Microsoft Remote Desktop Protocol Client 缓冲区错误漏洞

Microsoft Remote Desktop Protocol Client is a client software application for connecting to remote desktops from Microsoft Corporation USA. A buffer error vulnerability exists in the Microsoft Remote Desktop Protocol Client. The following products and editions are affected: Windows 10 Version 21H...

Microsoft Windows COM 权限许可和访问控制问题漏洞

Microsoft Windows COM is a technology for the purpose of reusing software from Microsoft Corporation, U.S.A. COM is described as a platform-independent, decentralized, object-oriented system for creating interactive binary software components. A vulnerability exists in Microsoft Windows COM with...

Microsoft Windows 竞争条件问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows ALPC for competitive conditions. The following products and editions are affected:Windows Server 2008 R2 for x64-based Systems Service Pack 1...

Microsoft Remote Desktop Client 代码注入漏洞

Microsoft Remote Desktop Client is a remote desktop client from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Windows Remote Desktop. The following products and versions are affected:Windows Server 2019 Server Core installation,Windows 10 Version 1909 for 32-bit...

Microsoft Windows Fax and Scan Service 权限许可和访问控制问题漏洞

Microsoft Windows Fax Service is a functional component service from Microsoft Corporation USA. It is used to specify settings for faxes, including how they are sent, received, viewed, and printed. A vulnerability exists in Microsoft Windows Fax and Scan Service with privilege permission and acce...

GitLab Community Edition 和 Enterprise Edition 信息泄露漏洞

GitLab Enterprise Edition is a content management system.GitLab Community Edition is a community edition of GitLab by GitLab, Inc. An information disclosure vulnerability exists in GitLab Community Edition CE and Enterprise Edition EE that stems from the application outputting too much data. A...

IBM VIOS smbcd Input Validation Error Vulnerability

IBM Vios is part of the PowerVm? Editions hardware feature from IBM USA. Helps share physical I/O resources between client logical partitions within a server. An input validation error vulnerability exists in IBM VIOS smbcd that originates from a local denial of service in the daemon. No detailed...

Microsoft Windows Print Spooler Components权限许可和访问控制问题漏洞

Microsoft Windows Print Spooler Components is a printing backend handler component from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Print Spooler Components due to privilege permission and access control issues. The following products and editions are affected:Windows 1...

Microsoft Windows Kernel 权限许可和访问控制问题漏洞

Microsoft Windows Kernel is the kernel of the Windows operating system from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Kernel with privilege permission and access control issues. The following products and versions are affected:Windows 10 Version 1809 for 32-bit...

Microsoft Windows User Profile Service 资源管理错误漏洞

The Microsoft Windows User Profile Service is a service host from Microsoft Corporation USA that performs user profile loading and unloading operations, such as logging on logging in to Windows . A resource management error vulnerability exists in Microsoft Windows User Account Profile. The...

Microsoft Windows Mobile Device Management 代码注入漏洞

Microsoft Windows Mobile Device Management is a software service from Microsoft Corporation USA for Windows devices to support interaction with mobile devices. A code injection vulnerability exists in Microsoft Windows Mobile Device Management. The following products and editions are...

GitLab Enterprise Edition 和 GitLab Community Edition 代码问题漏洞

GitLab Enterprise Edition is a content management system, and GitLab Community Edition is a community edition of GitLab from GitLab, Inc. GitLab Enterprise Edition and GitLab Community Edition are vulnerable to a code issue that arises from insufficient validation of user-supplied input. A remote...

GitLab Enterprise Edition 和 Gitlab Community Edition 信任管理问题漏洞

GitLab Enterprise Edition is a content management system, and GitLab Community Edition is a community edition of GitLab from GitLab, Inc. GitLab Enterprise Edition and Gitlab Community Edition are vulnerable to a trust management issue that arises from incorrect certificate validation of external...

editions-tissot.fr Cross Site Scripting vulnerability OBB-2338951

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

IBM VIOS operating system command injection vulnerability

IBM Vios is part of IBM USA's PowerVm Editions hardware feature that helps share physical I/O resources between client logical partitions within a server. IBM VIOS lscore has an operating system command injection vulnerability that stems from an lscore command input validation error, and this...

CVE-2021-43052

The Realm Server component of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, and TIBCO FTL - Enterprise Edition contains an easily exploitable vulnerability that allows authentication bypass due to a hard coded secret used in the default realm server of the...

CVE-2021-43053

The Realm Server component of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, and TIBCO FTL - Enterprise Edition contains a difficult to exploit vulnerability that allows an unauthenticated attacker with network access to obtain the cluster secret of another...

Description of the security update for Office 2013: January 11, 2022 (KB5002124)

Description of the security update for Office 2013: January 11, 2022 KB5002124 Summary This security update resolves a Microsoft Office remote code execution vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2022-21840. Note: To apply thi...

Microsoft Windows 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows UEFI. The following products and versions are affected: Windows 7 for x64-based Systems Service Pack 1,Windows 8....

Microsoft Windows Local Security Authority Subsystem Service 安全特征问题漏洞

The Microsoft Windows Local Security Authority Subsystem Service is an internal Microsoft program that runs Windows system security policies. It authenticates users when they log on to a computer standalone or server, manages user password changes, and generates access characters. It also leaves...