Lucene search
+L

23359 matches found

RubySec
RubySec
added 2021/10/06 12:00 a.m.22 views

Cross-site Scripting in Sidekiq

Sidekiq through 5.1.3 and 6.x through 6.2.0 allows XSS via the queue name of the live-poll feature when Internet Explorer is used...

6.1CVSS2.9AI score0.04158EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2021/09/29 4:15 p.m.4 views

CVE-2021-39857

Adobe Acrobat Reader DC add-on for Internet Explorer versions 2021.005.20060 and earlier, 2020.004.30006 and earlier and 2017.011.30199 and earlier are affected by an Information Disclosure vulnerability. An unauthenticated attacker could leverage this vulnerability to check for existence of loca...

4.3CVSS5.8AI score0.02517EPSS
SaveExploits0References1
NVD
NVD
added 2021/09/29 4:15 p.m.19 views

CVE-2021-39857

Adobe Acrobat Reader DC add-on for Internet Explorer versions 2021.005.20060 and earlier, 2020.004.30006 and earlier and 2017.011.30199 and earlier are affected by an Information Disclosure vulnerability. An unauthenticated attacker could leverage this vulnerability to check for existence of loca...

4.3CVSS0.02517EPSS
SaveExploits0References1
Prion
Prion
added 2021/09/29 4:15 p.m.25 views

Information disclosure

Adobe Acrobat Reader DC add-on for Internet Explorer versions 2021.005.20060 and earlier, 2020.004.30006 and earlier and 2017.011.30199 and earlier are affected by an Information Disclosure vulnerability. An unauthenticated attacker could leverage this vulnerability to check for existence of loca...

4.3CVSS4.6AI score0.02517EPSS
SaveExploits0References1Affected Software4
CVE
CVE
added 2021/09/29 3:39 p.m.82 views

CVE-2021-39857

CVE-2021-39857 affects Adobe Acrobat Reader DC/IE ActiveX LoadFile vulnerability. The IE add-on (Audot Reader DC for IE) versions 2021.005.20060 and earlier, 2020.004.30006 and earlier, and 2017.011.30199 and earlier are susceptible. Root cause: ActiveX LoadFile behavior enables information discl...

4.3CVSS5.2AI score0.02517EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2021/09/29 3:39 p.m.26 views

CVE-2021-39857 Adobe Acrobat Reader DC Information Disclosure via ActiveX LoadFile

Adobe Acrobat Reader DC add-on for Internet Explorer versions 2021.005.20060 and earlier, 2020.004.30006 and earlier and 2017.011.30199 and earlier are affected by an Information Disclosure vulnerability. An unauthenticated attacker could leverage this vulnerability to check for existence of loca...

4.3CVSS5.5AI score0.02517EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/09/29 12:00 a.m.35 views

Zoom Client Elevation of Privilege Vulnerability

Zoom Client is a multi-platform video conferencing client application from Zoom ZOOM, a U.S. company. versions prior to Zoom Client for Meetings for Windows 5.4.0 contain a security vulnerability that could be exploited to launch Internet Explorer with elevated privileges...

7.8CVSS5.9AI score0.00318EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/09/29 12:00 a.m.30 views

Zoom Rooms Elevation of Privilege Vulnerability

ZOOM Rooms is a software-based conferencing system from the US company Zoom ZOOM. A system that allows web conferencing on fixed endpoints, similar to traditional video conferencing systems.A security vulnerability exists in versions prior to Zoom Rooms for Conference Room for Windows 5.3.0, whic...

7.8CVSS4.5AI score0.00204EPSS
SaveExploits0References1
OSV
OSV
added 2021/09/27 2:15 p.m.8 views

CVE-2021-34412

During the installation process for all versions of the Zoom Client for Meetings for Windows before 5.4.0, it is possible to launch Internet Explorer. If the installer was launched with elevated privileges such as by SCCM this can result in a local privilege escalation...

7.8CVSS5.8AI score0.00318EPSS
SaveExploits0References1
NVD
NVD
added 2021/09/27 2:15 p.m.15 views

CVE-2021-34412

During the installation process for all versions of the Zoom Client for Meetings for Windows before 5.4.0, it is possible to launch Internet Explorer. If the installer was launched with elevated privileges such as by SCCM this can result in a local privilege escalation...

