| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2021-34598 | Hig | 0.49 | 7.5 | 0.01 | Nov 10, 2021 | In Phoenix Contact FL MGUARD 1102 and 1105 in Versions 1.4.0, 1.4.1 and 1.5.0 the remote logging functionality is impaired by the lack of memory release for data structures from syslog-ng when remote logging is active | ||
| CVE-2021-34582 | Med | 0.31 | 4.8 | 0.00 | Nov 10, 2021 | In Phoenix Contact FL MGUARD 1102 and 1105 in Versions 1.4.0, 1.4.1 and 1.5.0 a user with high privileges can inject HTML code (XSS) through web-based management or the REST API with a manipulated certificate file. | ||
| CVE-2021-25975 | Med | 0.28 | 5.4 | 0.01 | Nov 10, 2021 | In publify, versions v8.0 to v9.2.4 are vulnerable to stored XSS as a result of an unrestricted file upload. This issue allows a user with “publisher” role to inject malicious JavaScript via the uploaded html file. | ||
| CVE-2021-25974 | Med | 0.28 | 5.4 | 0.01 | Nov 10, 2021 | In Publify, versions v8.0 to v9.2.4 are vulnerable to stored XSS. A user with a “publisher” role is able to inject and execute arbitrary JavaScript code while creating a page/article. | ||
| CVE-2021-31853 | Hig | 0.51 | 7.8 | 0.00 | Nov 10, 2021 | DLL Search Order Hijacking Vulnerability in McAfee Drive Encryption (MDE) prior to 7.3.0 HF2 (7.3.0.183) allows local users to execute arbitrary code and escalate privileges via execution from a compromised folder. | ||
| CVE-2021-22870 | Med | 0.42 | 6.5 | 0.01 | Nov 10, 2021 | A path traversal vulnerability was identified in GitHub Pages builds on GitHub Enterprise Server that could allow an attacker to read system files. To exploit this vulnerability, an attacker would need permission to create and build a GitHub Pages site on the GitHub Enterprise… | ||
| CVE-2021-43209 | Hig | 0.51 | 7.8 | 0.07 | Nov 10, 2021 | 3D Viewer Remote Code Execution Vulnerability | ||
| CVE-2021-43208 | Hig | 0.51 | 7.8 | 0.04 | Nov 10, 2021 | 3D Viewer Remote Code Execution Vulnerability | ||
| CVE-2021-42323 | Low | 0.22 | 3.3 | 0.01 | Nov 10, 2021 | Azure RTOS Information Disclosure Vulnerability | ||
| CVE-2021-42322 | Hig | 0.51 | 7.8 | 0.01 | Nov 10, 2021 | Visual Studio Code Elevation of Privilege Vulnerability | ||
| CVE-2021-42321 | Hig | 0.86 | 8.8 | 0.92 | KEV | Nov 10, 2021 | Microsoft Exchange Server Remote Code Execution Vulnerability | |
| CVE-2021-42319 | Med | 0.31 | 4.7 | 0.01 | Nov 10, 2021 | Visual Studio Elevation of Privilege Vulnerability | ||
| CVE-2021-42316 | Hig | 0.57 | 8.8 | 0.02 | Nov 10, 2021 | Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability | ||
| CVE-2021-42305 | Med | 0.43 | 6.5 | 0.08 | Nov 10, 2021 | Microsoft Exchange Server Spoofing Vulnerability | ||
| CVE-2021-42304 | Med | 0.43 | 6.6 | 0.01 | Nov 10, 2021 | Azure RTOS Elevation of Privilege Vulnerability | ||
| CVE-2021-42303 | Med | 0.43 | 6.6 | 0.01 | Nov 10, 2021 | Azure RTOS Elevation of Privilege Vulnerability | ||
| CVE-2021-42302 | Med | 0.43 | 6.6 | 0.01 | Nov 10, 2021 | Azure RTOS Elevation of Privilege Vulnerability | ||
| CVE-2021-42301 | Low | 0.22 | 3.3 | 0.01 | Nov 10, 2021 | Azure RTOS Information Disclosure Vulnerability | ||
| CVE-2021-42300 | Med | 0.39 | 6.0 | 0.01 | Nov 10, 2021 | Azure Sphere Tampering Vulnerability | ||
| CVE-2021-42298 | Hig | 0.51 | 7.8 | 0.06 | Nov 10, 2021 | Microsoft Defender Remote Code Execution Vulnerability | ||
| CVE-2021-42296 | Hig | 0.51 | 7.8 | 0.01 | Nov 10, 2021 | Microsoft Word Remote Code Execution Vulnerability | ||
| CVE-2021-42292 | Hig | 0.66 | 7.8 | 0.43 | KEV | Nov 10, 2021 | Microsoft Excel Security Feature Bypass Vulnerability | |
| CVE-2021-42291 | Hig | 0.49 | 7.5 | 0.04 | Nov 10, 2021 | Active Directory Domain Services Elevation of Privilege Vulnerability | ||
| CVE-2021-42288 | Med | 0.37 | 5.7 | 0.01 | Nov 10, 2021 | Windows Hello Security Feature Bypass Vulnerability | ||
