| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2021-28352 | Hig | 0.57 | 8.8 | 0.02 | Apr 13, 2021 | Remote Procedure Call Runtime Remote Code Execution Vulnerability | ||
| CVE-2021-28351 | Hig | 0.51 | 7.8 | 0.01 | Apr 13, 2021 | Windows Speech Runtime Elevation of Privilege Vulnerability | ||
| CVE-2021-28350 | Hig | 0.51 | 7.8 | 0.01 | Apr 13, 2021 | Windows GDI+ Remote Code Execution Vulnerability | ||
| CVE-2021-28349 | Hig | 0.51 | 7.8 | 0.01 | Apr 13, 2021 | Windows GDI+ Remote Code Execution Vulnerability | ||
| CVE-2021-28348 | Hig | 0.51 | 7.8 | 0.01 | Apr 13, 2021 | Windows GDI+ Remote Code Execution Vulnerability | ||
| CVE-2021-28347 | Hig | 0.51 | 7.8 | 0.01 | Apr 13, 2021 | Windows Speech Runtime Elevation of Privilege Vulnerability | ||
| CVE-2021-28346 | Hig | 0.57 | 8.8 | 0.02 | Apr 13, 2021 | Remote Procedure Call Runtime Remote Code Execution Vulnerability | ||
| CVE-2021-28345 | Hig | 0.57 | 8.8 | 0.02 | Apr 13, 2021 | Remote Procedure Call Runtime Remote Code Execution Vulnerability | ||
| CVE-2021-28344 | Hig | 0.57 | 8.8 | 0.03 | Apr 13, 2021 | Remote Procedure Call Runtime Remote Code Execution Vulnerability | ||
| CVE-2021-28343 | Hig | 0.57 | 8.8 | 0.02 | Apr 13, 2021 | Remote Procedure Call Runtime Remote Code Execution Vulnerability | ||
| CVE-2021-28342 | Hig | 0.57 | 8.8 | 0.02 | Apr 13, 2021 | Remote Procedure Call Runtime Remote Code Execution Vulnerability | ||
| CVE-2021-28341 | Hig | 0.57 | 8.8 | 0.02 | Apr 13, 2021 | Remote Procedure Call Runtime Remote Code Execution Vulnerability | ||
| CVE-2021-28340 | Hig | 0.57 | 8.8 | 0.03 | Apr 13, 2021 | Remote Procedure Call Runtime Remote Code Execution Vulnerability | ||
| CVE-2021-28339 | Hig | 0.57 | 8.8 | 0.02 | Apr 13, 2021 | Remote Procedure Call Runtime Remote Code Execution Vulnerability | ||
| CVE-2021-28338 | Hig | 0.57 | 8.8 | 0.02 | Apr 13, 2021 | Remote Procedure Call Runtime Remote Code Execution Vulnerability | ||
| CVE-2021-28337 | Hig | 0.57 | 8.8 | 0.02 | Apr 13, 2021 | Remote Procedure Call Runtime Remote Code Execution Vulnerability | ||
| CVE-2021-28336 | Hig | 0.57 | 8.8 | 0.02 | Apr 13, 2021 | Remote Procedure Call Runtime Remote Code Execution Vulnerability | ||
| CVE-2021-28335 | Hig | 0.57 | 8.8 | 0.02 | Apr 13, 2021 | Remote Procedure Call Runtime Remote Code Execution Vulnerability | ||
| CVE-2021-28334 | Hig | 0.57 | 8.8 | 0.02 | Apr 13, 2021 | Remote Procedure Call Runtime Remote Code Execution Vulnerability | ||
| CVE-2021-28333 | Hig | 0.57 | 8.8 | 0.03 | Apr 13, 2021 | Remote Procedure Call Runtime Remote Code Execution Vulnerability | ||
| CVE-2021-28332 | Hig | 0.57 | 8.8 | 0.02 | Apr 13, 2021 | Remote Procedure Call Runtime Remote Code Execution Vulnerability | ||
| CVE-2021-28331 | Hig | 0.57 | 8.8 | 0.02 | Apr 13, 2021 | Remote Procedure Call Runtime Remote Code Execution Vulnerability | ||
| CVE-2021-28330 | Hig | 0.57 | 8.8 | 0.02 | Apr 13, 2021 | Remote Procedure Call Runtime Remote Code Execution Vulnerability | ||
| CVE-2021-28329 | Hig | 0.57 | 8.8 | 0.02 | Apr 13, 2021 | Remote Procedure Call Runtime Remote Code Execution Vulnerability | ||
| CVE-2021-28327 | Hig | 0.57 | 8.8 | 0.03 | Apr 13, 2021 | Remote Procedure Call Runtime Remote Code Execution Vulnerability | ||
| CVE-2021-28324 | Hig | 0.49 | 7.5 | 0.07 | Apr 13, 2021 | Windows SMB Information Disclosure Vulnerability | ||
| CVE-2021-28322 | Hig | 0.51 | 7.8 | 0.01 | Apr 13, 2021 | Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability | ||
| CVE-2021-28321 | Hig | 0.51 | 7.8 | 0.01 | Apr 13, 2021 | Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability | ||
| CVE-2021-28320 | Hig | 0.51 | 7.8 | 0.01 | Apr 13, 2021 | Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability | ||
| CVE-2021-28319 | Hig | 0.49 | 7.5 | 0.10 | Apr 13, 2021 | Windows TCP/IP Driver Denial of Service Vulnerability | ||
| CVE-2021-28315 | Hig | 0.51 | 7.8 | 0.02 | Apr 13, 2021 | Windows Media Video Decoder Remote Code Execution Vulnerability | ||
