deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-26257
Published: 2020-12-09
Description: Matrix is an ecosystem for open federated Instant Messaging and VoIP. Synapse is a reference "homeserver" implementation of Matrix. A malicious or poorly-implemented homeserver can inject malformed events into a room by specifying a different room id in the path of a `/send_join`, `/send_leave`, `/invite` or `/exchange_third_party_invite` request. This can lead to a denial of service in which future events will not be correctly sent to other servers over federation. This affects any server which accepts federation requests from untrusted servers. The Matrix Synapse reference implementation before version 1.23.1 the implementation is vulnerable to this injection attack. Issue is fixed in version 1.23.1. As a workaround homeserver administrators could limit access to the federation API to trusted servers (for example via `federation_domain_whitelist`).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79, CWE-400, CWE-400
References: https://github.com/matrix-org/synapse/blob/develop/CHANGES.md#synapse-1231-2020-12-09; https://github.com/matrix-org/synapse/commit/3ce2f303f15f6ac3dc352298972dc6e04d9b7a8b; https://github.com/matrix-org/synapse/pull/8776
CVE: CVE-2020-28086
Published: 2020-12-09
Description: pass through 1.7.3 has a possibility of using a password for an unintended resource. For exploitation to occur, the user must do a git pull, decrypt a password, and log into a remote service with the password. If an attacker controls the central Git server or one of the other members' machines, and also controls one of the services already in the password store, they can rename one of the password files in the Git repository to something else: pass doesn't correctly verify that the content of a file matches the filename, so a user might be tricked into decrypting the wrong password and sending that to a service that the attacker controls. NOTE: for environments in which this threat model is of concern, signing commits can be a solution.
CVSS Score: 7.5 (HIGH)
CWE: CWE-347
References: https://lists.zx2c4.com/pipermail/password-store/2014-March/000498.html; https://lists.zx2c4.com/pipermail/password-store/2014-March/000498.html
CVE: CVE-2020-16587
Published: 2020-12-09
Description: A heap-based buffer overflow vulnerability exists in Academy Software Foundation OpenEXR 2.3.0 in chunkOffsetReconstruction in ImfMultiPartInputFile.cpp that can cause a denial of service via a crafted EXR file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/AcademySoftwareFoundation/openexr/commit/8b5370c688a7362673c3a5256d93695617a4cd9a; https://github.com/AcademySoftwareFoundation/openexr/issues/491; https://lists.debian.org/debian-lts-announce/2021/07/msg00001.html
CVE: CVE-2020-16588
Published: 2020-12-09
Description: A Null Pointer Deference issue exists in Academy Software Foundation OpenEXR 2.3.0 in generatePreview in makePreview.cpp that can cause a denial of service via a crafted EXR file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/AcademySoftwareFoundation/openexr/commit/74504503cff86e986bac441213c403b0ba28d58f; https://github.com/AcademySoftwareFoundation/openexr/issues/493; https://lists.debian.org/debian-lts-announce/2022/12/msg00022.html
CVE: CVE-2020-16589
Published: 2020-12-09
Description: A head-based buffer overflow exists in Academy Software Foundation OpenEXR 2.3.0 in writeTileData in ImfTiledOutputFile.cpp that can cause a denial of service via a crafted EXR file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/AcademySoftwareFoundation/openexr/commit/6bb36714528a9563dd3b92720c5063a1284b86f8; https://github.com/AcademySoftwareFoundation/openexr/issues/494; https://lists.debian.org/debian-lts-announce/2022/12/msg00022.html
CVE: CVE-2020-16590
Published: 2020-12-09
Description: A double free vulnerability exists in the Binary File Descriptor (BFD) (aka libbrd) in GNU Binutils 2.35 in the process_symbol_table, as demonstrated in readelf, via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-415
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://sourceware.org/bugzilla/show_bug.cgi?id=25821; https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=c98a4545dc7bf2bcaf1de539c4eb84784680eaa4
CVE: CVE-2020-16591
Published: 2020-12-09
Description: A Denial of Service vulnerability exists in the Binary File Descriptor (BFD) in GNU Binutils 2.35 due to an invalid read in process_symbol_table, as demonstrated in readeif.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://sourceware.org/bugzilla/show_bug.cgi?id=25822; https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=001890e1f9269697f7e0212430a51479271bdab2
CVE: CVE-2020-16592
Published: 2020-12-09
