KLA12325 SB vulnerability in Apache Tomcat

A security bypass vulnerability was found in Apache Tomcat. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories Apache Tomcat 7.x vulnerabilities Related products Apache-Tomcat CVE list CVE-2021-30640 unknown Solution Update to the latest version...

Security Bulletin: Vulnerabilities in Apache and Node.js affect IBM Spectrum Protect Plus

Summary Vulnerabilities in Apache and Node.js such as execution of arbitrary code on the system, cross -site scripting, and bypassing security restrictions, may affect IBM Spectrum Protect Plus. Vulnerability Details CVEID: CVE-2020-28458 DESCRIPTION: Node.js datatables.net module could allow a...

CVE-2021-21646

Jenkins Templating Engine Plugin 2.1 and earlier does not protect its pipeline configurations using Script Security Plugin, allowing attackers with Job/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM...

Mozilla Thunderbird Competitive Conditions Issue Vulnerability

Mozilla Thunderbird is the United States Mozilla Foundation's set of independent from the Mozilla Application Suite e-mail client software. The program supports IMAP, POP mail protocols and HTML mail format. A security bypass vulnerability exists in Mozilla Thunderbird, which can be exploited by...

KLA12183 Multiple vulnerabilities in Opera

Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A use after free vulnerability in Blink can be exploited to cause denia...

KLA12159 Multiple vulnerabilities in Oracle Java SE

Security bypass vulnerabilities were found in Oracle Java. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories Oracle Critical Patch Update Advisory – April 2021 Related products Oracle-Java-JRE-1.7.x Oracle-Java-JRE-1.8.x CVE list CVE-2021-2161 hig...

KLA12160 Multiple vulnerabilities in Oracle VirtualBox

Multiple vulnerabilities were found in Oracle VirtualBox. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, cause denial of service. Below is a complete list of vulnerabilities: 1. A security bypass vulnerability in Core component can...

KLA12150 Multiple vulnerabilities in Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, execute arbitrary code, spoof user interface, gain privileges. Below is a complete list of vulnerabilities: 1. Memory corruption...

KLA12149 Multiple vulnerabilities in Mozilla Firefox

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to spoof user interface, execute arbitrary code, cause denial of service, bypass security restrictions, obtain sensitive information, gain privileges. Below is a complete list of...

LibreOffice 安全漏洞

LibreOffice is an open source office software suite from The Document Foundation tdf. The product includes applications such as Writer text documents, Calc spreadsheets and Impress presentations. A security vulnerability exists in LibreOffice that allows remote attackers to bypass implemented...

Google Chrome QR scanner security bypass vulnerability

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome versions prior to 90.0.4430.72 in the "QR scanner". An attacker can exploit this vulnerability to bypass security restrictions...

KLA12143 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A use after free vulnerability in Blink can be exploited to...

Microsoft Windows Multiple Vulnerabilities (KB5001335)

This host is missing a critical security update according to Microsoft KB5001335 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

谷歌 Google Chrome 权限许可和访问控制问题漏洞

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in navigation in versions of Google Chrome prior to 90.0.4430.72. An attacker can exploit this vulnerability to bypass security restrictions...

CVE-2021-28447

Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability...

CVE-2021-27092

Azure AD Web Sign-in Security Feature Bypass Vulnerability...

CVE-2021-28444

Windows Hyper-V Security Feature Bypass Vulnerability...

CVE-2021-28316

Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability...

CVE-2021-28447 Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability

...

CVE-2021-28447 Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability

...