| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2021-40477 | Hig | 0.51 | 7.8 | 0.01 | Oct 13, 2021 | Windows Event Tracing Elevation of Privilege Vulnerability | ||
| CVE-2021-40476 | Hig | 0.49 | 7.5 | 0.02 | Oct 13, 2021 | Windows AppContainer Elevation Of Privilege Vulnerability | ||
| CVE-2021-40475 | Med | 0.36 | 5.5 | 0.01 | Oct 13, 2021 | Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability | ||
| CVE-2021-40474 | Hig | 0.51 | 7.8 | 0.02 | Oct 13, 2021 | Microsoft Excel Remote Code Execution Vulnerability | ||
| CVE-2021-40473 | Hig | 0.51 | 7.8 | 0.02 | Oct 13, 2021 | Microsoft Excel Remote Code Execution Vulnerability | ||
| CVE-2021-40472 | Med | 0.36 | 5.5 | 0.01 | Oct 13, 2021 | Microsoft Excel Information Disclosure Vulnerability | ||
| CVE-2021-40471 | Hig | 0.51 | 7.8 | 0.02 | Oct 13, 2021 | Microsoft Excel Remote Code Execution Vulnerability | ||
| CVE-2021-40470 | Hig | 0.51 | 7.8 | 0.01 | Oct 13, 2021 | DirectX Graphics Kernel Elevation of Privilege Vulnerability | ||
| CVE-2021-40469 | Hig | 0.47 | 7.2 | 0.08 | Oct 13, 2021 | Windows DNS Server Remote Code Execution Vulnerability | ||
| CVE-2021-40468 | Med | 0.36 | 5.5 | 0.01 | Oct 13, 2021 | Windows Bind Filter Driver Information Disclosure Vulnerability | ||
| CVE-2021-40467 | Hig | 0.51 | 7.8 | 0.01 | Oct 13, 2021 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | ||
| CVE-2021-40466 | Hig | 0.51 | 7.8 | 0.01 | Oct 13, 2021 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | ||
| CVE-2021-40465 | Hig | 0.51 | 7.8 | 0.02 | Oct 13, 2021 | Windows Text Shaping Remote Code Execution Vulnerability | ||
| CVE-2021-40464 | Hig | 0.52 | 8.0 | 0.01 | Oct 13, 2021 | Windows Nearby Sharing Elevation of Privilege Vulnerability | ||
| CVE-2021-40463 | Hig | 0.50 | 7.7 | 0.03 | Oct 13, 2021 | Windows Network Address Translation (NAT) Denial of Service Vulnerability | ||
| CVE-2021-40462 | Hig | 0.51 | 7.8 | 0.03 | Oct 13, 2021 | Windows Media Foundation Dolby Digital Atmos Decoders Remote Code Execution Vulnerability | ||
| CVE-2021-40461 | Hig | 0.52 | 8.0 | 0.01 | Oct 13, 2021 | Windows Hyper-V Remote Code Execution Vulnerability | ||
| CVE-2021-40460 | Med | 0.42 | 6.5 | 0.02 | Oct 13, 2021 | Windows Remote Procedure Call Runtime Security Feature Bypass Vulnerability | ||
| CVE-2021-40457 | Hig | 0.48 | 7.4 | 0.02 | Oct 13, 2021 | Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability | ||
| CVE-2021-40456 | Med | 0.35 | 5.3 | 0.02 | Oct 13, 2021 | Windows AD FS Security Feature Bypass Vulnerability | ||
| CVE-2021-40455 | Med | 0.36 | 5.5 | 0.01 | Oct 13, 2021 | Windows Installer Spoofing Vulnerability | ||
| CVE-2021-40454 | Med | 0.36 | 5.5 | 0.01 | Oct 13, 2021 | Rich Text Edit Control Information Disclosure Vulnerability | ||
| CVE-2021-40450 | Hig | 0.63 | 7.8 | 0.02 | KEV | Oct 13, 2021 | Win32k Elevation of Privilege Vulnerability | |
| CVE-2021-40449 | Hig | 0.78 | 7.8 | 0.82 | KEV | Oct 13, 2021 | Win32k Elevation of Privilege Vulnerability | |
| CVE-2021-40443 | Hig | 0.51 | 7.8 | 0.01 | Oct 13, 2021 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | ||
| CVE-2021-38672 | Hig | 0.52 | 8.0 | 0.01 | Oct 13, 2021 | Windows Hyper-V Remote Code Execution Vulnerability | ||
| CVE-2021-38663 | Med | 0.36 | 5.5 | 0.01 | Oct 13, 2021 | Windows exFAT File System Information Disclosure Vulnerability | ||
| CVE-2021-38662 | Med | 0.36 | 5.5 | 0.01 | Oct 13, 2021 | Windows Fast FAT File System Driver Information Disclosure Vulnerability | ||
| CVE-2021-36970 | Hig | 0.57 | 8.8 | 0.03 | Oct 13, 2021 | Windows Print Spooler Spoofing Vulnerability | ||
