CVE-2021-23928

OX App Suite through 7.10.3 allows XSS via the ajax/apps/manifests query string...

CVE-2021-23933

OX App Suite through 7.10.4 allows XSS via JavaScript in a Note referenced by a mail:// URL...

Microsoft Windows WalletService Security Vulnerability

Microsoft Windows WalletService is an application from Microsoft Corporation USA. hosts objects used by the Wallet Client. A security vulnerability exists in Microsoft Windows WalletService. The following products and versions are affected:Windows 10 Version 1607 for x64-based Systems,Windows 10...

Microsoft Windows Multipoint Security Vulnerability

Microsoft Windows is a set of operating systems for personal devices from Microsoft Corporation. A security vulnerability exists in Windows Multipoint Management, for which no information is available at this time, please stay tuned to CNNVD or the vendor's announcement. The following products an...

Microsoft Windows Print Spooler Components Security Vulnerability

Microsoft Windows Print Spooler Components is a printing background processor component from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Print Spooler Components. The following products and editions are affected:Windows 10 Version 1809 for 32-bit Systems,Window...

Microsoft Windows WalletService Security Vulnerability

Microsoft Windows WalletService is an application from Microsoft Corporation USA. that hosts objects used by the Wallet Client. A security vulnerability exists in Microsoft Windows WalletService. The following products and versions are affected:Windows 10 Version 1607 for x64-based Systems,Window...

Microsoft Windows Security Vulnerabilities

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in the Windows Event Logging Service. The following products and editions are affected:Windows 10 Version 20H2 for x64-based...

Microsoft Office Security Vulnerabilities

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. Commonly used components of this product include Word, Excel, Access, Powerpoint, FrontPage, and so on. A security vulnerability exists in Microsoft Office. The following products and editions are...

Microsoft Windows WalletService Access Control Error Vulnerability

Microsoft Windows WalletService is an application from Microsoft Corporation USA. hosts objects used by the Wallet Client. An access control error vulnerability exists in Microsoft Windows WalletService. The following products and versions are affected:Windows 10 Version 1607 for x64-based...

Microsoft Windows Installer Security Vulnerability

Microsoft Windows Installer is a component of the Windows operating system from Microsoft. It provides a standard basis for installing and uninstalling software. A security vulnerability exists in Microsoft Windows Installer. The following products and editions are affected:Windows 10 Version 200...

Microsoft Windows LUAFV Security Vulnerability

Microsoft Windows is an operating system for personal devices from Microsoft Corporation. A security vulnerability exists in Windows LUAFV, no information about this vulnerability is available at this time, please stay tuned to CNNVD or vendor announcements. The following products and versions ar...

PT-2021-11068 · Open Xchange · Ox App Suite

Name of the Vulnerable Software and Affected Versions: OX App Suite versions 7.10.4 and earlier Description: The issue allows for XSS via the app loading mechanism, specifically through the PATH INFO to the "/appsuite" URI. Recommendations: For OX App Suite versions 7.10.4 and earlier, update to ...

Setup Dynamic Update for Windows 10, version 2004 and 20H2: January 12, 2021

None None...

Microsoft Walletservice Access Control Error Vulnerability

Microsoft Walletservice is a software for payments from Microsoft Corporation USA. An access control error vulnerability exists in Microsoft Walletservice. The following products and versions are affected:Windows 10 for x64-based Systems,Windows 10 for 32-bit Systems,Windows 10 Version 2004 for...

Windows Remote Desktop Protocol Security Vulnerability

Microsoft Windows Remote Desktop Protocol RDP is an application for connecting to remote Windows desktops from Microsoft USA. A security vulnerability exists in Windows Remote Desktop Protocol. The following products and versions are affected:Microsoft Remote Desktop,Remote Desktop client for...

Microsoft Windows Kernel Security Vulnerability

Microsoft Windows Kernel is the kernel of the Windows operating system by Microsoft Corporation USA. A security vulnerability exists in the Microsoft Windows Kernel. The following products and editions are affected:Windows 10 Version 2004 for ARM64-based Systems,Windows 10 Version 2004 for 32-bit...

Microsoft Windows CSC Service Security Vulnerability

Microsoft Windows CSC Service is an application from Microsoft USA. It allows the use of network files while the local computer is offline. A security vulnerability exists in Microsoft Windows CSC Service. The following products and editions are affected:Windows 10 Version 1607 for 32-bit...

Windows Docker Information Disclosure Vulnerability

Docker is an open source application container engine from the American company Docker. The product supports creating a container lightweight virtual machine and deploying and running applications on Linux systems, as well as automating the installation, deployment, and upgrading of applications...

January 12, 2021-KB4598499 Cumulative Update for .NET Framework 3.5, 4.7.2 and 4.8 for Windows 10, version 1809 and Windows Server, version 2019

None None...

CVE-2021-0307

In updatePermissionSourcePackage of PermissionManagerService.java, there is a possible automatic runtime permission grant due to a confused deputy. This could lead to local escalation of privilege allowing a malicious app to silently gain access to a dangerous permission with no additional...