4328 matches found
CVE-2020-1026
A Security Feature Bypass vulnerability exists in the MSR JavaScript Cryptography Library that is caused by multiple bugs in the library’s Elliptic Curve Cryptography ECC implementation.An attacker could potentially abuse these bugs to learn information about a server’s private ECC key a key...
CVE-2020-0981
A security feature bypass vulnerability exists when Windows fails to properly handle token relationships.An attacker who successfully exploited the vulnerability could allow an application with a certain integrity level to execute code at a different integrity level, leading to a sandbox escape.T...
Security feature bypass
A security feature bypass vulnerability exists when Windows fails to properly handle token relationships.An attacker who successfully exploited the vulnerability could allow an application with a certain integrity level to execute code at a different integrity level, leading to a sandbox escape.T...
CVE-2020-1026
A Security Feature Bypass vulnerability exists in the MSR JavaScript Cryptography Library that is caused by multiple bugs in the library’s Elliptic Curve Cryptography ECC implementation.An attacker could potentially abuse these bugs to learn information about a server’s private ECC key a key...
CVE-2020-1026
The CVE-2020-1026 issue affects the MSR JavaScript Cryptography Library’s ECC implementation. It results from multiple bugs in ECC code, enabling an attacker to potentially leak a server’s private ECC key (key leakage attack) or craft an invalid ECDSA signature that passes as valid. The vulnerabi...
Security feature bypass
Exploiting incorrectly configured access control security levels vulnerability in ENS Firewall in McAfee Endpoint Security ENS for Windows prior to 10.7.0 April 2020 and 10.6.1 April 2020 updates allows remote attackers and local users to allow or block unauthorized traffic via pre-existing rules...
MSR JavaScript Cryptography Library Security Feature Bypass Vulnerability
A Security Feature Bypass vulnerability exists in the MSR JavaScript Cryptography Library that is caused by multiple bugs in the library’s Elliptic Curve Cryptography ECC implementation. An attacker could potentially abuse these bugs to learn information about a server’s private ECC key a key...
NLB cluster communication gets interrupted when MAC impersonation security feature is enabled in Windows Server 2012 R2
NLB cluster communication gets interrupted when MAC impersonation security feature is enabled in Windows Server 2012 R2 This article describes a problem in which Network Load Balancing NLB cluster communication gets interrupted randomly in Windows Server 2012 R2. An update is available to fix thi...
Firefox enables DNS-over-HTTPS by default (with Cloudflare) for all U.S. users
If you use the Firefox web browser, here's an important update that you need to be aware of. Starting today, Mozilla is activating the DNS-over-HTTPS security feature by default for all Firefox users in the U.S. by automatically changing their DNS server configuration in the settings. That means,...
Microsoft Outlook Security Feature Bypass Vulnerability
Microsoft Outlook is a suite of e-mail applications from Microsoft Corporation in the United States. A security feature bypass vulnerability exists in Microsoft Outlook, which can be exploited by a remote attacker to submit a special request that can bypass the security feature and, in combinatio...
Microsoft Windows Secure Boot Security Feature Bypass Vulnerability (CNVD-2020-16651)
Microsoft Windows is a popular operating system. A security feature bypass vulnerability exists in Microsoft Windows Secure Boot, which allows remote attackers to exploit the vulnerability to submit a special application request that can bypass Secure Boot and load untrusted software...
CVE-2020-7251 ESConfig Tool able to edit configuration for newer version
Improper access control vulnerability in Configuration Tool in McAfee Mcafee Endpoint Security ENS Prior to 10.6.1 February 2020 Update allows local users to disable security features via unauthorised use of the configuration tool from older versions of ENS...
Security feature bypass
Commerce Skrill Formerly Moneybookers has an Access bypass vulnerability in all versions prior to 7.x-1.2...
Microsoft Outlook 2013 Service Pack 1 Security Feature Bypass Vulnerability (KB4484156)
This host is missing an important security update according to Microsoft KB4484156 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
Microsoft Outlook 2010 Service Pack 2 Security Feature Bypass Vulnerability (KB4484163)
This host is missing an important security update according to Microsoft KB4484163 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
Microsoft Outlook 2016 Security Feature Bypass Vulnerability (KB4484250)
This host is missing an important security update according to Microsoft KB4484250 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
CVE-2020-0702
A security feature bypass vulnerability exists in Surface Hub when prompting for credentials, aka 'Surface Hub Security Feature Bypass Vulnerability'...
CVE-2020-0696
A security feature bypass vulnerability exists in Microsoft Outlook software when it improperly handles the parsing of URI formats, aka 'Microsoft Outlook Security Feature Bypass Vulnerability'...