CVE Feed

Windows OLE Remote Code Execution Vulnerability

Windows Deployment Services Remote Code Execution Vulnerability

Windows Deployment Services Denial of Service Vulnerability

Connected User Experiences and Telemetry Elevation of Privilege Vulnerability

Remote Procedure Call Runtime Denial of Service Vulnerability

Remote Procedure Call Runtime Denial of Service Vulnerability

Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability

Remote Procedure Call Runtime Information Disclosure Vulnerability

Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability

Remote Procedure Call Runtime Denial of Service Vulnerability

Windows Online Certificate Status Protocol (OCSP) SnapIn Remote Code Execution Vulnerability

Raw Image Extension Remote Code Execution Vulnerability

Windows Installer Elevation of Privilege Vulnerability

Windows SmartScreen Security Feature Bypass Vulnerability

Paint 3D Remote Code Execution Vulnerability

Windows MSHTML Platform Elevation of Privilege Vulnerability

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

Windows Remote Desktop Security Feature Bypass Vulnerability

OLE Automation Information Disclosure Vulnerability

Windows Update Orchestrator Service Information Disclosure Vulnerability

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

Microsoft ODBC Driver Remote Code Execution Vulnerability

Windows Layer-2 Bridge Network Driver Information Disclosure Vulnerability

Remote Procedure Call Runtime Denial of Service Vulnerability

Remote Procedure Call Runtime Denial of Service Vulnerability

Microsoft Failover Cluster Remote Code Execution Vulnerability

Windows Cryptographic Information Disclosure Vulnerability

Remote Procedure Call Runtime Denial of Service Vulnerability

Remote Procedure Call Runtime Denial of Service Vulnerability

Remote Procedure Call Runtime Denial of Service Vulnerability

Remote Procedure Call Runtime Denial of Service Vulnerability

Remote Procedure Call Runtime Denial of Service Vulnerability

Remote Procedure Call Runtime Denial of Service Vulnerability

Microsoft SharePoint Server Security Feature Bypass Vulnerability

Microsoft Outlook Remote Code Execution Vulnerability

Microsoft ActiveX Remote Code Execution Vulnerability

Microsoft Outlook Spoofing Vulnerability

Microsoft Office Security Feature Bypass Vulnerability

Microsoft Office Graphics Remote Code Execution Vulnerability

Microsoft Office Elevation of Privilege Vulnerability

Windows Win32k Elevation of Privilege Vulnerability

Improper privilege management in Zoom Rooms for Windows before version 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access.

A vulnerability classified as critical has been found in Nesote Inout Blockchain FiatExchanger 3.0. This affects an unknown part of the file /index.php/coins/update_marketboxslider of the component POST Parameter Handler. The manipulation of the argument marketcurrency leads to sql injection. It is possible to initiate the attack remotely. The identifier VDB-233577 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Relative path traversal in the Zoom Client SDK before version 5.15.0 may allow an unauthorized user to enable information disclosure via local access.

Improper input validation in the Zoom Desktop Client for Windows before version 5.15.0 may allow an unauthorized user to enable an escalation of privilege via network access.

An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-23] in FortiAnalyzer and FortiManager management interface 7.2.0 through 7.2.1, 7.0.0 through 7.0.5, 6.4  all versions may allow a remote and authenticated attacker to retrieve arbitrary files from the underlying filesystem via specially crafted web requests.

An insufficient session expiration in Fortinet FortiOS 7.0.0 - 7.0.12 and 7.2.0 - 7.2.4 allows an attacker to execute unauthorized code or commands via reusing the session of a deleted user in the REST API.

An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in FortiExtender management interface 7.0.0 through 7.0.3, 4.2.0 through 4.2.4, 4.1.1 through 4.1.8, 4.0.0 through 4.0.2, 3.3.0 through 3.3.2, 3.2.1 through 3.2.3, 5.3 all versions may allow an unauthenticated and remote attacker to retrieve arbitrary files from the underlying filesystem via specially crafted web requests.