Description: A use after free issue exists in the Binary File Descriptor (BFD) library (aka libbfd) in GNU Binutils 2.34 in bfd_hash_lookup, as demonstrated in nm-new, that can cause a denial of service via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DJIW6KKY2TSLD43XEZXG56WREIIBUIIQ/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UKIMSD5FIC3QFJDKNHR2PSO6JYJGCLHB/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-16593
Published: 2020-12-09
Description: A Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35, in scan_unit_for_symbols, as demonstrated in addr2line, that can cause a denial of service via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://sourceware.org/bugzilla/show_bug.cgi?id=25827; https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=aec72fda3b320c36eb99fc1c4cf95b10fc026729
CVE: CVE-2020-16598
Published: 2020-12-09
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2020-16599
Published: 2020-12-09
Description: A Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35, in _bfd_elf_get_symbol_version_string, as demonstrated in nm-new, that can cause a denial of service via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://sourceware.org/bugzilla/show_bug.cgi?id=25842; https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=8d55d10ac0d112c586eaceb92e75bd9b80aadcc4
CVE: CVE-2020-16600
Published: 2020-12-09
Description: A Use After Free vulnerability exists in Artifex Software, Inc. MuPDF library 1.17.0-rc1 and earlier when a valid page was followed by a page with invalid pixmap dimensions, causing bander - a static - to point to previously freed memory instead of a newband_writer.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://git.ghostscript.com/?p=mupdf.git%3Bh=96751b25462f83d6e16a9afaf8980b0c3f979c8b; https://bugs.ghostscript.com/show_bug.cgi?id=702253; http://git.ghostscript.com/?p=mupdf.git%3Bh=96751b25462f83d6e16a9afaf8980b0c3f979c8b
CVE: CVE-2020-25499
Published: 2020-12-09
Description: TOTOLINK A3002RU-V2.0.0 B20[PII_REDACTED] allows authenticated remote users to modify the system's 'Run Command'. An attacker can use this functionality to execute arbitrary OS commands on the router.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-862
References: https://github.com/kdoos/Vulnerabilities/blob/main/RCE_TOTOLINK-A3002RU-V2; https://www.totolink.net/home/index/newsss/id/196.html; https://github.com/kdoos/Vulnerabilities/blob/main/RCE_TOTOLINK-A3002RU-V2
CVE: CVE-2020-10143
Published: 2020-12-09
Description: Macrium Reflect includes an OpenSSL component that specifies an OPENSSLDIR variable as C:\openssl\. Macrium Reflect contains a privileged service that uses this OpenSSL component. Because unprivileged Windows users can create subdirectories off of the system root, a user can create the appropriate path to a specially-crafted openssl.cnf file to achieve arbitrary code execution with SYSTEM privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-284, CWE-665
References: https://www.kb.cert.org/vuls/id/760767; https://www.kb.cert.org/vuls/id/760767
CVE: CVE-2020-29257
Published: 2020-12-09
Description: Cross-site scripting (XSS) vulnerability in Online Examination System 1.0 via the q parameter to feedback.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://asfiyashaikh20.medium.com/exploit-for-cve-2020-29257-reflected-cross-site-scripting-xss-vulnerability-4a7bf9ae7d80; https://asfiyashaikh20.medium.com/exploit-for-cve-2020-29257-reflected-cross-site-scripting-xss-vulnerability-4a7bf9ae7d80
CVE: CVE-2020-29258
Published: 2020-12-09
Description: Cross-site scripting (XSS) vulnerability in Online Examination System 1.0 via the w parameter to index.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://asfiyashaikh20.medium.com/exploit-for-cve-2020-29258-reflected-cross-site-scripting-xss-vulnerability-957f365a1f3b; https://asfiyashaikh20.medium.com/exploit-for-cve-2020-29258-reflected-cross-site-scripting-xss-vulnerability-957f365a1f3b
CVE: CVE-2020-29259
Published: 2020-12-09
Description: Cross-site scripting (XSS) vulnerability in Online Examination System 1.0 via the subject or feedback parameter to feedback.php.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://asfiyashaikh20.medium.com/cve-2020-29259-persistent-xss-2ef63cc5cee6; https://asfiyashaikh20.medium.com/cve-2020-29259-persistent-xss-2ef63cc5cee6
CVE: CVE-2020-16958
Published: 2020-12-10
Description: Windows Backup Engine Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-16958; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16958
CVE: CVE-2020-16959
Published: 2020-12-10
Description: Windows Backup Engine Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-16959; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16959
CVE: CVE-2020-16960
Published: 2020-12-10
Description: Windows Backup Engine Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-16960; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16960
CVE: CVE-2020-16961
