KLA12029 Multiple vulnerabilities in Mozilla Firefox

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, spoof user interface, cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A securit...

xorg-x11-server: Leak of uninitialized heap memory from the X server to clients in AllocatePixmap of dix/pixmap.c

A flaw was found in the way the Xserver memory was not properly initialized. This issue leak parts of server memory to the X client. In cases where the Xorg server runs with elevated privileges, this flaw results in a possible ASLR bypass...

CVE-2020-4849

IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.19 Interim Fix 7 could allow a remote attacker to bypass security restrictions, caused by a reverse tabnabbing flaw. An attacker could exploit this vulnerability and redirect a vitcim to a phishing site. IBM X-Force ID: 190294...

CVE-2020-17130

Microsoft Excel Security Feature Bypass Vulnerability...

CVE-2020-17099

Windows Lock Screen Security Feature Bypass Vulnerability...

Security feature bypass

Windows Overlay Filter Security Feature Bypass Vulnerability...

Security feature bypass

Microsoft Excel Security Feature Bypass Vulnerability...

KLA12059 Multiple vulnerabilities in Cisco Jabber

Multiple vulnerabilities were found in Cisco Jabber. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A command injection vulnerability in Cisco Jabber can be...

IBM HTTP Server 9.0.0.0 < 9.0.0.11 Security Bypass (869064)

The version of IBM HTTP Server running on the remote host is affected by a vulnerability related to Apache HTTP Server. In Apache HTTP Server 2.4 release 2.4.37 and prior, modsession checks the session expiry time before decoding the session. This causes session expiry time to be ignored for...

CVE-2020-17130 Microsoft Excel Security Feature Bypass Vulnerability

...

CVE-2020-17002 Azure SDK for C Security Feature Bypass Vulnerability

...

CVE-2020-16996 Kerberos Security Feature Bypass Vulnerability

...

Security Bulletin: Potential vulnerability with Node.js

Summary A potential vulnerability has been identified related to Node.js. Refer to details for additional information. Vulnerability Details CVEID: CVE-2020-11080 DESCRIPTION: Node.js is vulnerable to a denial of service, caused by an error in the HTTP/2 session frame which is limited to 32...

CVE-2020-7337

Incorrect Permission Assignment for Critical Resource vulnerability in McAfee VirusScan Enterprise VSE prior to 8.8 Patch 16 allows local administrators to bypass local security protection through VSE not correctly integrating with Windows Defender Application Control via careful manipulation of...

Windows Overlay Filter Security Feature Bypass Vulnerability

...

Kerberos Security Feature Bypass Vulnerability

...

Microsoft Windows Backup Engine Security Vulnerability

Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. A security vulnerability exists in Microsoft Windows Backup Engine that originates from an application that does not properly impose security restrictions in Windows Backup Engine, which coul...

KLA12021 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges. Below is a complete list of vulnerabilities: 1. A security feature bypass vulnerability in Azure SDK for Java can be exploited remotely to...

Microsoft Windows Backup Engine Access Control Error Vulnerability

Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. An Access Control Error vulnerability exists in Microsoft Windows Backup Engine that stems from an application not properly imposing security restrictions in Windows Backup Engine, which coul...

KB4592495: Windows 8.1 and Windows Server 2012 R2 December 2020 Security Update

The remote Windows host is missing security update 4592495 or cumulative update 4592484. It is, therefore, affected by multiple vulnerabilities: - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2020-17098, CVE-2020-17140 - ...