Security feature bypass

An issue was discovered in Concrete CMS through 8.5.5. There is an SVG sanitizer bypass...

CVE-2021-38624

Windows Key Storage Provider Security Feature Bypass Vulnerability...

CVE-2021-38624

Windows Key Storage Provider Security Feature Bypass Vulnerability...

CVE-2021-38632

Windows BitLocker Security Feature Bypass Vulnerability...

Security feature bypass

Windows Key Storage Provider Security Feature Bypass Vulnerability...

CVE-2021-38632

CVE-2021-38632 is reported as a BitLocker Security Feature Bypass Vulnerability. The primary document shows a Microsoft/software–level vulnerability entry with a CVSS v3.1 base score of 4.6 (MEDIUM) from NVD, and a local/physical-attack profile (PHYSICAL access, no user interaction required per C...

CVE-2021-38624 Windows Key Storage Provider Security Feature Bypass Vulnerability

...

Windows Key Storage Provider Security Feature Bypass Vulnerability

...

KB5005569: Windows 10 version 1507 LTS September 2021 Security Update

The remote Windows host is missing security update 5005569. It is, therefore, affected by multiple vulnerabilities : - An memory corruption vulnerability exists. An attacker can exploit this to corrupt the memory and cause unexpected behaviors within the system/application. CVE-2021-26435 - An...

KB5005568: Windows 10 Version 1809 and Windows Server 2019 September 2021 Security Update

The remote Windows host is missing security update 5005568. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2021-36954, CVE-2021-36955, CVE-2021-36963, CVE-2021-36964, CVE-2021-36966,...

KB5005627: Windows 8.1 and Windows Server 2012 R2 September 2021 Security Update

The remote Windows host is missing security update 5005627 or cumulative update 5005613. It is, therefore, affected by multiple vulnerabilities : - An memory corruption vulnerability exists. An attacker can exploit this to corrupt the memory and cause unexpected behaviors within the...

Adobe ColdFusion 安全漏洞

Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and a scripting language. A security vulnerability exists in Adobe ColdFusion, which stems from A security vulnerability exists...

KB5005573: Windows 10 Version 1607 and Windows Server 2016 September 2021 Security Update

The remote Windows host is missing security update 5005573. It is, therefore, affected by multiple vulnerabilities : - An memory corruption vulnerability exists. An attacker can exploit this to corrupt the memory and cause unexpected behaviors within the system/application. CVE-2021-26435 - An...

KB5005566: Windows 10 version 1909 / Windows Server 1909 Security Update (September 2021)

The remote Windows host is missing security update 5005566. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2021-36954, CVE-2021-36955, CVE-2021-36963, CVE-2021-36964, CVE-2021-36966,...

KB5005565: Windows 10 Version 2004 / Windows 10 Version 20H2 / Windows 10 Version 21H1 Security Update (September 2021)

The remote Windows host is missing security update 5005565. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2021-36954, CVE-2021-36955, CVE-2021-36963, CVE-2021-36964, CVE-2021-36966,...

APSB21-75 Security update available for Adobe ColdFusion

Adobe has released security updates for ColdFusion versions 2021 and 2018. These updates resolve multiple critical vulnerabilities that could lead to security feature bypass...

VulnCheck KEV: CVE-2021-31207

Microsoft Exchange Server contains an unspecified vulnerability that allows for security feature bypass...

CVE-2021-28627 Adobe Experience Manager Server-side Request Forgery could lead to Security feature bypass

Adobe Experience Manager Cloud Service offering, as well as versions 6.5.8.0 and below is affected by a Server-side Request Forgery. An authenticated attacker could leverage this vulnerability to contact systems blocked by the dispatcher. Exploitation of this issue does not require user interacti...

CVE-2021-28627 Adobe Experience Manager Server-side Request Forgery could lead to Security feature bypass

Adobe Experience Manager Cloud Service offering, as well as versions 6.5.8.0 and below is affected by a Server-side Request Forgery. An authenticated attacker could leverage this vulnerability to contact systems blocked by the dispatcher. Exploitation of this issue does not require user interacti...

Security feature bypass

Rapid7 Nexpose version 6.6.95 and earlier allows authenticated users of the Security Console to view and edit any ticket in the legacy ticketing feature, regardless of the assignment of the ticket. This issue was resolved in version 6.6.96, released on August 4, 2021...