| CVE-2021-42287 | Hig | 0.73 | 7.5 | 0.77 | KEV | Nov 10, 2021 | Active Directory Domain Services Elevation of Privilege Vulnerability | |
| CVE-2021-42286 | Hig | 0.51 | 7.8 | 0.00 | Nov 10, 2021 | Windows Core Shell SI Host Extension Framework for Composable Shell Elevation of Privilege Vulnerability | ||
| CVE-2021-42285 | Hig | 0.51 | 7.8 | 0.01 | Nov 10, 2021 | Windows Kernel Elevation of Privilege Vulnerability | ||
| CVE-2021-42284 | Med | 0.44 | 6.8 | 0.04 | Nov 10, 2021 | Windows Hyper-V Denial of Service Vulnerability | ||
| CVE-2021-42283 | Hig | 0.57 | 8.8 | 0.00 | Nov 10, 2021 | NTFS Elevation of Privilege Vulnerability | ||
| CVE-2021-42282 | Hig | 0.49 | 7.5 | 0.04 | Nov 10, 2021 | Active Directory Domain Services Elevation of Privilege Vulnerability | ||
| CVE-2021-42280 | Med | 0.36 | 5.5 | 0.01 | Nov 10, 2021 | Windows Feedback Hub Elevation of Privilege Vulnerability | ||
| CVE-2021-42279 | Med | 0.27 | 4.2 | 0.02 | Nov 10, 2021 | Chakra Scripting Engine Memory Corruption Vulnerability | ||
| CVE-2021-42278 | Hig | 0.73 | 7.5 | 0.73 | KEV | Nov 10, 2021 | Active Directory Domain Services Elevation of Privilege Vulnerability | |
| CVE-2021-42277 | Med | 0.36 | 5.5 | 0.01 | Nov 10, 2021 | Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability | ||
| CVE-2021-42276 | Hig | 0.51 | 7.8 | 0.02 | Nov 10, 2021 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | ||
| CVE-2021-42275 | Hig | 0.57 | 8.8 | 0.02 | Nov 10, 2021 | Microsoft COM for Windows Remote Code Execution Vulnerability | ||
| CVE-2021-42274 | Med | 0.44 | 6.8 | 0.01 | Nov 10, 2021 | Windows Hyper-V Discrete Device Assignment (DDA) Denial of Service Vulnerability | ||
| CVE-2021-41379 | Med | 0.55 | 5.5 | 0.19 | KEV | Nov 10, 2021 | Windows Installer Elevation of Privilege Vulnerability | |
| CVE-2021-41378 | Hig | 0.51 | 7.8 | 0.02 | Nov 10, 2021 | Windows NTFS Remote Code Execution Vulnerability | ||
| CVE-2021-41377 | Hig | 0.51 | 7.8 | 0.00 | Nov 10, 2021 | Windows Fast FAT File System Driver Elevation of Privilege Vulnerability | ||
| CVE-2021-41376 | Low | 0.15 | 2.3 | 0.01 | Nov 10, 2021 | Azure Sphere Information Disclosure Vulnerability | ||
| CVE-2021-41375 | Med | 0.29 | 4.4 | 0.01 | Nov 10, 2021 | Azure Sphere Information Disclosure Vulnerability | ||
| CVE-2021-41374 | Med | 0.44 | 6.7 | 0.01 | Nov 10, 2021 | Azure Sphere Information Disclosure Vulnerability | ||
| CVE-2021-41373 | Med | 0.36 | 5.5 | 0.01 | Nov 10, 2021 | FSLogix Information Disclosure Vulnerability | ||
| CVE-2021-41372 | Hig | 0.49 | 7.6 | 0.01 | Nov 10, 2021 | A Cross-Site Scripting (XSS) and Cross-Site Request Forgery (CSRF) vulnerability exists when Power BI Report Server Template file (pbix) containing HTML files is uploaded to the server and HTML files are accessed directly by the victim. Combining these 2 vulnerabilities… | ||
| CVE-2021-41371 | Med | 0.29 | 4.4 | 0.02 | Nov 10, 2021 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability | ||
| CVE-2021-41370 | Hig | 0.51 | 7.8 | 0.00 | Nov 10, 2021 | NTFS Elevation of Privilege Vulnerability | ||
| CVE-2021-41368 | Med | 0.40 | 6.1 | 0.05 | Nov 10, 2021 | Microsoft Access Remote Code Execution Vulnerability | ||
| CVE-2021-41367 | Hig | 0.51 | 7.8 | 0.00 | Nov 10, 2021 | NTFS Elevation of Privilege Vulnerability | ||
| CVE-2021-41366 | Hig | 0.51 | 7.8 | 0.00 | Nov 10, 2021 | Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability |
- risk 0.49cvss 7.5epss 0.01
In Phoenix Contact FL MGUARD 1102 and 1105 in Versions 1.4.0, 1.4.1 and 1.5.0 the remote logging functionality is impaired by the lack of memory release for data structures from syslog-ng when remote logging is active
- risk 0.31cvss 4.8epss 0.00
In Phoenix Contact FL MGUARD 1102 and 1105 in Versions 1.4.0, 1.4.1 and 1.5.0 a user with high privileges can inject HTML code (XSS) through web-based management or the REST API with a manipulated certificate file.
