Lucene search
+L

11414 matches found

Microsoft Security Update
Microsoft Security Update
added 2021/03/09 6:0 p.m.22 views

2020-10 Security and Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 7 (KB4579977)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

1.8AI score
SaveExploits0
OSV
OSV
added 2021/03/09 3:15 p.m.7 views

CVE-2021-21488

Knowledge Management versions 7.01, 7.02, 7.30, 7.31, 7.40, 7.50 allows a remote attacker with basic privileges to deserialize user-controlled data without verification, leading to insecure deserialization which triggers the attacker’s code, therefore impacting Availability...

6.5CVSS6.8AI score0.01295EPSS
SaveExploits0References2
NVD
NVD
added 2021/03/09 3:15 p.m.26 views

CVE-2021-21488

Knowledge Management versions 7.01, 7.02, 7.30, 7.31, 7.40, 7.50 allows a remote attacker with basic privileges to deserialize user-controlled data without verification, leading to insecure deserialization which triggers the attacker’s code, therefore impacting Availability...

6.5CVSS0.01295EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/03/09 3:15 p.m.4 views

CVE-2021-21488

Knowledge Management versions 7.01, 7.02, 7.30, 7.31, 7.40, 7.50 allows a remote attacker with basic privileges to deserialize user-controlled data without verification, leading to insecure deserialization which triggers the attacker’s code, therefore impacting Availability...

6.5CVSS6.8AI score0.01295EPSS
SaveExploits0References3Affected Software1
Prion
Prion
added 2021/03/09 3:15 p.m.22 views

Deserialization of untrusted data

Knowledge Management versions 7.01, 7.02, 7.30, 7.31, 7.40, 7.50 allows a remote attacker with basic privileges to deserialize user-controlled data without verification, leading to insecure deserialization which triggers the attacker’s code, therefore impacting Availability...

4CVSS6.5AI score0.01295EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/03/09 2:7 p.m.32 views

CVE-2021-21488

Knowledge Management versions 7.01, 7.02, 7.30, 7.31, 7.40, 7.50 allows a remote attacker with basic privileges to deserialize user-controlled data without verification, leading to insecure deserialization which triggers the attacker’s code, therefore impacting Availability...

6.5CVSS6.7AI score0.01295EPSS
SaveExploits0References2
CVE
CVE
added 2021/03/09 2:7 p.m.57 views

CVE-2021-21488

CVE-2021-21488 affects SAP NetWeaver Knowledge Management Configuration Service versions 7.01, 7.02, 7.30, 7.31, 7.40, 7.50. The issue is insecure/deserialization of user-controlled data by a remote attacker with basic privileges, leading to attacker-controlled code execution and an impact on ava...

6.5CVSS6.5AI score0.01295EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2021/03/09 12:0 a.m.7 views

SAP NetWeaver Knowledge Management Configuration Service 代码问题漏洞

SAP NetWeaver Knowledge Management Configuration Service is a knowledge management solution configuration service from SAP. A security vulnerability exists in SAP NetWeaver Knowledge Management Configuration Service versions 7.01, 7.02, 7.30, 7.31, 7.40, 7.50, which allows remote attackers with...

6.5CVSS5.8AI score0.01295EPSS
SaveExploits0References3
nodejs
nodejs
added 2021/03/08 3:57 p.m.44 views

Improper Authentication

Overview In affected versions of botframework-connector, a maliciously crafted claim may be incorrectly authenticated by the bot. Impacts bots that are not configured to be used as a Skill. This vulnerability requires an attacker to have internal knowledge of the bot. Recommendation Upgrade to fi...

2.1CVSS5.4AI score0.01057EPSS
SaveExploits0Affected Software1
Github Security Blog
Github Security Blog
added 2021/03/08 3:50 p.m.40 views

Improper Authentication

Impact A maliciously crafted claim may be incorrectly authenticated by the bot. Impacts bots that are not configured to be used as a Skill. This vulnerability requires an an attacker to have internal knowledge of the bot. Patches The problem has been patched in all affected versions. Please see t...

