The vulnerability of the command-line interface of Cisco IOS XR routers from the Network Convergence System 540 Series and Cisco 8000 Series allows a attacker to elevate their privileges to the root level.

The vulnerability of the command-line interface of Cisco IOS XR routers from the Network Convergence System 540 Series and Cisco 8000 Series exists due to the lack of measures taken to neutralize the special elements used in the operating system’s command. Exploiting this vulnerability can allow...

CVE-2020-28392

creationtimestamp| type| source ---|---|--- 2021-02-09 20:46:42+00:00| seen| https://t.me/cibsecurity/23319...

Microsoft Windows Security Vulnerabilities

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation. A security vulnerability exists in Microsoft Windows. The following products and editions are affected: Windows 10 Version 20H2 for x64-based Systems,Windows 10 Version 20H2 fo...

CVE-2021-1244

Multiple vulnerabilities in Cisco Network Convergence System NCS 540 Series Routers, only when running Cisco IOS XR NCS540L software images, and Cisco IOS XR Software for the Cisco 8000 Series Routers could allow an authenticated, local attacker to execute unsigned code during the boot process on...

Multiple Cisco Products Data Forgery Issue Vulnerabilities

The Cisco 8000 Series Router and the Cisco Network Convergence System 540 Series Routers are both router devices from Cisco USA. A data forgery issue vulnerability exists in Cisco IOS XR on multiple Cisco routers. The vulnerability is caused due to an unlocked version of the GRUB bootloader on th...

CVE-2020-8672

Out of bound read in BIOS firmware for 8th, 9th Generation IntelR CoreTM, IntelR CeleronR Processor 4000 Series Processors may allow an unauthenticated user to potentially enable elevation of privilege or denial of service via local access...

CVE-2020-8101

creationtimestamp| type| source ---|---|--- 2021-02-02 15:25:04+00:00| seen| https://t.me/cibsecurity/22938...

February 2, 2021-KB4598299 Cumulative Update Preview for .NET Framework 3.5 and 4.8 for Windows 10, version 2004, Windows Server, version 2004, Windows 10, version 20H2, and Windows Server, version 20H2

None None...

CVE-2020-24670

creationtimestamp| type| source ---|---|--- 2021-01-29 23:25:18+00:00| seen| https://t.me/cibsecurity/22861...

CVE-2020-23360

creationtimestamp| type| source ---|---|--- 2021-01-27 18:37:44+00:00| seen| https://t.me/cibsecurity/22725...

OPENSUSE-SU-2021:0176-1 Security update for python-autobahn

This update for python-autobahn fixes the following issue: - CVE-2020-35678: Fixed a redirect header injection boo1180570. This update was imported from the openSUSE:Leap:15.1:Update update project. This update was imported from the openSUSE:Leap:15.2:Update update project...

CVE-2020-27274

creationtimestamp| type| source ---|---|--- 2021-01-26 22:36:23+00:00| seen| https://t.me/cibsecurity/22670...

UBUNTU-CVE-2021-26272

It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted URL-like text into the editor, and then press Enter or Space in the Autolink plugin...

CVE-2021-0203

On Juniper Networks EX and QFX5K Series platforms configured with Redundant Trunk Group RTG, Storm Control profile applied on the RTG interface might not take affect when it reaches the threshold condition. Storm Control enables the device to monitor traffic levels and to drop broadcast, multicas...

CVE-2021-23838

creationtimestamp| type| source ---|---|--- 2021-01-15 12:50:40+00:00| seen| https://t.me/cibsecurity/22197...

CVE-2021-1145

A vulnerability in the Secure FTP SFTP of Cisco StarOS for Cisco ASR 5000 Series Routers could allow an authenticated, remote attacker to read arbitrary files on an affected device. To exploit this vulnerability, the attacker would need to have valid credentials on the affected device. The...

Microsoft Windows WalletService Access Control Error Vulnerability

Microsoft Windows WalletService is an application from Microsoft Corporation USA. hosts objects used by the Wallet Client. An access control error vulnerability exists in Microsoft Windows WalletService. The following products and versions are affected:Windows 10 Version 1607 for x64-based...

Microsoft Windows Security Vulnerabilities

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in the Windows Event Logging Service. The following products and editions are affected:Windows 10 Version 20H2 for x64-based...

Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 8.1, RT 8.1, and Windows Server 2012 R2 (KB4598502)

Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 8.1, RT 8.1, and Windows Server 2012 R2 KB4598502 Applies to: Microsoft .NET Framework 3.5 Microsoft .NET Framework 4.5.2 Microsoft .NET Framework 4.6 Microsoft .NET Framework 4.6.1...

Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 (KB4598501)

Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 KB4598501 Applies to: Microsoft .NET Framework 3.5 Microsoft .NET Framework 4.5.2 Microsoft .NET Framework 4.6 Microsoft .NET Framework 4.6.1 Microsoft .NET Framework 4.6.2...