4332 matches found
CVE-2021-41363 Intune Management Extension Security Feature Bypass Vulnerability
...
CVE-2021-41346 Console Window Host Security Feature Bypass Vulnerability
...
CVE-2021-41346 Console Window Host Security Feature Bypass Vulnerability
...
CVE-2021-41346
CVE-2021-41346 refers to a security feature bypass vulnerability in the Windows Console Window Host. Exploitation is local (AV:L, UI:N, integrity/confidentiality/availability impact: partial), effectively bypassing security controls and potentially enabling privilege escalation or data exposure a...
CVE-2021-41338 Windows AppContainer Firewall Rules Security Feature Bypass Vulnerability
...
CVE-2021-41337 Active Directory Security Feature Bypass Vulnerability
...
CVE-2021-40460 Windows Remote Procedure Call Runtime Security Feature Bypass Vulnerability
...
CVE-2021-40456 Windows AD FS Security Feature Bypass Vulnerability
...
KB5006667: Windows 10 version 1909 Security Update (October 2021)
The remote Windows host is missing security update 5006667. It is, therefore, affected by multiple vulnerabilities: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. CVE-2021-36970, CVE-2021-40455 - A denial of service...
PT-2021-4685 · Microsoft · Console Window Host +1
Name of the Vulnerable Software and Affected Versions: Console Window Host affected versions not specified Description: The issue is related to errors in security settings of the Console Window Host component in Microsoft Windows operating systems. This allows an attacker to bypass security...
Microsoft Intune 安全特征问题特征问题漏洞
Microsoft Intune is a Microsoft cloud-based management tool from Microsoft Corporation USA that is part of Microsoft Endpoint Manager. for managing mobile devices and operating systems. It is designed to provide unified endpoint management for enterprise and BYOD devices in a way that protects...
KB5006669: Windows 10 Version 1607 and Windows Server 2016 Security Update (October 2021)
The remote Windows host is missing security update 5006669. It is, therefore, affected by multiple vulnerabilities: - A denial of service DoS vulnerability. An attacker can exploit this issue to cause the affected component to deny system or application services. CVE-2021-36953, CVE-2021-40463 - ...
Security feature bypass
Unauthorized information security disclosure vulnerability on Micro Focus Directory and Resource Administrator DRA product, affecting all DRA versions prior to 10.1 Patch 1. The vulnerability could lead to unauthorized information disclosure...
CVE-2021-41096
Rucky is a USB HID Rubber Ducky Launch Pad for Android. Versions 2.2 and earlier for release builds and versions 425 and earlier for nightly builds suffer from use of a weak cryptographic algorithm RSA/ECB/PKCS1Padding. The issue will be patched in v2.3 for release builds and 426 onwards for...
CVE-2021-41096
Rucky is a USB HID Rubber Ducky Launch Pad for Android. Versions 2.2 and earlier for release builds and versions 425 and earlier for nightly builds suffer from use of a weak cryptographic algorithm RSA/ECB/PKCS1Padding. The issue will be patched in v2.3 for release builds and 426 onwards for...
Security feature bypass
An issue was discovered in Concrete CMS through 8.5.5. There is an SVG sanitizer bypass...
CVE-2016-20012
OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username and public key is known to an SSH server, to test whether this suspicion is correct. This occurs because a challenge is sent only when that combination could be valid for a login session. NOTE...
CVE-2021-38624
Windows Key Storage Provider Security Feature Bypass Vulnerability...