‼ CVE-2021-38626 ‼
📖 Read
via "National Vulnerability Database".
Windows Kernel Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-38625.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-36969 ‼
📖 Read
via "National Vulnerability Database".
Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability This CVE ID is unique from CVE-2021-38635, CVE-2021-38636.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-36968 ‼
📖 Read
via "National Vulnerability Database".
Windows DNS Elevation of Privilege Vulnerability📖 Read
via "National Vulnerability Database".
⚠ S3 Ep50: Two 0-days plus another 0-day plus a fast food bug [Podcast] ⚠
📖 Read
via "Naked Security".
Bugs! So many bugs! Latest episode - listen now...📖 Read
via "Naked Security".
Naked Security
S3 Ep50: Two 0-days plus another 0-day plus a fast food bug [Podcast]
Bugs! So many bugs! Latest episode – listen now…
🦿 You can now eliminate the password for your Microsoft account 🦿
📖 Read
via "Tech Republic".
By using an alternative means of authentication, you can now go passwordless on your Microsoft account.📖 Read
via "Tech Republic".
🗓️ Remote code execution flaw allowed hijack of Motorola Halo+ baby monitors 🗓️
📖 Read
via "The Daily Swig".
Expectant parent finds severe security problems in his new baby monitor📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Remote code execution flaw allowed hijack of Motorola Halo+ baby monitors
Expectant parent finds severe security problems in his new baby monitor
‼ CVE-2021-39189 ‼
📖 Read
via "National Vulnerability Database".
Pimcore is an open source data & experience management platform. In versions prior to 10.1.3, it is possible to enumerate usernames via the forgot password functionality. This issue is fixed in version 10.1.3. As a workaround, one may apply the available patch manually.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-19155 ‼
📖 Read
via "National Vulnerability Database".
Improper Access Control in Jfinal CMS v4.7.1 and earlier allows remote attackers to obtain sensitive information and/or execute arbitrary code via the 'FileManager.rename()' function in the component 'modules/filemanager/FileManagerController.java'.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-19154 ‼
📖 Read
via "National Vulnerability Database".
Improper Access Control in Jfinal CMS v4.7.1 and earlier allows remote attackers to obtain sensitive information via the 'FileManager.editFile()' function in the component 'modules/filemanager/FileManagerController.java'.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-19148 ‼
📖 Read
via "National Vulnerability Database".
Cross Site Scripting (XSS) in Jfinal CMS v4.7.1 and earlier allows remote attackers to execute arbitrary code via the 'Nickname' parameter in the component '/jfinal_cms/front/person/profile.html'.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-19157 ‼
📖 Read
via "National Vulnerability Database".
Cross Site Scripting (CSS) in Wenku CMS v3.4 allows remote attackers to execute arbitrary code via the 'Intro' parameter for the component '/index.php?m=ucenter&a=index'.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-19151 ‼
📖 Read
via "National Vulnerability Database".
Command Injection in Jfinal CMS v4.7.1 and earlier allows remote attackers to execute arbitrary code by uploading a malicious HTML template file via the component 'jfinal_cms/admin/filemanager/list'.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-40157 ‼
📖 Read
via "National Vulnerability Database".
A user may be tricked into opening a malicious FBX file which may exploit an Untrusted Pointer Dereference vulnerability in FBX’s Review version 1.5.0 and prior causing it to run arbitrary code on the system.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-21798 ‼
📖 Read
via "National Vulnerability Database".
An exploitable return of stack variable address vulnerability exists in the JavaScript implementation of Nitro Pro PDF. A specially crafted document can cause a stack variable to go out of scope, resulting in the application dereferencing a stale pointer. This can lead to code execution under the context of the application. An attacker can convince a user to open a document to trigger the vulnerability.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-19146 ‼
📖 Read
via "National Vulnerability Database".
Improper Access Control in Jfinal CMS v4.7.1 and earlier allows remote attackers to obtain sensitive information via the 'TemplatePath' parameter in the component 'jfinal_cms/admin/folder/list'.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-38156 ‼
📖 Read
via "National Vulnerability Database".
In Nagios XI before 5.8.6, XSS exists in the dashboard page (/dashboards/#) when administrative users attempt to edit a dashboard.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-19158 ‼
📖 Read
via "National Vulnerability Database".
Cross Site Scripting (XSS) in S-CMS build 20191014 and earlier allows remote attackers to execute arbitrary code via the 'Site Title' parameter of the component '/data/admin/#/app/config/'.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-27044 ‼
📖 Read
via "National Vulnerability Database".
An Out-Of-Bounds Write Vulnerability in Autodesk FBX Review version 1.5.0 and prior may lead to code execution through maliciously crafted DLL files or information disclosure.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-19147 ‼
📖 Read
via "National Vulnerability Database".
Improper Access Control in Jfinal CMS v4.7.1 and earlier allows remote attackers to obtain sensitive infromation via the 'getFolder()' function in the component '/modules/filemanager/FileManager.java'.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-19159 ‼
📖 Read
via "National Vulnerability Database".
Cross Site Request Forgery (CSRF) in LaikeTui v3 allows remote attackers to execute arbitrary code via the component '/index.php?module=member&action=add'.📖 Read
via "National Vulnerability Database".