CVE-2021-21652

A cross-site request forgery CSRF vulnerability in Jenkins Xray - Test Management for Jira Plugin 2.4.0 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...

PT-2021-3051 · Microsoft · Office +1

Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Description: The issue is related to an information disclosure vulnerability in Microsoft Office. It is caused by a lack of protection for sensitive data. Exploitation of this issue may allow a...

PT-2021-3010 · Microsoft · Windows Media Foundation +1

Name of the Vulnerable Software and Affected Versions: Windows Media Foundation Core affected versions not specified Description: The issue is related to incorrect code generation management in the Windows Media Foundation Core component of Microsoft Windows operating systems. This can allow a...

PT-2021-3097 · Microsoft · Windows Desktop Bridge +1

Name of the Vulnerable Software and Affected Versions: Windows Desktop Bridge affected versions not specified Description: The issue is related to insufficient input validation in the Windows Desktop Bridge application converter, which can be exploited to cause a denial of service. This could all...

PT-2021-3052 · Microsoft · Windows Container Manager Service +1

Name of the Vulnerable Software and Affected Versions: Windows Container Manager Service affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Container Manager Service of the Windows operating system. It allows an attacker to elevate...

Trend Micro HouseCall for Home Networks 安全漏洞

Trend Micro HouseCall for Home Networks is a suite of home network security scanning software from Trend Micro. The software supports scanning a wide range of home network devices and identifying network risks. An elevation of privilege vulnerability exists in Trend Micro HouseCall for Home...

CVE-2021-21644

A cross-site request forgery CSRF vulnerability in Jenkins Config File Provider Plugin 3.7.0 and earlier allows attackers to delete configuration files corresponding to an attacker-specified ID...

CSRF vulnerability in config-file-provider allows deleting configuration files

config-file-provider 3.7.0 and earlier does not require POST requests for an HTTP endpoint, resulting in a cross-site request forgery CSRF vulnerability. This vulnerability allows attackers to delete configuration files corresponding to an attacker-specified ID. This is due to an incomplete fix o...

PT-2021-2665 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to incorrect code generation management in Microsoft Exchange Server. It allows a remote attacker to execute arbitrary code. Recommendations: At the...

PT-2021-2616 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to incorrect code generation management in the Procedure Call Runtime component of Microsoft Windows operating systems. This allows a remote attacker to execu...

CVE-2021-21632

A missing permission check in Jenkins OWASP Dependency-Track Plugin 3.1.0 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL, capturing credentials stored in Jenkins...

CVE-2021-21638

A cross-site request forgery CSRF vulnerability in Jenkins Team Foundation Server Plugin 5.157.1 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...

Jenkins OWASP Dependency-Track 跨站请求伪造漏洞

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . A cross-site request forgery...

PT-2021-2417 · Microsoft · Visual Studio Code

Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: The issue is related to insufficient access control in Visual Studio Code, which can be exploited to execute arbitrary code. Recommendations: At the moment, there is no informati...

PT-2021-2278

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server affected versions not specified Microsoft Business Productivity Servers affected versions not specified SharePoint Enterprise Server affected versions not specified SharePoint Foundation affected versions not...

PT-2021-2400 · Microsoft · Windows Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is related to errors in processing input data in the Windows DNS Server service. It allows remote attackers to execute arbitrary code and affect the system...

PT-2021-2215 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Exchange Server, which can be exploited by a remote attacker to execute arbitrary code. This allows for...

CVE-2021-22267

Idelji Web ViewPoint Suite, as used in conjunction with HPE NonStop, allows a remote replay attack for T0320L01^ABP through T0320L01^ABZ, T0952L01^AAH through T0952L01^AAR, T0986L01 through T0986L01^AAF, T0665L01^AAP, and T0662L01^AAP L and T0320H01^ABO through T0320H01^ABY, T0952H01^AAG through...

PT-2021-2048 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in privilege management in the Windows Event Tracing service, which can be exploited to elevate privileges. This allows an attacker to affect the system. No...

PT-2021-2088

Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Installer component of Microsoft Windows operating systems. This can allow an attacker to elevate their...