4332 matches found
Design/Logic Flaw
Kirby is a CMS. In Kirby CMS getkirby/cms before version 3.3.6, and Kirby Panel before version 2.5.14 there is a vulnerability in which the admin panel may be accessed if hosted on a .dev domain. In order to protect new installations on public servers that don't have an admin account for the Pane...
CVE-2020-26253 .dev domains treated as local in Kirby
Kirby is a CMS. In Kirby CMS getkirby/cms before version 3.3.6, and Kirby Panel before version 2.5.14 there is a vulnerability in which the admin panel may be accessed if hosted on a .dev domain. In order to protect new installations on public servers that don't have an admin account for the Pane...
PT-2020-5234 · Microsoft · Windows Overlay Filter +1
Name of the Vulnerable Software and Affected Versions: Windows Overlay Filter affected versions not specified Description: The issue is related to errors in processing objects in memory within the Windows Overlay Filter component. This can allow an attacker to impact the confidentiality, integrit...
PT-2020-5292 · Microsoft · Azure Sdk For C
Name of the Vulnerable Software and Affected Versions: Azure SDK for C affected versions not specified Description: The issue is related to a security feature bypass vulnerability in the Azure SDK for C, which can be exploited by a remote attacker to impact the confidentiality and integrity of...
KB4592438: Windows 10 Version 2004 December 2020 Security Update
The remote Windows host is missing security update 4592438. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2020-17095, CVE-2020-17096 - An memor...
KB4593226: Windows 10 Version 1607 and Windows Server 2016 December 2020 Security Update
The remote Windows host is missing security update 4593226. It is, therefore, affected by multiple vulnerabilities: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2020-16958, CVE-2020-16959, CVE-2020-16960, CVE-2020-16961, CVE-2020-16962,...
KB4592440: Windows 10 Version 1809 and Windows Server 2019 December 2020 Security Update
The remote Windows host is missing security update 4592440. It is, therefore, affected by multiple vulnerabilities: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2020-16958, CVE-2020-16959, CVE-2020-16960, CVE-2020-16961, CVE-2020-16962,...
KB4592449: Windows 10 Version 1903 and Windows 10 Version 1909 December 2020 Security Update
The remote Windows host is missing security update 4592449. It is, therefore, affected by multiple vulnerabilities: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2020-16958, CVE-2020-16959, CVE-2020-16960, CVE-2020-16961, CVE-2020-16962,...
KB4592497: Windows Server 2012 December 2020 Security Update
The remote Windows host is missing security update 4592497 or cumulative update 4592468. It is, therefore, affected by multiple vulnerabilities: - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2020-17098, CVE-2020-17140 - ...
Security Updates for Microsoft Excel Products (December 2020)
The Microsoft Excel Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2020-17123, CVE-2020-17125,...
KLA12023 Multiple vulnerabilities in Microsoft Office
Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface, obtain sensitive information, bypass security restrictions, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code...
KB4592464: Windows 10 December 2020 Security Update
The remote Windows host is missing security update 4592464. It is, therefore, affected by multiple vulnerabilities: - A security feature bypass vulnerability exists. An attacker can exploit this and bypass the security feature and perform unauthorized actions compromising the integrity of the...
Kirby Access Control Error Vulnerability
Kirby is a file-based content management system CMS. A security vulnerability exists in Kirby CMS versions prior to 3.3.6 and Kirby Panel versions prior to 2.5.14, which stems from the fact that the admin panel may be accessible if hosted in a .dev domain. To protect new installations on public...
Linux kernel security feature issue vulnerability
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from a security signature issue vulnerability that stems from allowing rapid scanning of open UDP ports. An attacker could exploit the vulnerability to...
CVE-2020-17090
Microsoft Defender for Endpoint Security Feature Bypass Vulnerability...
CVE-2020-17067
Microsoft Excel Security Feature Bypass Vulnerability...
CVE-2020-17040
Windows Hyper-V Security Feature Bypass Vulnerability...
CVE-2020-17040
Windows Hyper-V Security Feature Bypass Vulnerability...