Microsoft Windows Redirected Drive Buffering 信息泄露漏洞

Microsoft Windows Redirected Drive Buffering is a Redirected Drive Buffering Subsystem RDBSS from Microsoft Corporation USA provided as the kernel-mode file system driver rdbss.sys, which is included in the operating system, and as the static library rdbsslib.lib provided as the kernel-mode file...

Microsoft Windows Key Storage Provider安全特征问题特征问题漏洞

Microsoft Windows Key Storage Provider is a Next Generation CNG from Microsoft Corporation USA that separates the encryption provider from the key storage provider KSP. A security feature issue vulnerability exists in Microsoft Windows Key Storage Provider. The following products and editions are...

Microsoft Windows SMB Client 信息泄露漏洞

Microsoft Windows SMB Client is a Microsoft application. An SMB Client. An information disclosure vulnerability exists in Microsoft Windows SMB Client. The following products and editions are affected:Windows 10 Version 1809 for x64-based Systems,Windows 10 Version 1809 for ARM64-based...

Microsoft Windows Installer 输入验证错误漏洞

Microsoft Windows Installer is a component of the Windows operating system from Microsoft. It provides a standard basis for installing and uninstalling software. An input validation error vulnerability exists in microsoft Windows Installer. The following products and versions are affected: Window...

Microsoft Windows WLAN Auto Config Service 代码注入漏洞

The Microsoft Windows WLAN AutoConfig Service is a wireless network card configuration service for Windows Vista and above operating systems from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Windows WLAN Auto Config Service. The following products and versions are...

Microsoft Windows Storage Spaces Controller 输入验证错误漏洞

Microsoft Windows Storage Spaces Controller is an essential driver for providing storage space functionality from Microsoft Corporation USA. An input validation error vulnerability exists in Microsoft Windows Storage Spaces Controller. The following products and editions are affected:Windows 10...

Microsoft Graphics Components 代码注入漏洞

Microsoft Graphics Component is a graphics driver component from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Graphics Component. The following products and versions are affected: Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for x64-based...

Microsoft Windows TCP/IP component 缓冲区错误漏洞

The Microsoft Windows TCP/IP component is a component of Microsoft Corporation USA that provides TCP/IP configuration capabilities for Windows. A buffer error vulnerability exists in Microsoft Windows TCP/IP. The following products and versions are affected:Windows 10 Version 21H1 for ARM64-based...

Microsoft Windows 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. Microsoft Windows has a security vulnerability. The following products and versions are affected:Windows Server 2019,Windows Server 2019 Server Core...

CVE-2021-22910

A sanitization vulnerability exists in Rocket.Chat server versions 3.13.2, 3.12.4, 3.11.4 that allowed queries to an endpoint which could result in a NoSQL injection, potentially leading to RCE...

Nextcloud 安全漏洞

Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. A security vulnerability exists in Nextcloud Server versions prior to 19.0.13, 20.011, and 21.0.3, which can be exploited by an attacker to enumerate...

Nextcloud 安全漏洞

Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. A security vulnerability in Nextcloud Server in versions prior to 19.0.13, 20.011, and 21.0.3 can be exploited by an attacker to enumerate potentially valid...

Nextcloud 信息泄露漏洞

Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. An information disclosure vulnerability exists in Nextcloud Server in versions prior to 19.0.13, 20.011, and 21.0.3, which could result in the full path of a...

CVE-2021-23140

Improper Authorization vulnerability in Gallagher Command Centre Server allows command line macros to be modified by an unauthorised Command Centre Operator. This issue affects: Gallagher Command Centre 8.40 versions prior to 8.40.1888 MR3; 8.30 versions prior to 8.30.1359 MR3; 8.20 versions prio...

Microsoft Scripting Engine 缓冲区错误漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in the Microsoft Scripting Engine. The following products and versions are affected:Windows 10 Version 21H1 for x64-based...

June 8, 2021-KB5003254 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10, version 2004, Windows Server, version 2004, Windows 10, version 20H2, Windows Server, version 20H2 and Windows 10 Version 21H1

None None...

Windows Kerberos 安全特征问题漏洞

MIT Kerberos is a Massachusetts Institute of Technology MIT software for authentication in network clusters.Kerberos also serves as a network authentication protocol designed to provide strong authentication services to client/server applications via a key system. A security vulnerability exists ...

CVE-2021-27413

Omron CX-One Versions 4.60 and prior, including CX-Server Versions 5.0.29.0 and prior, are vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrary code...

Qualcomm Chipsets 输入验证错误漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way of miniaturizing circuits mainly semiconductor devices, but also passive components, etc., and is often manufactured on the surface of semiconductor wafers. An input validation error vulnerability exists in Qualcomm chips. The...

PT-2022-2345 · Mariadb +10 · Mariadb Server +10

Name of the Vulnerable Software and Affected Versions: MariaDB Server versions 10.7 and below Description: The issue is related to a global buffer overflow in the decimal bin size component of the MariaDB Server system. This can be exploited by a remote attacker using specially crafted SQL...