KLA12142 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, cause denial of service, gain privileges, bypass security restrictions, spoof user interface. Below is a...

Microsoft Internet Messaging API 代码注入漏洞

The Microsoft Internet Messaging API is an application programming interface from Microsoft. Applications programmed with MAPI can be used with a variety of email servers by changing the MAPI driver without the need for changes. Microsoft Internet Messaging API remote code execution vulnerability...

KB5001339: Windows 10 version 1803 Security Update (April 2021)

The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Win32k Elevation of Privilege Vulnerability CVE-2021-27072, CVE-2021-28310 - Windows Media Photo Codec Information Disclosure Vulnerability CVE-2021-27079 - Windows Event Tracing Elevati...

PYSEC-2021-25

Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 requests to user provided domains were not restricted to external IP addresses when transitional IPv6...

Design/Logic Flaw

Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 requests to user provided domains were not restricted to external IP addresses when transitional IPv6...

CVE-2021-21392

Synapse (matrix-synapse) prior to version 1.28.0 is affected by a vulnerability where requests to user-provided domains could escape external IP restrictions on dual-stack networks due to transitional IPv6 addresses. This may allow outbound requests to internal infrastructure during federation, i...

CVE-2021-21392 Open redirect via transitional IPv6 addresses on dual-stack networks

Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 requests to user provided domains were not restricted to external IP addresses when transitional IPv6...

CVE-2021-21392

Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 requests to user provided domains were not restricted to external IP addresses when transitional IPv6...

CVE-2021-21393

Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 Synapse is missing input validation of some parameters on the endpoints used to confirm third-party...

Input validation

Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 Synapse is missing input validation of some parameters on the endpoints used to confirm third-party...

CVE-2021-21394

CVE-2021-21394 affects the Matrix Synapse reference homeserver (Python, matrix-synapse) prior to version 1.28.0. The issue is invalid input validation on endpoints used to confirm third-party identifiers, which could cause excessive disk space and memory usage leading to resource exhaustion. The ...

CVE-2021-21394 Denial of service (via resource exhaustion) due to improper input validation on third-party identifier endpoints

Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 Synapse is missing input validation of some parameters on the endpoints used to confirm third-party...

CVE-2021-21394

Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 Synapse is missing input validation of some parameters on the endpoints used to confirm third-party...

TIBCO Security Advisory: April 14, 2021 - TIBCO Messaging - Eclipse MosquittoDistribution -2021-28826

TIBCO Messaging - Eclipse Mosquitto Distribution - Bridge Windows Platform Installation vulnerability Original releasedate: April 14, 2021 Last revised: CVE-2021-28826 Source: TIBCO Software Inc. Products Affected TIBCO Messaging - Eclipse Mosquitto Distribution - Bridge - Community Edition...

TIBCO Security Advisory: April 14, 2021 - TIBCO Messaging - Eclipse Mosquitto Distribution -2021-28825

TIBCO Messaging - Eclipse Mosquitto Distribution - Core Windows Platform Installation vulnerability Original releasedate: April 14, 2021 Last revised: CVE-2021-28825 Source: TIBCO Software Inc. Products Affected TIBCO Messaging - Eclipse Mosquitto Distribution - Core - Community Edition versions...

WS-2021-0059

Nats is a Node.js client for the NATS messaging system...

Signal Adds a Payments Feature—With Cryptocurrency

The encrypted messaging app is integrating support for MobileCoin in a bid to keep up with the features offered by its more mainstream rivals...

NATS Server Access Control Error Vulnerability

NATS Server is an open source messaging system. The system is mainly used for cloud-native applications, IoT messaging and microservices architecture. An access control error vulnerability exists in NATS Server 2.x before 2.2.0 and JWT library before 2.0.1, which stems from improper handling of...

The vulnerability of the Cisco Jabber for Windows software platform, related to insufficient validation of input data, allows a perpetrator to trigger a service failure state.

The vulnerability of the Cisco Jabber for Windows software platform is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to trigger a service failure by sending specially crafted XMPP messages...

The vulnerability of the NATS messaging system server, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of the NATS messaging system server is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...