Microsoft Hyper-V 竞争条件问题漏洞

Microsoft Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization. Microsoft Hyper-V is vulnerable to a competitive conditions issue. The following products and versions are affected:Windows 10 Version 21H2 for...

Microsoft Windows 安全漏洞

Microsoft Windows is a suite of operating systems for personal devices from the U.S.-based Microsoft Corporation. A security vulnerability exists in Microsoft Windows that stems from a security issue with some Intel processors. The following products and versions are affected:Windows 10 Version...

CVE-2021-34360

A cross-site request forgery CSRF vulnerability has been reported to affect QNAP device running Proxy Server. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of Proxy Server: QTS 4.5.x: Proxy...

Microsoft Windows Cluster Shared Volume 竞争条件问题漏洞

Microsoft Windows Cluster Shared Volume is a general-purpose cluster file system from Microsoft Corporation USA. A competitive conditions issue vulnerability exists in Microsoft Windows Cluster Shared Volume CSV. The following products and editions are affected:Windows Server 2012 Server Core...

Microsoft Windows Print Spooler Components 信息泄露漏洞

Microsoft Windows Print Spooler Components is a printing backend handler component from Microsoft Corporation USA. An information disclosure vulnerability exists in Microsoft Windows Print Spooler Components. The following products and versions are affected: Windows 11 for ARM64-based...

Microsoft Windows Address Book 输入验证错误漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. An input validation error vulnerability exists in Microsoft Windows Address Book. The following products and editions are affected: Windows 10 Version 1909 for x64-based Systems,Windows 1...

Microsoft Windows NTFS 信息泄露漏洞

Microsoft Windows NTFS is a file system from Microsoft USA that serves computer files. The file system has error warning, disk self-repair, and logging capabilities. An information disclosure vulnerability exists in Microsoft Windows NTFS. The following products and editions are affected:Windows ...

Microsoft Windows Cluster Shared Volume 信息泄露漏洞

Microsoft Windows Cluster Shared Volume is a general-purpose cluster file system from Microsoft Corporation USA. An information disclosure vulnerability exists in Microsoft Windows Cluster Shared Volume CSV. The following products and versions are affected:Windows Server 2022,Windows Server 2022...

Microsoft Lightweight Directory Access Protocol 输入验证错误漏洞

Microsoft Lightweight Directory Access Protocol LDAP is a directory services protocol from Microsoft Corporation USA that runs on a layer above the TCP/IP stack. An input validation error vulnerability exists in Microsoft Lightweight Directory Access Protocol. The following products and versions...

CVE-2021-36207

Under certain circumstances improper privilege management in Metasys ADS/ADX/OAS servers versions 10 and 11 could allow an authenticated user to elevate their privileges to administrator...

CVE-2022-26151

Citrix XenMobile Server 10.12 through RP11, 10.13 through RP7, and 10.14 through RP4 allows Command Injection...

Microsoft DNS Server 竞争条件问题漏洞

Microsoft DNS Server is a service of Microsoft Corporation USA. A vulnerability exists in the Microsoft Role: DNS Server for competitive conditions issue. The following products and versions are affected:Windows Server 2019,Windows Server 2019 Server Core installation,Windows Server 2022,Windows...

Microsoft Windows Remote Procedure Call Runtime 代码注入漏洞

Microsoft Windows Remote Procedure Call Runtime is a powerful technology for creating distributed client/server programs from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Windows Remote Procedure Call Runtime. The following products and versions are affected:...

Microsoft DNS Server 竞争条件问题漏洞

Microsoft DNS Server is a service of Microsoft Corporation USA. Microsoft DNS Server is vulnerable to a competitive conditions issue. The following products and versions are affected:Windows Server, version 20H2 Server Core Installation,Windows Server 2016,Windows Server 2016 Server Core...

Microsoft Windows Print Spooler Components权限许可和访问控制问题漏洞

Microsoft Windows Print Spooler Components is a printing backend handler component from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Print Spooler Components due to privilege permission and access control issues. The following products and versions are affected: Windows...

Microsoft DNS Server 代码注入漏洞

Microsoft DNS Server is a service of Microsoft Corporation USA. A code injection vulnerability exists in Microsoft DNS Server. The following products and versions are affected: Windows Server 2008 for x64-based Systems Service Pack 2,Windows Server 2008 for x64-based Systems Service Pack 2 Server...

Microsoft Windows Common Log File System Driver输入验证错误漏洞

The Microsoft Windows Common Log File System Driver is Microsoft's Common Log File System CLFS API that provides a high-performance, general-purpose log file subsystem that can be used by specialized client applications and shared by multiple clients to optimize logging and access. access. A...

MariaDB 安全漏洞

MariaDB is a free and open source database management system from the MariaDB Foundation and a forked version of MySQL with the Maria storage engine. A security vulnerability exists in MariaDB Server v10.7 and lower, which stems from the inclusion of a global buffer overflow in the component...

CVE-2021-25220

BIND 9.11.0 - 9.11.36 9.12.0 - 9.16.26 9.17.0 - 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 - 9.11.36-S1 9.16.8-S1 - 9.16.26-S1 Versions of BIND 9 earlier than those shown - back to 9.1.0, including Supported Preview Editions - are also believed to be affected but have not been tested as th...

PT-2022-5559 · Mariadb +10 · Mariadb Server +10

Name of the Vulnerable Software and Affected Versions: MariaDB Server versions prior to 10.9 Description: The issue is related to an assertion failure in the MariaDB Server, specifically in the /row/row0mysql.cc component. This failure can be triggered via the condition node-pcur-rel pos == BTR...