| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2021-44657 | Hig | 0.00 | 8.8 | 0.02 | Dec 15, 2021 | In StackStorm versions prior to 3.6.0, the jinja interpreter was not run in sandbox mode and thus allows execution of unsafe system commands. Jinja does not enable sandboxed mode by default due to backwards compatibility. Stackstorm now sets sandboxed mode for jinja by default. | ||
| CVE-2021-43893 | Hig | 0.49 | 7.5 | 0.07 | Dec 15, 2021 | Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability | ||
| CVE-2021-43892 | Hig | 0.48 | 7.4 | 0.03 | Dec 15, 2021 | Microsoft BizTalk ESB Toolkit Spoofing Vulnerability | ||
| CVE-2021-43891 | Hig | 0.52 | 7.8 | 0.12 | Dec 15, 2021 | Visual Studio Code Remote Code Execution Vulnerability | ||
| CVE-2021-43890 | Hig | 0.19 | 7.1 | 0.10 | KEV | Dec 15, 2021 | We have investigated reports of a spoofing vulnerability in AppX installer that affects Microsoft Windows. Microsoft is aware of attacks that attempt to exploit this vulnerability by using specially crafted packages that include the malware family known as… | |
| CVE-2021-43889 | Hig | 0.47 | 7.2 | 0.02 | Dec 15, 2021 | Microsoft Defender for IoT Remote Code Execution Vulnerability | ||
| CVE-2021-43888 | Hig | 0.49 | 7.5 | 0.03 | Dec 15, 2021 | Microsoft Defender for IoT Information Disclosure Vulnerability | ||
| CVE-2021-43883 | Hig | 0.52 | 7.8 | 0.12 | Dec 15, 2021 | Windows Installer Elevation of Privilege Vulnerability | ||
| CVE-2021-43877 | Hig | 0.57 | 8.8 | 0.01 | Dec 15, 2021 | ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability | ||
| CVE-2021-43875 | Hig | 0.51 | 7.8 | 0.05 | Dec 15, 2021 | Microsoft Office Graphics Remote Code Execution Vulnerability | ||
| CVE-2021-43518 | Hig | 0.51 | 7.8 | 0.01 | Dec 15, 2021 | Teeworlds up to and including 0.7.5 is vulnerable to Buffer Overflow. A map parser does not validate m_Channels value coming from a map file, leading to a buffer overflow. A malicious server may offer a specially crafted map that will overwrite client's stack causing denial of… | ||
| CVE-2021-43256 | Hig | 0.51 | 7.8 | 0.02 | Dec 15, 2021 | Microsoft Excel Remote Code Execution Vulnerability | ||
| CVE-2021-43248 | Hig | 0.51 | 7.8 | 0.01 | Dec 15, 2021 | Windows Digital Media Receiver Elevation of Privilege Vulnerability | ||
| CVE-2021-43247 | Hig | 0.51 | 7.8 | 0.01 | Dec 15, 2021 | Windows TCP/IP Driver Elevation of Privilege Vulnerability | ||
| CVE-2021-43245 | Hig | 0.51 | 7.8 | 0.01 | Dec 15, 2021 | Windows Digital TV Tuner Elevation of Privilege Vulnerability | ||
| CVE-2021-43242 | Hig | 0.49 | 7.6 | 0.01 | Dec 15, 2021 | Microsoft SharePoint Server Spoofing Vulnerability | ||
| CVE-2021-43240 | Hig | 0.51 | 7.8 | 0.01 | Dec 15, 2021 | NTFS Set Short Name Elevation of Privilege Vulnerability | ||
| CVE-2021-43239 | Hig | 0.46 | 7.1 | 0.01 | Dec 15, 2021 | Windows Recovery Environment Agent Elevation of Privilege Vulnerability | ||
| CVE-2021-43238 | Hig | 0.51 | 7.8 | 0.01 | Dec 15, 2021 | Windows Remote Access Elevation of Privilege Vulnerability | ||
| CVE-2021-43237 | Hig | 0.51 | 7.8 | 0.01 | Dec 15, 2021 | Windows Setup Elevation of Privilege Vulnerability | ||
| CVE-2021-43236 | Hig | 0.49 | 7.5 | 0.03 | Dec 15, 2021 | Microsoft Message Queuing Information Disclosure Vulnerability | ||
| CVE-2021-43234 | Hig | 0.51 | 7.8 | 0.02 | Dec 15, 2021 | Windows Fax Service Remote Code Execution Vulnerability | ||
| CVE-2021-43233 | Hig | 0.49 | 7.5 | 0.02 | Dec 15, 2021 | Remote Desktop Client Remote Code Execution Vulnerability | ||
| CVE-2021-43232 | Hig | 0.51 | 7.8 | 0.02 | Dec 15, 2021 | Windows Event Tracing Remote Code Execution Vulnerability | ||