Published: 2020-12-10
Description: Windows Backup Engine Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-16961; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16961
CVE: CVE-2020-16962
Published: 2020-12-10
Description: Windows Backup Engine Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-16962; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16962
CVE: CVE-2020-16963
Published: 2020-12-10
Description: Windows Backup Engine Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-16963; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16963
CVE: CVE-2020-16964
Published: 2020-12-10
Description: Windows Backup Engine Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-16964; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16964
CVE: CVE-2020-16971
Published: 2020-12-10
Description: Azure SDK for Java Security Feature Bypass Vulnerability
CVSS Score: 7.4 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-16971; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16971
CVE: CVE-2020-16996
Published: 2020-12-10
Description: Kerberos Security Feature Bypass Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-16996; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16996
CVE: CVE-2020-17002
Published: 2020-12-10
Description: Azure SDK for C Security Feature Bypass Vulnerability
CVSS Score: 7.4 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17002; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17002
CVE: CVE-2020-17089
Published: 2020-12-10
Description: Microsoft SharePoint Elevation of Privilege Vulnerability
CVSS Score: 7.1 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17089; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17089
CVE: CVE-2020-17092
Published: 2020-12-10
Description: Windows Network Connections Service Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17092; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17092
CVE: CVE-2020-17094
Published: 2020-12-10
Description: Windows Error Reporting Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17094; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17094
CVE: CVE-2020-17095
Published: 2020-12-10
Description: Windows Hyper-V Remote Code Execution Vulnerability
CVSS Score: 8.5 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17095; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17095
CVE: CVE-2020-17096
Published: 2020-12-10
Description: Windows NTFS Remote Code Execution Vulnerability
CVSS Score: 7.5 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17096; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17096
CVE: CVE-2020-17097
Published: 2020-12-10
Description: Windows Digital Media Receiver Elevation of Privilege Vulnerability
CVSS Score: 3.3 (LOW)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17097; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17097
CVE: CVE-2020-17098
Published: 2020-12-10
Description: Windows GDI+ Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17098; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17098
CVE: CVE-2020-17099
Published: 2020-12-10
Description: Windows Lock Screen Security Feature Bypass Vulnerability
CVSS Score: 6.8 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17099; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17099
CVE: CVE-2020-17103
Published: 2020-12-10
Description: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17103; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17103
CVE: CVE-2020-17115
Published: 2020-12-10
Description: Microsoft SharePoint Server Spoofing Vulnerability
CVSS Score: 8.0 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17115; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17115
CVE: CVE-2020-17117
Published: 2020-12-10
Description: Microsoft Exchange Remote Code Execution Vulnerability
CVSS Score: 6.6 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17117; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17117
CVE: CVE-2020-17118
Published: 2020-12-10
Description: Microsoft SharePoint Remote Code Execution Vulnerability
CVSS Score: 8.1 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17118; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17118
CVE: CVE-2020-17119
Published: 2020-12-10
Description: Microsoft Outlook Information Disclosure Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17119; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17119
CVE: CVE-2020-17120
Published: 2020-12-10
Description: Microsoft SharePoint Information Disclosure Vulnerability
CVSS Score: 5.3 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17120; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17120
CVE: CVE-2020-17121
Published: 2020-12-10
Description: Microsoft SharePoint Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17121; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17121
CVE: CVE-2020-17122
Published: 2020-12-10
