CVE-2021-40456 Windows AD FS Security Feature Bypass Vulnerability

...

KB5006667: Windows 10 version 1909 Security Update (October 2021)

The remote Windows host is missing security update 5006667. It is, therefore, affected by multiple vulnerabilities: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. CVE-2021-36970, CVE-2021-40455 - A denial of service...

PT-2021-4685 · Microsoft · Console Window Host +1

Name of the Vulnerable Software and Affected Versions: Console Window Host affected versions not specified Description: The issue is related to errors in security settings of the Console Window Host component in Microsoft Windows operating systems. This allows an attacker to bypass security...

Microsoft Intune 安全特征问题特征问题漏洞

Microsoft Intune is a Microsoft cloud-based management tool from Microsoft Corporation USA that is part of Microsoft Endpoint Manager. for managing mobile devices and operating systems. It is designed to provide unified endpoint management for enterprise and BYOD devices in a way that protects...

KB5006669: Windows 10 Version 1607 and Windows Server 2016 Security Update (October 2021)

The remote Windows host is missing security update 5006669. It is, therefore, affected by multiple vulnerabilities: - A denial of service DoS vulnerability. An attacker can exploit this issue to cause the affected component to deny system or application services. CVE-2021-36953, CVE-2021-40463 - ...

Security feature bypass

Unauthorized information security disclosure vulnerability on Micro Focus Directory and Resource Administrator DRA product, affecting all DRA versions prior to 10.1 Patch 1. The vulnerability could lead to unauthorized information disclosure...

CVE-2021-41096

Rucky is a USB HID Rubber Ducky Launch Pad for Android. Versions 2.2 and earlier for release builds and versions 425 and earlier for nightly builds suffer from use of a weak cryptographic algorithm RSA/ECB/PKCS1Padding. The issue will be patched in v2.3 for release builds and 426 onwards for...

CVE-2021-41096

Rucky is a USB HID Rubber Ducky Launch Pad for Android. Versions 2.2 and earlier for release builds and versions 425 and earlier for nightly builds suffer from use of a weak cryptographic algorithm RSA/ECB/PKCS1Padding. The issue will be patched in v2.3 for release builds and 426 onwards for...

Security feature bypass

An issue was discovered in Concrete CMS through 8.5.5. There is an SVG sanitizer bypass...

CVE-2016-20012

OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username and public key is known to an SSH server, to test whether this suspicion is correct. This occurs because a challenge is sent only when that combination could be valid for a login session. NOTE...

CVE-2021-38624

Windows Key Storage Provider Security Feature Bypass Vulnerability...

CVE-2021-38624

Windows Key Storage Provider Security Feature Bypass Vulnerability...

CVE-2021-38632

Windows BitLocker Security Feature Bypass Vulnerability...

Security feature bypass

Windows Key Storage Provider Security Feature Bypass Vulnerability...

CVE-2021-38624

Windows Key Storage Provider Security Feature Bypass Vulnerability...

Security feature bypass

BitLocker Security Feature Bypass Vulnerability...

Windows Key Storage Provider Security Feature Bypass Vulnerability

...

KB5005568: Windows 10 Version 1809 and Windows Server 2019 September 2021 Security Update

The remote Windows host is missing security update 5005568. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2021-36954, CVE-2021-36955, CVE-2021-36963, CVE-2021-36964, CVE-2021-36966,...

KB5005569: Windows 10 version 1507 LTS September 2021 Security Update

The remote Windows host is missing security update 5005569. It is, therefore, affected by multiple vulnerabilities : - An memory corruption vulnerability exists. An attacker can exploit this to corrupt the memory and cause unexpected behaviors within the system/application. CVE-2021-26435 - An...

KB5005627: Windows 8.1 and Windows Server 2012 R2 September 2021 Security Update

The remote Windows host is missing security update 5005627 or cumulative update 5005613. It is, therefore, affected by multiple vulnerabilities : - An memory corruption vulnerability exists. An attacker can exploit this to corrupt the memory and cause unexpected behaviors within the...