CVE-2020-29284

creationtimestamp| type| source ---|---|--- 2020-12-03 00:55:22+00:00| seen| https://t.me/cibsecurity/17064...

Moderate: Red Hat Security Advisory: microcode_ctl security, bug fix, and enhancement update

An update for microcodectl is now available for Red at Enterprise Linux 7.7 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

PT-2020-16578

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 83 Description The issue arises when the Remote Debugging via USB feature is enabled in Firefox for Android on Android versions prior to 6.0, allowing untrusted apps to connect and operate with browser privileges, thu...

new module: perl:5.30

An update is available for perl-Pod-Perldoc, perl-DBI, perl-Pod-Escapes, perl-Devel-PPPort, perl-Pod-Usage, perl-Sub-Exporter, perl-perlfaq, perl-Object-HashBase, perl-CPAN-Meta-YAML, perl-Digest, perl-podlators, perl-bignum, perl-Text-ParseWords, perl-Text-Template, perl-DBD-MySQL, perl-Text-Glo...

PT-2020-4550

Name of the Vulnerable Software and Affected Versions Oracle Hospitality RES 3700 version 5.7 Description The issue is related to insufficient input validation in the CAL component of Oracle Hospitality RES 3700, allowing an unauthenticated attacker with network access via TCP to compromise the...

CVE-2020-16954

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...

CVE-2020-13940

In Apache NiFi 1.0.0 to 1.11.4, the notification service manager and various policy authorizer and user group provider objects allowed trusted administrators to inadvertently configure a potentially malicious XML file. The XML file has the ability to make external calls to services via XXE...

UBUNTU-CVE-2020-13324

A vulnerability was discovered in GitLab versions prior to 13.1. Under certain conditions the private activity of a user could be exposed via the API...

PT-2020-4033 · Microsoft · Office +3

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Microsoft Office Online Server affected versions not specified Microsoft Office affected versions not specified Microsoft SharePoint Server affected versions not specified Description: A remote...

Vulnerabilities fixed in Red Hat JBoss Enterprise Application Platform

Vulnerabilities have been fixed in JBoss Enterprise Application Platform. The vulnerabilities allow a malicious party to execute attacks that result in the following categories of damage: Denial-of-Service DoS Circumvention of security measure Remote code execution User Rights SQL Injection Red H...

Red Hat keycloak resource management error vulnerability

Red Hat Keycloak is a suite of software from Red Hat, Inc. that provides authentication and management capabilities for modern applications and services. A resource management error vulnerability exists in Red Hat keycloak. The vulnerability stems from a networked system or product that improperl...

CVE-2020-14612

Vulnerability in the PeopleSoft Enterprise HRMS product of Oracle PeopleSoft component: Time and Labor. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HRMS. Successful...

Design/Logic Flaw

Vulnerability in the Hyperion Financial Close Management product of Oracle Hyperion component: Close Manager. The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Financial Close...

CVE-2017-7391

creationtimestamp| type| source ---|---|--- 2020-05-19 08:35:02+00:00| exploited| https://t.me/SecLabNews/7612...

The vulnerability of the Miscellaneous sub-component of the Oracle Scripting component in the Oracle E-Business Suite allows a perpetrator to gain access to and modify data.

The vulnerability of the Miscellaneous sub-component of the Oracle Scripting component in the Oracle E-Business Suite exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker, operating remotely, to gain access to read, modify, add, or delete data...

CVE-2020-11685

In JetBrains GoLand before 2019.3.2, the plugin repository was accessed via HTTP instead of HTTPS...

Vulnerability of the Server component: The Audit Log of the MySQL database management system, which allows a hacker to cause a service failure.

The vulnerability of the Server component: The Audit Log of the MySQL database management system is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to cause service interruptions using specially crafted network packets...

CVE-2020-10863

An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service AvastSvc.exe allows attackers to trigger a shutdown via RPC from a Low Integrity process via TempShutDownMachine...

CVE-2020-9324

Aquaforest TIFF Server 4.0 allows Unauthenticated SMB Hash Capture via UNC...

Nagios Log Server Cross-Site Request Forgery Vulnerability

Nagios Log Server is a powerful enterprise-grade log monitoring and management application that allows organizations to quickly and easily view, sort, and configure logs from any source on any given network. A cross-site request forgery vulnerability exists in Nagios Log Server 2.1.3. An attacker...