Description: Microsoft Excel Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17122; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17122
CVE: CVE-2020-17123
Published: 2020-12-10
Description: Microsoft Excel Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17123; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17123
CVE: CVE-2020-17124
Published: 2020-12-10
Description: Microsoft PowerPoint Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17124; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17124
CVE: CVE-2020-17125
Published: 2020-12-10
Description: Microsoft Excel Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17125; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17125
CVE: CVE-2020-17126
Published: 2020-12-10
Description: Microsoft Excel Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17126; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17126
CVE: CVE-2020-17127
Published: 2020-12-10
Description: Microsoft Excel Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17127; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17127
CVE: CVE-2020-17128
Published: 2020-12-10
Description: Microsoft Excel Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17128; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17128
CVE: CVE-2020-17129
Published: 2020-12-10
Description: Microsoft Excel Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17129; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17129
CVE: CVE-2020-17130
Published: 2020-12-10
Description: Microsoft Excel Security Feature Bypass Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17130; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17130
CVE: CVE-2020-17131
Published: 2020-12-10
Description: Chakra Scripting Engine Memory Corruption Vulnerability
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-787
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17131; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17131
CVE: CVE-2020-17132
Published: 2020-12-10
Description: Microsoft Exchange Remote Code Execution Vulnerability
CVSS Score: 9.1 (CRITICAL)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17132; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17132
CVE: CVE-2020-17133
Published: 2020-12-10
Description: Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17133; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17133
CVE: CVE-2020-17134
Published: 2020-12-10
Description: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17134; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17134
CVE: CVE-2020-17135
Published: 2020-12-10
Description: Azure DevOps Server Spoofing Vulnerability
CVSS Score: 6.4 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17135; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17135
CVE: CVE-2020-17136
Published: 2020-12-10
Description: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17136; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17136
CVE: CVE-2020-17137
Published: 2020-12-10
Description: DirectX Graphics Kernel Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17137; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17137
CVE: CVE-2020-17138
Published: 2020-12-10
Description: Windows Error Reporting Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17138; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17138
CVE: CVE-2020-17139
Published: 2020-12-10
Description: Windows Overlay Filter Security Feature Bypass Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17139; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17139
CVE: CVE-2020-17140
Published: 2020-12-10
Description: Windows SMB Information Disclosure Vulnerability
CVSS Score: 8.1 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17140; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17140
CVE: CVE-2020-17141
Published: 2020-12-10
Description: Microsoft Exchange Remote Code Execution Vulnerability
CVSS Score: 8.4 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17141; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17141
CVE: CVE-2020-17142
Published: 2020-12-10
Description: Microsoft Exchange Remote Code Execution Vulnerability
CVSS Score: 9.1 (CRITICAL)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17142; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17142
CVE: CVE-2020-17143
Published: 2020-12-10
Description: Microsoft Exchange Server Information Disclosure Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17143; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17143
CVE: CVE-2020-17144
Published: 2020-12-10
Description: Microsoft Exchange Remote Code Execution Vulnerability
CVSS Score: 8.4 (HIGH)
CWE: CWE-502, CWE-502
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17144; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17144; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-17144