| CVE-2021-28314 | Hig | 0.51 | 7.8 | 0.01 | Apr 13, 2021 | Windows Hyper-V Elevation of Privilege Vulnerability | ||
| CVE-2021-28313 | Hig | 0.51 | 7.8 | 0.01 | Apr 13, 2021 | Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability | ||
| CVE-2021-28310 | Hig | 0.63 | 7.8 | 0.08 | KEV | Apr 13, 2021 | Win32k Elevation of Privilege Vulnerability | |
| CVE-2021-27096 | Hig | 0.51 | 7.8 | 0.01 | Apr 13, 2021 | NTFS Elevation of Privilege Vulnerability | ||
| CVE-2021-27095 | Hig | 0.51 | 7.8 | 0.04 | Apr 13, 2021 | Windows Media Video Decoder Remote Code Execution Vulnerability | ||
| CVE-2021-27091 | Hig | 0.51 | 7.8 | 0.01 | Apr 13, 2021 | RPC Endpoint Mapper Service Elevation of Privilege Vulnerability | ||
| CVE-2021-27090 | Hig | 0.51 | 7.8 | 0.01 | Apr 13, 2021 | Windows Secure Kernel Mode Elevation of Privilege Vulnerability | ||
| CVE-2021-27089 | Hig | 0.51 | 7.8 | 0.02 | Apr 13, 2021 | Microsoft Internet Messaging API Remote Code Execution Vulnerability | ||
| CVE-2021-27088 | Hig | 0.51 | 7.8 | 0.01 | Apr 13, 2021 | Windows Event Tracing Elevation of Privilege Vulnerability | ||
| CVE-2021-27086 | Hig | 0.51 | 7.8 | 0.01 | Apr 13, 2021 | Windows Services and Controller App Elevation of Privilege Vulnerability | ||
| CVE-2021-27072 | Hig | 0.46 | 7.0 | 0.01 | Apr 13, 2021 | Win32k Elevation of Privilege Vulnerability | ||
| CVE-2021-27064 | Hig | 0.51 | 7.8 | 0.01 | Apr 13, 2021 | Visual Studio Installer Elevation of Privilege Vulnerability | ||
| CVE-2021-26416 | Hig | 0.50 | 7.7 | 0.04 | Apr 13, 2021 | Windows Hyper-V Denial of Service Vulnerability | ||
| CVE-2021-26415 | Hig | 0.51 | 7.8 | 0.04 | Apr 13, 2021 | Windows Installer Elevation of Privilege Vulnerability | ||
| CVE-2021-23280 | Hig | 0.52 | 8.0 | 0.01 | Apr 13, 2021 | Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to authenticated arbitrary file upload vulnerability. IPM’s maps_srv.js allows an attacker to upload a malicious NodeJS file using uploadBackgroud action. An attacker can upload a malicious code or execute any… | ||
| CVE-2021-23279 | Hig | 0.54 | 8.0 | 0.28 | Apr 13, 2021 | Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated arbitrary file delete vulnerability induced due to improper input validation in meta_driver_srv.js class with saveDriverData action using invalidated driverID. An attacker can send specially… | ||
| CVE-2021-23278 | Hig | 0.57 | 8.7 | 0.01 | Apr 13, 2021 | Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to authenticated arbitrary file delete vulnerability induced due to improper input validation at server/maps_srv.js with action removeBackground and server/node_upgrade_srv.js with action removeFirmware. An… | ||
| CVE-2021-23277 | Hig | 0.54 | 8.3 | 0.01 | Apr 13, 2021 | Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated eval injection vulnerability. The software does not neutralize code syntax from users before using in the dynamic evaluation call in loadUserFile function under scripts/libs/utils.js. Successful… | ||
| CVE-2021-23276 | Hig | 0.46 | 7.1 | 0.01 | Apr 13, 2021 | Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to authenticated SQL injection. A malicious user can send a specially crafted packet to exploit the vulnerability. Successful exploitation of this vulnerability can allow attackers to add users in the data base. |
- risk 0.57cvss 8.8epss 0.02
Remote Procedure Call Runtime Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Speech Runtime Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows GDI+ Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows GDI+ Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows GDI+ Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Speech Runtime Elevation of Privilege Vulnerability
- risk 0.57cvss 8.8epss 0.02
Remote Procedure Call Runtime Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
Remote Procedure Call Runtime Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.03
Remote Procedure Call Runtime Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
Remote Procedure Call Runtime Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
