CVE-2020-8278

creationtimestamp| type| source ---|---|--- 2020-11-19 07:41:03+00:00| seen| https://t.me/cibsecurity/16572...

The vulnerability of the Windows Common Log File System Driver in the Windows operating system allows a hacker to increase their privileges.

The vulnerability of the Windows Common Log File System Driver component of the operating system is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to enhance their privileges...

fence security update

CentOS Errata and Security Advisory CESA-2020:5003 An update for fence-agents is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

CVE-2020-28692

creationtimestamp| type| source ---|---|--- 2020-11-16 20:38:06+00:00| seen| https://t.me/cibsecurity/16389...

Remote Code Execution

dependabot-common is vulnerable to remote code execution. An attacker is able to inject arbitrary Shell commands via a branch name URL during cloning of the source repository...

CVE-2020-13638

creationtimestamp| type| source ---|---|--- 2020-11-13 22:33:58+00:00| seen| https://t.me/cibsecurity/16323 2024-12-29 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-12-29 2025-01-07 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities -...

CVE-2020-6150

creationtimestamp| type| source ---|---|--- 2020-11-13 18:33:58+00:00| seen| https://t.me/cibsecurity/16304...

CVE-2020-25557

creationtimestamp| type| source ---|---|--- 2020-11-13 18:33:51+00:00| seen| https://t.me/cibsecurity/16297...

Remote Code Execution (RCE)

Overview dependabot-common is an Automated dependency management. Affected versions of this package are vulnerable to Remote Code Execution RCE by cloning source branch containing malicious injectable bash code. Remediation Upgrade dependabot-common to version 0.125.1 or higher. References - GitH...

CVE-2020-15783

creationtimestamp| type| source ---|---|--- 2020-11-12 22:32:11+00:00| seen| https://t.me/cibsecurity/16264...

BELL-CVE-2020-8695 CVE-2020-8695 does not affect BellSoft software

Bulletin has no description...

14 bug fix and enhancement update

An update is available for nodejs-nodemon, nodejs-packaging. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Node.js is a software development platform for...

Microsoft Windows/Windows Server Elevation of Privilege Vulnerability (CNVD-2021-90796)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server, a server operating system. An elevation of privilege vulnerability exists in the Common Log File System driver in Microsoft...

Microsoft Releases Windows Security Updates For Critical Flaws

Microsoft formally released fixes for 112 newly discovered security vulnerabilities as part of its November 2020 Patch Tuesday, including an actively exploited zero-day flaw disclosed by Google's security team last week. The rollout addresses flaws, 17 of which are rated as Critical, 93 are rated...

CVE-2020-17088

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2020-17088

CVE-2020-17088 is a Windows elevation-of-privilege vulnerability in the Common Log File System (CLFS) driver. The connected CNVD entry explicitly attributes an EoP issue to the CLFS component in Microsoft Windows/Windows Server, indicating a local attacker could exploit it to compromise confident...

The vulnerability of the authentication function of Cisco Firepower Management Center’s network management software allows a perpetrator to bypass the authentication process and gain access to the FMC system.

The vulnerability of the Common Access Card authentication function in Cisco Firepower Management Center FMC software is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass the authentication process and gain access to the FMC...

CentOS: Security Advisory for xorg-x11-server-common (CESA-2020:4953)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

KLA12003 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, execute arbitrary code, cause denial of service, spoof user interface, bypass security restrictions. Below is a...

KB4586785: Windows 10 Version 1803 November 2020 Security Update

The Microsoft 4586785 Product is missing security updates. - Remote Desktop Protocol Server Information Disclosure Vulnerability CVE-2020-16997 - DirectX Elevation of Privilege Vulnerability CVE-2020-16998 - Windows WalletService Information Disclosure Vulnerability CVE-2020-16999 - Remote Deskto...