CVE Feed

Microsoft SharePoint Server Denial of Service Vulnerability

.NET and Visual Studio Remote Code Execution Vulnerability

.NET and Visual Studio Remote Code Execution Vulnerability

.NET and Visual Studio Elevation of Privilege Vulnerability

Windows Server Service Security Feature Bypass Vulnerability

Windows SMB Witness Service Security Feature Bypass Vulnerability

Windows DNS Spoofing Vulnerability

Windows Kernel Information Disclosure Vulnerability

Windows Hello Remote Code Execution Vulnerability

Microsoft PostScript Printer Driver Remote Code Execution Vulnerability

Windows Installer Information Disclosure Vulnerability

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

Windows Hyper-V Denial of Service Vulnerability

Windows Container Manager Service Elevation of Privilege Vulnerability

Windows iSCSI Discovery Service Denial of Service Vulnerability

Windows Bus Filter Driver Elevation of Privilege Vulnerability

Windows Collaborative Translation Framework Elevation of Privilege Vulnerability

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

Microsoft ODBC Driver Remote Code Execution Vulnerability

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

Windows GDI Elevation of Privilege Vulnerability

Windows Media Remote Code Execution Vulnerability

Remote Procedure Call Runtime Denial of Service Vulnerability

Windows Filtering Platform Elevation of Privilege Vulnerability

iSCSI Target WMI Provider Remote Code Execution Vulnerability

Windows Geolocation Service Remote Code Execution Vulnerability

Windows Media Remote Code Execution Vulnerability

Windows Authentication Elevation of Privilege Vulnerability

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

Remote Desktop Client Remote Code Execution Vulnerability

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Microsoft Streaming Service Elevation of Privilege Vulnerability

GDI Elevation of Privilege Vulnerability

Windows GDI Elevation of Privilege Vulnerability

Microsoft SharePoint Server Elevation of Privilege Vulnerability

DHCP Server Service Information Disclosure Vulnerability

Windows Remote Desktop Security Feature Bypass Vulnerability

Windows Group Policy Elevation of Privilege Vulnerability

NTFS Elevation of Privilege Vulnerability

Azure DevOps Server Spoofing Vulnerability

Azure DevOps Server Spoofing Vulnerability

Microsoft Office Remote Code Execution Vulnerability

Visual Studio Information Disclosure Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Sysinternals Process Monitor for Windows Denial of Service Vulnerability

Windows CryptoAPI Denial of Service Vulnerability

Discourse is an open source discussion platform. Prior to version 3.0.4 of the `stable` branch and version 3.1.0.beta5 of the `beta` and `tests-passed` branches, an attacker could use the new topics dismissal endpoint to reveal the number of topics recently created (but not the actual content thereof) in categories they didn't have access to. This issue is patched in version 3.0.4 of the `stable` branch and version 3.1.0.beta5 of the `beta` and `tests-passed` branches. There are no known workarounds.

Discourse is an open source discussion platform. Prior to version 3.0.4 of the `stable` branch and version 3.1.0.beta5 of the `beta` and `tests-passed` branches, multiple duplicate topics could be created if topic embedding is enabled. This issue is patched in version 3.0.4 of the `stable` branch and version 3.1.0.beta5 of the `beta` and `tests-passed` branches. As a workaround, disable topic embedding if it has been enabled.