17 matches found
CVE-2026-9397
Technical details are not publicly available in the provided documents. Monitor for updates.
ROS-2-876
2.876 Multiple vulnerabilities in PostgreSQL CVE-2021-32027, CVE-2021-32028, CVE-2021-32029 1. Vulnerability Description: CVE-2021-32027 The vulnerability allows a remote attacker to execute arbitrary code on the target system. CVE-2021-32028, CVE-2021-32029 Vulnerability allows a remote user to...
Vulnerabilities fixed in Microsoft Paint3D
Microsoft has fixed vulnerabilities in Paint3D. The vulnerabilities allow a malicious person to execute arbitrary execute code with user privileges. The malicious must do so to trick the victim into opening a rogue image. open. Paint3D comes installed by default, but maintained through the...
Apple releases emergency updates for two known-to-be-exploited vulnerabilities
On Friday April 7, 2023, Apple released iOS 16.4.1, iPadOS 16.4.1, and macOS 13.3.1 for the iPhone, iPad, and Mac, respectively, and our advice is to install them as soon as possible because all three updates include important security fixes. The Cybersecurity and Infrastructure Security Agency...
ROS-2-1719
2.1719 Multiple vulnerabilities in Redis CVE-2021-29477,CVE-2021-29478 1. Vulnerability Description: A vulnerability exists due to an integer overflow in the STRALGO LCS command. A remote attacker could pass specially crafted data to an application, cause an integer overflow, and execute arbitrar...
Citrix Endpoint Management (aka XenMobile Server) 10.12.0 Rolling Patch 11
Package name: xms10.12.0.11103.bin For: XenMobile Server 10.12.0 Deployment type: On-premises only Replaces: xms10.12.0.11004.bin, xms10.12.0.10917.bin, xms10.12.0.10818.bin, xms10.12.0.10714.bin, xms10.12.0.10613.bin, xms10.12.0.10539.bin, xms10.12.0.10417.bin, xms10.12.0.10324.bin,...
ROS-2-794
2.794 Multiple Vulnerabilities in Moodle 1. Vulnerability description: The vulnerability discovered allows a remote attacker to perform cross-site scripting XSS attacks. The vulnerability allows a remote user to gain unauthorized access to other restricted features. Vulnerability allows a remote...
ROS-2-1965
2.1965 Vulnerability in SpamAssassin spam filtering tool CVE-2020-1946 1. Vulnerability Description: CVE-2020-1946 A vulnerability in the SpamAssassin spam filtering tool, is related to improper input validation when processing rule configuration .cf files. Exploitation of the vulnerability could...
ROS-2-939
2.939 Vulnerability in Mozilla Thunderbird email client CVE-2021-29970, CVE-2021-30547, CVE-2021-29976, CVE-2021-29969. 1. Vulnerability Description: CVE-2021-29970 Vulnerability in Mozilla Thunderbird email client, related to HTML content processing error. Exploitation of the vulnerability could...
ROS-2-1578
2.1578 Mozilla Firefox browser vulnerability CVE-2021-29970, CVE-2021-29976 1. Vulnerability description: CVE-2021-29970 A vulnerability in the Mozilla Firefox browser, is related to a release error in accessibility functions when processing HTML content. Exploitation of the vulnerability could...
ROS-2-1466
2.1466 Vulnerability in Mozilla Firefox browser CVE-2021-29967 1. Vulnerability description: Vulnerability in the Mozilla Firefox browser that allows an attacker to execute arbitrary code on the target system.Identifier of the Information Security Threats Data Bank of the FSTEC of Russia : 2...
ROS-2-600
2.600 Remote code execution in nginxCVE-2021-23017 1. Vulnerability Description: The vulnerability allows a remote attacker to execute arbitrary code on the target system. The vulnerability exists due to a single error in the ngxresolvercopyfunction when processing DNS responses. A remote attacke...
ROS-2-1325
2.1325 Vulnerability in Mozilla Thunderbird email client CVE-2021-29964, CVE-2021-29967 1. Vulnerability description: CVE-2021-29964 A vulnerability in the Mozilla Thunderbird email client, is related to boundary conditions. Exploitation of the vulnerability could allow an attacker acting remotel...
Vulnerabilities fixed in Microsoft Exchange
Vulnerabilities have been fixed in Microsoft Exchange. A malicious party could exploit the vulnerabilities to execute arbitrary code under the application's privileges, or possibly impersonate possibly impersonate another user. For the vulnerability with attribute CVE-2021-31207, Proof-of-Concept...
Vulnerability fixed in Microsoft Azure
A vulnerability has been fixed in Microsoft Azure. The vulnerability allows a malicious party to obtain sensitive data obtain sensitive data. Azure: |----------------|------|-------------------------------------| | CVE ID | CVSS | Impact |...
KB5001402: Servicing stack update for Windows 10, version 1607: April 13, 2021
KB5001402: Servicing stack update for Windows 10, version 1607: April 13, 2021 This update applies to the following: Windows 10, version 1607 for x86-based systems Windows 10, version 1607 for x64-based systems Windows Server 2016 Windows Server 2016 Server Core installation Summary This update...
Windows Internet Explorer 8 Dynamic Installer
The Window Internet Explorer 8 setup application uses this category to find updates to download and install during installation of Internet Explorer 8. More information about the updates in this category is available at http://support.microsoft.com/kb/948564. If this category is not selected,...