Archive

November 2020

Vulnerabilities first published in this month (UTC), newest first.

← October 2020 2020 / November December 2020 →

All Critical High Medium Low Exploited only Public exploit

232 results · Clear filters · Feed

Medium 5.5

CVE-2020-17081

Microsoft Raw Image Extension Information Disclosure Vulnerability

Microsoft Raw Image Extension Information Disclosure Vulnerability

Microsoft Raw Image Extension

Nov 11, 2020
Medium 5.5

CVE-2020-17071

Windows Delivery Optimization Information Disclosure Vulnerability

Windows Delivery Optimization Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Nov 11, 2020
Medium 5.5

CVE-2020-17069

Windows NDIS Information Disclosure Vulnerability

Windows NDIS Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Nov 11, 2020
Medium 6.8

CVE-2020-17063

Microsoft Office Online Spoofing Vulnerability

Microsoft Office Online Spoofing Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office 2019

Nov 11, 2020
Medium 5.4

CVE-2020-17060

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Enterprise Server 2013 Service Pack 1

Nov 11, 2020
Medium 5.5

CVE-2020-17056

Windows Network File System Information Disclosure Vulnerability

Windows Network File System Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Nov 11, 2020
Medium 4.2

CVE-2020-17054

Chakra Scripting Engine Memory Corruption Vulnerability

Chakra Scripting Engine Memory Corruption Vulnerability

Microsoft ChakraCore Microsoft Edge (EdgeHTML-based) Microsoft.ChakraCore Browsers NuGet

Nov 11, 2020
Medium 4.2

CVE-2020-17048

Chakra Scripting Engine Memory Corruption Vulnerability

Chakra Scripting Engine Memory Corruption Vulnerability

Microsoft ChakraCore Microsoft Edge (EdgeHTML-based) Microsoft.ChakraCore Browsers NuGet

Nov 11, 2020
Medium 5.5

CVE-2020-17046

Windows Error Reporting Denial of Service Vulnerability

Windows Error Reporting Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Nov 11, 2020
Medium 5.5

CVE-2020-17045

Windows KernelStream Information Disclosure Vulnerability

Windows KernelStream Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Nov 11, 2020
Medium 6.5

CVE-2020-17040

Windows Hyper-V Security Feature Bypass Vulnerability

Windows Hyper-V Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Nov 11, 2020
Medium 5.5

CVE-2020-17036

Windows Function Discovery SSDP Provider Information Disclosure Vulnerability

Windows Function Discovery SSDP Provider Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Nov 11, 2020
Medium 5.5

CVE-2020-17030

Windows MSCTF Server Information Disclosure Vulnerability

Windows MSCTF Server Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Nov 11, 2020
Medium 5.5

CVE-2020-17029

Windows Canonical Display Driver Information Disclosure Vulnerability

Windows Canonical Display Driver Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Nov 11, 2020
Medium 5.4

CVE-2020-17021

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Microsoft Microsoft Dynamics 365 (on-premises) version 9.0

Nov 11, 2020
Medium 5.3

CVE-2020-17017

Microsoft SharePoint Information Disclosure Vulnerability

Microsoft SharePoint Information Disclosure Vulnerability

Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Foundation 2013 Service Pack 1

Nov 11, 2020
Medium 5.4

CVE-2020-17018

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Microsoft Microsoft Dynamics 365 (on-premises) version 9.0 Microsoft Dynamics 365 (on-premises) version 8.2

Nov 11, 2020
Medium 4.3

CVE-2020-17015

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Foundation 2013 Service Pack 1

Nov 11, 2020
Medium 5.5

CVE-2020-17013

Win32k Information Disclosure Vulnerability

Win32k Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Nov 11, 2020
Medium 5.4

CVE-2020-17005

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Microsoft Microsoft Dynamics 365 (on-premises) version 9.0

Nov 11, 2020
Medium 5.4

CVE-2020-17006

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Microsoft Microsoft Dynamics CRM 2015 (on-premises) version 7.0

Nov 11, 2020
Medium 5.5

CVE-2020-17000

Remote Desktop Protocol Client Information Disclosure Vulnerability

Remote Desktop Protocol Client Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows 10 Version 1809 Windows Server 2016 Windows

Nov 11, 2020
Medium 5.5

CVE-2020-17004

Windows Graphics Component Information Disclosure Vulnerability

Windows Graphics Component Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Nov 11, 2020
Medium 5.5