3.3AI score
SaveExploits0References4Affected Software1
The Hacker News
The Hacker News
added 2021/03/05 10:22 a.m.63 views

Google Cloud Certifications — Get Prep Courses and Practice Tests at 95% Discount

As cloud computing continues to grow, Google Cloud is quickly becoming one of the most popular solutions. However, relatively few engineers know this platform well. This leaves the door open for aspiring IT professionals who take the official exams. The Google Cloud Certifications Practice Tests ...

0.2AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
added 2021/03/03 8:57 p.m.17 views

Azure File Sync Agent v11.2 Release – February 2021 (KB4539952)

Update for Azure File Sync agent version 11.2.0.0. For more details, see the associated Microsoft Knowledge Base article...

3.7AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
added 2021/03/03 8:56 p.m.17 views

Azure File Sync Agent v11.2 Release – February 2021 (KB4539952)

Update for Azure File Sync agent version 11.2.0.0. For more details, see the associated Microsoft Knowledge Base article...

3.7AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
added 2021/03/03 8:54 p.m.17 views

Azure File Sync Agent v11.2 Release – February 2021 (KB4539952)

Update for Azure File Sync agent version 11.2.0.0. For more details, see the associated Microsoft Knowledge Base article...

3.7AI score
SaveExploits0
OSV
OSV
added 2021/03/03 5:15 p.m.3 views

DEBIAN-CVE-2021-27927

In Zabbix from 4.0.x before 4.0.28rc1, 5.0.0alpha1 before 5.0.10rc1, 5.2.x before 5.2.6rc1, and 5.4.0alpha1 before 5.4.0beta2, the CControllerAuthenticationUpdate controller lacks a CSRF protection mechanism. The code inside this controller calls diableSIDValidation inside the init method. An...

8.8CVSS8.1AI score0.01472EPSS
SaveExploits0References1
Veeam
Veeam
added 2021/03/02 12:0 a.m.14 views

SMB credentials cached by macOS

Challenge After you change credentials for the SMB share in the backup policy settings and re-apply the backup policy, macOS may still use obsolete credentials to connect to the SMB share. As a result, if incorrect credentials are specified in the backup policy settings, the policy application an...

6.5AI score
SaveExploits0Affected Software1
Cvelist
Cvelist
added 2021/02/26 2:50 p.m.35 views

CVE-2021-22661

Changing the password on the module webpage does not require the user to type in the current password first. Thus, the password could be changed by a user or external process without knowledge of the current password on the ICX35-HWC-A and ICX35-HWC-E Versions 1.9.62 and prior...

7.7AI score0.01019EPSS
SaveExploits0References1
Veeam
Veeam
added 2021/02/26 12:0 a.m.15 views

Veeam Service Provider Console v5 Patch 1

This patch has been superseded by Veeam Service Provider Console v5 Patch 2. Requirements Please confirm you are running version 5.0.0.6726 before installing Patch 1. You can check this by logging in to the backup portal and navigating to the Configuration Support Information tab. After upgrading...

7.2AI score
SaveExploits0Affected Software1
CNVD
CNVD
added 2021/02/22 12:0 a.m.4 views

National Knowledge Infrastructure CNKI China Knowledge Network has Unauthorized Access Vulnerability

CNKI generally refers to China Knowledge Network. CNKI, the concept of National Knowledge Infrastructure NKI, was proposed by the World Bank in 1998.The CNKI project is an informatization construction project aiming at realizing the dissemination, sharing and value-added utilization of knowledge...

6.8AI score
SaveExploits0
Veeam
Veeam
added 2021/02/18 12:0 a.m.17 views

How to specify an Azure Active Directory tenant for Azure Cloud Credentials wizard to use

Challenge You are adding a Microsoft Azure account to Veeam Backup & Replication. You need to select the method of importing your Azure Resource Manager subscription, and you want to use an existing Azure Active Directory Account. Also, you have more than one Azure Active Directory tenant...

6.8AI score
SaveExploits0
Rows per page
Query Builder