Archive
25 February 2021
Vulnerabilities first published on this day (UTC), newest first.
26 results · Clear filters · Feed
-
Medium 5.7
Microsoft Teams iOS Information Disclosure Vulnerability
Microsoft Teams iOS Information Disclosure Vulnerability
-
Medium 5.4
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
-
Medium 6.8
Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability
Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability
-
Medium 5.5
Windows DirectX Information Disclosure Vulnerability
Windows DirectX Information Disclosure Vulnerability
-
Medium 6.5
Microsoft Dataverse Information Disclosure Vulnerability
Microsoft Dataverse Information Disclosure Vulnerability
-
Medium 5.0
Microsoft Edge for Android Information Disclosure Vulnerability
Microsoft Edge for Android Information Disclosure Vulnerability
-
Medium 6.5
Skype for Business and Lync Denial of Service Vulnerability
Skype for Business and Lync Denial of Service Vulnerability
-
Medium 5.5CVE-2021-24098 Public exploit
Windows Console Driver Denial of Service Vulnerability
Windows Console Driver Denial of Service Vulnerability
-
Medium 6.5CVE-2021-24085 Public exploit
Microsoft Exchange Server Spoofing Vulnerability
Microsoft Exchange Server Spoofing Vulnerability
-
Medium 5.5CVE-2021-24084 Public exploit
Windows Mobile Device Management Information Disclosure Vulnerability
Windows Mobile Device Management Information Disclosure Vulnerability
-
Medium 4.3
Microsoft.PowerShell.Utility Module WDAC Security Feature Bypass Vulnerability
Microsoft.PowerShell.Utility Module WDAC Security Feature Bypass Vulnerability
-
Medium 6.5
Windows Trust Verification API Denial of Service Vulnerability
Windows Trust Verification API Denial of Service Vulnerability
-
Medium 5.5
Windows Backup Engine Information Disclosure Vulnerability
Windows Backup Engine Information Disclosure Vulnerability
-
Medium 5.5
Microsoft Windows VMSwitch Information Disclosure Vulnerability
Microsoft Windows VMSwitch Information Disclosure Vulnerability
-
Medium 6.8
Microsoft Windows VMSwitch Denial of Service Vulnerability
Microsoft Windows VMSwitch Denial of Service Vulnerability
-
Medium 6.5
Skype for Business and Lync Spoofing Vulnerability
Skype for Business and Lync Spoofing Vulnerability
-
Medium 5.3
Microsoft SharePoint Information Disclosure Vulnerability
Microsoft SharePoint Information Disclosure Vulnerability
-
Medium 5.4
Microsoft Exchange Server Spoofing Vulnerability
<p>A spoofing vulnerability exists in Microsoft Exchange Server which could result in an attack that would allow a malicious actor to impersonate the user.</p> <p>This update addresses this vulnerability.</p> <p>To prevent these types of attacks, Microsoft re…
-
Medium 5.5
PFX Encryption Security Feature Bypass Vulnerability
PFX Encryption Security Feature Bypass Vulnerability
-
Medium 6.1
Microsoft Dynamics Business Central Cross-site Scripting Vulnerability
Microsoft Dynamics Business Central Cross-site Scripting Vulnerability
-
Medium 6.5
.NET Core and Visual Studio Denial of Service Vulnerability
.NET Core and Visual Studio Denial of Service Vulnerability
-
Medium 6.4
MongoDB Java driver client-side field level encryption not verifying KMS host name
Specific versions of the Java driver that support client-side field level encryption (CSFLE) fail to perform correct host name verification on the KMS server’s certificate. This vulnerability in combination with a privileged network position active MITM attac…
-
Medium 6.4
MongoDB Node.js client side field level encryption library may not be validating KMS certificate
A specific version of the Node.js mongodb-client-encryption module does not perform correct validation of the KMS server’s certificate. This vulnerability in combination with a privileged network position active MITM attack could result in interception of tra…
-
Medium 4.9
Magento UPWARD-php Path traversal vulnerability via UPWARD Connector
Magento UPWARD-php version 1.1.4 (and earlier) is affected by a Path traversal vulnerability in Magento UPWARD Connector version 1.1.2 (and earlier) due to the upload feature. An attacker could potentially exploit this vulnerability to upload a malicious YAML…
-
Medium 6.7
Local privilege escalation to root due to insecure tmp file usage
A Insecure Temporary File vulnerability in the packaging of cyrus-sasl of openSUSE Factory allows local attackers to escalate to root. This issue affects: openSUSE Factory cyrus-sasl version 2.1.27-4.2 and prior versions.
-
Medium 6.1
Cross site scripting in comrak
An issue was discovered in the comrak crate before 0.9.1 for Rust. XSS can occur because the protection mechanism for data: and javascript: URIs is case-sensitive, allowing (for example) Data: to be used in an attack.