Microsoft Windows and Windows Server Denial of Service Vulnerability (CNVD-2021-71950)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server, a server operating system. A denial of service vulnerability exists in the "console driver" in Microsoft Windows and Windows Server,...

CVE-2021-28438

Windows Console Driver Denial of Service Vulnerability...

CVE-2021-28443

Windows Console Driver Denial of Service Vulnerability...

CVE-2021-28438

Windows Console Driver Denial of Service Vulnerability...

CVE-2021-28443

Windows Console Driver Denial of Service Vulnerability...

Denial of service

Windows Console Driver Denial of Service Vulnerability...

Denial of service

Windows Console Driver Denial of Service Vulnerability...

CVE-2021-28443

Windows Console Driver Denial of Service Vulnerability...

CVE-2021-28438

Windows Console Driver Denial of Service Vulnerability...

CVE-2021-28443

Technical details about CVE-2021-28443 (affected Windows Console Driver DoS) are not provided in the connected documents. No product/version/root-cause/exploit or remediation details are disclosed here; monitor for official updates.

CVE-2021-28443 Windows Console Driver Denial of Service Vulnerability

...

CVE-2021-28438

Technical details (affected component, root cause, impacted versions, or exploit info) are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2021-28973

The XML Import functionality of the Administration console in Perforce Helix ALM 2020.3.1 Build 22 accepts XML input data that is parsed by insecurely configured software components, leading to XXE attacks...

Input validation

The XML Import functionality of the Administration console in Perforce Helix ALM 2020.3.1 Build 22 accepts XML input data that is parsed by insecurely configured software components, leading to XXE attacks...

GHSA-CWG9-C9CR-P5FQ Improper Neutralization of Input in Theia console

In Eclipse Theia versions up to and including 1.8.0, in the debug console there is no HTML escaping, so arbitrary Javascript code can be injected...

@theia/debug (>=1.1.0-next.14531578, <=1.8.0-next.fea40a2c), @theia/plugin-dev (>=1.1.0-next.14531578, <=1.8.0-next.fea40a2c) +4 more potentially affected by CVE-2021-28161 via @theia/console (>=1.1.0-next.a62a6b92, <=1.8.0-next.61200efc)

@theia/console NPM version =1.1.0-next.a62a6b92, =1.1.0-next.14531578, =1.1.0-next.14531578, =1.1.0-next.14531578, =1.1.0-next.14531578, =1.1.0-next.14531578, =1.1.0-next.14531578, =1.8.0-next.fea40a2c Source cves: CVE-2021-28161 Source advisory: OSV:GHSA-CWG9-C9CR-P5FQ...

Improper Neutralization of Input in Theia console

In Eclipse Theia versions up to and including 1.8.0, in the debug console there is no HTML escaping, so arbitrary Javascript code can be injected...

Windows Console Driver Denial of Service Vulnerability

...

Windows Console Driver Denial of Service Vulnerability

...

Important: Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.2.2 security and bug fix update

Red Hat Advanced Cluster Management for Kubernetes 2.2.2 General Availability release images, which fix several bugs and security issues. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a...