Adobe Bridge Multiple Code Execution Vulnerabilities (APSB21-07) - Windows

Adobe Bridge is prone to multiple vulnerabilities SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:bridgecc"; if description...

Adobe Bridge Multiple Code Execution Vulnerabilities (APSB21-07) - Mac OS X

Adobe Bridge is prone to multiple vulnerabilities SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:bridgecc"; if description...

Atlassian Jira Information Disclosure Vulnerability (CNVD-2021-13207)

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage all types of issues and defects in the workplace. An information disclosure vulnerability exists in Atlassian Jira Server and Data Center, which arises from errors such as...

The vulnerability of Junos router operating systems of the NFX and SRX series, related to pointer swapping errors, allows attackers to trigger a service failure.

The vulnerability of Junos router series NFX and SRX lies in pointer swapping errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the software installer for Intel RealSense™ DCM 3D cameras allows a perpetrator to gain enhanced privileges.

The vulnerability of the software installer for Intel RealSense™ DCM 3D cameras is related to errors in the use of standard resolutions. Exploiting this vulnerability can allow attackers to increase their privileges...

Vulnerability of the web-API service provided by Junos routers of the NFX Series and SRX Series; allowing attackers to obtain the secret key for the web-API service

The vulnerability of the web-API service of Junos router series NFX and SRX is related to errors in managing cryptographic keys. Exploiting this vulnerability can allow an attacker to obtain the secret key for the web-API service...

Mozilla: MediaError message property could have leaked information about cross-origin resources

When trying to load a cross-origin resource in an audio/video context a decoding error may have resulted, and the content of that error may have revealed information about the resource. This vulnerability affects Firefox 86, Thunderbird 78.8, and Firefox ESR 78.8...

Mozilla: MediaError message property could have leaked information about cross-origin resources

When trying to load a cross-origin resource in an audio/video context a decoding error may have resulted, and the content of that error may have revealed information about the resource. This vulnerability affects Firefox 86, Thunderbird 78.8, and Firefox ESR 78.8...

Mozilla: MediaError message property could have leaked information about cross-origin resources

When trying to load a cross-origin resource in an audio/video context a decoding error may have resulted, and the content of that error may have revealed information about the resource. This vulnerability affects Firefox 86, Thunderbird 78.8, and Firefox ESR 78.8...

Medium: openssl

Issue Overview: Calls to EVPCipherUpdate, EVPEncryptUpdate and EVPDecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissible length for an integer on the platform. In such cases the return value from the function call will be 1...

The vulnerability of the Apache Struts software platform arises from incorrect processing of Object Graph Navigation Language expressions, allowing attackers to execute arbitrary code.

The vulnerability of the Apache Struts software framework exists due to incorrect processing of expressions written in the Object Graph Navigation Language OGNL. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Security Vulnerabilities fixed in Thunderbird 78.8 — Mozilla

As specified in the W3C Content Security Policy draft, when creating a violation report, "User agents need to ensure that the source file is the URL requested by the page, pre-redirects. If that’s not possible, user agents need to strip the URL down to an origin to avoid unintentional leakage."...

The vulnerability of Microsoft Azure Kubernetes operating system, which allows attackers to escalate their privileges

The vulnerability of Microsoft Azure Kubernetes operating system is related to privilege management errors. Exploiting this vulnerability can allow a malicious actor to escalate their privileges remotely...

The vulnerability of the Windows Event Tracing service allows attackers to escalate their privileges.

The vulnerability of the Windows Event Tracing service is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

Vulnerability of application control tools: Application control in Windows Defender Application Control (WDAC), a PowerShell Core automation tool, allows attackers to bypass existing security mechanisms.

The vulnerability of the application control tool, Windows Defender Application Control WDAC, a PowerShell Core automation tool, is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass existing security measures remotely...

The vulnerability of the PsExec remote execution tool, related to privilege management errors, allows a hacker to escalate their privileges.

The vulnerability of the remote execution command PsExec is related to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the BLIP protocol analyzer in Wireshark software allows a hacker to trigger a service failure.

The vulnerability of the BLIP protocol analyzer in Wireshark is related to pointer assignment errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Vulnerabilities of Windows operating systems are related to security configuration errors, which allow attackers to bypass existing security mechanisms.

Vulnerabilities of Windows operating systems are related to security configuration errors. Exploiting these vulnerabilities can allow a malicious actor to bypass existing security measures remotely...

The vulnerability of Microsoft Exchange Server is related to the lack of protection for service data, which allows attackers to carry out spoofing attacks.

The vulnerability of Microsoft Exchange Server servers is related to errors in information representation by the user interface. Exploiting this vulnerability can allow a malicious actor to perform spear-phishing attacks remotely...

The vulnerability of the Windows Event Tracing service allows a perpetrator to cause a service failure.

The vulnerability of the Windows Event Tracing service is related to privilege management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...