| CVE-2021-36953 | Hig | 0.49 | 7.5 | 0.05 | Oct 13, 2021 | Windows TCP/IP Denial of Service Vulnerability | ||
| CVE-2021-34453 | Hig | 0.49 | 7.5 | 0.03 | Oct 13, 2021 | Microsoft Exchange Server Denial of Service Vulnerability | ||
| CVE-2021-26442 | Hig | 0.46 | 7.0 | 0.01 | Oct 13, 2021 | Windows HTTP.sys Elevation of Privilege Vulnerability | ||
| CVE-2021-26441 | Hig | 0.51 | 7.8 | 0.01 | Oct 13, 2021 | Storage Spaces Controller Elevation of Privilege Vulnerability | ||
| CVE-2021-26427 | Cri | 0.59 | 9.0 | 0.01 | Oct 13, 2021 | Microsoft Exchange Server Remote Code Execution Vulnerability | ||
| CVE-2021-20031 | Med | 0.44 | 6.1 | 0.13 | Oct 12, 2021 | A Host Header Redirection vulnerability in SonicOS potentially allows a remote attacker to redirect firewall management users to arbitrary web domains. | ||
| CVE-2021-3330 | Hig | 0.46 | 7.1 | 0.01 | Oct 12, 2021 | RCE/DOS: Linked-list corruption leading to large out-of-bounds write while sorting for forged fragment list in Zephyr. Zephyr versions >= >=2.4.0 contain Out-of-bounds Write (CWE-787). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA… | ||
| CVE-2021-3323 | Hig | 0.54 | 8.3 | 0.01 | Oct 12, 2021 | Integer Underflow in 6LoWPAN IPHC Header Uncompression in Zephyr. Zephyr versions >= >=2.4.0 contain Integer Underflow (Wrap or Wraparound) (CWE-191). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-89j6-qpxf-pfpc | ||
| CVE-2021-3322 | Med | 0.42 | 6.5 | 0.01 | Oct 12, 2021 | Unexpected Pointer Aliasing in IEEE 802154 Fragment Reassembly in Zephyr. Zephyr versions >= >=2.4.0 contain NULL Pointer Dereference (CWE-476). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-p86r-gc4r-4mq3 | ||
| CVE-2021-3321 | Hig | 0.49 | 7.5 | 0.01 | Oct 12, 2021 | Integer Underflow in Zephyr in IEEE 802154 Fragment Reassembly Header Removal. Zephyr versions >= >=2.4.0 contain Integer Overflow to Buffer Overflow (CWE-680). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-w44j-66g7-xw99 | ||
| CVE-2020-22679 | Med | 0.36 | 5.5 | 0.01 | Oct 12, 2021 | Memory leak in the sgpd_parse_entry function in MP4Box in gpac 0.8.0 allows attackers to cause a denial of service (DoS) via a crafted input. | ||
| CVE-2020-22678 | Med | 0.36 | 5.5 | 0.01 | Oct 12, 2021 | An issue was discovered in gpac 0.8.0. The gf_media_nalu_remove_emulation_bytes function in av_parsers.c has a heap-based buffer overflow which can lead to a denial of service (DOS) via a crafted input. | ||
| CVE-2020-22677 | Med | 0.36 | 5.5 | 0.01 | Oct 12, 2021 | An issue was discovered in gpac 0.8.0. The dump_data_hex function in box_dump.c has a heap-based buffer overflow which can lead to a denial of service (DOS) via a crafted input. | ||
| CVE-2020-22675 | Med | 0.36 | 5.5 | 0.01 | Oct 12, 2021 | An issue was discovered in gpac 0.8.0. The GetGhostNum function in stbl_read.c has a heap-based buffer overflow which can lead to a denial of service (DOS) via a crafted input. | ||
| CVE-2020-22674 | Med | 0.36 | 5.5 | 0.01 | Oct 12, 2021 | An issue was discovered in gpac 0.8.0. An invalid memory dereference exists in the function FixTrackID located in isom_intern.c, which allows attackers to cause a denial of service (DoS) via a crafted input. | ||
| CVE-2020-22673 | Med | 0.36 | 5.5 | 0.01 | Oct 12, 2021 | Memory leak in the senc_Parse function in MP4Box in gpac 0.8.0 allows attackers to cause a denial of service (DoS) via a crafted input. | ||
| CVE-2021-42325 | Cri | 0.61 | 9.8 | 0.12 | Oct 12, 2021 | Froxlor through 0.10.29.1 allows SQL injection in Database/Manager/DbManagerMySQL.php via a custom DB name. | ||
