Microsoft Windows 权限许可和访问控制问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A vulnerability exists in the Microsoft Windows Cred SSProvider Protocol with privilege permission and access control issues. The following products and editions are affected: Windows...

Microsoft Windows Active Directory 权限许可和访问控制问题漏洞

Microsoft Windows Active Directory is a centralized directory management service responsible for architecting medium- to large-scale network environments from the U.S. company Microsoft. Stores information about objects on the network and makes it easy for administrators and users to find and use...

Microsoft Windows NTFS 权限许可和访问控制问题漏洞

Microsoft Windows NTFS is a file system from Microsoft USA that serves computer files. The file system has error alerts, disk self-healing, and logging capabilities. Microsoft Windows NTFS is vulnerable to privilege permission and access control issues. The following products and editions are...

Microsoft Windows NTFS 权限许可和访问控制问题漏洞

Microsoft Windows NTFS is a file system from Microsoft USA that serves computer files. The file system has error alerts, disk self-healing, and logging capabilities. A vulnerability exists in Microsoft Windows NTFS with privilege permission and access control issues. The following products and...

OpenJDK: Non-constant comparison during TLS handshakes (JSSE, 8269618)

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Difficult to exploit vulnerability allows unauthenticated...

editions-academia.be Cross Site Scripting vulnerability OBB-2161565

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Microsoft Windows 输入验证错误漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. An input validation error vulnerability exists in Microsoft Windows Network Address Translation NAT. The following products and editions are affected:Windows 10 Version 1809 for 32-bit...

Microsoft Excel 代码注入漏洞

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Office Excel. The following products and editions are affected:Microsoft Office 2016 32-bit edition,Microsoft Office 2016 64-bit...

Microsoft Excel 代码注入漏洞

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Office Excel. The following products and editions are affected:Microsoft Office 2019 for 32-bit editions,Microsoft Office 2019 for 64-bit...

Microsoft Windows 权限许可和访问控制问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows DirectX with privilege license and access control issues. The following products and editions are affected: Windows 10 Version 2004 for...

Microsoft Windows Codecs 代码注入漏洞

Microsoft Windows Codecs is an operating system from Microsoft. It provides a multitasking graphical user interface. A code injection vulnerability exists in the Microsoft Windows Codecs Library. The following products and editions are affected:Windows Server 2008 R2 for x64-based Systems Service...

Microsoft Windows AppContainer 权限许可和访问控制问题漏洞

Microsoft Windows AppContainer is a sandboxing mechanism by Microsoft Corporation USA to control which resources UWP applications can or cannot access. A vulnerability exists in Microsoft Windows AppContainer with privilege permission and access control issues. The following products and editions...

Microsoft Windows Common Log File System Driver 权限许可和访问控制问题漏洞

The Microsoft Windows Common Log File System Driver is Microsoft's Common Log File System CLFS API that provides a high-performance, general-purpose log file subsystem that can be used by specialized client applications and shared by multiple clients to optimize logging and access. access. A...

Microsoft Excel 信息泄露漏洞

Microsoft Excel is a spreadsheet processing software in the Office suite of Microsoft Corporation USA. An information disclosure vulnerability exists in Microsoft Office Excel. The following products and editions are affected: Microsoft Excel 2013 Service Pack 1 32-bit editions,Microsoft Excel 20...

Microsoft Windows 代码注入漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Windows Text Shaping. The following products and editions are affected: Windows 10 Version 1909 for 32-bit Systems,Windows 10 Version 19...

Microsoft Windows exFAT File System 信息泄露漏洞

Microsoft Windows exFAT File System is a feature of Microsoft Corporation of the United States that provides a file system. An information disclosure vulnerability exists in Microsoft Windows exFAT File System. The following products and editions are affected:Windows 10 Version 1809 for 32-bit...

Microsoft Windows TCP/IP component 输入验证错误漏洞

The Microsoft Windows TCP/IP component is a component of Microsoft Corporation USA that provides TCP/IP configuration capabilities for Windows. An input validation error vulnerability exists in the Microsoft Windows TCP/IP component. The following products and editions are affected:Windows 10...

CVE-2021-39826

Adobe Digital Editions 4.5.11.187646 and earlier are affected by an arbitrary command execution vulnerability. An authenticated attacker could leverage this vulnerability to execute arbitrary commands. User interaction is required to abuse this vulnerability in that a user must open a maliciously...

CVE-2021-39828

Adobe Digital Editions 4.5.11.187646 and earlier are affected by a privilege escalation vulnerability in the Digital Editions installer. An authenticated attacker could leverage this vulnerability to escalate privileges. User interaction is required before product installation to abuse this...

CVE-2021-39828

Adobe Digital Editions 4.5.11.187646 and earlier are affected by a privilege escalation vulnerability in the Digital Editions installer. An authenticated attacker could leverage this vulnerability to escalate privileges. User interaction is required before product installation to abuse this...