After Log4j, December’s Patch Tuesday has snuck up on us

For anyone about to sit back after checking their environment for the Log4j vulnerabilities and applying patches where needed, here are some more things that need patching. Microsoft In 2021’s final Patch Tuesday, Microsoft included a total of 67 fixes for security vulnerabilities. The total set ...

CVE-2021-43215

creationtimestamp| type| source ---|---|--- 2021-12-15 17:34:38+00:00| seen| https://t.me/truesecator/2447...

CVE-2021-43215

iSNS Server Memory Corruption Vulnerability Can Lead to Remote Code Execution...

CVE-2021-43215

iSNS Server Memory Corruption Vulnerability Can Lead to Remote Code Execution...

CVE-2021-43215

CVE-2021-43215 affects the iSNS (Internet Storage Name Service) server. It is a memory corruption vulnerability that can lead to remote code execution when an attacker sends a specially crafted request to an affected iSNS server. The issue is network-exploitable (no user interaction) and is consi...

CVE-2021-43215 iSNS Server Memory Corruption Vulnerability Can Lead to Remote Code Execution

...

Microsoft Windows Multiple Vulnerabilities (KB5008212)

This host is missing a critical security update according to Microsoft KB5008212 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

KB5008282: Windows 7 and Windows Server 2008 R2 Security Update (December 2021)

The remote Windows host is missing security update 5008282 or cumulative update 5008244. It is, therefore, affected by multiple vulnerabilities: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2021-40441, CVE-2021-41333, CVE-2021-43207,...

KB5008230: Windows 10 version 1507 Security Update (December 2021)

The remote Windows host is missing security update 5008230. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2021-43215, CVE-2021-43217,...

KB5008207: Windows 10 Version 1607 and Windows Server 2016 Security Update (December 2021)

The remote Windows host is missing security update 5008207. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2021-43215, CVE-2021-43217,...

KB5008255: Windows Server 2012 Security Update (December 2021)

The remote Windows host is missing security update 5008255 or cumulative update 5008277. It is, therefore, affected by multiple vulnerabilities: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2021-40441, CVE-2021-41333, CVE-2021-43207,...

KB5008206: Windows 10 Version 1909 Security Update (December 2021)

The remote Windows host is missing security update 5008206. It is, therefore, affected by multiple vulnerabilities: - A denial of service DoS vulnerability. An attacker can exploit this issue to cause the affected component to deny system or application services. CVE-2021-43219, CVE-2021-43228,...

KB5008271: Windows Server 2008 Security Update (December 2021)

The remote Windows host is missing security update 5008271 or cumulative update 5008274. It is, therefore, affected by multiple vulnerabilities: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2021-41333, CVE-2021-43207, CVE-2021-43226,...