CVE-2020-13166

creationtimestamp| type| source ---|---|--- 2020-05-22 16:03:00+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/pleskmylittleadminviewstate.rb 2020-05-25 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/48513 2022-12-09...

Dell EMC Isilon OneFS Security Feature Issue Vulnerability (CNVD-2020-31248)

Dell EMC Isilon OneFS is a horizontally scalable storage system for unstructured data from Dell USA. A security vulnerability exists in Dell EMC Isilon OneFS 8.2.2 and earlier versions. The vulnerability can be exploited by an attacker to compromise an affected system with the help of the...

CVE-2019-7192

creationtimestamp| type| source ---|---|--- 2020-05-20 14:15:03+00:00| exploited| https://t.me/SecLabNews/7629 2020-05-23 19:40:04+00:00| published-proof-of-concept| https://t.me/cKure/629 2020-05-25 13:10:20+00:00| published-proof-of-concept| Telegram/cTUTNxLsVbqKX6WOWINdC5vNap5JntgN7QaLpOvlkc1T...

CVE-2017-7391

creationtimestamp| type| source ---|---|--- 2020-05-19 08:35:02+00:00| exploited| https://t.me/SecLabNews/7612...

CVE-2020-11022

creationtimestamp| type| source ---|---|--- 2020-05-18 18:25:25+00:00| seen| https://t.me/canyoupwnme/6440 2021-09-21 06:42:48+00:00| published-proof-of-concept| https://t.me/pwnwikizhchannel/169 2023-11-25 00:45:50+00:00| seen| Telegram/8ZL5qt-1oGojxv22dU4510g677lxSwyLpoTxQkV3Y42k0 2024-03-09...

CVE-2020-13125

An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in the wild in May 2020 in conjunction with CVE-2020-13126. Unauthenticated attackers can create users with the Subscriber role even if registration is disabled...

CVE-2020-13126

An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild in May 2020 in conjunction with CVE-2020-13125. An attacker with the Subscriber role can upload arbitrary executable files to achieve remote code execution. NOTE: the free Elementor plugin is...

GLSA-202005-12 : OpenSLP: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202005-12 OpenSLP: Multiple vulnerabilities Multiple vulnerabilities have been discovered in OpenSLP. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for detail...

Microsoft Windows and Windows Server Elevation of Privilege Vulnerability (CNVD-2021-61779)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server, a server operating system. An elevation of privilege vulnerability exists in Microsoft Windows and Windows Server, which could be...

Microsoft Windows and Windows Server Elevation of Privilege Vulnerability (CNVD-2021-73134)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server, a server operating system. An elevation of privilege vulnerability exists in the Windows Block Level Backup Engine service wbengine in...

Microsoft Windows and Windows Server Denial of Service Vulnerability (CNVD-2021-71952)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server, a server operating system. A denial-of-service vulnerability exists in Microsoft Windows and Windows Server. The vulnerability stems...

Microsoft Windows and Windows Server Elevation of Privilege Vulnerability (CNVD-2021-61782)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in Microsoft Windows and Windows Server,...

Microsoft Windows and Windows Server Elevation of Privilege Vulnerability (CNVD-2021-61780)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server, a server operating system. An elevation of privilege vulnerability exists in Microsoft Windows and Windows Server, which can be...

CVE-2020-5752

creationtimestamp| type| source ---|---|--- 2020-05-12 18:48:12+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/druvainsyncinsynccphwnet64rcptype5privesc.rb 2020-05-22 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/48505...

Windows Runtime Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in an elevated context. An attacker could exploit this vulnerability by running a specially crafted...

Windows Runtime Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in an elevated context. An attacker could exploit this vulnerability by running a specially crafted...

CVE-2017-9841

creationtimestamp| type| source ---|---|--- 2020-05-08 05:45:08+00:00| seen| https://t.me/codebysec/3014 2020-05-19 14:46:46+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/4263 2021-02-05 21:43:47+00:00| published-proof-of-concept|...

Elementor Pro < 2.9.4 - Authenticated Arbitrary File Upload

According to Jerome Bruandet, from NintechNet, the vulnerability, currently exploited by attackers, allows any logged-in user to upload and execute PHP scripts on the blog. Chloe Chamberland from Wordfence also confirmed the issue and added that "This vulnerability is being used in conjunction wi...

Debian DSA-4673-1 : tomcat8 - security update

Several vulnerabilities were discovered in the Tomcat servlet and JSP engine, which could result in HTTP request smuggling and code execution in the AJP connector disabled by default in Debian. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

Roundcube Webmail < 1.2.10, 1.3.x < 1.3.11, 1.4.x < 1.4.4 Multiple Vulnerabilities

Roundcube Webmail is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:roundcube:webmail"; if...