Microsoft Windows Fastfat Driver 信息泄露漏洞

The Microsoft Windows Fastfat Driver is a file system driver for the Microsoft Windows operating system that supports the FAT File Allocation Table file system, an older file system format widely used in early DOS and Windows systems and still used in some embedded and removable storage devices...

Microsoft Windows Remote Procedure Call Runtime 安全特征问题漏洞

Microsoft Windows Remote Procedure Call Runtime is a powerful technology for creating distributed client/server programs from Microsoft Corporation USA. A security feature issue vulnerability exists in Microsoft Windows Remote Procedure Call Runtime. The following products and editions are...

Microsoft Windows Codecs Library 代码注入漏洞

The Microsoft Windows Codecs Library is a feature library for Microsoft Windows systems from Microsoft Corporation. A code injection vulnerability exists in the Microsoft Windows Codecs Library. The following products and editions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10...

ai.starlake:quack-on-demand_3 (>=0.1.0 <=0.3.1), ba.sake:sharaf-http4s_3 (>=0.17.0 <=0.18.2) +190 more potentially affected by CVE-2021-41084 via org.http4s:http4s-server_3 (>=0.23.0 <=0.23.34)

org.http4s:http4s-server3 MAVEN version =0.23.0, =0.1.0, =0.17.0, =0.14.0, =2.0.21, =2.0.21, =2.0.21, =0.2.0, =0.0.1, =0.1.0, =0.12.1, =7.1.0, =0.22.0, =0.1.0, =0.2.0 and more Source cves: CVE-2021-41084 Source advisory: OSV:GHSA-5VCM-3XC3-W7X3...

Microsoft Windows Redirected Drive Buffering 信息泄露漏洞

Microsoft Windows Redirected Drive Buffering is a Redirected Drive Buffering Subsystem RDBSS from Microsoft Corporation USA provided as the kernel-mode file system driver rdbss.sys, which is included in the operating system, and as the static library rdbsslib.lib provided as the kernel-mode file...

Microsoft Windows Key Storage Provider安全特征问题特征问题漏洞

Microsoft Windows Key Storage Provider is a Next Generation CNG from Microsoft Corporation USA that separates the encryption provider from the key storage provider KSP. A security feature issue vulnerability exists in Microsoft Windows Key Storage Provider. The following products and editions are...

Microsoft Windows SMB Client 信息泄露漏洞

Microsoft Windows SMB Client is a Microsoft application. An SMB Client. An information disclosure vulnerability exists in Microsoft Windows SMB Client. The following products and editions are affected:Windows 10 Version 1809 for x64-based Systems,Windows 10 Version 1809 for ARM64-based...

Microsoft Windows Installer 输入验证错误漏洞

Microsoft Windows Installer is a component of the Windows operating system from Microsoft. It provides a standard basis for installing and uninstalling software. An input validation error vulnerability exists in microsoft Windows Installer. The following products and versions are affected: Window...

Microsoft Windows WLAN Auto Config Service 代码注入漏洞

The Microsoft Windows WLAN AutoConfig Service is a wireless network card configuration service for Windows Vista and above operating systems from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Windows WLAN Auto Config Service. The following products and versions are...

com.avast:sst-app-monix_3 (>=0.17.0 <=0.19.3), com.avast:sst-app-zio_3 (>=0.17.0 <=0.19.3) +23 more potentially affected by CVE-2021-39185 via org.http4s:http4s-server_3 (>=0.22.0 <=0.22.2)

org.http4s:http4s-server3 MAVEN version =0.22.0, =0.17.0, =0.17.0, =0.16.0, =0.17.0, =0.16.0, =0.17.0, =0.16.0, =0.16.0, =0.17.0, =0.17.0, =0.16.0, =0.16.0, =0.18.1, =0.22.0, =0.22.0, =0.22.15 and more Source cves: CVE-2021-39185 Source advisory: OSV:GHSA-52CF-226F-RHR6...

@bigegg/parse-server-schema-config (>=1.0.5 <=1.0.10), @peterpme/parse-server-mailgun (>=2.4.8 <=2.5.11) +19 more potentially affected by CVE-2021-39138 via parse-server (>=2.0.8 <=3.10.0)

parse-server NPM version =2.0.8, =1.0.5, =2.4.8, =1.0.0, =0.1.1, =0.0.2, =1.0.0, =0.1.0, =0.1.7, =0.0.1, =0.0.0, =1.0.0, =1.0.0, =1.4.0 and more Source cves: CVE-2021-39138 Source advisory: OSV:GHSA-23R4-5MXP-C7G5...

Microsoft Windows Storage Spaces Controller 输入验证错误漏洞

Microsoft Windows Storage Spaces Controller is an essential driver for providing storage space functionality from Microsoft Corporation USA. An input validation error vulnerability exists in Microsoft Windows Storage Spaces Controller. The following products and editions are affected:Windows 10...

Microsoft Windows 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. Microsoft Windows has a security vulnerability. The following products and versions are affected:Windows Server 2019,Windows Server 2019 Server Core...

Microsoft Windows TCP/IP component 缓冲区错误漏洞

The Microsoft Windows TCP/IP component is a component of Microsoft Corporation USA that provides TCP/IP configuration capabilities for Windows. A buffer error vulnerability exists in Microsoft Windows TCP/IP. The following products and versions are affected:Windows 10 Version 21H1 for ARM64-based...

Microsoft Graphics Components 代码注入漏洞

Microsoft Graphics Component is a graphics driver component from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Graphics Component. The following products and versions are affected: Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for x64-based...

CVE-2021-22910

A sanitization vulnerability exists in Rocket.Chat server versions 3.13.2, 3.12.4, 3.11.4 that allowed queries to an endpoint which could result in a NoSQL injection, potentially leading to RCE...

Nextcloud 安全漏洞

Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. A security vulnerability in Nextcloud Server in versions prior to 19.0.13, 20.011, and 21.0.3 can be exploited by an attacker to enumerate potentially valid...

Nextcloud 信息泄露漏洞

Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. An information disclosure vulnerability exists in Nextcloud Server in versions prior to 19.0.13, 20.011, and 21.0.3, which could result in the full path of a...

Nextcloud 安全漏洞

Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. A security vulnerability exists in Nextcloud Server versions prior to 19.0.13, 20.011, and 21.0.3, which can be exploited by an attacker to enumerate...

CVE-2021-23140

Improper Authorization vulnerability in Gallagher Command Centre Server allows command line macros to be modified by an unauthorised Command Centre Operator. This issue affects: Gallagher Command Centre 8.40 versions prior to 8.40.1888 MR3; 8.30 versions prior to 8.30.1359 MR3; 8.20 versions prio...