Skip to content
OpenAdvisories

Archive

17 August 2020

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Medium 5.5
    CVE-2020-1472 Exploited · Ransomware Public exploit EPSS 99%

    Netlogon Elevation of Privilege Vulnerability

    An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol (MS-NRPC). An attacker who successfully exploited the vulnerability could ru…

    KEV Nov 3, 2021
  • High 7.8
    CVE-2020-1464 Exploited EPSS 39%

    Windows Spoofing Vulnerability

    A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could bypass security features and load improperly signed files. In an attack scenario, an attacker could bypass secu…

    KEV Nov 3, 2021
  • High 7.8
    CVE-2020-1380 Exploited EPSS 24%

    Scripting Engine Memory Corruption Vulnerability

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current …

    KEV Nov 3, 2021
  • High 7.8
    CVE-2020-3433 Exploited · Ransomware Public exploit EPSS 10%

    Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability

    A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack. To exploit this vulnerability, the attacker would need to ha…

    KEV Oct 24, 2022