PT-2021-4685 · Microsoft · Console Window Host +1

Name of the Vulnerable Software and Affected Versions: Console Window Host affected versions not specified Description: The issue is related to errors in security settings of the Console Window Host component in Microsoft Windows operating systems. This allows an attacker to bypass security...

KB5006667: Windows 10 version 1909 Security Update (October 2021)

The remote Windows host is missing security update 5006667. It is, therefore, affected by multiple vulnerabilities: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. CVE-2021-36970, CVE-2021-40455 - A denial of service...

Security feature bypass

Unauthorized information security disclosure vulnerability on Micro Focus Directory and Resource Administrator DRA product, affecting all DRA versions prior to 10.1 Patch 1. The vulnerability could lead to unauthorized information disclosure...

Security feature bypass

An issue was discovered in Concrete CMS through 8.5.5. There is an SVG sanitizer bypass...

CVE-2021-38624

Windows Key Storage Provider Security Feature Bypass Vulnerability...

CVE-2021-38632

Windows BitLocker Security Feature Bypass Vulnerability...

CVE-2021-38624

Windows Key Storage Provider Security Feature Bypass Vulnerability...

Security feature bypass

Windows Key Storage Provider Security Feature Bypass Vulnerability...

CVE-2021-38632: Undefined Security Weakness

Windows BitLocker Security Feature Bypass Vulnerability...

CVE-2021-38624: Authorization Bypass Through User-Controlled Key

Windows Key Storage Provider Security Feature Bypass Vulnerability...

Windows Key Storage Provider Security Feature Bypass Vulnerability

...

KB5005569: Windows 10 version 1507 LTS September 2021 Security Update

The remote Windows host is missing security update 5005569. It is, therefore, affected by multiple vulnerabilities : - An memory corruption vulnerability exists. An attacker can exploit this to corrupt the memory and cause unexpected behaviors within the system/application. CVE-2021-26435 - An...

KB5005566: Windows 10 version 1909 / Windows Server 1909 Security Update (September 2021)

The remote Windows host is missing security update 5005566. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2021-36954, CVE-2021-36955, CVE-2021-36963, CVE-2021-36964, CVE-2021-36966,...

APSB21-75 Security update available for Adobe ColdFusion

Adobe has released security updates for ColdFusion versions 2021 and 2018. These updates resolve multiple critical vulnerabilities that could lead to security feature bypass...

KB5005627: Windows 8.1 and Windows Server 2012 R2 September 2021 Security Update

The remote Windows host is missing security update 5005627 or cumulative update 5005613. It is, therefore, affected by multiple vulnerabilities : - An memory corruption vulnerability exists. An attacker can exploit this to corrupt the memory and cause unexpected behaviors within the...

KB5005565: Windows 10 Version 2004 / Windows 10 Version 20H2 / Windows 10 Version 21H1 Security Update (September 2021)

The remote Windows host is missing security update 5005565. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2021-36954, CVE-2021-36955, CVE-2021-36963, CVE-2021-36964, CVE-2021-36966,...

KB5005568: Windows 10 Version 1809 and Windows Server 2019 September 2021 Security Update

The remote Windows host is missing security update 5005568. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2021-36954, CVE-2021-36955, CVE-2021-36963, CVE-2021-36964, CVE-2021-36966,...

KB5005573: Windows 10 Version 1607 and Windows Server 2016 September 2021 Security Update

The remote Windows host is missing security update 5005573. It is, therefore, affected by multiple vulnerabilities : - An memory corruption vulnerability exists. An attacker can exploit this to corrupt the memory and cause unexpected behaviors within the system/application. CVE-2021-26435 - An...

VulnCheck KEV: CVE-2021-31207

Microsoft Exchange Server Security Feature Bypass Vulnerability...

CVE-2021-28627 Adobe Experience Manager Server-side Request Forgery could lead to Security feature bypass

Adobe Experience Manager Cloud Service offering, as well as versions 6.5.8.0 and below is affected by a Server-side Request Forgery. An authenticated attacker could leverage this vulnerability to contact systems blocked by the dispatcher. Exploitation of this issue does not require user interacti...