USN-5373-1: Django vulnerabilities

It was discovered that Django incorrectly handled certain certain column aliases in the QuerySet.annotate, aggregate, and extra methods. A remote attacker could possibly use this issue to perform an SQL injection attack. CVE-2022-28346 It was discovered that Django incorrectly handled certain...

Ubuntu 18.04 LTS / 20.04 LTS : Django vulnerabilities (USN-5373-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5373-1 advisory. It was discovered that Django incorrectly handled certain certain column aliases in the QuerySet.annotate, aggregate, and extra methods. A...

CVE-2021-28346

Remote Procedure Call Runtime Remote Code Execution Vulnerability...

CVE-2021-28346

Remote Procedure Call Runtime Remote Code Execution Vulnerability...

CVE-2021-28346 Remote Procedure Call Runtime Remote Code Execution Vulnerability

...

CVE-2021-28346

Technical details about CVE-2021-28346 are not provided in the supplied documents. Monitor for updates from official advisories; no affected product/version/root-cause/mitigation details are present here.

KB5001389: Windows Server 2008 Security Update (Apr 2021)

The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Microsoft Internet Messaging API Remote Code Execution Vulnerability CVE-2021-27089 - Windows Kernel Information Disclosure Vulnerability CVE-2021-27093, CVE-2021-28309 - Windows Media...

KB5001347: Windows 10 version 1607 / Windows Server 2016 Security Update (Apr 2021)

The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Win32k Elevation of Privilege Vulnerability CVE-2021-27072 - Windows Media Photo Codec Information Disclosure Vulnerability CVE-2021-27079 - Microsoft Internet Messaging API Remote Code...

KB5001342: Windows 10 version 1809 / Windows Server 2019 Security Update (Apr 2021)

The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Win32k Elevation of Privilege Vulnerability CVE-2021-27072, CVE-2021-28310 - Windows Media Photo Codec Information Disclosure Vulnerability CVE-2021-27079 - Windows Event Tracing Elevati...

CVE-2020-28346

CVE-2020-28346 : The vulnerability affects ACRN (hypervisor) up to version 2.2, where the devicemodel/hw/pci/virtio/virtio.c contains a NULL pointer dereference. This is the underlying cause, as described in multiple sources, and the impact is listed as HIGH (availability impact) with network att...