| CVE-2021-42326 | Med | 0.35 | 5.3 | 0.01 | Oct 12, 2021 | Redmine before 4.1.5 and 4.2.x before 4.2.3 may disclose the names of users on activity views due to an insufficient access filter. | ||
| CVE-2021-39184 | Med | 0.44 | 6.8 | 0.01 | Oct 12, 2021 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. A vulnerability in versions prior to 11.5.0, 12.1.0, and 13.3.0 allows a sandboxed renderer to request a "thumbnail" image of an arbitrary file on the user's system. The… | ||
| CVE-2021-38915 | Med | 0.42 | 6.5 | 0.01 | Oct 12, 2021 | IBM Data Risk Manager 2.0.6 stores user credentials in plain clear text which can be read by an authenticated user. IBM X-Force ID: 209947. | ||
| CVE-2021-38862 | Hig | 0.49 | 7.5 | 0.01 | Oct 12, 2021 | IBM Data Risk Manager (iDNA) 2.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 207980. |
- risk 0.51cvss 7.8epss 0.01
Windows Event Tracing Elevation of Privilege Vulnerability
- risk 0.49cvss 7.5epss 0.02
Windows AppContainer Elevation Of Privilege Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability
- risk 0.51cvss 7.8epss 0.02
Microsoft Excel Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.02
Microsoft Excel Remote Code Execution Vulnerability
- risk 0.36cvss 5.5epss 0.01
Microsoft Excel Information Disclosure Vulnerability
- risk 0.51cvss 7.8epss 0.02
Microsoft Excel Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
DirectX Graphics Kernel Elevation of Privilege Vulnerability
- risk 0.47cvss 7.2epss 0.08
Windows DNS Server Remote Code Execution Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows Bind Filter Driver Information Disclosure Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.02
Windows Text Shaping Remote Code Execution Vulnerability
- risk 0.52cvss 8.0epss 0.01
Windows Nearby Sharing Elevation of Privilege Vulnerability
- risk 0.50cvss 7.7epss 0.03
Windows Network Address Translation (NAT) Denial of Service Vulnerability
- risk 0.51cvss 7.8epss 0.03
Windows Media Foundation Dolby Digital Atmos Decoders Remote Code Execution Vulnerability
- risk 0.52cvss 8.0epss 0.01
Windows Hyper-V Remote Code Execution Vulnerability
- risk 0.42cvss 6.5epss 0.02
Windows Remote Procedure Call Runtime Security Feature Bypass Vulnerability
- risk 0.48cvss 7.4epss 0.02
Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability
- risk 0.35cvss 5.3epss 0.02
Windows AD FS Security Feature Bypass Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows Installer Spoofing Vulnerability
- risk 0.36cvss 5.5epss 0.01
Rich Text Edit Control Information Disclosure Vulnerability
- risk 0.63cvss 7.8epss 0.02
Win32k Elevation of Privilege Vulnerability
- risk 0.78cvss 7.8epss 0.82
Win32k Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- risk 0.52cvss 8.0epss 0.01
Windows Hyper-V Remote Code Execution Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows exFAT File System Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows Fast FAT File System Driver Information Disclosure Vulnerability
- risk 0.57cvss 8.8epss 0.03
Windows Print Spooler Spoofing Vulnerability
- risk 0.49cvss 7.5epss 0.05
Windows TCP/IP Denial of Service Vulnerability
- risk 0.49cvss 7.5epss 0.03
Microsoft Exchange Server Denial of Service Vulnerability
- risk 0.46cvss 7.0epss 0.01
Windows HTTP.sys Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Storage Spaces Controller Elevation of Privilege Vulnerability
- risk 0.59cvss 9.0epss 0.01
Microsoft Exchange Server Remote Code Execution Vulnerability
- risk 0.44cvss 6.1epss 0.13
A Host Header Redirection vulnerability in SonicOS potentially allows a remote attacker to redirect firewall management users to arbitrary web domains.
