4347 matches found
APSB21-75 Security update available for Adobe ColdFusion
Adobe has released security updates for ColdFusion versions 2021 and 2018. These updates resolve multiple critical vulnerabilities that could lead to security feature bypass...
KB5005565: Windows 10 Version 2004 / Windows 10 Version 20H2 / Windows 10 Version 21H1 Security Update (September 2021)
The remote Windows host is missing security update 5005565. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2021-36954, CVE-2021-36955, CVE-2021-36963, CVE-2021-36964, CVE-2021-36966,...
KB5005566: Windows 10 version 1909 / Windows Server 1909 Security Update (September 2021)
The remote Windows host is missing security update 5005566. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2021-36954, CVE-2021-36955, CVE-2021-36963, CVE-2021-36964, CVE-2021-36966,...
KB5005573: Windows 10 Version 1607 and Windows Server 2016 September 2021 Security Update
The remote Windows host is missing security update 5005573. It is, therefore, affected by multiple vulnerabilities : - An memory corruption vulnerability exists. An attacker can exploit this to corrupt the memory and cause unexpected behaviors within the system/application. CVE-2021-26435 - An...
Mautic Security Feature Issue Feature Issue Vulnerability
Mautic is an open source marketing automation software. The software monitors and manages websites, sends emails and manages customer resources. mautic versions prior to 3.3.4 and versions prior to 4.0.0 are vulnerable to a security feature issue that stems from the mtrand function in the softwar...
VulnCheck KEV: CVE-2021-31207
Microsoft Exchange Server contains an unspecified vulnerability that allows for security feature bypass...
CVE-2021-28627 Adobe Experience Manager Server-side Request Forgery could lead to Security feature bypass
Adobe Experience Manager Cloud Service offering, as well as versions 6.5.8.0 and below is affected by a Server-side Request Forgery. An authenticated attacker could leverage this vulnerability to contact systems blocked by the dispatcher. Exploitation of this issue does not require user interacti...
CVE-2021-28627 Adobe Experience Manager Server-side Request Forgery could lead to Security feature bypass
Adobe Experience Manager Cloud Service offering, as well as versions 6.5.8.0 and below is affected by a Server-side Request Forgery. An authenticated attacker could leverage this vulnerability to contact systems blocked by the dispatcher. Exploitation of this issue does not require user interacti...
Security feature bypass
Rapid7 Nexpose version 6.6.95 and earlier allows authenticated users of the Security Console to view and edit any ticket in the legacy ticketing feature, regardless of the assignment of the ticket. This issue was resolved in version 6.6.96, released on August 4, 2021...
Microsoft Windows Multiple Vulnerabilities (KB5005088)
This host is missing a critical security update according to Microsoft KB5005088 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
JetBrains YouTrack Security Feature Issue Vulnerability
JetBrains YouTrack is a browser-based bug tracking and project management software from JetBrains Czech Republic. JetBrains YouTrack is vulnerable to a security feature that could be exploited by remote attackers to access sensitive information...
Adobe Connect 安全特征问题漏洞
Adobe Connect is an online video conferencing software. A security feature bypass vulnerability exists in Adobe Connect 11.2.2 and earlier versions. The vulnerability stems from a violation of security design principles. No detailed vulnerability details are available at this time...
Security feature bypass
In JetBrains Hub before 2021.1.13262, a potentially insufficient CSP for the Widget deployment feature was used...
Microsoft Office security feature bypass vulnerability
Microsoft Office is a suite of office software developed by Microsoft Corporation based on the Windows operating system.Microsoft Office suffers from a security feature bypass vulnerability. An attacker can exploit this vulnerability to perform certain illegal operations...
CVE-2021-34466
Windows Hello Security Feature Bypass Vulnerability...
CVE-2021-34446
Windows HTML Platforms Security Feature Bypass Vulnerability...
Security feature bypass
Windows Hello Security Feature Bypass Vulnerability...
CVE-2021-34446
Windows HTML Platforms Security Feature Bypass Vulnerability...