131 matches found
CVE-2021-36290
Dell VNX2 for File version 8.1.21.266 and earlier, contain a privilege escalation vulnerability. A local malicious admin may potentially exploit vulnerability and gain privileges...
CVE-2021-36288
CVE-2021-36288 corresponds to a path traversal vulnerability in Dell VNX2 for File (versions up to and including 8.1.21.266). An unauthenticated user could read/write restricted files due to improper input validation in the affected component. The exploitability is network-based with low attack c...
CVE-2021-36287
CVE-2021-36287 affects Dell VNX2 for file, version 8.1.21.266 and earlier. The vulnerability is an unauthenticated remote code execution that could allow an unauthenticated attacker to run commands on the system. The available sources confirm the affected product and the broad impact (remote comm...
CVE-2021-36296
Dell VNX2 OE for File versions 8.1.21.266 and earlier, contain an authenticated remote code execution vulnerability. A remote malicious user with privileges may exploit this vulnerability to execute commands on the system...
CVE-2021-36295
Dell VNX2 OE for File versions 8.1.21.266 and earlier, contain an authenticated remote code execution vulnerability. A remote malicious user with privileges may exploit this vulnerability to execute commands on the system...
Download Monitor < 4.4.7 - Admin+ Stored Cross-Site Scripting
The plugin does not sanitise and escape the postid and downloadablefileversion parameters, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks...
KB5003364: Servicing stack update for Windows 10, version 1803: May 11, 2021
None None...
KB5001402: Servicing stack update for Windows 10, version 1607: April 13, 2021
None None...
Description of the security update for Office 2010: March 9, 2021 (KB4493214)
Description of the security update for Office 2010: March 9, 2021 KB4493214 Summary This security update resolves a Microsoft Excel Remote Code Execution Vulnerability. To learn more about the vulnerability, see the following security advisories: Microsoft Common Vulnerabilities and Exposures...
CVE-2020-36252
CVE-2020-36252 affects OwnCloud Server 10.x prior to 10.3.1. An attacker who has one outgoing share from a victim can access any version of any file by requesting a predictable ID number, exploiting a privilege/access-control flaw. The vulnerability impacts confidentiality (high) and is classifie...
Owncloud 权限许可和访问控制问题漏洞
OwnCloud OwnCloud is a personal cloud storage solution from OwnCloud Owncloud, an American company. A privilege permission and access control issue vulnerability exists in OwnCloud Server, which can be exploited by an attacker to access any version of any file by sending a request with a...
Microsoft Windows DrawIconEx Local Privilege Escalation Exploit
This Metasploit module exploits CVE-2020-1054, an out of bounds write reachable from DrawIconEx within win32k. The out of bounds write can be used to overwrite the pvbits of a SURFOBJ. By utilizing this vulnerability to execute controlled writes to kernel memory, an attacker can gain arbitrary co...
Description of the security update for Office 2016: September 8, 2020 (KB4484466)
None None...
Description of the security update for Microsoft Visual Studio 2013 Update 5: September 8, 2020
None None...
Servicing stack update for Windows 10, version 2004: September 8, 2020
None None...
Servicing stack update for Windows 10, version 1809: July 14, 2020
None None...
Servicing stack update for Windows 10, version 1709: June 9, 2020
None None...
Servicing stack update for Windows 10: June 9, 2020
None None...
Description of the security update for SharePoint Server 2010 Office Web Apps: April 14, 2020
Description of the security update for SharePoint Server 2010 Office Web Apps: April 14, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Word software if it does not correctly handle objects in memory. To learn more about the vulnerability...
Description of the security update for Office 2010: April 14, 2020
Description of the security update for Office 2010: April 14, 2020 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...