- risk 0.46cvss 7.1epss 0.01
RCE/DOS: Linked-list corruption leading to large out-of-bounds write while sorting for forged fragment list in Zephyr. Zephyr versions >= >=2.4.0 contain Out-of-bounds Write (CWE-787). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA…
- risk 0.54cvss 8.3epss 0.01
Integer Underflow in 6LoWPAN IPHC Header Uncompression in Zephyr. Zephyr versions >= >=2.4.0 contain Integer Underflow (Wrap or Wraparound) (CWE-191). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-89j6-qpxf-pfpc
- risk 0.42cvss 6.5epss 0.01
Unexpected Pointer Aliasing in IEEE 802154 Fragment Reassembly in Zephyr. Zephyr versions >= >=2.4.0 contain NULL Pointer Dereference (CWE-476). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-p86r-gc4r-4mq3
- risk 0.49cvss 7.5epss 0.01
Integer Underflow in Zephyr in IEEE 802154 Fragment Reassembly Header Removal. Zephyr versions >= >=2.4.0 contain Integer Overflow to Buffer Overflow (CWE-680). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-w44j-66g7-xw99
- risk 0.36cvss 5.5epss 0.01
Memory leak in the sgpd_parse_entry function in MP4Box in gpac 0.8.0 allows attackers to cause a denial of service (DoS) via a crafted input.
- risk 0.36cvss 5.5epss 0.01
An issue was discovered in gpac 0.8.0. The gf_media_nalu_remove_emulation_bytes function in av_parsers.c has a heap-based buffer overflow which can lead to a denial of service (DOS) via a crafted input.
- risk 0.36cvss 5.5epss 0.01
An issue was discovered in gpac 0.8.0. The dump_data_hex function in box_dump.c has a heap-based buffer overflow which can lead to a denial of service (DOS) via a crafted input.
- risk 0.36cvss 5.5epss 0.01
An issue was discovered in gpac 0.8.0. The GetGhostNum function in stbl_read.c has a heap-based buffer overflow which can lead to a denial of service (DOS) via a crafted input.
- risk 0.36cvss 5.5epss 0.01
An issue was discovered in gpac 0.8.0. An invalid memory dereference exists in the function FixTrackID located in isom_intern.c, which allows attackers to cause a denial of service (DoS) via a crafted input.
- risk 0.36cvss 5.5epss 0.01
Memory leak in the senc_Parse function in MP4Box in gpac 0.8.0 allows attackers to cause a denial of service (DoS) via a crafted input.
- risk 0.61cvss 9.8epss 0.12
Froxlor through 0.10.29.1 allows SQL injection in Database/Manager/DbManagerMySQL.php via a custom DB name.
- risk 0.35cvss 5.3epss 0.01
Redmine before 4.1.5 and 4.2.x before 4.2.3 may disclose the names of users on activity views due to an insufficient access filter.
- risk 0.44cvss 6.8epss 0.01
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. A vulnerability in versions prior to 11.5.0, 12.1.0, and 13.3.0 allows a sandboxed renderer to request a "thumbnail" image of an arbitrary file on the user's system. The…
- risk 0.42cvss 6.5epss 0.01
IBM Data Risk Manager 2.0.6 stores user credentials in plain clear text which can be read by an authenticated user. IBM X-Force ID: 209947.
- risk 0.49cvss 7.5epss 0.01
IBM Data Risk Manager (iDNA) 2.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 207980.