Lucene search
+L

12200 matches found

Microsoft KB
Microsoft KB
•added 2022/01/11 8:00 a.m.•105 views

Security and Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 7 SP1 and Windows Server 2008 R2 SP1 (KB5009719)

Security and Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 7 SP1 and Windows Server 2008 R2 SP1 KB5009719 Applies to: Microsoft .NET Framework 3.5.1 Microsoft .NET Framework 4.5.2 Microsoft .NET Framework 4.6 Microsoft .NET Framework 4.6.1...

7.5CVSS8.3AI score0.03052EPSS
SaveExploits0
Microsoft KB
Microsoft KB
•added 2022/01/11 8:00 a.m.•145 views

Description of the security update for Office 2013: January 11, 2022 (KB5002124)

Description of the security update for Office 2013: January 11, 2022 KB5002124 Summary This security update resolves a Microsoft Office remote code execution vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2022-21840. Note: To apply thi...

8.8CVSS9.7AI score0.03101EPSS
SaveExploits0
Microsoft KB
Microsoft KB
•added 2022/01/11 8:00 a.m.•242 views

Description of the security update for SharePoint Enterprise Server 2016: January 11, 2022 (KB5002118)

None None...

8.8CVSS7.1AI score0.03101EPSS
SaveExploits0
Microsoft KB
Microsoft KB
•added 2022/01/11 8:00 a.m.•87 views

Description of the security update for Office 2013: January 11, 2022 (KB5002064)

Description of the security update for Office 2013: January 11, 2022 KB5002064 Summary This security update resolves a Microsoft Office remote code execution vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2022-21840. Note: To apply thi...

8.8CVSS9.4AI score0.03101EPSS
SaveExploits0
Microsoft KB
Microsoft KB
•added 2022/01/11 8:00 a.m.•120 views

Description of the security update for SharePoint Foundation 2013: January 11, 2022 (KB5002127)

Description of the security update for SharePoint Foundation 2013: January 11, 2022 KB5002127 Summary This security update resolves a Microsoft SharePoint Server remote code execution vulnerability and Microsoft Office remote code execution vulnerability. To learn more about the vulnerabilities,...

9CVSS9.4AI score0.03101EPSS
SaveExploits0
Microsoft KB
Microsoft KB
•added 2022/01/11 8:00 a.m.•71 views

Description of the security update for SharePoint Foundation 2013: January 11, 2022 (KB5002129)

Description of the security update for SharePoint Foundation 2013: January 11, 2022 KB5002129 Summary This security update resolves a Microsoft Office remote code execution vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2022-21840. Not...

8.8CVSS9.7AI score0.03101EPSS
SaveExploits0
Microsoft KB
Microsoft KB
•added 2022/01/11 8:00 a.m.•118 views

Description of the security update for SharePoint Enterprise Server 2016: January 11, 2022 (KB5002113)

None None...

9CVSS7.1AI score0.03101EPSS
SaveExploits0
Microsoft KB
Microsoft KB
•added 2022/01/11 8:00 a.m.•80 views

Description of the security update for SharePoint Server 2019 Language Pack: January 11, 2022 (KB5002108)

None None...

8.8CVSS7.1AI score0.03101EPSS
SaveExploits0
CNNVD
CNNVD
•added 2022/01/11 12:00 a.m.•23 views

Microsoft Windows Installer security vulnerabilities

Microsoft Windows Installer is a component of the Windows operating system from Microsoft. It provides a standard basis for installing and uninstalling software. A security vulnerability exists in Microsoft Windows Installer. The following products and versions are affected: Windows 10 Version 20...

7.8CVSS7.4AI score0.00908EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2022/01/11 12:00 a.m.•24 views

Microsoft Windows IKE Extension security vulnerability

Microsoft Windows IKE Extension is a network key exchange extension from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows IKE Extension. The following products and editions are affected:Windows Server 2016,Windows Server 2016 Server Core installation,Windows 7 for...

