EUVD-2022-6003

A remote command execution vulnerability exists in gogs/gogs versions =0.12.7 when deployed on a Windows server. The vulnerability arises due to improper validation of the treepath parameter during file uploads. An attacker can set treepath=.git. to upload a file into the .git directory, allowing...

CVE-2022-1884: Improper Neutralization of Special Elements used in an OS Command

A remote command execution vulnerability exists in gogs/gogs versions =0.12.7 when deployed on a Windows server. The vulnerability arises due to improper validation of the treepath parameter during file uploads. An attacker can set treepath=.git. to upload a file into the .git directory, allowing...

Microsoft Windows Multiple Vulnerabilities (KB5046612)

This host is missing an important security update according to Microsoft KB5046612 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

2024-11 Cumulative security Hotpatch for Azure Stack HCI, version 21H2 and Windows Server 2022 Datacenter: Azure Edition for x64-based Systems (KB5046698)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information...

2024-11 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5046612)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

November 12, 2024—KB5046639 (Security-only update)

None None...

November 12, 2024—Hotpatch KB5046696 (OS Build 26100.2240)

None None...

November 12, 2024—KB5046687 (Monthly Rollup)

None None...

November 12, 2024—KB5046697 (Monthly Rollup)

None None...

November 12, 2024—Hotpatch KB5046698 (OS Build 20348.2819)

None None...

November 12, 2024—KB5046682 (Monthly Rollup)

None None...

November 12, 2024—KB5046661 (Monthly Rollup)

None None...

Microsoft Active Directory Certificate Services security vulnerabilities

Microsoft Active Directory Certificate Services is a Windows Server role from Microsoft Corporation USA that issues and manages Public Key Infrastructure PKI certificates used in secure communications and authentication protocols. A security vulnerability exists in Microsoft Active Directory...

Microsoft Windows Kernel security vulnerabilities

Microsoft Windows Kernel is the kernel of the Windows operating system by Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Kernel. An attacker can exploit the vulnerability to elevate privileges. The following products and versions are affected:Windows 10 Version 21...

Microsoft Windows Package Manager security vulnerabilities

Microsoft Windows Package Manager is a comprehensive package manager solution from Microsoft Corporation USA. A system or set of tools used to automate the installation, upgrade, configuration, and use of software. Most package managers are designed to discover and install developer tools. A...

.NET 6.0 Update - November 12, 2024 (KB5047486)

None None...

November 12, 2024-KB5046540 Cumulative Update for .NET Framework 3.5, 4.7.2 and 4.8 for Windows 10, version 1809 and Windows Server 2019

None None...

November 12, 2024-Security and Quality Rollup for .NET Framework 2.0, 3.0, 3.5 SP1, 4.6.2 for Windows Server 2008 SP2 (KB5046546)

None None...

Microsoft DWM Core Library security vulnerabilities

Microsoft DWM Core Library is a core library for Microsoft windows from Microsoft Corporation, USA. A security vulnerability exists in the Microsoft DWM Core Library. An attacker can exploit the vulnerability to elevate privileges. The following products and versions are affected:Windows Server...

Microsoft Windows VMSwitch resource management error vulnerability

Microsoft Windows VMSwitch is a component of Windows Hyper-V virtualization technology from Microsoft Corporation USA used to create and manage virtual switches. A resource management error vulnerability exists in Microsoft Windows VMSwitch. An attacker could exploit the vulnerability to elevate...