CVE-2021-27084

Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability...

Remote code execution

Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability...

CVE-2021-27084 Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability

...

CVE-2021-27084

CVE-2021-27084 affects Visual Studio Code Java Extension Pack. The data in connected docs confirms a Remote Code Execution vulnerability tied to this extension pack, with remediation by Microsoft updates. The CVSS/metrics indicate HIGH impact with local attack vector and user interaction required...

CVE-2021-27084 Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability

...

Security Bulletin: IBM® Db2® is vulnerable to denial of service (CVE-2020-4200).

Summary Db2 is vulnerable to a denial of service. Authenticated users using a JDBC client may send specially crafted commands to cause Db2 to terminate abnormally. Vulnerability Details CVEID: CVE-2020-4200 DESCRIPTION: IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server could allow a...

Security Bulletin: IBM® Db2® is vulnerable to privilege escalation (CVE-2020-4230).

Summary IBM Db2 is vulnerable to a priviledge escalation. An authenticated local attacker with special permissions can execute specially crafted Db2 commands to modify the owner of stored procedures to SYSIBM, causing a privilege escalation. Vulnerability Details CVEID: CVE-2020-4230 DESCRIPTION:...

Security Bulletin: IBM® Db2® is vulnerable to a denial of service attack (CVE-2020-4420)

Summary IBM® Db2® could allow an unauthenticated attacker to cause a denial of service due to a hang in the execution of a terminate command. Vulnerability Details CVEID: CVE-2020-4420 DESCRIPTION: IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server could allow an unauthenticated...

Security Bulletin: IBM® Db2® is vulnerable to buffer overflow leading to a privileged escalation (CVE-2020-4363)

Summary IBM® Db2® is vulnerable to a buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code on the system with root privileges. Vulnerability Details CVEID: CVE-2020-4363 DESCRIPTION: IBM DB2 for Linux, UNIX and Windows includes DB2 Connec...

Security Bulletin: IBM® Db2® is vulnerable to an information disclosure. (CVE-2020-4386)

Summary IBM® Db2® could allow a local user to obtain sensitive information using a race condition of a symbolic link. Vulnerability Details CVEID: CVE-2020-4386 DESCRIPTION: IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server could allow a local user to obtain sensitive information...

Security Bulletin: IBM® Db2® is vulnerable to an information disclosure. (CVE-2020-4387)

Summary IBM® Db2® could allow a local user to obtain sensitive information using a race condition of a symbolic link. Vulnerability Details CVEID: CVE-2020-4387 DESCRIPTION: IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server could allow a local user to obtain sensitive information...

Security Bulletin: IBM Network Performance Insight 1.3.1 was affected by vulnerability in jackson-databind (CVE-2020-25649)

Summary IBM Network Performance Insight 1.3.1 was affected by CVE-2020-25649 becuase using older jackson-databind Vulnerability Details CVEID: CVE-2020-25649 DESCRIPTION: FasterXML Jackson Databind could provide weaker than expected security, caused by not having entity expansion secured properly...

Microsoft Office 2010 Service Pack 2 Remote Code Execution Vulnerabilities (KB4504703)

This host is missing an important security update according to Microsoft KB4504703 Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Microsoft Excel 2010 Service Pack 2 Remote Code Execution Vulnerabilities (KB4504707)

This host is missing an important security update according to Microsoft KB4504707 Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Microsoft Excel 2013 Service Pack 1 Remote Code Execution Vulnerabilities (KB4493239)

This host is missing an important security update according to Microsoft KB4493239 Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Description of the security update for Office 2010: March 9, 2021 (KB4504703)

Description of the security update for Office 2010: March 9, 2021 KB4504703 Summary This security update resolves a Microsoft Office Remote Code Execution Vulnerability. To learn more about the vulnerability, see the following security advisories: Microsoft Common Vulnerabilities and Exposures...

Description of the security update for Visio 2010: March 9, 2021 (KB4484376)

Description of the security update for Visio 2010: March 9, 2021 KB4484376 Summary This security update resolves a Microsoft Visio Security Feature Bypass Vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2021-27055. Note: To apply this...

Description of the security update for SharePoint Enterprise Server 2016: March 9, 2021 (KB4493199)

None None...

Description of the security update for Excel 2010: March 9, 2021 (KB4504707)

Description of the security update for Excel 2010: March 9, 2021 KB4504707 Summary This security update resolves a Microsoft Excel Remote Code Execution Vulnerability. To learn more about the vulnerability, see the following security advisories: Microsoft Common Vulnerabilities and Exposures...

Description of the security update for Visio 2013: March 9, 2021 (KB4486673)

Description of the security update for Visio 2013: March 9, 2021 KB4486673 Summary This security update resolves a Microsoft Visio Security Feature Bypass Vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2021-27055. Note: To apply this...