8150 matches found
Citrix Virtual Apps and Desktops Security Update
Description of Problem Vulnerabilities havebeen identified in CitrixVirtual Apps and Desktopsthat could, if exploited,result in: An authenticateduserof amulti-sessionWindowsVDA, who has been granted permission to write to c:\ root directory, being able toescalatetheir privilege levelon that...
RED-V Super Digital Signage System RXV-A740R Log Information Disclosure
RED-V Super Digital Signage System RXV-A740R Log Information Disclosure Vendor: RED-V S.R.L. Product web page: https://www.red-v.tv https://red-v.tv/digital-signage.html Affected version: Model name: RXV-A740R Android version: 5.1.1 Firmware version: 026 Player version: 7.8.6 Downloader version:...
RED-V Super Digital Signage System RXV-A740R Log Information Disclosure
Summary RED-V Super Digital Signage transforms simple screens into customized TV channels, delivering audiovisual communication as immersive user experiences. It is the final blending of years of know-how in multimedia, mobile and web experience, tablet and multimedia server design. Description T...
Microsoft Releases Windows Security Updates For Critical Flaws
Microsoft formally released fixes for 112 newly discovered security vulnerabilities as part of its November 2020 Patch Tuesday, including an actively exploited zero-day flaw disclosed by Google's security team last week. The rollout addresses flaws, 17 of which are rated as Critical, 93 are rated...
CVE-2020-17040
Windows Hyper-V Security Feature Bypass Vulnerability...
CVE-2020-17040
Windows Hyper-V Security Feature Bypass Vulnerability...
Security feature bypass
Windows Hyper-V Security Feature Bypass Vulnerability...
CVE-2020-17040
Technical details for CVE-2020-17040 are not publicly provided in the Connected documents. The NVD entry summarizes a Windows Hyper-V security feature bypass but does not disclose affected products, root cause, exploit vectors, or remediation here. Monitor for updates.
CVE-2020-17040 Windows Hyper-V Security Feature Bypass Vulnerability
...
Windows Hyper-V Security Feature Bypass Vulnerability
...
KLA12004 Multiple vulnerabilities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges, bypass security restrictions, cause denial of service, spoof user interface. Below is a complete list of...
PT-2020-4685 · Microsoft · Windows Hyper-V +1
Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue is related to errors in security settings of the Windows Hyper-V service, which can be exploited by a remote attacker to cause a denial of service by sending specially...
v.23hh.cn Cross Site Scripting vulnerability OBB-1492504
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
tcpdump: Out of bounds read/write in in get_next_file() in tcpdump.c
An out-of-bounds write vulnerability was discovered in tcpdump while reading the file passed to the -V option of the command line program. An attacker may abuse this flaw by tricking a victim user into using a malicious file with the -V option, which would make the program read one byte before a...
new module: perl:5.30
An update is available for perl-Pod-Perldoc, perl-DBI, perl-Pod-Escapes, perl-Devel-PPPort, perl-Pod-Usage, perl-Sub-Exporter, perl-perlfaq, perl-Object-HashBase, perl-CPAN-Meta-YAML, perl-Digest, perl-podlators, perl-bignum, perl-Text-ParseWords, perl-Text-Template, perl-DBD-MySQL, perl-Text-Glo...
hyperv-daemons bug fix and enhancement update
The hyperv-daemons packages provide a suite of daemons that are needed when a AlmaLinux guest is running on Microsoft Hyper-V. The following daemons are included: - hypervkvpd, the guest Hyper-V Key-Value Pair KVP daemon - hypervvssd, the implementation of Hyper-V VSS functionality - hypervfcopyd...
DedeCMS v.5.8 - _keyword_ Cross-Site Scripting
Exploit Title: DedeCMS v.5.8 - "keyword" Cross-Site Scripting Date: 2020-07-27 Exploit Author: Noth Vendor Homepage: https://github.com/dedetech/DedeCMSv5 Software Link: https://github.com/dedetech/DedeCMSv5 Version: v.5.8 CVE : CVE-2020-27533 A Cross Site Scripting XSS issue was discovered in th...
v-l-m.org Cross Site Scripting vulnerability OBB-1464037
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
m-v-com.com Cross Site Scripting vulnerability OBB-1453393
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
COVID-19 Vaccine-Maker Hit with Cyberattack, Data Breach
COVID-19 vaccine manufacturer Dr. Reddy’s Laboratories has shut down its plants in Brazil, India, Russia, the U.K. and the U.S. following a cyberattack, according to reports. The Indian company is the contractor for Russia’s “Sputinik V” COVID-19 vaccine, which is about to enter Phase 2 human...