Microsoft Win32k Information Disclosure (CVE-2020-0941)

An information disclosure vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information.

from Check Point Update Services Advisories https://ift.tt/3bFf40l

Microsoft Active Directory Information Disclosure (CVE-2020-0856)

An information disclosure vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information.

from Check Point Update Services Advisories https://ift.tt/35mrl8S

Microsoft Win32k Elevation of Privilege (CVE-2020-1245)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system.

from Check Point Update Services Advisories https://ift.tt/2ZjGmEG

Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2020-1115)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system.

from Check Point Update Services Advisories https://ift.tt/33dq01s

Microsoft Windows Win32k Elevation of Privilege (CVE-2020-1152)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system.

from Check Point Update Services Advisories https://ift.tt/2FaE3wQ

Microsoft Active Directory Information Disclosure (CVE-2020-0664)

An information disclosure vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information.

from Check Point Update Services Advisories https://ift.tt/2R9Mdry

Microsoft DirectX Elevation of Privilege (CVE-2020-1308)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system.

from Check Point Update Services Advisories https://ift.tt/35p4yJP

Online Shopping Alphaware Authentication Bypass

An authentication bypass vulnerability exists in Online Shopping Alphaware. Successful exploitation of this vulnerability could allow a remote attacker to gain unauthorized access to the affected system.

from Check Point Update Services Advisories https://ift.tt/3hfWRHU

Systemd journald Privilege Escalation (CVE-2018-16864)

A privilege escalation vulnerability exists in Systemd-journald. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system.

from Check Point Update Services Advisories https://ift.tt/2Zk0eHD

Google Chrome V8 Remote Code Execution (CVE-2018-17463)

A remote code execution vulnerability exists in Google Chrome V8. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system.

from Check Point Update Services Advisories https://ift.tt/2GDlulb

Microsoft SharePoint Server Stored Cross Site Scripting (CVE-2020-0693)

A stored cross site scripting vulnerability exists in Ovirt Engine. Successful exploitation of this vulnerability could allow attackers to execute arbitrary code on the affected system.

from Check Point Update Services Advisories https://ift.tt/2yMhafP

Cisco Data Center Network Manager Command Injection (CVE-2019-15978; CVE-2019-15979)

A command injection vulnerability exists in Cisco Data Center Network Manager. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system.

from Check Point Update Services Advisories https://ift.tt/3aWcvG0

Cisco Data Center Network Manager Arbitrary File Deletion (CVE-2019-15981)

An arbitrary file deletion vulnerability exists in Cisco Data Center Network Manager. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system.

from Check Point Update Services Advisories https://ift.tt/3e7eTf0

Nagios XI Cross-Site Scripting (CVE-2019-20139)

A cross-site scripting vulnerability exists in Nagios XI. Successful exploitation of this vulnerability could allow attackers to execute arbitrary code on the affected system.

from Check Point Update Services Advisories https://ift.tt/2Vetqgj

Chadha PHPKB Remote Code Execution (CVE-2020-10386; CVE-2020-10389)

A remote code execution vulnerability exists in Chadha PHPKB. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system.

from Check Point Update Services Advisories https://ift.tt/2Vaz1V8

Ayukov NFTPD Buffer Overflow Remote Code Execution (CVE-2017-15222)

A buffer overflow vulnerability exists in Ayukov NFTP FTP Client. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system.

from Check Point Update Services Advisories https://ift.tt/2Rl3fnf

Asus Dsln12e C1 Firmware Command Execution (CVE-2018-15887)

A command execution vulnerability exists in asus dsln12e c1 firmware. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system.

from Check Point Update Services Advisories https://ift.tt/2VbdA6b

Dreambox Opendreambox Command Execution (CVE-2017-14135)

A command execution vulnerability exists in dreambox opendreambox. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system.

from Check Point Update Services Advisories https://ift.tt/2woix3f

Oracle Weblogic Insecure Deserialization (CVE-2020-2555)

An insecure deserialization vulnerability exists in Oracle Weblogic server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system.

from Check Point Update Services Advisories https://ift.tt/2yKCZfF

Microsoft .NET Framework Remote Code Execution (CVE-2020-0646)

A remote code execution vulnerability exists in Microsoft .NET Framework. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system.

from Check Point Update Services Advisories https://ift.tt/2JQslWM