4816 matches found
April 13, 2021—KB5001393 (Security-only update)
None None...
April 13, 2021—KB5001383 (Security-only update)
None None...
April 13, 2021—KB5001382 (Monthly Rollup)
None None...
April 13, 2021—KB5001389 (Monthly Rollup)
None None...
April 13, 2021—KB5001340 (OS Build 10240.18906)
None None...
April 13, 2021—KB5001332 (Security-only update)
None None...
April 13, 2021—KB5001392 (Security-only update)
None None...
KB4601275: Time zone change in Windows for The Republic of South Sudan: April 13, 2021
None None...
The vulnerability of the Bind9 DNS server package arises from errors in processing “update-policy” rules of the “subdomain” type. This allows attackers to update all parts of the DNS zone along with the subdomain for which an update is scheduled.
The vulnerability of the Bind9 DNS server package is related to errors in processing “update-policy” rules of the “subdomain” type, such as “zoneub”. Exploiting this vulnerability allows a malicious actor to update all parts of the DNS zone, including the subdomain for which updates are scheduled...
CVE-2021-23890
Information leak vulnerability in the Agent Handler of McAfee ePolicy Orchestrator ePO prior to 5.10 Update 10 allows an unauthenticated user to download McAfee product packages specifically McAfee Agent available in ePO repository and install them on their own machines to have it managed and the...
CVE-2021-23890
Information leak vulnerability in the Agent Handler of McAfee ePolicy Orchestrator ePO prior to 5.10 Update 10 allows an unauthenticated user to download McAfee product packages specifically McAfee Agent available in ePO repository and install them on their own machines to have it managed and the...
Revive Adserver Cross-Site Scripting Vulnerability (CNVD-2021-23380)
Revive Adserver is an open source ad server under the GNU General Public License license with an integrated banner management interface and a tracking system for collecting statistical information. A reflected cross-site scripting vulnerability exists in the status parameter in...
CVE-2021-22888
Revive Adserver before v5.2.0 is vulnerable to a reflected XSS vulnerability in the status parameter of campaign-zone-zones.php. An attacker could trick a user with access to the user interface of a Revive Adserver instance into clicking on a specifically crafted URL and execute injected JavaScri...
CVE-2021-22888
Revive Adserver before v5.2.0 is vulnerable to a reflected XSS vulnerability in the status parameter of campaign-zone-zones.php. An attacker could trick a user with access to the user interface of a Revive Adserver instance into clicking on a specifically crafted URL and execute injected JavaScri...
DNSSEC: How It Works & Key Considerations
From its beginnings as a replacement for a centralized database, the Domain Name System DNS has evolved into a dynamic, highly distributed, question-answer protocol. The proverbial "phone book of the internet" has increased in complexity and scale alongside the rapid growth of the World Wide Web...
Finding the Best Servers to Answer Queries -- Edge DNS and Anycast
TL;DR IP Anycast is a network addressing and routing methodology that allows IP addresses to be announced from multiple points on the internet With the proper implementation, Anycast can reduce DNS RTTs and offer innate DDoS protection Akamai's authoritative name service, Edge DNS, combines globa...
Microsoft Windows UPnP 安全漏洞
Microsoft Windows UPnP is a device proxy from Microsoft USA. Providing a proxy allows a Windows network connection to recognize the ZoneDirector's IP address. A security vulnerability exists in the Windows UPnP device host. The following products and versions are affected: Windows Server, version...
Extortion Gang Breaches Cybersecurity Firm Qualys Using Accellion Exploit
Enterprise cloud security firm Qualys has become the latest victim to join a long list of entities to have suffered a data breach after zero-day vulnerabilities in its Accellion File Transfer Appliance FTA server were exploited to steal sensitive business documents. As proof of access to the data...
PT-2021-5058
Name of the Vulnerable Software and Affected Versions Yealink Device Management version 3.6.0.20 Description The issue is related to a lack of input data sanitization in the Yealink Device Management platform, allowing a remote attacker to execute arbitrary commands as the root user. Specifically...