Windows Mobile Hotspot Information Disclosure Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2016,
Microsoft Windows Server 2019,
Microsoft Windows 10 1507
... (+9)
HTTP.sys Denial of Service Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2019,
Microsoft Windows 11 21h2,
Microsoft Windows Server 2022
... (+6)
Windows Kernel Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2019,
Microsoft Windows 11 21h2,
Microsoft Windows Server 2022
... (+6)
Windows Remote Access Connection Manager Information Disclosure Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2012,
Microsoft Windows Server 2016,
Microsoft Windows 10 1507
... (+7)
Windows File Server Resource Management Service Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+3)
DHCP Server Service Denial of Service Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+3)
Microsoft WDAC SQL Server ODBC Driver Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+13)
Microsoft Brokering File System Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2022 23h2
DHCP Server Service Denial of Service Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+3)
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2012,
Microsoft Windows Server 2016,
Microsoft Windows Server 2019
... (+10)
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+13)
Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2012,
Microsoft Windows Server 2016,
Microsoft Windows Server 2019
... (+10)
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+13)
Windows Remote Access Connection Manager Information Disclosure Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2012,
Microsoft Windows Server 2016,
Microsoft Windows Server 2019
... (+10)
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+13)
DHCP Server Service Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2012,
Microsoft Windows Server 2016,
Microsoft Windows Server 2019
... (+2)
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+13)
DHCP Server Service Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+3)
Secure Boot Security Feature Bypass Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+10)
Azure Migrate Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Azure Migrate
Secure Boot Security Feature Bypass Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2012,
Microsoft Windows Server 2016,
Microsoft Windows Server 2019
... (+12)
Windows Kerberos Denial of Service Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+12)
Secure Boot Security Feature Bypass Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2012,
Microsoft Windows Server 2016,
Microsoft Windows Server 2019
... (+12)
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+13)
Secure Boot Security Feature Bypass Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2012,
Microsoft Windows Server 2016,
Microsoft Windows 10 1507
... (+9)
Windows DWM Core Library Information Disclosure Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2019,
Microsoft Windows 11 21h2,
Microsoft Windows Server 2022
... (+6)
Secure Boot Security Feature Bypass Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2012,
Microsoft Windows Server 2016,
Microsoft Windows Server 2019
... (+12)
Secure Boot Security Feature Bypass Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2012,
Microsoft Windows Server 2016,
Microsoft Windows Server 2019
... (+10)
Microsoft Install Service Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+13)
Windows Authentication Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows 11 21h2,
Microsoft Windows Server 2022,
Microsoft Windows 10 21h2
... (+4)
Azure Compute Gallery Elevation of Privilege Vulnerability
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft .net Framework,
Microsoft .net Framework,
Microsoft .net Framework
... (+14)
Microsoft Defender for IoT Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS:
Microsoft Defender For Iot
Microsoft Defender for IoT Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Defender For Iot
Microsoft Defender for IoT Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Defender For Iot
Windows Kernel Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2016,
Microsoft Windows Server 2019,
Microsoft Windows 10 1507
... (+9)
Secure Boot Security Feature Bypass Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2012
Secure Boot Security Feature Bypass Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2012
Azure Private 5G Core Denial of Service Vulnerability
AFFECTED_PRODUCTS:
Microsoft Azure Private 5g Core
Remote Procedure Call Runtime Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+13)
Outlook for Windows Spoofing Vulnerability
AFFECTED_PRODUCTS:
Microsoft Outlook
Secure Boot Security Feature Bypass Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2012,
Microsoft Windows Server 2016,
Microsoft Windows Server 2019
... (+12)
BitLocker Security Feature Bypass Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2012,
Microsoft Windows Server 2016,
Microsoft Windows Server 2019
... (+12)
A vulnerability was discovered in the firmware builds after 8.0.2.3267 and prior to 8.1.3.1301 in CCX devices. A flaw in the firmware build process did not properly restrict access to a resource from an unauthorized actor.
Improper Encoding or Escaping of Output vulnerability in Apache Zeppelin.
The attackers can modify helium.json and exposure XSS attacks to normal users.
This issue affects Apache Zeppelin: from 0.8.2 before 0.11.1.
Users are recommended to upgrade to version 0.11.1, which fixes the issue.
AFFECTED_PRODUCTS:
Apache Zeppelin
Improper Encoding or Escaping of Output vulnerability in Apache Zeppelin.
The attackers can execute shell scripts or malicious code by overriding configuration like ZEPPELIN_INTP_CLASSPATH_OVERRIDES.
This issue affects Apache Zeppelin: from 0.8.2 before 0.11.1.
Users are recommended to upgrade to...
AFFECTED_PRODUCTS:
Apache Zeppelin
Improper Input Validation vulnerability in Apache Zeppelin.
The attackers can call updating cron API with invalid or improper privileges so that the notebook can run with the privileges.
This issue affects Apache Zeppelin: from 0.8.2 before 0.11.1.
Users are recommended to upgrade to version 0.11...
AFFECTED_PRODUCTS:
Apache Zeppelin
Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Zeppelin.
The attacker can inject sensitive configuration or malicious code when connecting MySQL database via JDBC driver.
This issue affects Apache Zeppelin: before 0.11.1.
Users are recommended to upgrade to versi...
AFFECTED_PRODUCTS:
Apache Zeppelin
Contao is an open source content management system. Starting in version 4.9.0 and prior to versions 4.13.40 and 5.3.4, when checking for broken links on protected pages, Contao sends the cookie header to external urls as well, the passed options for the http client are used for all requests. Contao...
AFFECTED_PRODUCTS:
Contao Contao,
Contao Contao
A improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiSandbox version 4.4.0 through 4.4.4 and 4.2.0 through 4.2.6 and 4.0.0 through 4.0.5 and 3.2.0 through 3.2.4 and 3.1.0 through 3.1.5 and 3.0.0 through 3.0.7 and 2.5.0 through 2.5.2 and 2.4.0 through 2.4....
AFFECTED_PRODUCTS:
Fortinet Fortisandbox,
Fortinet Fortisandbox