Python 3.2.x < 3.2.6, 3.3.x < 3.3.6, 3.4.x < 3.4.1 os.makedirs() not thread-safe (bpo-21082) - Linux

Python is prone to a local security bypass vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:python:python";...

CVE-2021-0414

The CVE-2021-0414 entry relates to MediaTek’s flv extractor, where a heap buffer overflow can cause an out-of-bounds read. This may lead to local information disclosure without requiring user interaction. The available patch/issue identifiers are ALPS05561384 (Patch ID) and ALPS05561384 (Issue ID...

Scientific Linux Security Update : 389-ds-base on SL7.x x86_64 (2021:3807)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2021:3807-1 advisory. - 389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed CVE-2021-3652 Note that Nessus has not tested for this issue but has...

Photon OS 1.0: Openssh PHSA-2021-1.0-0440

An update of the openssh package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-1.0-0440. The text itself is copyright C VMware, Inc...

Fedora: Security Advisory for cryptopp (FEDORA-2021-6788250ea4)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE: Security Advisory for xerces-c (openSUSE-SU-2021:1231-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

VulnCheck KEV: CVE-2021-36942

Microsoft Windows Local Security Authority LSA contains a spoofing vulnerability allowing an unauthenticated attacker to call a method on the LSARPC interface and coerce the domain controller to authenticate against another server using NTLM...

SUSE: Security Advisory (SUSE-SU-2021:2787-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the Windows LSA component in the Windows Server operating system allows attackers to perform spear-phishing attacks.

The vulnerability of the Windows LSA component in the Windows Server operating system is related to information representation errors in the user interface. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks remotely...

PT-2021-3785

Name of the Vulnerable Software and Affected Versions Microsoft Windows Local Security Authority LSA versions are affected, but specific versions are not provided in the input data. Description A spoofing issue allows attackers to affect the system. The problem is related to the Local Security...

The vulnerability of the operating environment of the information protection software “Blockhost-Net” and “Blockhost-Net K” allows attackers to obtain information about user accounts.

The vulnerability of the operating environments of the information protection software “Blockhost-Net” and “Blockhost-Net K” is related to the use of insecure mechanisms for processing authentication data in the memory of the operating system. Exploiting this vulnerability can allow an attacker...

SUSE: Security Advisory (SUSE-SU-2021:2321-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-33788

Windows LSA Denial of Service Vulnerability...

CVE-2021-33786

Windows LSA Security Feature Bypass Vulnerability...

CVE-2021-33786

Windows LSA Security Feature Bypass Vulnerability...

CVE-2021-33788

Windows LSA Denial of Service Vulnerability...

PT-2021-5683 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a security feature bypass in the Local Security Authority LSA of Microsoft Windows operating systems, stemming from weaknesses in the authorization mechanism. This...

Microsoft Local Security Authority Server 安全特征问题漏洞

Windows Server is the brand name of a series of server operating systems released by Microsoft, including all Windows operating systems released under the brand name "Windows Server." Security features in the LSA in Microsoft Windows Server Bypass vulnerability. No details of the vulnerability ar...

PT-2021-4835 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient input validation in the Windows Local Security Authority LSA system, which can be exploited by a remote attacker to cause a denial of service...

Microsoft Windows Local Security Authority Subsystem Service 输入验证错误漏洞

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA.Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Server is a set of server operating systems. A denial of service vulnerability exists in the LSA in Microsoft...