Remote Procedure Call Runtime Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
Remote Procedure Call Runtime Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.03
Remote Procedure Call Runtime Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
Remote Procedure Call Runtime Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
Remote Procedure Call Runtime Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
Remote Procedure Call Runtime Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
Remote Procedure Call Runtime Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
Remote Procedure Call Runtime Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
Remote Procedure Call Runtime Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.03
Remote Procedure Call Runtime Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
Remote Procedure Call Runtime Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
Remote Procedure Call Runtime Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
Remote Procedure Call Runtime Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
Remote Procedure Call Runtime Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.03
Remote Procedure Call Runtime Remote Code Execution Vulnerability
- risk 0.49cvss 7.5epss 0.07
Windows SMB Information Disclosure Vulnerability
- risk 0.51cvss 7.8epss 0.01
Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability
- risk 0.49cvss 7.5epss 0.10
Windows TCP/IP Driver Denial of Service Vulnerability
- risk 0.51cvss 7.8epss 0.02
Windows Media Video Decoder Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Hyper-V Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability
- risk 0.63cvss 7.8epss 0.08
Win32k Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
NTFS Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.04
Windows Media Video Decoder Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
RPC Endpoint Mapper Service Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Secure Kernel Mode Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.02
Microsoft Internet Messaging API Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Event Tracing Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Services and Controller App Elevation of Privilege Vulnerability
- risk 0.46cvss 7.0epss 0.01
Win32k Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Visual Studio Installer Elevation of Privilege Vulnerability
- risk 0.50cvss 7.7epss 0.04
Windows Hyper-V Denial of Service Vulnerability
- risk 0.51cvss 7.8epss 0.04
Windows Installer Elevation of Privilege Vulnerability
- risk 0.52cvss 8.0epss 0.01
Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to authenticated arbitrary file upload vulnerability. IPM’s maps_srv.js allows an attacker to upload a malicious NodeJS file using uploadBackgroud action. An attacker can upload a malicious code or execute any…
- risk 0.54cvss 8.0epss 0.28
Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated arbitrary file delete vulnerability induced due to improper input validation in meta_driver_srv.js class with saveDriverData action using invalidated driverID. An attacker can send specially…
- risk 0.57cvss 8.7epss 0.01
Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to authenticated arbitrary file delete vulnerability induced due to improper input validation at server/maps_srv.js with action removeBackground and server/node_upgrade_srv.js with action removeFirmware. An…
- risk 0.54cvss 8.3epss 0.01
Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated eval injection vulnerability. The software does not neutralize code syntax from users before using in the dynamic evaluation call in loadUserFile function under scripts/libs/utils.js. Successful…
- risk 0.46cvss 7.1epss 0.01
Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to authenticated SQL injection. A malicious user can send a specially crafted packet to exploit the vulnerability. Successful exploitation of this vulnerability can allow attackers to add users in the data base.