17 August 2020

8 results · Clear filters · Feed

• High 7.5
  CVE-2020-13933 Public exploit EPSS 44%

  Authentication bypass in Apache Shiro

  Apache Shiro before 1.6.0, when using Apache Shiro, a specially crafted HTTP request may cause an authentication bypass.

  shiro shiro org.apache.shiro:shiro-core Debian Ubuntu Maven
  Aug 17, 2020
• Medium 5.5
  CVE-2020-1472 Exploited · Ransomware Public exploit EPSS 99%

  Netlogon Elevation of Privilege Vulnerability

  An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol (MS-NRPC). An attacker who successfully exploited the vulnerability could ru…

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2016 Windows Debian Ubuntu Azure Linux Alpine
  Aug 17, 2020

  KEV Nov 3, 2021
• High 7.8
  CVE-2020-1337 Public exploit EPSS 14%

  Windows Print Spooler Elevation of Privilege Vulnerability

  An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system privileges. A…

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Aug 17, 2020
• High 7.8
  CVE-2020-3433 Exploited · Ransomware Public exploit EPSS 10%

  Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability

  A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack. To exploit this vulnerability, the attacker would need to ha…

  Cisco Cisco AnyConnect Secure Mobility Client Network devices
  Aug 17, 2020

  KEV Oct 24, 2022
• Unscored —
  CVE-2020-8209 Public exploit Scanner template EPSS 44%

  Improper access control in Citrix XenMobile Server 10.12 before RP2, Citrix XenMobile Server 10.11 before RP4, Citrix X…

  Aug 17, 2020
• High 8.8
  CVE-2020-13941 Public exploit

  Improper Input Validation in Apache Solr

  Reported in SOLR-14515 (private) and fixed in SOLR-14561 (public), released in Solr version 8.6.0. The Replication handler (https://lucene.apache.org/solr/guide/8_6/index-replication.html#http-api-commands-for-the-replicationhandler) allows commands backup, r…

  lucene-solr lucene-solr org.apache.solr:solr-parent Debian Ubuntu Maven
  Aug 17, 2020
• Medium 5.5
  CVE-2020-1493 Public exploit

  Microsoft Outlook Information Disclosure Vulnerability

  An information disclosure vulnerability exists when attaching files to Outlook messages. This vulnerability could potentially allow users to share attached files such that they are accessible by anonymous users where they should be restricted to specific user…

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office 2019 Microsoft Outlook 2016
  Aug 17, 2020
• Unscored —
  CVE-2020-24370 Public exploit

  ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal, as demonstrated by ge…

  lua5.4 lua lua5.3 Debian Azure Linux
  Aug 17, 2020