4388 matches found
Security feature bypass
There is a logic vulnerability in Huawei Gauss100 OLTP Product. An attacker with certain permissions could perform specific SQL statement to exploit this vulnerability. Due to insufficient security design, successful exploit can cause service abnormal. Affected product versions include: ManageOne...
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
...
PT-2021-2065 · Microsoft · Edge
Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to a security feature bypass vulnerability. It may allow a remote attacker to execute arbitrary code or gain unauthorized access to protected...
Security fix for the ALT Linux 9 package dotnet-bootstrap-3.1 version 3.1.11-alt1
Jan. 28, 2021 Vitaly Lipatov 3.1.11-alt1 - new version 3.1.11 with rpmgs script - .NET Core 3.1.11 - January 12, 2021 - CVE-2021-1723: ASP.NET Core Denial of Service Vulnerability - CVE-2020-1045: Microsoft ASP.NET Core Security Feature Bypass Vulnerability - CVE-2020-1597: NET Core Remote Code...
Dnsmasq Security Feature Issue Vulnerability (CNVD-2021-16430)
Dnsmasq is a lightweight DNS forwarding and DHCP, TFTP server written in C. It can be used as a server to forward DNS, DHCP, and TFTP. Dnsmasq suffers from a security vulnerability that stems from the use of a weak hash algorithm CRC32 to validate DNS responses when compiled without dnnssec. No...
Showmax: Parental Pin Bypass
The security researcher contacted us about improper PIN protection authorisation on our content. Showmax users can setup parental PIN protection for different levels of content maturity. If such content is accessed, the user must enter the PIN. It was reported that the PIN protection is easily...
CVE-2021-1674
Windows Remote Desktop Protocol Core Security Feature Bypass Vulnerability...
CVE-2021-1674
Windows Remote Desktop Protocol Core Security Feature Bypass Vulnerability...
CVE-2021-1669
Windows Remote Desktop Security Feature Bypass Vulnerability...
CVE-2021-1638
Microsoft is aware of the "Impersonation in the Passkey Entry Protocol" vulnerability. For more information regarding the vulnerability, please see this statement from the Bluetooth SIG. To address the vulnerability, Microsoft has released a software update that will fail attempts to pair if the...
Security feature bypass
Windows Remote Desktop Security Feature Bypass Vulnerability...
Security feature bypass
Windows Remote Desktop Protocol Core Security Feature Bypass Vulnerability...
CVE-2021-1669 Windows Remote Desktop Security Feature Bypass Vulnerability
...
Windows Remote Desktop Protocol Core Security Feature Bypass Vulnerability
...
KB4598297: Windows Server 2012 January 2021 Security Update
The remote Windows host is missing security update 4598297 or cumulative update 4598278. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2020-17087, CVE-2021-1648, CVE-2021-1649,...
KLA12041 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, gain privileges, spoof user interface, bypass security restrictions, cause denial of service. Below is a...
KB4598289: Windows 7 and Windows Server 2008 R2 January 2021 Security Update
The remote Windows host is missing security update 4598289 or cumulative update 4598279. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...
PT-2021-1592 · Microsoft · Windows Remote Desktop +1
Name of the Vulnerable Software and Affected Versions: Windows Remote Desktop affected versions not specified Description: The issue is related to errors in security settings of the Remote Desktop Services RDS in Windows operating systems. It may allow a remote attacker to impact the...