14 January 2020

6 results · Clear filters · Feed

• High 7.8
  CVE-2020-0638 Exploited · Ransomware

  An elevation of privilege vulnerability exists in the way the Update Notification Manager handles files.To exploit this…

  Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
  Jan 14, 2020

  KEV May 23, 2022
• High 8.8
  CVE-2020-0606 EPSS 18%

  Remote code execution in Microsoft.WindowsDesktop.App.Ref

  A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET Framewor…

  Microsoft Microsoft .NET Framework 3.5 Microsoft .NET Framework 3.5.1 Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 Windows NuGet
  Jan 14, 2020
• High —
  CVE-2020-0603 EPSS 23%

  Remote code execution in ASP.NET Core

  A remote code execution vulnerability exists in ASP.NET Core software when the software fails to handle objects in memory.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka 'ASP.NET Core R…

  Microsoft ASP.NET Core Microsoft.AspNetCore.App.Runtime.win-x64 Microsoft.AspNetCore.App.Runtime.win-x86 NuGet
  Jan 14, 2020
• High 8.1
  CVE-2020-0601 Exploited Public exploit EPSS 89%

  Certificate validation bypass on Windows in crypto/x509

  A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making …

  Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows Alpine Go
  Jan 14, 2020

  KEV Nov 3, 2021
• High 7.0
  CVE-2019-16784 Public exploit

  Local Privilege Escalation present only on the Windows version of PyInstaller

  In PyInstaller before version 3.6, only on Windows, a local privilege escalation vulnerability is present in this particular case: If a software using PyInstaller in "onefile" mode is launched by a privileged user (at least more than the current one) which ha…

  PyInstaller PyInstaller pyinstaller PyPI
  Jan 14, 2020
• High 7.5
  CVE-2019-12399

  Exposure of Sensitive Information to an Unauthorized Actor in Apache Kafka

  When Connect workers in Apache Kafka 2.0.0, 2.0.1, 2.1.0, 2.1.1, 2.2.0, 2.2.1, or 2.3.0 are configured with one or more config providers, and a connector is created/updated on that Connect cluster to use an externalized secret variable in a substring of a con…

  Apache Kafka org.apache.kafka:kafka Maven
  Jan 14, 2020