CVE-2021-34440

GDI+ Information Disclosure Vulnerability...

CVE-2021-34690

iDrive RemotePC before 7.6.48 on Windows allows authentication bypass. A remote and unauthenticated attacker can bypass cloud authentication to connect and control a system via TCP port 5970 and 5980...

Idrive IDrive 安全漏洞

Idrive IDrive is a suite of cloud backup and cloud storage service solutions from IDrive USA. A security vulnerability exists in iDrive RemotePC, which stems from the iDrive RemotePC Allowed Elevation of Privilege on Windows prior to 7.6.48. An attacker can exploit the vulnerability to force...

Zscaler Client Connector 缓冲区错误漏洞

Zscaler Client Connector is an application for zscaler. An application installed on an appliance that ensures that Internet traffic and access to an organization's internal applications is secure and compliant with the organization's policies, even when not on the corporate network.A security...

CVE-2021-34507

Windows Remote Assistance Information Disclosure Vulnerability...

CVE-2021-33782

Windows Authenticode Spoofing Vulnerability...

CVE-2021-33764

Windows Key Distribution Center Information Disclosure Vulnerability...

CVE-2021-34499

Windows DNS Server Denial of Service Vulnerability...

CVE-2021-33786

Windows LSA Security Feature Bypass Vulnerability...

Microsoft Windows 安全特征问题漏洞

Microsoft Windows MSHTML Platform is an application from Microsoft Corporation USA. Microsoft Windows HTML Platform is vulnerable to a security feature issue. The following products and editions are affected:Windows 10 Version 20H2 for ARM64-based Systems,Windows 10 for 32-bit Systems,Windows 10...

PT-2021-5180 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to the Remote Access Connection Manager RASMan service in Microsoft Windows and involves insecure privilege management. It allows an attacker to elevate...

dandavison delta 代码问题漏洞

dandavison delta is an open source viewer of git and diff output. A security vulnerability exists in dandavison delta on Windows prior to 0.8.3, which stems from dandavison delta resolving the pathname of an executable file to a relative path in the current directory...

PT-2021-4850 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an information disclosure vulnerability in the Remote Access Connection Manager service of the Microsoft Windows operating system. This vulnerability can be exploite...

PT-2021-15277 · Node.Js · Node.Js

Name of the Vulnerable Software and Affected Versions: Node.js versions prior to 16.4.1 Node.js versions prior to 14.17.2 Node.js versions prior to 12.22.2 Description: The issue allows for local privilege escalation attacks under certain conditions on Windows platforms due to improper...

Iobit IOBit Advanced SystemCare 访问控制错误漏洞

Advanced SystemCare Ultimate is a Windows optimization suite from Iobit that analyzes system performance bottlenecks. advanced SystemCare Ultimate version 14.2.0.220 contains an elevation of privilege vulnerability. An attacker can exploit the vulnerability by sending a malicious I/O request pack...

Microsoft Windows 安全漏洞

Microsoft Windows is an operating system for personal devices from Microsoft Corporation USA. Microsoft Windows is vulnerable to an access control error, which stems from an elevation of privilege vulnerability because the system has an overly loose access control list for multiple system files. ...

Vulnerability found in Microsoft Windows

There is a vulnerability in the Printer Spooler service from Microsoft. The vulnerability allows an authenticated malicious person able to execute arbitrary code and obtain elevated privileges. obtain. By exploiting the vulnerability, it is possible to take over a Domain Controller. Earlier this...

CVE-2021-35448

Emote Interactive Remote Mouse 3.008 on Windows allows attackers to execute arbitrary programs as Administrator by using the Image Transfer Folder feature to navigate to cmd.exe. It binds to local ports to listen for incoming connections...

Out-of-bounds

A locally-installed hostile program could send WMCOPYDATA messages that Firefox would process incorrectly, leading to an out-of-bounds read. This bug only affects Firefox on Windows. Other operating systems are unaffected.. This vulnerability affects Thunderbird 78.11, Firefox 89, and Firefox ESR...

The vulnerability of the dynamically linked script handler library (jscript9.dll) in Microsoft Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the dynamically linked script handler library jscript9.dll in Microsoft Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...