| CVE-2021-43231 | Hig | 0.51 | 7.8 | 0.01 | Dec 15, 2021 | Windows NTFS Elevation of Privilege Vulnerability | ||
| CVE-2021-43230 | Hig | 0.51 | 7.8 | 0.01 | Dec 15, 2021 | Windows NTFS Elevation of Privilege Vulnerability | ||
| CVE-2021-43229 | Hig | 0.51 | 7.8 | 0.02 | Dec 15, 2021 | Windows NTFS Elevation of Privilege Vulnerability | ||
| CVE-2021-43228 | Hig | 0.49 | 7.5 | 0.04 | Dec 15, 2021 | SymCrypt Denial of Service Vulnerability | ||
| CVE-2021-43226 | Hig | 0.63 | 7.8 | 0.03 | KEV | Dec 15, 2021 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | |
| CVE-2021-43225 | Hig | 0.49 | 7.5 | 0.03 | Dec 15, 2021 | Bot Framework SDK Remote Code Execution Vulnerability | ||
| CVE-2021-43223 | Hig | 0.51 | 7.8 | 0.01 | Dec 15, 2021 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | ||
| CVE-2021-43222 | Hig | 0.49 | 7.5 | 0.03 | Dec 15, 2021 | Microsoft Message Queuing Information Disclosure Vulnerability | ||
| CVE-2021-43219 | Hig | 0.48 | 7.4 | 0.04 | Dec 15, 2021 | DirectX Graphics Kernel File Denial of Service Vulnerability | ||
| CVE-2021-43217 | Hig | 0.53 | 8.1 | 0.06 | Dec 15, 2021 | Windows Encrypting File System (EFS) Remote Code Execution Vulnerability | ||
| CVE-2021-43214 | Hig | 0.51 | 7.8 | 0.02 | Dec 15, 2021 | Web Media Extensions Remote Code Execution Vulnerability | ||
| CVE-2021-43207 | Hig | 0.51 | 7.8 | 0.01 | Dec 15, 2021 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | ||
| CVE-2021-42320 | Hig | 0.52 | 8.0 | 0.02 | Dec 15, 2021 | Microsoft SharePoint Server Spoofing Vulnerability | ||
| CVE-2021-42315 | Hig | 0.57 | 8.8 | 0.02 | Dec 15, 2021 | Microsoft Defender for IoT Remote Code Execution Vulnerability | ||
| CVE-2021-42314 | Hig | 0.57 | 8.8 | 0.02 | Dec 15, 2021 | Microsoft Defender for IoT Remote Code Execution Vulnerability | ||
| CVE-2021-42312 | Hig | 0.51 | 7.8 | 0.01 | Dec 15, 2021 | Microsoft Defender for IoT Elevation of Privilege Vulnerability | ||
| CVE-2021-42310 | Hig | 0.53 | 8.1 | 0.02 | Dec 15, 2021 | Microsoft Defender for IoT Remote Code Execution Vulnerability | ||
| CVE-2021-42309 | Hig | 0.57 | 8.8 | 0.03 | Dec 15, 2021 | Microsoft SharePoint Server Remote Code Execution Vulnerability | ||
| CVE-2021-42294 | Hig | 0.47 | 7.2 | 0.02 | Dec 15, 2021 | Microsoft SharePoint Server Remote Code Execution Vulnerability | ||
| CVE-2021-41365 | Hig | 0.57 | 8.8 | 0.03 | Dec 15, 2021 | Microsoft Defender for IoT Remote Code Execution Vulnerability | ||
| CVE-2021-41360 | Hig | 0.51 | 7.8 | 0.02 | Dec 15, 2021 | HEVC Video Extensions Remote Code Execution Vulnerability | ||
| CVE-2021-41333 | Hig | 0.51 | 7.8 | 0.01 | Dec 15, 2021 | Windows Print Spooler Elevation of Privilege Vulnerability | ||
| CVE-2021-40453 | Hig | 0.51 | 7.8 | 0.02 | Dec 15, 2021 | HEVC Video Extensions Remote Code Execution Vulnerability | ||
| CVE-2021-40452 | Hig | 0.51 | 7.8 | 0.03 | Dec 15, 2021 | HEVC Video Extensions Remote Code Execution Vulnerability | ||
| CVE-2021-40441 | Hig | 0.51 | 7.8 | 0.01 | Dec 15, 2021 | Windows Media Center Elevation of Privilege Vulnerability | ||
| CVE-2021-45043 | Hig | 0.54 | 7.5 | 0.33 | Dec 15, 2021 | HD-Network Real-time Monitoring System 2.0 allows ../ directory traversal to read /etc/shadow via the /language/lang s_Language parameter. |
- risk 0.00cvss 8.8epss 0.02
In StackStorm versions prior to 3.6.0, the jinja interpreter was not run in sandbox mode and thus allows execution of unsafe system commands. Jinja does not enable sandboxed mode by default due to backwards compatibility. Stackstorm now sets sandboxed mode for jinja by default.
