January 11, 2022—KB5009619 (Security-only update)

None None...

Microsoft Hyper-V 权限许可和访问控制问题漏洞

Microsoft Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization. Microsoft Hyper-V is vulnerable to privilege permission and access control issues. The following products and editions are affected:Windows 10...

Microsoft Hyper-V 安全特征问题漏洞

Microsoft Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization. Microsoft Hyper-V is vulnerable to a security feature issue. The following products and editions are affected: Windows Server 2008 R2 for x64-base...

PT-2022-1565 · Microsoft · Windows Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue is related to errors in security settings of the Windows Hyper-V hardware virtualization system, which can be exploited to bypass security restrictions. This allows an...

PT-2022-1508 · Microsoft · Windows Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue is related to insecure privilege management in the Windows Hyper-V hardware virtualization system. It allows an attacker to elevate their privileges. Recommendations: At t...

Microsoft Hyper-V 安全特征问题漏洞

Microsoft Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization. Microsoft Hyper-V is vulnerable to a security feature issue. The following products and editions are affected:Windows 10 Version 1809 for x64-base...

PT-2022-1505 · Microsoft · Windows Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue is related to insecure privilege management in the Windows Hyper-V hardware virtualization system, allowing an attacker to bypass existing security restrictions. This can...

Microsoft Hyper-V资源管理错误漏洞

Microsoft Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization. Microsoft Hyper-V is vulnerable to a resource management error. The following products and editions are affected:Windows 10 Version 1809 for...

Security Bulletin: Vulnerabilities in Apache Log4j impacts IBM Spectrum Protect Backup-Archive Client and IBM Spectrum Protect for Virtual Environments (CVE-2021-45105, CVE-2021-45046)

Summary Vulnerabilities in Apache Log4j could result in a denial of service or remote code execution. These vulnerabilities may impact the IBM Spectrum Protect Backup-Archive Client and IBM Spectrum Protect for Virtual Environments due to their uses of Apache Log4j for logging of messages and...

lockWithPermit() function allows for replay attacks and signature malleability

Handle jayjonah8 Vulnerability details Impact In XDEFIDistribution.sol the lockWithPermit function calls permit on the XDEFI token. The problem with simply using permit alone for this is the message that is signed by the owner using the ECDSA algorithm. The message only contains the receiver...

n-e-r-v-o-u-s.com Cross Site Scripting vulnerability OBB-2322536

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

The vulnerability of the monitoring software for PLK devices from Fuji Electric, V-Server Lite and Tellus Lite V-Simulator, arises from buffer overflows in the dynamic memory. This vulnerability allows a hacker to execute arbitrary code.

The vulnerability of the monitoring software for Fujifilm’s V-Server Lite and Tellus Lite V-Simulator lies in buffer overflows in the dynamic memory during syntax analysis of V8 files in the V-Simulator module. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using...

PT-2025-53969

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.0.0-rc1home lulu 2452 lulu7 vhost+ Description The Linux kernel contains a flaw within the vhost vdpa component related to unmapping large memory regions. During testing with vIOMMU, a crash could occur when a...

v-olymp.ru Cross Site Scripting vulnerability OBB-2313052

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

S-CMS 跨站脚本漏洞

S-CMS is a PHP and MySQL based content management system CMS from Zibo Shining Network Technology Co., Ltd. in China. A security vulnerability exists in S-CMS Government Station Building System v5.0, which can be exploited by attackers to perform cross-site scripting attacks XSS...

CVE-2021-38419

Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to an out-of-bounds write, which can result in data corruption, a system crash, or code execution...

CVE-2021-38415

Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable a heap-based buffer overflow when parsing a specially crafted project file, which may allow an attacker to execute arbitrary code...

CVE-2021-38409

Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to an access of uninitialized pointer, which may allow an attacker read from or write to unexpected memory locations, leading to a denial-of-service...

CVE-2021-38401

Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to an untrusted pointer dereference, which may allow an attacker to execute arbitrary code and cause the application to crash...

CVE-2021-38401

Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to an untrusted pointer dereference, which may allow an attacker to execute arbitrary code and cause the application to crash...