CVE-2021-33055

Zoho ManageEngine ADSelfService Plus through 6102 allows unauthenticated remote code execution in non-English editions...

GitLab 安全漏洞

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in GitLab CE/EE versions...

Microsoft Windows Print Spooler Components 权限许可和访问控制问题漏洞

Microsoft Windows Print Spooler Components is a printing backend handler component from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Print Spooler Components due to privilege permission and access control issues. The following products and editions are affected:Windows 1...

Use 3rd-party plugins at your own risk

SonarQube has always had a rich plugin Marketplace, with much of SonarQubes functionality originally delivered as plugins and many additional needs being met by community-maintained plugins. But since October 2019, all SonarSource-provided functionality is bundled with SonarQube. That means any...

Microsoft Windows 信息泄露漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. An information disclosure vulnerability exists in Microsoft Windows. The following products and editions are affected: Windows Server 2012 Server Core...

Microsoft Windows 信息泄露漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. An information disclosure vulnerability exists in Microsoft Windows. The following products and editions are affected:Windows 10 Version 1809 for 32-bit Systems,Windo...

Microsoft Remote Desktop Protocol Client 代码注入漏洞

Microsoft Remote Desktop Protocol Client is a client software application for connecting to remote desktops from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Remote Desktop Protocol Client. The following products and editions are affected: Windows 10 Version 1809...

Use 3rd-party plugins at your own risk

SonarQube has always had a rich plugin Marketplace, with much of SonarQubes functionality originally delivered as plugins and many additional needs being met by community-maintained plugins. But since October 2019, all SonarSource-provided functionality is bundled with SonarQube. That means any...

Microsoft Windows 后置链接漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A backlink vulnerability exists in Microsoft Windows. The following products and editions are affected:Windows 10 Version 21H1 for x64-based Systems,Windows 10 Version 21H1 for ARM64-base...

Microsoft Windows 信息泄露漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. An information disclosure vulnerability exists in Microsoft Windows. The following products and editions are affected: Windows 10 Version 2004 for x64-based...

CVE-2021-20785

Cross-site scripting vulnerability in GroupSession GroupSession Free edition from ver2.2.0 to the version prior to ver5.1.0, GroupSession byCloud from ver3.0.3 to the version prior to ver5.1.0, and GroupSession ZION from ver3.0.3 to the version prior to ver5.1.0 allows a remote attacker to inject...

OpenJDK: Incorrect comparison during range check elimination (Hotspot, 8264066)

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Hotspot. Supported versions that are affected are Java SE: 8u291, 11.0.11, 16.0.1; Oracle GraalVM Enterprise Edition: 20.3.2 and 21.1.0. Difficult to exploit vulnerability allows unauthenticated...

Microsoft Windows 安全特征问题漏洞

Microsoft Windows MSHTML Platform is an application from Microsoft Corporation USA. Microsoft Windows HTML Platform is vulnerable to a security feature issue. The following products and editions are affected:Windows 10 Version 20H2 for ARM64-based Systems,Windows 10 for 32-bit Systems,Windows 10...

Microsoft Windows Authenticode 安全漏洞

Microsoft Windows Authenticode is a code-signing technology from Microsoft Corporation USA that identifies the publisher of Authenticode-signed software. A security vulnerability exists in Microsoft Windows Authenticode. The following products and editions are affected:Windows 10 Version 1809 for...

IBM Cloud Pak for Applications 跨站脚本漏洞

IBM Cloud Pak for Applications is an application from IBM America, Inc. It provides a cloud-native development solution that delivers value quickly. A cross-site scripting vulnerability exists in IBM Cloud Pak for Applications, which stems from the product's lack of effective validation of...

Microsoft Windows Cryptographic Services 权限许可和访问控制问题漏洞

Microsoft Windows Cryptographic Services is a cryptographic service provider program from Microsoft Corporation USA. A vulnerability exists in Windows Cryptographic Services due to privilege permission and access control issues. The following products and editions are affected:Windows 10 Version...

Windows DCOM Server 安全特征问题漏洞

Microsoft Windows and Windows are both products of Microsoft Corporation USA.Microsoft Windows is a set of operating systems for use on personal devices.Windows is a desktop operating system. A security vulnerability exists in Windows DCOM Server. The following products and editions are...

Windows Drivers 权限许可和访问控制问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Windows Drivers. The following products and editions are affected: Windows 10 Version 2004 for x64-based Systems,Windows Server,...

Microsoft Windows MSHTML Platform 缓冲区错误漏洞

Microsoft Windows is a desktop operating system from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows MSHTML Platform. The following products and editions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for x64-based Systems,Windows 1...

Windows Kernel-Mode Drivers 权限许可和访问控制问题漏洞

Microsoft Windows is a desktop operating system from Microsoft Corporation USA. A security vulnerability exists in Windows Kernel-Mode Drivers. The following products and editions are affected:Windows 10 Version 1809 for x64-based Systems,Windows 10 Version 1809 for ARM64-based Systems,Windows...