Archive

11 November 2020

Vulnerabilities first published on this day (UTC), newest first.

← October 2020 2020 / November /11 December 2020 →

All Critical High Medium Low Exploited only Public exploit

47 results · Clear filters · Feed

Medium 4.7

CVE-2020-26219

Open Redirect in touchbase.ai

touchbase.ai before version 2.0 is vulnerable to Open Redirect. Impacts can be many, and vary from theft of information and credentials, to the redirection to malicious websites containing attacker-controlled content, which in some cases even cause XSS attack…

puncsky touchbase.ai

Nov 11, 2020
Medium 6.7

CVE-2020-8353

Prior to August 10, 2020, some Lenovo Desktop and Workstation systems were shipped with the Embedded Host Based Configu…

Lenovo Desktop and Workstation systems

Nov 11, 2020
Medium 6.4

CVE-2020-8354

A potential vulnerability in the SMI callback function used in the VariableServiceSmm driver in some Lenovo Notebook mo…

Lenovo BIOS

Nov 11, 2020
Medium 5.3

CVE-2020-7767

Regular Expression Denial of Service (ReDoS)

All versions of package express-validators are vulnerable to Regular Expression Denial of Service (ReDoS) when validating specifically-crafted invalid urls.

express-validators npm

Nov 11, 2020
Medium 5.4

CVE-2020-1325

Azure DevOps Server and Team Foundation Services Spoofing Vulnerability

Azure DevOps Server and Team Foundation Services Spoofing Vulnerability

Microsoft Azure DevOps Server 2019 Update 1.1

Nov 11, 2020
Medium 5.5

CVE-2020-1599 EPSS 19%

Windows Spoofing Vulnerability

Windows Spoofing Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Nov 11, 2020
Medium 5.5

CVE-2020-17113

Windows Camera Codec Information Disclosure Vulnerability

Windows Camera Codec Information Disclosure Vulnerability

Microsoft Windows 10 Version 1809 Windows 10 Version 1607 Windows 10 Version 1507 Windows

Nov 11, 2020
Medium 5.5

CVE-2020-17102

WebP Image Extensions Information Disclosure Vulnerability

WebP Image Extensions Information Disclosure Vulnerability

Microsoft WebP Image Extension

Nov 11, 2020
Medium 5.5

CVE-2020-17100

Visual Studio Tampering Vulnerability

Visual Studio Tampering Vulnerability

Microsoft Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3) Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6)

Nov 11, 2020
Medium 5.3

CVE-2020-17090

Microsoft Defender for Endpoint Security Feature Bypass Vulnerability

Microsoft Defender for Endpoint Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Nov 11, 2020
Medium 6.2

CVE-2020-17085

Microsoft Exchange Server Denial of Service Vulnerability

Microsoft Exchange Server Denial of Service Vulnerability

Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 7 Microsoft Exchange Server 2016 Cumulative Update 18

Nov 11, 2020
Medium 5.5

CVE-2020-17083 EPSS 12%

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2016 Cumulative Update 18 Microsoft Exchange Server 2019 Cumulative Update 7

Nov 11, 2020
Medium 5.5

CVE-2020-17081

Microsoft Raw Image Extension Information Disclosure Vulnerability

Microsoft Raw Image Extension Information Disclosure Vulnerability

Microsoft Raw Image Extension

Nov 11, 2020
Medium 5.5

CVE-2020-17071

Windows Delivery Optimization Information Disclosure Vulnerability

Windows Delivery Optimization Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Nov 11, 2020
Medium 5.5

CVE-2020-17069

Windows NDIS Information Disclosure Vulnerability

Windows NDIS Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Nov 11, 2020
Medium 6.8

CVE-2020-17063

Microsoft Office Online Spoofing Vulnerability

Microsoft Office Online Spoofing Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office 2019

Nov 11, 2020
Medium 5.4

CVE-2020-17060

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Enterprise Server 2013 Service Pack 1

Nov 11, 2020
Medium 5.5

CVE-2020-17056

Windows Network File System Information Disclosure Vulnerability

Windows Network File System Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Nov 11, 2020
Medium 4.2

