4062 matches found
Security feature bypass
A flaw was found in ansible module where credentials are disclosed in the console log by default and not protected by the security feature when using the bitbucketpipelinevariable module. This flaw allows an attacker to steal bitbucketpipeline credentials. The highest threat from this vulnerabili...
CVE-2021-20178
A flaw was found in ansible module where credentials are disclosed in the console log by default and not protected by the security feature when using the bitbucketpipelinevariable module. This flaw allows an attacker to steal bitbucketpipeline credentials. The highest threat from this vulnerabili...
Patch Tuesday - May 2021
Here we are again with another installment of Patch Tuesday. When compared to the past few months this one feels a bit light both in severity and number of vulnerabilities addressed. Microsoft has only released patches for 55 CVEs this month, less than half of the usual volume, with only 4 of the...
Microsoft & Adobe Patch Tuesday (May 2021) – Qualys covers 85 Vulnerabilities, 26 Critical
Microsoft Patch Tuesday – May 2021 Microsoft patched 55 CVEs in their May 2021 Patch Tuesday release, of which 4 are rated as critical severity. Three 0-day vulnerability patches were included in the release. As of this publication date, none have been exploited. Qualys released 12 QIDs on the sa...
CVE-2021-31207
Microsoft Exchange Server Security Feature Bypass Vulnerability...
CVE-2021-31205
Windows SMB Client Security Feature Bypass Vulnerability...
Security feature bypass
Windows SMB Client Security Feature Bypass Vulnerability...
Security feature bypass
Microsoft Exchange Server Security Feature Bypass Vulnerability...
CVE-2021-31205
Windows SMB Client Security Feature Bypass Vulnerability...
CVE-2021-31207
CVE-2021-31207 is one of the ProxyShell chain affecting on-premises Microsoft Exchange Server, enabling post-auth arbitrary-file-write that can lead to remote code execution. Exploitation chains documented in FireEye and related advisories describe initial steps using Autodiscover and MAPI to lea...
CVE-2021-31205
CVE-2021-31205 is a Windows SMB Client security feature bypass vulnerability. Affects Windows SMB Client components on Windows 10 (various 2004/20H2 builds) and related Windows targets; root cause is a security feature bypass in the SMB client that can allow bypassing security restrictions when t...
CVE-2021-31205 Windows SMB Client Security Feature Bypass Vulnerability
...
Microsoft Exchange Server Security Feature Bypass Vulnerability
...
Windows SMB Client Security Feature Bypass Vulnerability
...
CVE-2021-31207
Microsoft Exchange Server Security Feature Bypass Vulnerability Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...
KLA12174 Multiple vulnerabilities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, spoof user interface, obtain sensitive information, bypass security restrictions, cause denial of service. Below is a complete list of...
CVE-2021-28447
Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability...
CVE-2021-28444
Windows Hyper-V Security Feature Bypass Vulnerability...