CVE-2021-20825

Cross-site scripting vulnerability in List order management item change plug-in for EC-CUBE 3.0 series Ver.1.1 and earlier allows a remote attacker to inject an arbitrary script via unspecified vectors...

Cross site scripting

Cross-site scripting vulnerability in Order Status Batch Change Plug-in for EC-CUBE 3.0 series all versions allows a remote attacker to inject an arbitrary script via unspecified vectors...

CVE-2021-20828

Cross-site scripting vulnerability in Order Status Batch Change Plug-in for EC-CUBE 3.0 series all versions allows a remote attacker to inject an arbitrary script via unspecified vectors...

VulnCheck KEV: CVE-2021-38645

Microsoft Open Management Infrastructure OMI within Azure VM Management Extensions contains an unspecified vulnerability that allows for privilege escalation...

PT-2021-21939

Name of the Vulnerable Software and Affected Versions: nth-check versions affected versions not specified Description: The issue is related to Inefficient Regular Expression Complexity, specifically a Regular Expression Denial of Service ReDoS vulnerability. This vulnerability causes a denial of...

PT-2021-6959 · Microsoft · Windows Scripting Engine +1

Name of the Vulnerable Software and Affected Versions: Windows Scripting Engine affected versions not specified Description: The issue is related to a memory corruption vulnerability in the Windows Scripting Engine component, which is caused by a buffer overflow. This allows a remote attacker to...

PT-2021-6329 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access control in the Win32k component of the Windows operating system. It allows an attacker to elevate their privileges. Recommendations: At the momen...

PT-2021-6331 · Microsoft · Office Visio

Name of the Vulnerable Software and Affected Versions: Microsoft Office Visio affected versions not specified Description: The issue is related to an improper validation of array index in Microsoft Office Visio, which can lead to remote code execution. This is due to incorrect array indexing...

PT-2021-6955 · Microsoft · Visual Studio

Name of the Vulnerable Software and Affected Versions: Microsoft Visual Studio affected versions not specified Description: The issue is related to insecure privilege management in Microsoft Visual Studio, allowing an attacker to escalate their privileges. Recommendations: At the moment, there is...

PT-2021-6957 · Microsoft · Windows Print Spooler +1

Name of the Vulnerable Software and Affected Versions: Windows Print Spooler affected versions not specified Description: The issue is related to insecure privilege management in the Windows Print Spooler. It allows an attacker to elevate their privileges, potentially affecting the system...

PT-2021-6977 · Microsoft · Windows Installer +1

Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: The issue is related to insufficient input validation in the Windows Installer service, which can be exploited to cause a denial of service. This allows an attacker to affect the...

PT-2021-6344 · Microsoft · Windows Print Spooler +1

Name of the Vulnerable Software and Affected Versions: Windows Print Spooler affected versions not specified Description: The issue is related to insufficient access control in the Windows Print Spooler, which can be exploited to elevate privileges. This could allow an attacker to affect the...

PT-2021-6319 · Microsoft · Windows Key Storage Provider +1

Name of the Vulnerable Software and Affected Versions: Windows Key Storage Provider affected versions not specified Description: The issue is related to a security-feature bypass vulnerability in the Key Storage Provider KSP service of the Microsoft Windows operating system. It involves bypassing...

PT-2021-6969 · Microsoft · Windows Bind Filter Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Bind Filter Driver affected versions not specified Description: The issue is related to insecure privilege management in the Windows Bind Filter Driver, which can be exploited to elevate privileges. This could allow an attacker to...

PT-2021-6961 · Microsoft · Accessibility Insights For Android

Name of the Vulnerable Software and Affected Versions: Microsoft Accessibility Insights for Android affected versions not specified Description: The issue is related to a lack of protection for sensitive data. Exploitation of this issue may allow an attacker to gain unauthorized access to protect...

PT-2021-6347

Name of the Vulnerable Software and Affected Versions Windows Ancillary Function Driver for WinSock affected versions not specified Description The issue is related to insufficient access restrictions in the Windows Ancillary Function Driver for WinSock, which can be exploited to elevate...

PT-2021-20201 · Geutebrück +1 · Geutebrück Camera Devices +1

Name of the Vulnerable Software and Affected Versions: UDP Technology camera devices affected versions not specified Geutebrück camera devices affected versions not specified Description: The issue concerns command injection, which may allow an attacker to remotely execute arbitrary code on...

PT-2021-7632 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to insecure privilege management in Microsoft Edge. It may allow a remote attacker to elevate their privileges. Recommendations: At the moment,...

MIK.starlight has unspecified vulnerabilities

MIK.starlight is the departmental access and creation dashboard, reporting and planning environment. A security vulnerability exists in MIK.starlight version 7.9.5.24363, which stems from the use of hard-coded keys in the software, which allows an attacker to decrypt credentials via an unspecifie...

CVE-2021-36235

An issue was discovered in Ivanti Workspace Control before 10.6.30.0. A locally authenticated user with low privileges can bypass File and Folder Security by leveraging an unspecified attack vector. As a result, the attacker can start applications with elevated privileges...