Microsoft Windows Kernel 安全特征问题漏洞

Microsoft Windows Kernel is the kernel of the Windows operating system from Microsoft Corporation USA. A vulnerability exists in the Microsoft Windows Kernel due to a security feature issue. The following products and editions are affected: Windows 10 Version 21H1 for x64-based Systems,Windows 10...

PT-2021-5657 · Microsoft · Office +1

Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Description: The issue is related to a security feature bypass in Microsoft Office, which can be exploited by a remote attacker...

Microsoft Office 安全特征问题漏洞

Microsoft Office is a suite of office software developed by Microsoft Corporation based on the Windows operating system.Microsoft Office suffers from a security feature bypass vulnerability. An attacker can exploit this vulnerability to perform certain illegal operations...

PT-2021-4164 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insecure privilege management in the Windows operating system kernel, allowing an attacker to bypass security mechanisms. A security-feature bypass vulnerability...

Securely Managing Entitlement of S3 Resources

Here we’ll talk about securely managing entitlements of S3 resources including managing access control to S3 objects and utilizing audit logging to keep track of the usage of shared resources. Amazon’s AWS services allow for accounts to grant access to resources from other accounts on AWS. This...

Security feature bypass

Jact OpenClinic 0.8.20160412 allows the attacker to read server files after login to the the admin account by an infected 'file' GET parameter in '/shared/viewsource.php' which "could" lead to RCE vulnerability...

CVE-2021-31971

Windows HTML Platforms Security Feature Bypass Vulnerability...

CVE-2021-31962

Kerberos AppContainer Security Feature Bypass Vulnerability...

CVE-2021-26414

Windows DCOM Server Security Feature Bypass...

Security feature bypass

Windows HTML Platforms Security Feature Bypass Vulnerability...

CVE-2021-31971

Windows HTML Platforms Security Feature Bypass Vulnerability...

CVE-2021-31970 Windows TCP/IP Driver Security Feature Bypass Vulnerability

...

CVE-2021-31970 Windows TCP/IP Driver Security Feature Bypass Vulnerability

...

CVE-2021-31962 Kerberos AppContainer Security Feature Bypass Vulnerability

...

EUVD-2021-13220

Windows DCOM Server Security Feature Bypass...

PT-2021-3283 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in resource release in the TCP/IP driver of Windows operating systems. It may allow an attacker to cause a denial of service. A security-feature bypass...

Windows Remote Desktop 安全特征问题漏洞

Microsoft Windows Remote Desktop Protocol RDP is an application for connecting to remote Windows desktops from Microsoft Corporation USA. Windows Remote Desktop is vulnerable to a security feature issue. The following products and editions are affected: Windows Server 2008 R2 for x64-based System...

KLA12198 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, cause denial of service, bypass security restrictions, obtain sensitive information. Below is a complete list of...

Huawei EMUI/Magic UI security feature vulnerability

Huawei Emui is an Android-based mobile operating system. Huawei Magic UI is the operating system for Honor phones. Huawei EMUI/Magic UI has a security feature vulnerability that could be exploited by attackers to compromise data confidentiality...

Insertion of Sensitive Information into Log File in ansible

A flaw was found in ansible module where credentials are disclosed in the console log by default and not protected by the security feature when using the bitbucketpipelinevariable module. This flaw allows an attacker to steal bitbucketpipeline credentials. The highest threat from this vulnerabili...