June 8, 2021-KB5003778 Cumulative Update for .NET Framework 3.5, 4.7.2 and 4.8 for Windows 10, version 1809 and Windows Server, version 2019

None None...

Microsoft Paint 3D 代码注入漏洞

Paint 3D is a free creative app that comes with Windows 10 and supports users in creating creative projects using 2D and 3D tools. Microsoft Paint 3D suffers from a remote code execution vulnerability that can be exploited by an attacker to execute code on the target host...

Windows Kernel 权限许可和访问控制问题漏洞

Microsoft Windows is a desktop operating system from the American company Microsoft. A security vulnerability exists in the Windows Kernel. The following products and versions are affected: Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 21H1 for x64-based Systems,Windows 10 Version...

Microsoft DWM Core Library 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in the Microsoft DWM Core Library. The following products and versions are affected: Windows 10 Version 20H2 for ARM64-based...

Microsoft Windows NTFS 数字错误漏洞

Microsoft Windows NTFS is a file system from Microsoft USA that serves computer files. The file system has error warning, disk self-repair, and logging capabilities. A numeric error vulnerability exists in Windows NTFS. The following products and versions are affected:Windows 10 Version 1809 for...

June 8, 2021-KB5003256 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10, version 1909

None None...

June 8, 2021-KB5003254 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10, version 2004, Windows Server, version 2004, Windows 10, version 20H2, Windows Server, version 20H2 and Windows 10 Version 21H1

None None...

Windows Common Log File System Driver 权限许可和访问控制问题漏洞

Microsoft Windows is a desktop operating system from the U.S. company Microsoft. A security vulnerability exists in the Windows Common Log File System Driver. The following products and editions are affected: Windows 10 Version 1909 for x64-based Systems,Windows 10 Version 1909 for ARM64-based...

June 8, 2021-KB5003542 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1607 and Windows Server, version 2016

None None...

Microsoft Windows Network File System 信息泄露漏洞

Microsoft Windows Network File System is a file sharing solution from Microsoft that allows you to transfer files between computers running Windows Server and UNIX operating systems using the NFS protocol. An information disclosure vulnerability exists in Microsoft Windows Network File System. Th...

Microsoft Paint 3D 代码注入漏洞

Paint 3D is a free creative app that comes with Windows 10 and supports users in creating creative projects using 2D and 3D tools. Microsoft Paint 3D suffers from a remote code execution vulnerability that can be exploited by an attacker to execute code on the target host...

Windows Bind Filter Driver 信息泄露漏洞

Microsoft Windows is a desktop operating system from Microsoft Corporation.Vulnerability is a software application. This program will occasionally publish some of the latest vulnerabilities from the Prism community to the public. A security vulnerability exists in Windows Bind Filter Driver. The...

Windows Kernel-Mode Drivers 权限许可和访问控制问题漏洞

Microsoft Windows is a desktop operating system from Microsoft Corporation USA. A security vulnerability exists in Windows Kernel-Mode Drivers. The following products and editions are affected:Windows 10 Version 1809 for x64-based Systems,Windows 10 Version 1809 for ARM64-based Systems,Windows...

All versions of Node.js 8.x 9.x and 10.x are vulnerable and the severity is HIGH. An attacker can cause a denial of service (DoS) by causing a node server providing an http2 server to crash. This can be accomplished by interacting with the http2 server in a manner that triggers a cleanup bug where objects are used in native code after they are no longer available. This has been addressed by updating the http2 implementation.

...

Calling Buffer.fill() or Buffer.alloc() with some parameters can lead to a hang which could result in a Denial of Service. In order to address this vulnerability the implementations of Buffer.alloc() and Buffer.fill() were updated so that they zero fill instead of hanging in these cases. All versions of Node.js 6.x (LTS "Boron") 8.x (LTS "Carbon") and 9.x are vulnerable. All versions of Node.js 10.x (Current) are NOT vulnerable.

...

Vulnerability fixed in HPE OneView for VMware vCenter

HPE has fixed a vulnerability in OneView for VMware vCenter. An unauthenticated remote malicious agent could exploit it to perform a Cross-Site Scripting XSS attack. Such an attack could result in the execution of arbitrary script code in the browser used to visit the application visited. HPE has...

CVE-2020-10771

A flaw was found in Infinispan version 10, where it is possible to perform various actions that could have side effects using GET requests. This flaw allows an attacker to perform a cross-site request forgery CSRF attack...

PT-2021-19833 · Nextcloud +1 · Nextcloud Server +1

Name of the Vulnerable Software and Affected Versions: Nextcloud Server versions prior to 19.0.11 Nextcloud Server versions prior to 20.0.10 Nextcloud Server versions prior to 21.0.2 Description: The issue arises when an attacker converts a Files Drop link to a federated share, causing problems o...

PT-2021-19832 · Nextcloud +1 · Nextcloud Server +1

Name of the Vulnerable Software and Affected Versions: Nextcloud Server versions prior to 19.0.11 Nextcloud Server versions prior to 20.0.10 Nextcloud Server versions prior to 21.0.2 Description: The issue allows an attacker to gain write/read privileges on any Federated File Share. This can also...

CVE-2021-27488

Datakit Software libraries CatiaV53dRead, CatiaV63dRead, Step3dRead, Ug3dReadPsr, Jt3dReadPsr modules in KeyShot Versions v10.1 and prior lack proper validation of user-supplied data when parsing CATPart files. This could result in an out-of-bounds write past the end of an allocated structure. An...