CVE-2020-17054

Chakra Scripting Engine Memory Corruption Vulnerability

Chakra Scripting Engine Memory Corruption Vulnerability

Microsoft ChakraCore Microsoft Edge (EdgeHTML-based) Microsoft.ChakraCore Browsers NuGet

Nov 11, 2020
Medium 4.2

CVE-2020-17048

Chakra Scripting Engine Memory Corruption Vulnerability

Chakra Scripting Engine Memory Corruption Vulnerability

Microsoft ChakraCore Microsoft Edge (EdgeHTML-based) Microsoft.ChakraCore Browsers NuGet

Nov 11, 2020
Medium 5.5

CVE-2020-17046

Windows Error Reporting Denial of Service Vulnerability

Windows Error Reporting Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Nov 11, 2020
Medium 5.5

CVE-2020-17045

Windows KernelStream Information Disclosure Vulnerability

Windows KernelStream Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Nov 11, 2020
Medium 6.5

CVE-2020-17040

Windows Hyper-V Security Feature Bypass Vulnerability

Windows Hyper-V Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Nov 11, 2020
Medium 5.5

CVE-2020-17036

Windows Function Discovery SSDP Provider Information Disclosure Vulnerability

Windows Function Discovery SSDP Provider Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Nov 11, 2020
Medium 5.5

CVE-2020-17030

Windows MSCTF Server Information Disclosure Vulnerability

Windows MSCTF Server Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Nov 11, 2020
Medium 5.5

CVE-2020-17029

Windows Canonical Display Driver Information Disclosure Vulnerability

Windows Canonical Display Driver Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Nov 11, 2020
Medium 5.4

CVE-2020-17021

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Microsoft Microsoft Dynamics 365 (on-premises) version 9.0

Nov 11, 2020
Medium 5.3

CVE-2020-17017

Microsoft SharePoint Information Disclosure Vulnerability

Microsoft SharePoint Information Disclosure Vulnerability

Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Foundation 2013 Service Pack 1

Nov 11, 2020
Medium 5.4

CVE-2020-17018

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Microsoft Microsoft Dynamics 365 (on-premises) version 9.0 Microsoft Dynamics 365 (on-premises) version 8.2

Nov 11, 2020
Medium 4.3

CVE-2020-17015

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Foundation 2013 Service Pack 1

Nov 11, 2020
Medium 5.5

CVE-2020-17013

Win32k Information Disclosure Vulnerability

Win32k Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Nov 11, 2020
Medium 5.4

CVE-2020-17005

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Microsoft Microsoft Dynamics 365 (on-premises) version 9.0

Nov 11, 2020
Medium 5.4

CVE-2020-17006

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Microsoft Microsoft Dynamics CRM 2015 (on-premises) version 7.0

Nov 11, 2020
Medium 5.5

CVE-2020-17000

Remote Desktop Protocol Client Information Disclosure Vulnerability

Remote Desktop Protocol Client Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows 10 Version 1809 Windows Server 2016 Windows

Nov 11, 2020
Medium 5.5

CVE-2020-17004

Windows Graphics Component Information Disclosure Vulnerability

Windows Graphics Component Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Nov 11, 2020
Medium 5.5

CVE-2020-16999

Windows WalletService Information Disclosure Vulnerability

Windows WalletService Information Disclosure Vulnerability

Microsoft Windows 10 Version 1809 Windows 10 Version 1607 Windows 10 Version 1507 Windows

Nov 11, 2020
Medium 5.4

CVE-2020-16993

Azure Sphere Elevation of Privilege Vulnerability

Azure Sphere Elevation of Privilege Vulnerability

Microsoft Azure Sphere

Nov 11, 2020
Medium 5.4

CVE-2020-16989

Azure Sphere Elevation of Privilege Vulnerability

Azure Sphere Elevation of Privilege Vulnerability

Microsoft Azure Sphere

Nov 11, 2020
Medium 6.2

CVE-2020-16990

Azure Sphere Information Disclosure Vulnerability

Azure Sphere Information Disclosure Vulnerability

Microsoft Azure Sphere

Nov 11, 2020
Medium 6.9

CVE-2020-16988

Azure Sphere Elevation of Privilege Vulnerability

Azure Sphere Elevation of Privilege Vulnerability

Microsoft Azure Sphere

Nov 11, 2020