CVE-2021-39304

Proofpoint Enterprise Protection before 8.12.0-2108090000 allows security control bypass...

CVE-2021-34814

Proofpoint Spam Engine before 8.12.0-2106240000 has a Security Control Bypass...

CVE-2021-39304

Proofpoint Enterprise Protection before 8.12.0-2108090000 allows security control bypass...

CVE-2021-41363

Intune Management Extension Security Feature Bypass Vulnerability...

CVE-2021-41338

Windows AppContainer Firewall Rules Security Feature Bypass Vulnerability...

CVE-2021-40460

Windows Remote Procedure Call Runtime Security Feature Bypass Vulnerability...

CVE-2021-40456

Windows AD FS Security Feature Bypass Vulnerability...

CVE-2021-40460

Windows Remote Procedure Call Runtime Security Feature Bypass Vulnerability...

CVE-2021-40456 Windows AD FS Security Feature Bypass Vulnerability

...

The vulnerability of the microprogramming software used in Diebold-Nixdorf CMDv5 dispensers allows a perpetrator to install an outdated or modified version of the microprogramming software in order to bypass encryption and dispense cash.

The vulnerability of the microprogramming software used in Diebold-Nixdorf CMDv5 dispensers relates to the possibility of bypassing security mechanisms. Exploiting this vulnerability allows an intruder to install an outdated or modified version of the microprogramming software, thereby...

[SECURITY] [DSA 4984-1] flatpak security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4984-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 12, 2021 https://www.debian.org/security/faq -...

KLA12312 SB vulnerability in Microsoft Apps

A security feature bypass vulnerability was found in Microsoft Apps. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories CVE-2021-41363 Related products Intune-Management-Extension CVE list CVE-2021-41363 high KB list Solution Install necessary...

KB5006672: Windows 10 Version 1809 and Windows Server 2019 Security Update (October 2021)

The remote Windows host is missing security update 5006672. It is, therefore, affected by multiple vulnerabilities: - A security feature bypass vulnerability exists. An attacker can exploit this and bypass the security feature and perform unauthorized actions compromising the integrity of the...

PT-2021-4394 · Microsoft · Windows Ad Fs +1

Name of the Vulnerable Software and Affected Versions: Windows AD FS affected versions not specified Description: The issue is related to errors in security settings, allowing a remote attacker to bypass the security mechanism. This can affect the system. Recommendations: At the moment, there is ...

PT-2021-4424 · Microsoft · Windows Appcontainer +1

Name of the Vulnerable Software and Affected Versions: Windows AppContainer affected versions not specified Description: The issue is related to a security feature bypass in the Windows AppContainer firewall rules, which can be exploited to bypass the protection mechanism. This could allow an...

PT-2021-4878 · Microsoft · Intune Management Extension

Name of the Vulnerable Software and Affected Versions: Intune Management Extension affected versions not specified Description: The issue is related to errors in security settings, allowing a bypass of security restrictions. Exploitation of this issue may enable an attacker to circumvent security...

A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP POP3 or FTP server (`--ssl-reqd` on the command line or`CURLOPT_USE_SSL` set to `CURLUSESSL_CONTROL` or `CURLUSESSL_ALL` withlibcurl). This requirement could be bypassed if the server would return a properly crafted but perfectly legitimate response.This flaw would then make curl silently continue its operations **withoutTLS** contrary to the instructions and expectations exposing possibly sensitive data in clear text over the network.

...

Vulnerabilities fixed in Mozilla Firefox

Mozilla has fixed vulnerabilities in Firefox and Firefox ESR. The vulnerabilities potentially enable a remote malicious person to able to launch attacks that result in the following categories of damage: Denial-of-Service DoS Circumvention of security measure. Remote code execution User rights On...

KLA12320 Multiple vulnerabilities in Mozilla Thunderbird

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service, execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. A bypass security vulnerability in...

KLA12404 Multiple vulnerabilities in OpenOffice

Multiple vulnerabilities were found in OpenOffice. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, bypass security restrictions, cause denial of service. Below is a complete list of vulnerabilities: 1. Buffer overflow vulnerability can be exploited vi...