KLA12327 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, bypass security restrictions, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Heap buffer overflow vulnerabilit...

KLA12326 SB vulnerability in Microsoft Device

A security feature bypass vulnerability was found in Microsoft Device. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories CVE-2021-42299 Related products Microsoft-Surface CVE list CVE-2021-42299 high KB list Solution Install necessary updates from...

PT-2021-6383 · Microsoft · Windows Installer +1

Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Installer component of the Microsoft Windows operating system. Exploitation of this issue may allow an...

CVE-2021-39304

Proofpoint Enterprise Protection before 8.12.0-2108090000 allows security control bypass...

CVE-2021-34814

Proofpoint Spam Engine before 8.12.0-2106240000 has a Security Control Bypass...

CVE-2021-39304

Proofpoint Enterprise Protection before 8.12.0-2108090000 allows security control bypass...

CVE-2021-41363

Intune Management Extension Security Feature Bypass Vulnerability...

CVE-2021-41338

Windows AppContainer Firewall Rules Security Feature Bypass Vulnerability...

CVE-2021-40456

Windows AD FS Security Feature Bypass Vulnerability...

CVE-2021-40460

Windows Remote Procedure Call Runtime Security Feature Bypass Vulnerability...

CVE-2021-40460

Windows Remote Procedure Call Runtime Security Feature Bypass Vulnerability...

CVE-2021-40456 Windows AD FS Security Feature Bypass Vulnerability

...

The vulnerability of the microprogramming software used in Diebold-Nixdorf CMDv5 dispensers allows a perpetrator to install an outdated or modified version of the microprogramming software in order to bypass encryption and dispense cash.

The vulnerability of the microprogramming software used in Diebold-Nixdorf CMDv5 dispensers relates to the possibility of bypassing security mechanisms. Exploiting this vulnerability allows an intruder to install an outdated or modified version of the microprogramming software, thereby...

[SECURITY] [DSA 4984-1] flatpak security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4984-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 12, 2021 https://www.debian.org/security/faq -...

KB5006672: Windows 10 Version 1809 and Windows Server 2019 Security Update (October 2021)

The remote Windows host is missing security update 5006672. It is, therefore, affected by multiple vulnerabilities: - A security feature bypass vulnerability exists. An attacker can exploit this and bypass the security feature and perform unauthorized actions compromising the integrity of the...

KLA12312 SB vulnerability in Microsoft Apps

A security feature bypass vulnerability was found in Microsoft Apps. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories CVE-2021-41363 Related products Intune-Management-Extension CVE list CVE-2021-41363 high KB list Solution Install necessary...

PT-2021-4394 · Microsoft · Windows Ad Fs +1

Name of the Vulnerable Software and Affected Versions: Windows AD FS affected versions not specified Description: The issue is related to errors in security settings, allowing a remote attacker to bypass the security mechanism. This can affect the system. Recommendations: At the moment, there is ...

PT-2021-4878 · Microsoft · Intune Management Extension

Name of the Vulnerable Software and Affected Versions: Intune Management Extension affected versions not specified Description: The issue is related to errors in security settings, allowing a bypass of security restrictions. Exploitation of this issue may enable an attacker to circumvent security...

PT-2021-4424 · Microsoft · Windows Appcontainer +1

Name of the Vulnerable Software and Affected Versions: Windows AppContainer affected versions not specified Description: The issue is related to a security feature bypass in the Windows AppContainer firewall rules, which can be exploited to bypass the protection mechanism. This could allow an...

A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP POP3 or FTP server (`--ssl-reqd` on the command line or`CURLOPT_USE_SSL` set to `CURLUSESSL_CONTROL` or `CURLUSESSL_ALL` withlibcurl). This requirement could be bypassed if the server would return a properly crafted but perfectly legitimate response.This flaw would then make curl silently continue its operations **withoutTLS** contrary to the instructions and expectations exposing possibly sensitive data in clear text over the network.

...