7.5CVSS7.6AI score0.04395EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2022/01/10 2:10 p.m.•36 views

CVE-2021-44528

A open redirect vulnerability exists in Action Pack = 6.0.0 that could allow an attacker to craft a "X-Forwarded-Host" headers in combination with certain "allowed host" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website...

6.1CVSS6.4AI score
SaveExploits0References3
NVD
NVD
•added 2022/01/10 2:10 p.m.•54 views

CVE-2021-44528

A open redirect vulnerability exists in Action Pack = 6.0.0 that could allow an attacker to craft a "X-Forwarded-Host" headers in combination with certain "allowed host" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website...

6.1CVSS0.04182EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2022/01/10 2:10 p.m.•17 views

CVE-2021-44528

A open redirect vulnerability exists in Action Pack = 6.0.0 that could allow an attacker to craft a "X-Forwarded-Host" headers in combination with certain "allowed host" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website...

6.1CVSS6.6AI score0.04182EPSS
SaveExploits1References5
osv_debian
osv_debian
•added 2022/01/10 2:10 p.m.•5 views

DEBIAN-CVE-2021-44528

A open redirect vulnerability exists in Action Pack = 6.0.0 that could allow an attacker to craft a "X-Forwarded-Host" headers in combination with certain "allowed host" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website...

6.1CVSS6.1AI score0.04182EPSS
SaveExploits1References1
osv_ubuntu
osv_ubuntu
•added 2022/01/10 2:10 p.m.•16 views

UBUNTU-CVE-2021-44528

A open redirect vulnerability exists in Action Pack = 6.0.0 that could allow an attacker to craft a "X-Forwarded-Host" headers in combination with certain "allowed host" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website...

6.1CVSS6.5AI score0.04182EPSS
SaveExploits1References6
Prion
Prion
•added 2022/01/10 2:10 p.m.•34 views

Open redirect

A open redirect vulnerability exists in Action Pack = 6.0.0 that could allow an attacker to craft a "X-Forwarded-Host" headers in combination with certain "allowed host" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website...

5.8CVSS6.1AI score0.04182EPSS
SaveExploits1References3Affected Software1
UbuntuCve
UbuntuCve
•added 2022/01/10 2:10 p.m.•37 views

CVE-2021-44528

A open redirect vulnerability exists in Action Pack = 6.0.0 that could allow an attacker to craft a "X-Forwarded-Host" headers in combination with certain "allowed host" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website...

6.1CVSS6.6AI score0.04182EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2022/01/10 12:00 a.m.•22 views

Rails Action Pack input validation error vulnerability

Rails Action Pack is a web framework for the Rails community in the United States . It provides a mechanism for routing mapping request URLs to actions, defining controllers that implement actions, and generating responses by rendering views templates in various formats. An input validation error...

6.1CVSS7.3AI score0.04182EPSS
SaveExploits1References4
IBM Security Bulletins
IBM Security Bulletins
•added 2022/01/07 4:37 p.m.•170 views

Security Bulletin: There are multiple vulnerabilities in the Apache Log4j used in IBM® QRadar Risk Manager that may allow for remote code execution (RCE).

Summary Apache Log4j is used by IBM® QRadar Risk Manager to log system events. This bulletin provides a remediation to address the multiple Apache Log4j vulnerabilities CVE-2021-44228 and CVE-2021-45046 by upgrading IBM® QRadar Risk Manager. Vulnerability Details CVEID: CVE-2021-44228 DESCRIPTION...

10CVSS8AI score0.99999EPSS
SaveExploits387Affected Software1
CNVD
CNVD
•added 2022/01/07 12:00 a.m.•44 views

WordPress SQL Injection Vulnerability (CNVD-2022-03213)

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blogging sites on servers with PHP and MySQL.The WordPress plugin Speed Booster Pack version 4.3.3.1 previously had a SQL injection...

7.2CVSS2.2AI score0.01112EPSS
SaveExploits2References1
Rows per page
Query Builder