‼ CVE-2020-6709 ‼
📖 Read
via "National Vulnerability Database".
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2020. Notes: none.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-1678 ‼
📖 Read
via "National Vulnerability Database".
NTLM Security Feature Bypass Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2021-1645 ‼
📖 Read
via "National Vulnerability Database".
Windows Docker Information Disclosure Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2021-1711 ‼
📖 Read
via "National Vulnerability Database".
Microsoft Office Remote Code Execution Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2021-1652 ‼
📖 Read
via "National Vulnerability Database".
Windows CSC Service Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1653, CVE-2021-1654, CVE-2021-1655, CVE-2021-1659, CVE-2021-1688, CVE-2021-1693.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-6660 ‼
📖 Read
via "National Vulnerability Database".
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2020. Notes: none.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-6679 ‼
📖 Read
via "National Vulnerability Database".
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2020. Notes: none.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-1714 ‼
📖 Read
via "National Vulnerability Database".
Microsoft Excel Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-1713.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-6711 ‼
📖 Read
via "National Vulnerability Database".
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2020. Notes: none.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-6697 ‼
📖 Read
via "National Vulnerability Database".
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2020. Notes: none.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-1716 ‼
📖 Read
via "National Vulnerability Database".
Microsoft Word Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-1715.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-6721 ‼
📖 Read
via "National Vulnerability Database".
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2020. Notes: none.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-6698 ‼
📖 Read
via "National Vulnerability Database".
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2020. Notes: none.📖 Read
via "National Vulnerability Database".
🕴 More SolarWinds Attack Details Emerge 🕴
📖 Read
via "Dark Reading".
A third piece of malware is uncovered, but there's still plenty of unknowns about the epic attacks purportedly out of Russia.📖 Read
via "Dark Reading".
Darkreading
More SolarWinds Attack Details Emerge
A third piece of malware is uncovered, but there are still plenty of unknowns about the epic attacks purportedly out of Russia.
‼ CVE-2021-23935 ‼
📖 Read
via "National Vulnerability Database".
OX App Suite through 7.10.4 allows XSS via an appointment in which the location contains JavaScript code.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-23929 ‼
📖 Read
via "National Vulnerability Database".
OX App Suite through 7.10.4 allows XSS via a crafted Content-Disposition header in an uploaded HTML document to an ajax/share/<share-token>?delivery=view URI.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-23931 ‼
📖 Read
via "National Vulnerability Database".
OX App Suite through 7.10.4 allows XSS via an inline binary file.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-15799 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions). The vulnerability could allow an unauthenticated attacker to reboot the device over the network by using special urls from integrated web server of the affected products.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-26995 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability has been identified in JT2Go (All Versions < V13.1.0), Teamcenter Visualization (All Versions < V13.1.0). Affected applications lack proper validation of user-supplied data when parsing of SGI and RGB files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-26988 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability has been identified in JT2Go (All Versions < V13.1.0), Teamcenter Visualization (All Versions < V13.1.0). Affected applications lack proper validation of user-supplied data when parsing of PAR files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-23124 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in Joomla! 3.9.0 through 3.9.23. The lack of escaping in mod_breadcrumbs aria-label attribute allows XSS attacks.📖 Read
via "National Vulnerability Database".