Exploit for Missing Authentication for Critical Function in Estrongs Es_File_Explorer_File_Manager

CVE-2019-6447-ES file Explorer e...

GHSA-GRH7-935J-HG6W Cross-site Scripting in Sidekiq

Sidekiq through 5.1.3 and 6.x through 6.2.0 allows XSS via the queue name of the live-poll feature when Internet Explorer is used...

Cross-site Scripting in Sidekiq

Sidekiq through 5.1.3 and 6.x through 6.2.0 allows XSS via the queue name of the live-poll feature when Internet Explorer is used...

Cross-site Scripting in Sidekiq

Sidekiq through 5.1.3 and 6.x through 6.2.0 allows XSS via the queue name of the live-poll feature when Internet Explorer is used...

CVE-2021-39857

Adobe Acrobat Reader DC add-on for Internet Explorer versions 2021.005.20060 and earlier, 2020.004.30006 and earlier and 2017.011.30199 and earlier are affected by an Information Disclosure vulnerability. An unauthenticated attacker could leverage this vulnerability to check for existence of loca...

CVE-2021-39857

Adobe Acrobat Reader DC add-on for Internet Explorer versions 2021.005.20060 and earlier, 2020.004.30006 and earlier and 2017.011.30199 and earlier are affected by an Information Disclosure vulnerability. An unauthenticated attacker could leverage this vulnerability to check for existence of loca...

Information disclosure

Adobe Acrobat Reader DC add-on for Internet Explorer versions 2021.005.20060 and earlier, 2020.004.30006 and earlier and 2017.011.30199 and earlier are affected by an Information Disclosure vulnerability. An unauthenticated attacker could leverage this vulnerability to check for existence of loca...

CVE-2021-39857 Adobe Acrobat Reader DC Information Disclosure via ActiveX LoadFile

Adobe Acrobat Reader DC add-on for Internet Explorer versions 2021.005.20060 and earlier, 2020.004.30006 and earlier and 2017.011.30199 and earlier are affected by an Information Disclosure vulnerability. An unauthenticated attacker could leverage this vulnerability to check for existence of loca...

CVE-2021-39857

CVE-2021-39857 affects Adobe Acrobat Reader DC/IE ActiveX LoadFile vulnerability. The IE add-on (Audot Reader DC for IE) versions 2021.005.20060 and earlier, 2020.004.30006 and earlier, and 2017.011.30199 and earlier are susceptible. Root cause: ActiveX LoadFile behavior enables information discl...

Zoom Rooms Elevation of Privilege Vulnerability

ZOOM Rooms is a software-based conferencing system from the US company Zoom ZOOM. A system that allows web conferencing on fixed endpoints, similar to traditional video conferencing systems.A security vulnerability exists in versions prior to Zoom Rooms for Conference Room for Windows 5.3.0, whic...

CVE-2021-39857: Exposure of Sensitive Information to an Unauthorized Actor

Adobe Acrobat Reader DC add-on for Internet Explorer versions 2021.005.20060 and earlier, 2020.004.30006 and earlier and 2017.011.30199 and earlier are affected by an Information Disclosure vulnerability. An unauthenticated attacker could leverage this vulnerability to check for existence of loca...

Zoom Client Elevation of Privilege Vulnerability

Zoom Client is a multi-platform video conferencing client application from Zoom ZOOM, a U.S. company. versions prior to Zoom Client for Meetings for Windows 5.4.0 contain a security vulnerability that could be exploited to launch Internet Explorer with elevated privileges...

CVE-2021-34412

During the installation process for all versions of the Zoom Client for Meetings for Windows before 5.4.0, it is possible to launch Internet Explorer. If the installer was launched with elevated privileges such as by SCCM this can result in a local privilege escalation...

CVE-2021-34411

During the installation process forZoom Rooms for Conference Room for Windows before version 5.3.0 it is possible to launch Internet Explorer with elevated privileges. If the installer was launched with elevated privileges such as by SCCM this can result in a local privilege escalation...

CVE-2021-34412

During the installation process for all versions of the Zoom Client for Meetings for Windows before 5.4.0, it is possible to launch Internet Explorer. If the installer was launched with elevated privileges such as by SCCM this can result in a local privilege escalation...

CVE-2021-34411

During the installation process forZoom Rooms for Conference Room for Windows before version 5.3.0 it is possible to launch Internet Explorer with elevated privileges. If the installer was launched with elevated privileges such as by SCCM this can result in a local privilege escalation...

Privilege escalation

During the installation process forZoom Rooms for Conference Room for Windows before version 5.3.0 it is possible to launch Internet Explorer with elevated privileges. If the installer was launched with elevated privileges such as by SCCM this can result in a local privilege escalation...

CVE-2021-34412

During the installation process for all versions of the Zoom Client for Meetings for Windows before 5.4.0, it is possible to launch Internet Explorer. If the installer was launched with elevated privileges such as by SCCM this can result in a local privilege escalation...

ZOOM Rooms security vulnerabilities

ZOOM Rooms is a software-based conferencing system from the US company Zoom ZOOM. A system that allows web conferencing on fixed endpoints, similar to traditional video conferencing systems.A security vulnerability exists in versions prior to Zoom Rooms for Conference Room for Windows 5.3.0, whic...

PT-2021-20519

Name of the Vulnerable Software and Affected Versions: Zoom Rooms for Conference Room for Windows versions prior to 5.3.0 Description: The issue allows for the launch of Internet Explorer with elevated privileges during the installation process. If the installer is launched with elevated...