Windows Media Foundation Dolby Digital Atmos Decoders Remote Code Execution Vulnerability

...

Microsoft Windows Media Foundation Remote Code Execution Vulnerability

...

Description of the security update for SharePoint Foundation 2013: October 12, 2021 (KB5002042)

Description of the security update for SharePoint Foundation 2013: October 12, 2021 KB5002042 Summary This security update resolves a Microsoft SharePoint Server spoofing vulnerability and Microsoft SharePoint Server remote code execution vulnerability. To learn more about the vulnerabilities, se...

PT-2021-4367 · Microsoft · Windows Media Foundation Dolby Digital Atmos Decoders +1

Name of the Vulnerable Software and Affected Versions: Windows Media Foundation Dolby Digital Atmos Decoders affected versions not specified Description: The issue is related to incorrect code generation management in the Windows Media Foundation Dolby Digital Atmos Decoders component. It allows...

PT-2021-4397 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Foundation affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description: The issue is related to incorrect...

Mozilla Firefox MessageTask resource management error vulnerability

Mozilla Firefox, an open source web browser from the Mozilla Foundation, has a resource management error vulnerability in Mozilla Firefox MessageTask, which stems from the fact that tasks may have been deleted while they were still scheduled during operations on MessageTasks, and could be exploit...

Zephyr 缓冲区错误漏洞

Zephyr is an open source, small, scalable, real-time operating system from the Linux Foundation in the U.S. A security vulnerability exists in Zephyr, which stems from improper design or implementation during the development of code for a networked system or product. No details of the vulnerabili...

PT-2021-4437 · Microsoft · Windows Media Foundation +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Media Foundation affected versions not specified Description: The issue is related to incorrect code generation management in the Media Foundation component of Windows operating systems. It allows remote attackers to execute...

PT-2021-4432 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified SharePoint Foundation affected versions not specified SharePoint Enterprise Server affected versions not specified Description: The issue is related to incorrect code generation...

WordPress Smash Balloon Social Post Feed Plugin < 2.19.2 XSS Vulnerability

The WordPress plugin Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

CVE-2021-25633

LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to...

Mozilla Firefox Post-release Reuse Vulnerability (CNVD-2021-90095)

Mozilla Firefox is an open source Web browser from the Mozilla Foundation in the U.S. Mozilla Firefox is vulnerable to a post-release reuse vulnerability that exists due to a post-release usage error in the nsLanguageAtomService object. A remote attacker could use this vulnerability to trick a...

New Patch Released for Actively Exploited 0-Day Apache Path Traversal to RCE Attacks

The Apache Software Foundation on Thursday released additional security updates for its HTTP Server product to remediate what it says is an "incomplete fix" for an actively exploited path traversal and remote code execution flaw that it patched earlier this week. CVE-2021-42013, as the new...

The vulnerability of the management tool for virtual infrastructure, VMware vCenter Server, and the virtualization platform, VMware Cloud Foundation, arises from the lack of protective measures for the website structure. This allows attackers to redirect users to malicious web pages.

The vulnerability of the management tool for virtual infrastructure, VMware vCenter Server, and the virtualization platform, VMware Cloud Foundation, is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor to redirect...

The vulnerability of the rhttpproxy service, a management tool for virtual infrastructure, such as VMware vCenter Server and VMware Cloud Foundation, allows attackers to circumvent existing security restrictions.

The vulnerability of the rhttpproxy service in the vmware vcenterserver software is related to errors in the authentication process. Exploiting this vulnerability allows an attacker to bypass existing security restrictions remotely...

The vulnerability of the VAMI management interface related to VMware vCenter Server and VMware Cloud Foundation, a virtualization platform, arises from improper code generation. This allows an attacker to execute arbitrary code.

The vulnerability of the VAMI management interface for VMware vCenter Server and VMware Cloud Foundation virtualization platforms is related to improper code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code on the operating system...

The vulnerability of the VMware vSphere Life-cycle Manager module, a management tool for virtual infrastructure, allows a hacker to delete arbitrary files. This vulnerability exists in the VMware vCenter Server virtualization platform and the VMware Cloud Foundation.

The vulnerability of the VMware vSphere Life-cycle Manager, a management tool for virtual infrastructure, related to VMware vCenter Server and VMware Cloud Foundation virtualization platforms, is associated with privilege management errors. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the management tools for virtual infrastructure, such as VMware vCenter Server and VMware Cloud Foundation, relates to insecure management of privileges, allowing attackers to escalate their privileges.

The vulnerability of the management tool for virtual infrastructure, VMware vCenter Server, and the virtualization platform, VMware Cloud Foundation, is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of the Analytics service in the management tool for virtual infrastructure, VMware vCenter Server, and the virtualization platform, VMware Cloud Foundation, allows a attacker to trigger a service failure.

The vulnerability of the Analytics service in the management tool for VMware vCenter Server and VMware Cloud Foundation virtualization platforms exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the VAPI service (vCenter API), a management tool for VMware vCenter Server and VMware Cloud Foundation virtualization platforms, allows a attacker to cause a service failure.

The vulnerability of the VAPI service vCenter API, a management tool for VMware vCenter Server and VMware Cloud Foundation virtualization platforms, exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...