3331 matches found
CVE-2021-28435
Windows Event Tracing Information Disclosure Vulnerability...
CVE-2021-28358
Remote Procedure Call Runtime Remote Code Execution Vulnerability...
CVE-2021-28436
Windows Speech Runtime Elevation of Privilege Vulnerability...
CVE-2021-28353
Remote Procedure Call Runtime Remote Code Execution Vulnerability...
CVE-2021-28338
Remote Procedure Call Runtime Remote Code Execution Vulnerability...
CVE-2021-28327
Remote Procedure Call Runtime Remote Code Execution Vulnerability...
CVE-2021-28330
Remote Procedure Call Runtime Remote Code Execution Vulnerability...
CVE-2021-28318
Windows GDI+ Information Disclosure Vulnerability...
CVE-2021-27096
NTFS Elevation of Privilege Vulnerability...
CVE-2021-27072
Win32k Elevation of Privilege Vulnerability...
CVE-2021-26417
Windows Overlay Filter Information Disclosure Vulnerability...
CVE-2021-28458
Azure ms-rest-nodeauth Library Elevation of Privilege Vulnerability...
@commonshost/edge (>=2.0.0 <=2.14.0), @commonshost/server (>=6.5.0 <=6.17.0) +11 more potentially affected by CVE-2020-28360 via private-ip (=1.0.5)
private-ip NPM version =1.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on private-ip and may be impacted: - @commonshost/edge =2.0.0, =6.5.0, =0.1.0, =0.1.0, =1.2.11, =1.0.1, =1.1.0, =2.2.0, =0.2.1, =0.0.15-0, =1.0.1, =1.0.0, =1.3.0 Source cves:...
CVE-2021-28142
CITSmart before 9.1.2.28 mishandles the "filtro de autocomplete."...
UBUNTU-CVE-2021-1871
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution. Apple is aware of a report that this...
CVE-2021-27450
SSH server configuration file does not implement some best practices. This could lead to a weakening of the SSH protocol strength, which could lead to additional misconfiguration or be leveraged as part of a larger attack on the MU320E all firmware versions prior to v04A00.1...
CVE-2020-6771
Loading a DLL through an Uncontrolled Search Path Element in Bosch IP Helper up to and including version 1.00.0008 potentially allows an attacker to execute arbitrary code on a victim's system. A prerequisite is that the victim is tricked into placing a malicious DLL in the same application...
CVE-2021-21349
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to request data from internal resources that are not publicly available only by manipulating the processed input stream. No user is...
GHSA-XFHP-GMH8-R8V2 printf vulnerable to Regular Expression Denial of Service (ReDoS)
The package printf before 0.6.1 are vulnerable to Regular Expression Denial of Service ReDoS via the regex string regex /%?:\w.+|1-9\d$?0 +-\|\d+?.?|\d+?hlL?%bscdeEfFgGioOuxX/g in lib/printf.js. The vulnerable regular expression has cubic worst-case time complexity...