5132
creationtimestamp| type| source ---|---|--- 2020-09-30 12:51:47+00:00| seen| https://t.me/cibsecurity/14946...
adapt-diagnostics (=1.2.0), adversarial-friend (=1.1.8) +64 more potentially affected by CVE-2020-15199 via tensorflow (=2.3.0)
tensorflow PYPI version =2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - adapt-diagnostics =1.2.0 - adversarial-friend =1.1.8 - aliby-baby =0.1.0, =0.0.1a0, =0.0.1, =1.0.1.0, =0.1.0, =2.0.0, =0.1.0, =0.0.17, =0.1...
OPENSUSE-SU-2020:1497-1 Security update for singularity
This update for singularity fixes the following issues: New version 3.6.3, addresses the following security issues: - CVE-2020-25039, boo1176705 When a Singularity action command run, shell, exec is run with the fakeroot or user namespace option, Singularity will extract a container image to a...
September 3, 2020-KB4570721 Cumulative Update Preview for .NET Framework 3.5 and 4.8 for Windows 10 Version 2004
None None...
CVE-2020-9722
Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have an use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution...
Anhui Hope Network Technology Co., Ltd. website building system suffers from SQL injection vulnerabilities (CNVD-2020-48244)
Anhui Hope Network Technology Co., Ltd. is an Internet basic product service provider mainly engaged in website construction, network promotion and network marketing. Anhui Hope Network Technology Co., Ltd. website building system has SQL injection vulnerability, attackers can use the vulnerabili...
DEBIAN-CVE-2020-6070
An exploitable code execution vulnerability exists in the file system checking functionality of fsck.f2fs 1.12.0. A specially crafted f2fs file can cause a logic flaw and out-of-bounds heap operations, resulting in code execution. An attacker can provide a malicious file to trigger this...
ALPINE-CVE-2020-11984
Apache HTTP server 2.4.32 to 2.4.44 modproxyuwsgi info disclosure and possible RCE...
3dcore-lib (=0.17.9), 42-cli (>=1.0.0 <=1.0.4) +2488 more potentially affected by CVE-2020-13822 via elliptic (>=0.10.2 <=6.5.2)
elliptic NPM version =0.10.2, =1.0.0, =1.0.0, =0.1.0, =0.0.0-alpha8, =2.0.0, =2.0.0, =1.0.0, =1.5.1, =2.0.0, =0.0.0-alpha8, =0.0.0-alpha8, =0.0.0-alpha8, =0.0.0-alpha8, =0.0.0-alpha8, =2.1.1 and more Source cves: CVE-2020-13822 Source advisory: OSV:GHSA-VH7M-P724-62C2...
CVE-2020-14500
creationtimestamp| type| source ---|---|--- 2020-07-29 13:18:51+00:00| seen| https://t.me/thehackernews/786 2020-07-29 18:15:25+00:00| seen| https://t.me/truesecator/802 2020-07-29 21:40:39+00:00| seen| https://t.me/YemenShield/120 2020-07-31 07:51:27+00:00| seen| https://t.me/cKure/1568...
CVE-2020-10600
An authenticated remote attacker could crash PI Archive Subsystem when the subsystem is working under memory pressure. This can result in blocking queries to PI Data Archive 2018 SP2 and prior versions...
CVE-2020-9437
SecureAuth.aspx in SecureAuth IdP 9.3.0 suffers from a client-side template injection that allows for script execution, in the same manner as XSS...