KB5011495: Windows 10 Version 1607 and Windows Server 2016 Security Update (March 2022)

The remote Windows host is missing security update 5011495. It is, therefore, affected by multiple vulnerabilities - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2022-23283, CVE-2022-23284, CVE-2022-23287, CVE-2022-23290, CVE-2022-23293,...

KB5011487: Windows 10 Version 20H2 / 21H1 / 21H2 Security Update (March 2022)

The remote Windows host is missing security update 5011487. It is, therefore, affected by multiple vulnerabilities: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2022-23283, CVE-2022-23284, CVE-2022-23291, CVE-2022-24459, CVE-2022-23296,...

KB5011497: Windows Server 2022 Security Update (March 2022)

The remote Windows host is missing security update 5011497. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2022-21990, CVE-2022-23294,...

CVE-2021-24503

The CVE concerns the WordPress plugin Popular Brand Icons – Simple Icons, prior to version 2.7.8. It fails to sanitize/validate shortcode parameters (e.g., color, size, class), enabling Cross-Site Scripting via these inputs. A contributor can trigger XSS with admin approval, while editors may exp...

CVE-2021-24503 Popular Brand SVG Icons - Simple Icons < 2.7.8 - Contributor+ Stored XSS

The Popular Brand Icons – Simple Icons WordPress plugin before 2.7.8 does not sanitise or validate some of its shortcode parameters, such as "color", "size" or "class", allowing users with a role as low as Contributor to set Cross-Site payload in them. A post made by a contributor would still hav...

CVE-2020-24503

Insufficient access control in some IntelR Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2020-24503

CVE-2020-24503 affects Intel Ethernet E810 Adapter drivers for Linux. The issue is insufficient access control, which could allow an authenticated local user to enable information disclosure via local access. The vulnerability is associated with Linux driver versions prior to 1.0.4. The MiracleLi...

CVE-2020-24503

Insufficient access control in some IntelR Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user to potentially enable information disclosure via local access...

Intel® Ethernet E810 Adapter Driver Advisory

Summary: Potential security vulnerabilities in some Intel® Ethernet E810 Adapter Drivers for Linux and Windows may allow denial of service or information disclosure. Intel is releasing driver updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-24504...