Microsoft HTTP Protocol Stack Remote Code Execution (CVE-2021-31166)

A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Patch Tuesday - May 2021

Here we are again with another installment of Patch Tuesday. When compared to the past few months this one feels a bit light both in severity and number of vulnerabilities addressed. Microsoft has only released patches for 55 CVEs this month, less than half of the usual volume, with only 4 of the...

Microsoft & Adobe Patch Tuesday (May 2021) – Qualys covers 85 Vulnerabilities, 26 Critical

Microsoft Patch Tuesday – May 2021 Microsoft patched 55 CVEs in their May 2021 Patch Tuesday release, of which 4 are rated as critical severity. Three 0-day vulnerability patches were included in the release. As of this publication date, none have been exploited. Qualys released 12 QIDs on the sa...

CVE-2021-31166

HTTP Protocol Stack Remote Code Execution Vulnerability...

CVE-2021-31166

HTTP Protocol Stack Remote Code Execution Vulnerability...

Remote code execution

HTTP Protocol Stack Remote Code Execution Vulnerability...

CVE-2021-31166 HTTP Protocol Stack Remote Code Execution Vulnerability

...

CVE-2021-31166 HTTP Protocol Stack Remote Code Execution Vulnerability

...

HTTP Protocol Stack Remote Code Execution Vulnerability

...

KLA12174 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, spoof user interface, obtain sensitive information, bypass security restrictions, cause denial of service. Below is a complete list of...

Vulnerabilities fixed in Microsoft Windows

Microsoft fixes multiple vulnerabilities in Windows. A malicious party could potentially exploit the vulnerabilities to: Cause a denial-of-service, Bypass security measures, Execute arbitrary code, Obtain elevated privileges, Access sensitive data, Impersonate another user. The vulnerabilities...

The vulnerability of the implementation of the IPv6 TCP/IP stack in the Trace protocol allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the IPv6 TCP/IP implementation in the Trace stack is related to reading data beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the implementation of the TCP/IP protocol stack allows a intruder to gain unauthorized access to protected information.

The vulnerability of the TCP/IP protocol stack implementation is related to reading beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of the implementation of the TCP/IP protocol stack allows a attacker to cause a service failure.

The vulnerability of the Stacked Protocols implementation of TCP/IP is related to buffer overflow in the stack. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the IPv4 tunneling implementation in the Trace TCP/IP protocol stack, related to the repeated memory release, allows a attacker to cause a service failure.

The vulnerability of the IPv4 tunneling implementation in the Trace TCP/IP protocol stack is related to the reallocation of memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions from a remote location...

VulnCheck KEV: CVE-2015-1635

Microsoft HTTP protocol stack HTTP.sys contains a vulnerability that allows for remote code execution...

The vulnerability of the implementation of the ISN generator for the PicoTCP protocol stack allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the ISN generator implementation in the PicoTCP protocol stack is related to the use of insufficiently random values. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of the implementation of the ISN generator in the FNET protocol stack allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the ISN generator implementation in the FNET protocol stack is related to the use of insufficiently random values. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

Siemens SIMATIC MV400 Series TCP Protocol Stack Security Feature Issue Vulnerability

Siemens SIMATIC MV400 is an industrial device from Siemens Germany. It is used for optical identification. A security vulnerability exists in the Siemens SIMATIC MV400 series TCP protocol stack. An attacker could exploit this vulnerability to predict and hijack TCP sessions...

PT-2021-2224 · Silicon · Uc/Tcp-Ip

Name of the Vulnerable Software and Affected Versions: Silicon Labs uC/TCP-IP version 3.6.0 Description: The issue is related to the improper randomness of TCP Initial Sequence Numbers ISNs in the stack protocol used by uC/OS and uC/TCP-IP. This could allow a remote attacker to gain unauthorized...