PT-2021-3919 · Microsoft · Sharepoint Server

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue is related to errors in displaying information to the user interface, which can be exploited by a remote attacker to conduct spoofing attacks. This allows...

The vulnerability of the Edge Installer component of the Microsoft Edge browser allows a perpetrator to elevate their privileges and execute arbitrary code.

The vulnerability of the Microsoft Edge browser’s Edge Installer component is related to errors during the connection to directories. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

The vulnerability of the Elastic Cloud Enterprise analytics platform, related to security configuration errors, allows a perpetrator to gain access to protected information.

The vulnerability of the Elastic Cloud Enterprise analytics platform is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to gain access to protected information...

ZTE ZXHN H2640 后置链接漏洞

The ZTE ZXHN H2640 is a home gateway device from ZTE Corporation China.An information disclosure vulnerability exists in the ZTE ZXHN H2640, which stems from a configuration and other errors in the network system or product during operation. An unauthorized attacker could exploit the vulnerabilit...

The vulnerability of the Mozilla Firefox browser, related to information representation errors, allows attackers to perform spear-phishing attacks.

The vulnerability of the Mozilla Firefox browser is related to errors in the object model representation of documents. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...

The vulnerability in the Storm Control profile of Juniper Networks’ Junos OS routers of the QFX5000 and EX4600 series allows a attacker to cause a service failure.

The vulnerability of the Storm Control profile in Juniper Networks’ Junos OS routers of the QFX5000 and EX4600 series is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Code injection

libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches the setup.Due to errors in the logic, the config matching function did not take 'issuercert' into account and it compared the involved paths case insensitively,which could lead ...

The vulnerability of the Moodle administration system, related to errors in processing hypertext links, allows a hacker to bypass security measures.

The vulnerability of the Moodle administration system is related to errors in processing hypertext links. Exploiting this vulnerability could allow a malicious actor to bypass security features remotely...

The vulnerability of the Packet Forwarding Engine (PFE) module in Juniper Networks’ Junos OS-based routers of the PTX and QFX10K series allows a hacker to induce a service failure.

The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos OS-based routers of the PTX and QFX10K series is related to initialization errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Foxit PDF Editor < 11.0.1 Multiple Vulnerabilities (macOS)

The version of Foxit PDF Editor for Mac previously named Foxit PhantomPDF for Mac installed on the remote macOS host is prior to 11.0.1. It is, therefore, affected by multiple vulnerabilities: - Multiple remote code execution vulnerabilities exist in Foxit PDF Editor due to use-after-free errors...

Foxit PDF Reader < 11.0.1 Multiple Vulnerabilities (macOS)

The version of Foxit PDF Reader for Mac installed on the remote macOS host is prior to 11.0.1. It is, therefore, affected by multiple vulnerabilities: - Multiple remote code execution vulnerabilities exist in Foxit PDF Reader due to use-after-free errors when handling certain Javascripts. An...

The vulnerability of the JavaScript script handler in Google Chrome’s V8 browser allows a hacker to trigger a service failure.

The vulnerability of the JavaScript script handler in Google Chrome’s browser is related to type conversion errors. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the ARP Policer implementation on Juniper Networks’ Junos OS allows a perpetrator to circumvent traffic restrictions.

The vulnerability of the ARP Policer traffic filtering technology implemented in Juniper Networks’ Junos OS is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to circumvent traffic restrictions...

CVE-2021-22417

A component of the HarmonyOS has a Data Processing Errors vulnerability. Local attackers may exploit this vulnerability to cause Kernel Memory Leakage...

CVE-2021-22417

A component of the HarmonyOS has a Data Processing Errors vulnerability. Local attackers may exploit this vulnerability to cause Kernel Memory Leakage...

CVE-2021-22416

A component of the HarmonyOS has a Data Processing Errors vulnerability. Local attackers may exploit this vulnerability to cause Kernel Code Execution...

CVE-2021-22416

A component of the HarmonyOS has a Data Processing Errors vulnerability. Local attackers may exploit this vulnerability to cause Kernel Code Execution...

Code injection

A component of the HarmonyOS has a Data Processing Errors vulnerability. Local attackers may exploit this vulnerability to cause Kernel Code Execution...

Code injection

A component of the HarmonyOS has a Data Processing Errors vulnerability. Local attackers may exploit this vulnerability to cause Kernel Memory Leakage...

CVE-2021-22416

A component of the HarmonyOS has a Data Processing Errors vulnerability. Local attackers may exploit this vulnerability to cause Kernel Code Execution...