CVE-2021-38757

Persistent cross-site scripting XSS in Hospital Management System targeted towards web admin through contact.php...

CVE-2021-24526

creationtimestamp| type| source ---|---|--- 2021-08-16 14:14:51+00:00| seen| https://t.me/cibsecurity/27366...

CVE-2021-38603

PluXML 5.8.7 allows core/admin/profil.php stored XSS via the Information field...

Security Updates for Microsoft Dynamics 365 (on-premises) (August 2021)

The Microsoft Dynamics 365 on-premises installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Remote Code Execution Vulnerability CVE-2021-34524 - Cross-site Scripting Vulnerabilities CVE-2021-36946, CVE-2021-36950 Note that Nessus h...

Security Updates for Microsoft Word Products (August 2021) (deprecated)

This plugin has been deprecated as all click to run checks have been moved to separate plugins. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2022/06/09. Deprecated by smbntms21augwordc2r.nasl. The descriptive text and package checks in this plugin were extracted from the Microsoft...

Patch Tuesday - August 2021

Hot off the press, it’s another issue of the Patch Tuesday blog! While the number of vulnerabilities is low this month, there are a number of high risk items administrators will want to patch right away including a few that will require additional remediation steps. This Patch Tuesday also includ...

CVE-2021-29294

creationtimestamp| type| source ---|---|--- 2021-08-11 00:37:45+00:00| seen| https://t.me/cibsecurity/27104...

August Patch Tuesday: A Quiet Month for Microsoft

August proves to be a quieter month for Microsoft, after an eventful July. This month, there were only 44 security bulletins, part of which are three Print Spooler flaws and a further fix for PetitPotam...

Node.js -- August 2021 Security Releases

Node.js reports: cares upgrade - Improper handling of untypical characters in domain names High CVE-2021-22931 Node.js was vulnerable to Remote Code Execution, XSS, application crashes due to missing input validation of host names returned by Domain Name Servers in the Node.js DNS library which c...

Actively Exploited Windows Zero-Day Gets a Patch

Microsoft has patched 51 security vulnerabilities in its scheduled August Patch Tuesday update, including seven critical bugs, two issues that were publicly disclosed but unpatched until now, and one that’s listed as a zero-day that has been exploited in the wild. Of note, there are 17...

CVE-2021-22676

creationtimestamp| type| source ---|---|--- 2021-08-10 18:37:17+00:00| seen| https://t.me/cibsecurity/27063...

CVE-2020-28397

creationtimestamp| type| source ---|---|--- 2021-08-10 14:37:04+00:00| seen| https://t.me/cibsecurity/27044...

Microsoft Patch Tuesday for August 2021 — Snort rules and prominent vulnerabilities

By Jon Munshaw, with contributions from Martin Lee. Microsoft released its monthly security update Tuesday, disclosing 44 vulnerabilities in the company’s firmware and software. This is the fewest amount of vulnerabilities Microsoft has patched in a month in more than two years. There... This is...

Internet Explorer help

None None...

KB5005033: Windows 10 Version 2004 / Windows 10 Version 20H2 / Windows 10 Version 21H1 Security Update (August 2021)

The remote Windows host is missing security update 5005033. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2021-26425, CVE-2021-26426, CVE-2021-26431, CVE-2021-34483, CVE-2021-34484,...

KB5005260: Servicing stack update for Windows 10, version 2004, 20H2, and 21H1: August 10, 2021

None None...

KB5005031: Windows 10 Version 1909 Security Update (August 2021)

The remote Windows host is missing security update 5005031. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2021-26424, CVE-2021-26432,...

CVE-2021-25443

A use after free vulnerability in conngadget driver prior to SMR AUG-2021 Release 1 allows malicious action by an attacker...

Samsung SMR 资源管理错误漏洞

Samsung SMR is a system patch package from Samsung South Korea. It provides patches for Samsung mobile applications. A security vulnerability exists in Samsung SMR AUG-2021 versions prior to version 1, which originates in the conngadget driver allowing an attacker to perform malicious operations...

SAMSUNG Mobile devices 安全特征问题特征问题漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from South Korea's Samsung SAMSUNG. A security signature issue vulnerability exists in SAMSUNG Mobile devices SMR prior to AUG-2021 Release 1, which stems from an IV reuse vulnerability in keymaste...