11 November 2020

6 results · Clear filters · Feed

• High 8.0
  CVE-2020-26218 Public exploit

  HTML Injection in touchbase.ai

  touchbase.ai before version 2.0 is vulnerable to Cross-Site Scripting. The vulnerability allows an attacker to inject HTML payloads which could result in defacement, user redirection to a malicious webpage/website etc. The issue is patched in version 2.0.

  puncsky touchbase.ai
  Nov 11, 2020
• High 7.8
  CVE-2020-17087 Exploited Public exploit

  Windows Kernel Local Elevation of Privilege Vulnerability

  Windows Kernel Local Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Nov 11, 2020

  KEV Nov 3, 2021
• High 7.8
  CVE-2020-17086 Public exploit

  Raw Image Extension Remote Code Execution Vulnerability

  Raw Image Extension Remote Code Execution Vulnerability

  Microsoft Raw Image Extension
  Nov 11, 2020
• High 7.0
  CVE-2020-17057 Public exploit

  Windows Win32k Elevation of Privilege Vulnerability

  Windows Win32k Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Nov 11, 2020
• High 7.8
  CVE-2020-17035 Public exploit

  Windows Kernel Elevation of Privilege Vulnerability

  Windows Kernel Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Nov 11, 2020
• Low 3.3
  CVE-2020-16126 Public exploit

  accountsservice drops ruid, allows unprivileged users to send it signals

  An Ubuntu-specific modification to AccountsService in versions before 0.6.55-0ubuntu13.2, among other earlier versions, improperly dropped the ruid, allowing untrusted users to send signals to AccountService, thus stopping it from handling D-Bus messages in a…

  Freedesktop accountsservice accountsservice Ubuntu
  Nov 11, 2020