7.8CVSS0.00318EPSS
SaveExploits0References1
OSV
OSV
added 2021/09/27 2:15 p.m.6 views

CVE-2021-34411

During the installation process forZoom Rooms for Conference Room for Windows before version 5.3.0 it is possible to launch Internet Explorer with elevated privileges. If the installer was launched with elevated privileges such as by SCCM this can result in a local privilege escalation...

7.8CVSS7.1AI score0.00204EPSS
SaveExploits0References1
Prion
Prion
added 2021/09/27 2:15 p.m.25 views

Privilege escalation

During the installation process forZoom Rooms for Conference Room for Windows before version 5.3.0 it is possible to launch Internet Explorer with elevated privileges. If the installer was launched with elevated privileges such as by SCCM this can result in a local privilege escalation...

4.6CVSS7.5AI score0.00204EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/09/27 2:15 p.m.7 views

CVE-2021-34411

During the installation process forZoom Rooms for Conference Room for Windows before version 5.3.0 it is possible to launch Internet Explorer with elevated privileges. If the installer was launched with elevated privileges such as by SCCM this can result in a local privilege escalation...

7.8CVSS7AI score0.00204EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2021/09/27 2:15 p.m.6 views

CVE-2021-34412

During the installation process for all versions of the Zoom Client for Meetings for Windows before 5.4.0, it is possible to launch Internet Explorer. If the installer was launched with elevated privileges such as by SCCM this can result in a local privilege escalation...

7.8CVSS7AI score0.00318EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/09/27 12:00 a.m.10 views

ZOOM Zoom Client 安全漏洞

Zoom Client is a multi-platform video conferencing client application from Zoom ZOOM, a U.S. company. versions prior to Zoom Client for Meetings for Windows 5.4.0 contain a security vulnerability that could be exploited to launch Internet Explorer with elevated privileges...

7.8CVSS7.3AI score0.00318EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/09/27 12:00 a.m.9 views

ZOOM Rooms 安全漏洞

ZOOM Rooms is a software-based conferencing system from the US company Zoom ZOOM. A system that allows web conferencing on fixed endpoints, similar to traditional video conferencing systems.A security vulnerability exists in versions prior to Zoom Rooms for Conference Room for Windows 5.3.0, whic...

7.8CVSS7.4AI score0.00204EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2021/09/14 12:00 a.m.149 views

Security Updates for Internet Explorer (September 2021)

The Internet Explorer installation on the remote host is missing a security update. It is, therefore, affected by a memory corruption error in the scripting engine. An unauthenticated, remote attacker can exploit this to execute arbitrary commands. CVE-2021-40444 %NASLMINLEVEL 70300 C Tenable...

8.8CVSS7AI score0.9745EPSS
SaveExploits38References6
BDU FSTEC
BDU FSTEC
added 2021/09/10 12:00 a.m.9 views

The vulnerability of the MSHTML mechanism in the Internet Explorer browser, related to improper code generation, allows a hacker to execute arbitrary code.

The vulnerability of the MSHTML mechanism in the Internet Explorer browser is related to improper handling of code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created Microsoft Office document that contains an ActiveX control...

9CVSS7.5AI score0.9745EPSS
SaveExploits38References6Affected Software1
Tenable Nessus
Tenable Nessus
added 2021/09/10 12:00 a.m.256 views

Security Updates for Microsoft Internet Explorer OOB (Sept 2021) (deprecated)

This plugin is a work-around and is being deprecated due other superceded Microsoft Security patches. See Nessus Plugin IDs: 153374, 153372, 153373, 153375, 153377, 153381, 153383 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2021/09/23. Deprecated due to patch...

7.5AI score0.9745EPSS
SaveExploits38References2
OpenVAS
OpenVAS
added 2021/09/09 12:00 a.m.19 views

Mozilla Thunderbird Security Advisories (MFSA2021-37, MFSA2021-41) - Windows

This host is missing a security update according to Mozilla. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird"...

6.5CVSS8AI score0.01155EPSS
SaveExploits1References1
Rows per page
Query Builder