CVE-2020-16999

Windows WalletService Information Disclosure Vulnerability

Windows WalletService Information Disclosure Vulnerability

Microsoft Windows 10 Version 1809 Windows 10 Version 1607 Windows 10 Version 1507 Windows

Nov 11, 2020
Medium 5.4

CVE-2020-16993

Azure Sphere Elevation of Privilege Vulnerability

Azure Sphere Elevation of Privilege Vulnerability

Microsoft Azure Sphere

Nov 11, 2020
Medium 5.4

CVE-2020-16989

Azure Sphere Elevation of Privilege Vulnerability

Azure Sphere Elevation of Privilege Vulnerability

Microsoft Azure Sphere

Nov 11, 2020
Medium 6.2

CVE-2020-16990

Azure Sphere Information Disclosure Vulnerability

Azure Sphere Information Disclosure Vulnerability

Microsoft Azure Sphere

Nov 11, 2020
Medium 6.9

CVE-2020-16988

Azure Sphere Elevation of Privilege Vulnerability

Azure Sphere Elevation of Privilege Vulnerability

Microsoft Azure Sphere

Nov 11, 2020
Medium 6.2

CVE-2020-16985

Azure Sphere Information Disclosure Vulnerability

Azure Sphere Information Disclosure Vulnerability

Microsoft Azure Sphere

Nov 11, 2020
Medium 6.2

CVE-2020-16986

Azure Sphere Denial of Service Vulnerability

Azure Sphere Denial of Service Vulnerability

Microsoft Azure Sphere

Nov 11, 2020
Medium 5.7

CVE-2020-16983

Azure Sphere Tampering Vulnerability

Azure Sphere Tampering Vulnerability

Microsoft Azure Sphere

Nov 11, 2020
Medium 5.3

CVE-2020-16979

Microsoft SharePoint Information Disclosure Vulnerability

Microsoft SharePoint Information Disclosure Vulnerability

Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Foundation 2013 Service Pack 1

Nov 11, 2020
Medium 6.1

CVE-2020-16981

Azure Sphere Elevation of Privilege Vulnerability

Azure Sphere Elevation of Privilege Vulnerability

Microsoft Azure Sphere

Nov 11, 2020
Medium 6.1

CVE-2020-16982

Azure Sphere Unsigned Code Execution Vulnerability

Azure Sphere Unsigned Code Execution Vulnerability

Microsoft Azure Sphere

Nov 11, 2020
Medium 6.6

CVE-2020-17049 EPSS 14%

Kerberos KDC Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists in the way Key Distribution Center (KDC) determines if a service ticket can be used for delegation via Kerberos Constrained Delegation (KCD). To exploit the vulnerability, a compromised service that is configured…

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2016 Windows Azure Linux

Nov 11, 2020
Medium 5.0

CVE-2020-27146

TIBCO iProcess Workspace Browser CSRF

The Core component of TIBCO Software Inc.'s TIBCO iProcess Workspace (Browser) contains a vulnerability that theoretically allows an unauthenticated attacker with network access to execute a Cross Site Request Forgery (CSRF) attack on the affected system. A s…

TIBCO Software TIBCO iProcess Workspace (Browser)

Nov 10, 2020
Medium 4.4

CVE-2020-26807

SAP ERP Client for E-Bilanz, version - 1.0, installation sets Incorrect default filesystem permissions are set in its i…

SAP SAP ERP Client for E-Bilanz 1.0

Nov 10, 2020
Medium 6.5

CVE-2020-26818

SAP NetWeaver AS ABAP (Web Dynpro), versions - 731, 740, 750, 751, 752, 753, 754, 755, 782, allows an authenticated use…

SAP SAP NetWeaver AS ABAP (Web Dynpro)

Nov 10, 2020
Medium 4.3

CVE-2020-26817

SAP 3D Visual Enterprise Viewer, version - 9, allows an user to open manipulated HPGL file received from untrusted sour…

SAP SAP 3D Visual Enterprise Viewer

Nov 10, 2020
Medium 4.9

CVE-2020-26814

SAP Process Integration (PGP Module - Business-to-Business Add On), version - 1.0, allows an attacker to read PGP Keys …

SAP SAP Process Integration (PGP - Module Business-to-Business Add On)

Nov 10, 2020