CVE-2022-22487

An IBM Spectrum Protect storage agent could allow a remote attacker to perform a brute force attack by allowing unlimited attempts to login to the storage agent without locking the administrative ID. A remote attacker could exploit this vulnerability using brute force techniques to gain...

Microsoft Lightweight Directory Access Protocol 安全漏洞

Microsoft Lightweight Directory Access Protocol LDAP is a directory services protocol from Microsoft Corporation that runs on a layer above the TCP/IP stack. A security vulnerability exists in Microsoft Lightweight Directory Access Protocol. The following products and versions are affected:Window...

Microsoft Hyper-V 竞争条件问题漏洞

Microsoft Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization. Microsoft Hyper-V is vulnerable to a competitive conditions issue. The following products and versions are affected:Windows 10 Version 21H2 for...

Microsoft Windows 安全漏洞

Microsoft Windows is a suite of operating systems for personal devices from the U.S.-based Microsoft Corporation. A security vulnerability exists in Microsoft Windows that stems from a security issue with some Intel processors. The following products and versions are affected:Windows 10 Version...

Microsoft Windows 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in the Microsoft Windows Container Isolation FS Filter Driver. The following products and versions are affected:Windows Server 2019,Windows Server 2019...

Microsoft Lightweight Directory Access Protocol 安全漏洞

Microsoft Lightweight Directory Access Protocol LDAP is a directory services protocol from Microsoft that runs on a layer above the TCP/IP stack. A security vulnerability exists in Microsoft Lightweight Directory Access Protocol. The following products and versions are affected:Windows 10 Version...

Microsoft Lightweight Directory Access Protocol 安全漏洞

Microsoft Lightweight Directory Access Protocol LDAP is a directory service protocol from Microsoft that runs on a layer above the TCP/IP stack. A security vulnerability exists in the Microsoft Lightweight Directory Access Protocol, which affects the following products and versions: Windows 10...

CVE-2021-34360

A cross-site request forgery CSRF vulnerability has been reported to affect QNAP device running Proxy Server. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of Proxy Server: QTS 4.5.x: Proxy...

org.cloudfoundry.identity:cloudfoundry-identity-api (>=3.0.0 <=4.11.0), org.cloudfoundry.identity:cloudfoundry-identity-app (>=3.0.0 <=4.11.0) +1 more potentially affected by CVE-2018-1192 via org.cloudfoundry.identity:cloudfoundry-identity-server (>=3.0.0 <=4.5.0)

org.cloudfoundry.identity:cloudfoundry-identity-server MAVEN version =3.0.0, =3.0.0, =3.0.0, =3.0.0, =4.30.0 Source cves: CVE-2018-1192 Source advisory: OSV:GHSA-XG5V-696H-C3VR...

org.cloudfoundry.identity:cloudfoundry-identity-api (>=3.7.0 <=3.9.1), org.cloudfoundry.identity:cloudfoundry-identity-app (>=3.7.0 <=3.9.1) +1 more potentially affected by CVE-2017-4974 via org.cloudfoundry.identity:cloudfoundry-identity-server (>=3.7.0 <=3.9.1)

org.cloudfoundry.identity:cloudfoundry-identity-server MAVEN version =3.7.0, =3.7.0, =3.7.0, =3.7.0, =3.9.1 Source cves: CVE-2017-4974 Source advisory: OSV:GHSA-CW9C-V3V2-99HM...

Microsoft Lightweight Directory Access Protocol 输入验证错误漏洞

Microsoft Lightweight Directory Access Protocol LDAP is a directory services protocol from Microsoft Corporation USA that runs on a layer above the TCP/IP stack. An input validation error vulnerability exists in Microsoft Lightweight Directory Access Protocol. The following products and versions...

Microsoft Windows Cluster Shared Volume 信息泄露漏洞

Microsoft Windows Cluster Shared Volume is a general-purpose cluster file system from Microsoft Corporation USA. An information disclosure vulnerability exists in Microsoft Windows Cluster Shared Volume CSV. The following products and versions are affected:Windows Server 2022,Windows Server 2022...

Microsoft Windows NTFS 信息泄露漏洞

Microsoft Windows NTFS is a file system from Microsoft USA that serves computer files. The file system has error warning, disk self-repair, and logging capabilities. An information disclosure vulnerability exists in Microsoft Windows NTFS. The following products and editions are affected:Windows ...

Microsoft Windows Print Spooler Components 信息泄露漏洞

Microsoft Windows Print Spooler Components is a printing backend handler component from Microsoft Corporation USA. An information disclosure vulnerability exists in Microsoft Windows Print Spooler Components. The following products and versions are affected: Windows 11 for ARM64-based...

Microsoft Windows Cluster Shared Volume 竞争条件问题漏洞

Microsoft Windows Cluster Shared Volume is a general-purpose cluster file system from Microsoft Corporation USA. A competitive conditions issue vulnerability exists in Microsoft Windows Cluster Shared Volume CSV. The following products and editions are affected:Windows Server 2012 Server Core...

Microsoft Windows Address Book 输入验证错误漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. An input validation error vulnerability exists in Microsoft Windows Address Book. The following products and editions are affected: Windows 10 Version 1909 for x64-based Systems,Windows 1...

CVE-2021-36207

Under certain circumstances improper privilege management in Metasys ADS/ADX/OAS servers versions 10 and 11 could allow an authenticated user to elevate their privileges to administrator...

CVE-2022-26151

Citrix XenMobile Server 10.12 through RP11, 10.13 through RP7, and 10.14 through RP4 allows Command Injection...

Microsoft Windows Common Log File System Driver输入验证错误漏洞

The Microsoft Windows Common Log File System Driver is Microsoft's Common Log File System CLFS API that provides a high-performance, general-purpose log file subsystem that can be used by specialized client applications and shared by multiple clients to optimize logging and access. access. A...

Microsoft DNS Server 代码注入漏洞

Microsoft DNS Server is a service of Microsoft Corporation USA. A code injection vulnerability exists in Microsoft DNS Server. The following products and versions are affected: Windows Server 2008 for x64-based Systems Service Pack 2,Windows Server 2008 for x64-based Systems Service Pack 2 Server...