- risk 0.28cvss 5.4epss 0.01
In publify, versions v8.0 to v9.2.4 are vulnerable to stored XSS as a result of an unrestricted file upload. This issue allows a user with “publisher” role to inject malicious JavaScript via the uploaded html file.
- risk 0.28cvss 5.4epss 0.01
In Publify, versions v8.0 to v9.2.4 are vulnerable to stored XSS. A user with a “publisher” role is able to inject and execute arbitrary JavaScript code while creating a page/article.
- risk 0.51cvss 7.8epss 0.00
DLL Search Order Hijacking Vulnerability in McAfee Drive Encryption (MDE) prior to 7.3.0 HF2 (7.3.0.183) allows local users to execute arbitrary code and escalate privileges via execution from a compromised folder.
- risk 0.42cvss 6.5epss 0.01
A path traversal vulnerability was identified in GitHub Pages builds on GitHub Enterprise Server that could allow an attacker to read system files. To exploit this vulnerability, an attacker would need permission to create and build a GitHub Pages site on the GitHub Enterprise…
- risk 0.51cvss 7.8epss 0.07
3D Viewer Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.04
3D Viewer Remote Code Execution Vulnerability
- risk 0.22cvss 3.3epss 0.01
Azure RTOS Information Disclosure Vulnerability
- risk 0.51cvss 7.8epss 0.01
Visual Studio Code Elevation of Privilege Vulnerability
- risk 0.86cvss 8.8epss 0.92
Microsoft Exchange Server Remote Code Execution Vulnerability
- risk 0.31cvss 4.7epss 0.01
Visual Studio Elevation of Privilege Vulnerability
- risk 0.57cvss 8.8epss 0.02
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
- risk 0.43cvss 6.5epss 0.08
Microsoft Exchange Server Spoofing Vulnerability
- risk 0.43cvss 6.6epss 0.01
Azure RTOS Elevation of Privilege Vulnerability
- risk 0.43cvss 6.6epss 0.01
Azure RTOS Elevation of Privilege Vulnerability
- risk 0.43cvss 6.6epss 0.01
Azure RTOS Elevation of Privilege Vulnerability
- risk 0.22cvss 3.3epss 0.01
Azure RTOS Information Disclosure Vulnerability
- risk 0.39cvss 6.0epss 0.01
Azure Sphere Tampering Vulnerability
- risk 0.51cvss 7.8epss 0.06
Microsoft Defender Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Microsoft Word Remote Code Execution Vulnerability
- risk 0.66cvss 7.8epss 0.43
Microsoft Excel Security Feature Bypass Vulnerability
- risk 0.49cvss 7.5epss 0.04
Active Directory Domain Services Elevation of Privilege Vulnerability
- risk 0.37cvss 5.7epss 0.01
Windows Hello Security Feature Bypass Vulnerability
- risk 0.73cvss 7.5epss 0.77
Active Directory Domain Services Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.00
Windows Core Shell SI Host Extension Framework for Composable Shell Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Kernel Elevation of Privilege Vulnerability
- risk 0.44cvss 6.8epss 0.04
Windows Hyper-V Denial of Service Vulnerability
- risk 0.57cvss 8.8epss 0.00
NTFS Elevation of Privilege Vulnerability
- risk 0.49cvss 7.5epss 0.04
Active Directory Domain Services Elevation of Privilege Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows Feedback Hub Elevation of Privilege Vulnerability
- risk 0.27cvss 4.2epss 0.02
Chakra Scripting Engine Memory Corruption Vulnerability
- risk 0.73cvss 7.5epss 0.73
Active Directory Domain Services Elevation of Privilege Vulnerability
- risk 0.36cvss 5.5epss 0.01
Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.02
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
Microsoft COM for Windows Remote Code Execution Vulnerability
- risk 0.44cvss 6.8epss 0.01
Windows Hyper-V Discrete Device Assignment (DDA) Denial of Service Vulnerability
- risk 0.55cvss 5.5epss 0.19
Windows Installer Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.02
Windows NTFS Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.00
Windows Fast FAT File System Driver Elevation of Privilege Vulnerability
- risk 0.15cvss 2.3epss 0.01
Azure Sphere Information Disclosure Vulnerability
- risk 0.29cvss 4.4epss 0.01
Azure Sphere Information Disclosure Vulnerability
- risk 0.44cvss 6.7epss 0.01
Azure Sphere Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
FSLogix Information Disclosure Vulnerability
- risk 0.49cvss 7.6epss 0.01
A Cross-Site Scripting (XSS) and Cross-Site Request Forgery (CSRF) vulnerability exists when Power BI Report Server Template file (pbix) containing HTML files is uploaded to the server and HTML files are accessed directly by the victim. Combining these 2 vulnerabilities…
- risk 0.29cvss 4.4epss 0.02
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
- risk 0.51cvss 7.8epss 0.00
NTFS Elevation of Privilege Vulnerability
- risk 0.40cvss 6.1epss 0.05
Microsoft Access Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.00
NTFS Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.00
Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability