1683 matches found
CVE-2021-3013
ripgrep before 13 on Windows allows attackers to trigger execution of arbitrary programs from the current working directory via the -z/--search-zip or --pre flag...
Cortex XDR Agent: Improper control of user-controlled file leads to local privilege escalation
A local privilege escalation vulnerability exists in the Palo Alto Networks Cortex XDR agent on Windows platforms that enables an authenticated local Windows user to execute programs with SYSTEM privileges. This requires the user to have the privilege to create files in the Windows root directory...
CVE-2021-31970 Windows TCP/IP Driver Security Feature Bypass Vulnerability
...
Description of the security update for Office Online Server: June 8, 2021 (KB5001943)
None None...
CVE-2021-1536 Cisco Webex Meetings, Webex Network Recording Player, and Webex Teams DLL Injection Vulnerability
A vulnerability in Cisco Webex Meetings Desktop App for Windows, Cisco Webex Meetings Server, Cisco Webex Network Recording Player for Windows, and Cisco Webex Teams for Windows could allow an authenticated, local attacker to perform a DLL injection attack on an affected device. To exploit this...
Apache 2.4.x < 2.4.47 Multiple Vulnerabilities
The version of Apache httpd installed on the remote host is prior to 2.4.47. It is, therefore, affected by multiple vulnerabilities as referenced in the 2.4.47 changelog: - Unexpected section matching with 'MergeSlashes OFF' CVE-2021-30641 - modauthdigest: possible stack overflow by one nul byte...
OpenText Brava! Desktop out-of-bounds write vulnerability (CNVD-2021-42325)
OpenText Brava! Desktop is a Windows-based viewing and collaboration tool that lets you easily view and collaborate on almost any file. An out-of-bounds write vulnerability exists in the parsing of DWF files in OpenText Brava! Desktop. The vulnerability stems from a lack of proper validation of...
CVE-2021-33041
vmd through 1.34.0 allows 'div class="markdown-body"' XSS, as demonstrated by Electron remote code execution via require'childprocess'.execSync'calc.exe' on Windows and a similar attack on macOS...
CVE-2021-33041
vmd through 1.34.0 allows 'div class="markdown-body"' XSS, as demonstrated by Electron remote code execution via require'childprocess'.execSync'calc.exe' on Windows and a similar attack on macOS...
CVE-2021-31205
Windows SMB Client Security Feature Bypass Vulnerability...
Description of the security update for Office Web Apps Server 2013: May 11, 2021 (KB5001928)
None None...
Description of the security update for Office Online Server: May 11, 2021 (KB5001914)
None None...
May 11, 2021—Hotpatch KB5003246 (OS Build 17784.1701)
None None...
KB5003209: Windows 8.1 and Windows Server 2012 R2 Security Update (May 2021)
The remote Windows host is missing security update 5003209. It is, therefore, affected by multiple vulnerabilities %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the Microsoft Security Updates API. The text itself is...
AZL-36999 CVE-2021-20254 affecting package samba for versions less than 4.18.3-1
A flaw was found in samba. The Samba smbd file server must map Windows group identities SIDs into unix group ids gids. The code that performs this had a flaw that could allow it to read data beyond the end of the array in the case where a negative cache entry had been added to the mapping cache...
DEBIAN-CVE-2021-20254
A flaw was found in samba. The Samba smbd file server must map Windows group identities SIDs into unix group ids gids. The code that performs this had a flaw that could allow it to read data beyond the end of the array in the case where a negative cache entry had been added to the mapping cache...
The vulnerability in the driver for the Early Launch Antimalware (ELAM) security technology of Microsoft Windows allows a malicious actor to bypass security functions.
The vulnerability of the driver for the Early Launch Antimalware ELAM security technology for Microsoft Windows is related to security configuration errors. Exploiting this vulnerability can allow attackers to bypass security functions...
Microsoft Windows and Windows Server Elevation of Privilege Vulnerability (CNVD-2021-34474)
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in the Windows Security Kernel Mode in...
