29 matches found
CVE-2022-21922
Technical details for CVE-2022-21922 are not publicly available in the provided documents. No affected products, versions, exploit information, or fixes are specified here. Monitor for updates in the connected sources for authoritative vulnerability details.
KB5009557: Windows 10 Version 1809 and Windows Server 2019 Security Update (January 2022)
The remote Windows host is missing security update 5009557. It is, therefore, affected by multiple vulnerabilities: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. CVE-2022-21836 - A denial of service DoS vulnerabilit...
KB5009595: Windows 8.1 and Windows Server 2012 R2 Security Updates (January 2022)
The remote Windows host is missing security update 5009595 or cumulative update 5009624. It is, therefore, affected by multiple vulnerabilities: - A denial of service DoS vulnerability. An attacker can exploit this issue to cause the affected component to deny system or application services...
KB5009543: Windows 10 Version 20H2 / 21H1 / 21H2 Security Update (January 2022)
The remote Windows host is missing security update 5009543. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2022-21849, CVE-2022-21850,...
CVE-2021-21922
creationtimestamp| type| source ---|---|--- 2021-12-22 22:23:28+00:00| seen| https://t.me/cibsecurity/34531...
CVE-2021-21922
A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability at ‘usernamefilter’ parameter with the administrative account or through cross-site request forgery...
Advantech R-SeeNet
1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Low attack complexity Vendor: Advantech Equipment: R-SeeNet Vulnerabilities: SQL Injection, Improper Privilege Management 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow authenticated users to perform a local privilege...
OpenJS Electron Security Bypass Vulnerability (CNVD-2021-21922)
OpenJS Electron is the OpenJS Foundation of an open source framework for desktop GUI application development . A security vulnerability exists in the contextIsolation module in OpenJS Electron versions prior to 7.2.4, prior to 8.2.4, and prior to 9.0.0-beta21. An attacker can exploit the...
Microsoft Excel PALETTE record buffer overflow
Added: 01/11/2007 CVE: CVE-2007-0031 BID: 21922 OSVDB: 31258 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows platforms. Problem A buffer overflow vulnerability in Microsoft Excel allows command execution when a user opens a speciall...