- risk 0.49cvss 7.5epss 0.07
Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability
- risk 0.48cvss 7.4epss 0.03
Microsoft BizTalk ESB Toolkit Spoofing Vulnerability
- risk 0.52cvss 7.8epss 0.12
Visual Studio Code Remote Code Execution Vulnerability
- risk 0.19cvss 7.1epss 0.10
We have investigated reports of a spoofing vulnerability in AppX installer that affects Microsoft Windows. Microsoft is aware of attacks that attempt to exploit this vulnerability by using specially crafted packages that include the malware family known as…
- risk 0.47cvss 7.2epss 0.02
Microsoft Defender for IoT Remote Code Execution Vulnerability
- risk 0.49cvss 7.5epss 0.03
Microsoft Defender for IoT Information Disclosure Vulnerability
- risk 0.52cvss 7.8epss 0.12
Windows Installer Elevation of Privilege Vulnerability
- risk 0.57cvss 8.8epss 0.01
ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.05
Microsoft Office Graphics Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Teeworlds up to and including 0.7.5 is vulnerable to Buffer Overflow. A map parser does not validate m_Channels value coming from a map file, leading to a buffer overflow. A malicious server may offer a specially crafted map that will overwrite client's stack causing denial of…
- risk 0.51cvss 7.8epss 0.02
Microsoft Excel Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Digital Media Receiver Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows TCP/IP Driver Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Digital TV Tuner Elevation of Privilege Vulnerability
- risk 0.49cvss 7.6epss 0.01
Microsoft SharePoint Server Spoofing Vulnerability
- risk 0.51cvss 7.8epss 0.01
NTFS Set Short Name Elevation of Privilege Vulnerability
- risk 0.46cvss 7.1epss 0.01
Windows Recovery Environment Agent Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Remote Access Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Setup Elevation of Privilege Vulnerability
- risk 0.49cvss 7.5epss 0.03
Microsoft Message Queuing Information Disclosure Vulnerability
- risk 0.51cvss 7.8epss 0.02
Windows Fax Service Remote Code Execution Vulnerability
- risk 0.49cvss 7.5epss 0.02
Remote Desktop Client Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.02
Windows Event Tracing Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows NTFS Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows NTFS Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.02
Windows NTFS Elevation of Privilege Vulnerability
- risk 0.49cvss 7.5epss 0.04
SymCrypt Denial of Service Vulnerability
- risk 0.63cvss 7.8epss 0.03
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- risk 0.49cvss 7.5epss 0.03
Bot Framework SDK Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
- risk 0.49cvss 7.5epss 0.03
Microsoft Message Queuing Information Disclosure Vulnerability
- risk 0.48cvss 7.4epss 0.04
DirectX Graphics Kernel File Denial of Service Vulnerability
- risk 0.53cvss 8.1epss 0.06
Windows Encrypting File System (EFS) Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.02
Web Media Extensions Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- risk 0.52cvss 8.0epss 0.02
Microsoft SharePoint Server Spoofing Vulnerability
- risk 0.57cvss 8.8epss 0.02
Microsoft Defender for IoT Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
Microsoft Defender for IoT Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Microsoft Defender for IoT Elevation of Privilege Vulnerability
- risk 0.53cvss 8.1epss 0.02
Microsoft Defender for IoT Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.03
Microsoft SharePoint Server Remote Code Execution Vulnerability
- risk 0.47cvss 7.2epss 0.02
Microsoft SharePoint Server Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.03
Microsoft Defender for IoT Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.02
HEVC Video Extensions Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Print Spooler Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.02
HEVC Video Extensions Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.03
HEVC Video Extensions Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Media Center Elevation of Privilege Vulnerability
- risk 0.54cvss 7.5epss 0.33
HD-Network Real-time Monitoring System 2.0 allows ../ directory traversal to read /etc/shadow via the /language/lang s_Language parameter.