Поиск уязвимостей

In Storage Performance Development Kit (SPDK) before 19.07, a user of a vhost can cause a crash if the target is sent invalid input.

Microsoft SharePoint Server Information Disclosure Vulnerability

Skype for Business Server Spoofing Vulnerability

Remote Desktop Protocol Information Disclosure Vulnerability

Microsoft Defender Security Feature Bypass Vulnerability

Microsoft Authentication Library for Android Information Disclosure Vulnerability

Visual Studio Live Share Spoofing Vulnerability

VBScript Remote Code Execution Vulnerability

Windows OLE Remote Code Execution Vulnerability

In Ansible, all Ansible Engine versions up to ansible-engine 2.8.5, ansible-engine 2.7.13, ansible-engine 2.6.19, were logging at the DEBUG level which lead to a disclosure of credentials if a plugin used a library that logged credentials at the DEBUG level. This flaw does not affect Ansible modules, as those are executed in a separate process.

A flaw was found in Fedora versions of krb5 from 1.16.1 to including 1.17.x in the way a Kerberos client could crash the KDC by sending one of the RFC 4556 "enctypes". A remote unauthenticated user could use this flaw to crash the KDC.

Windows Elevation of Privilege Vulnerability

A vulnerability was found in dnsmasq before version 2.81 where the memory leak allows remote attackers to cause a denial of service (memory consumption) via vectors involving DHCP response creation.

Windows Media Player Information Disclosure Vulnerability

A flaw was found in all dpdk version 17.x.x before 17.11.8, 16.x.x before 16.11.10, 18.x.x before 18.11.4 and 19.x.x before 19.08.1 where a malicious master, or a container with access to vhost_user socket, can send specially crafted VRING_SET_NUM messages, resulting in a memory leak including file descriptors. This flaw could lead to a denial of service condition.

Windows Media Player Information Disclosure Vulnerability

net/url in Go before 1.11.13 and 1.12.x before 1.12.8 mishandles malformed hosts in URLs, leading to an authorization bypass in some applications. This is related to a Host field with a suffix appearing in neither Hostname() nor Port(), and is related to a non-numeric port number. For example, an attacker can compose a crafted javascript:// URL that results in a hostname of google.com.

Windows COM Server Elevation of Privilege Vulnerability

Windows Printer Service Elevation of Privilege Vulnerability

Windows Elevation of Privilege Vulnerability