PT-2021-1678 · Microsoft · Office

Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Description: A vulnerability in Microsoft Office exists due to insufficient input validation. Exploitation of this issue may allow an attacker to execute arbitrary code. Recommendations: At the...

PT-2021-1848 · Microsoft · Sharepoint Server

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint affected versions not specified Description: The issue is related to insecure privilege management in Microsoft SharePoint. It allows a remote attacker to exploit the vulnerability, potentially elevating their privileges...

PT-2021-1542 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access control in the Windows LUAFV driver, which can be exploited to elevate privileges. This allows an attacker to affect the system. There is no...

PT-2021-8094

Name of the Vulnerable Software and Affected Versions Ansible affected versions not specified Description A flaw was found in the Ansible module where credentials are disclosed in the console log by default and not protected by the security feature when using the bitbucket pipeline variable modul...

PT-2021-1595 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue exists due to insufficient input validation in the Windows operating system's Remote Procedure Call runtime. It allows remote attackers to execute arbitrary code and affect the...

PT-2021-1683 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in privilege management within the Windows operating system's CSC service. It allows an attacker to potentially elevate their privileges, affecting the system...

PT-2021-1845 · Microsoft · Sharepoint Server +5

Name of the Vulnerable Software and Affected Versions: Microsoft Word affected versions not specified Microsoft Office affected versions not specified Microsoft Office Online Server affected versions not specified Microsoft Office Web Apps affected versions not specified Microsoft 365 Apps affect...

PT-2021-1680 · Microsoft · Windows Graphics +1

Name of the Vulnerable Software and Affected Versions: Windows Graphics Component affected versions not specified Description: The issue is related to an information disclosure vulnerability in the Windows Graphics Component. It allows attackers to obtain sensitive information and potentially...

PT-2021-1545 · Microsoft · Windows Media Foundation +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Media Foundation affected versions not specified Description: The issue exists due to insufficient input validation in the Windows Media Foundation component of Windows operating systems. This allows remote attackers to...

PT-2021-1601 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in privilege management within the Windows CSC service, allowing an attacker to potentially elevate their privileges. This could affect the system, enabling t...

PT-2021-1600 · Microsoft · Windows Event Tracing +1

Name of the Vulnerable Software and Affected Versions: Windows Event Tracing versions affected versions not specified Description: The issue is related to errors in privilege management within the Windows operating system's tracing service. It allows an attacker to potentially elevate their...

PT-2021-1688 · Microsoft · Windows Wlan Service +1

Name of the Vulnerable Software and Affected Versions: Windows WLAN Service affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows WLAN Service, which is caused by errors in privilege management. Exploitation of this issue may...

PT-2021-1676 · Microsoft · Azure Active Directory

Name of the Vulnerable Software and Affected Versions: Azure Active Directory affected versions not specified Description: The issue is related to an information disclosure vulnerability in the Azure Active Directory Pod Identity service. It may allow an attacker to gain unauthorized access to...

Security Bulletin: HTML comments with sensitive information could be present in IBM Workload Scheduler

Summary HTML comments with sensitive information, as file locations, machine or user names, could be present in IBM Dynamic Workload Console 9.5 Vulnerability Details CVEID: CVE-2020-4673 DESCRIPTION: IBM Workload Automation stores sensitive information in HTML comments that could aid in further...

PT-2021-8860

Name of the Vulnerable Software and Affected Versions K7Antivirus Premium version 15.1.0.53 Description The issue is a Buffer Overflow, which allows the execution of arbitrary code locally. The component affected is K7TSMngr.exe. Recommendations For version 15.1.0.53, at the moment, there is no...

Dovecot: Multiple vulnerabilities

Background Dovecot is an open source IMAP and POP3 email server. Description Multiple vulnerabilities have been discovered in Dovecot. Please review the CVE identifiers referenced below for details. Impact A remote attacker could send a specially crafted mail or send a specially crafted IMAP...

PT-2021-7293 · Xen +4 · Xen +4

Name of the Vulnerable Software and Affected Versions: Xen affected versions not specified Description: The issue is related to a component of the Xen hypervisor, specifically the blkfront component, which has a resource release error. This can be exploited by a remote attacker to cause a denial ...

PT-2021-13364 · Astra Linux · Astra Linux

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The provided descriptions do not contain sufficient information to summarize the key details about the issue. Recommendations: At the moment, there is n...

PT-2020-5210 · Microsoft · Windows Cloud Files Mini Filter Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Cloud Files Mini Filter Driver affected versions not specified Description: The issue is related to insecure privilege management in the Cloud Files Mini Filter Driver of Windows operating systems. It allows an attacker to elevate the...

PT-2020-5297 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in the code of the Windows operating system, allowing an attacker to bypass the security features of the Windows lock screen. This could enable an attacker to...