deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-27379
Published: 2021-07-14
Description: Cross Site Request Forgery (CSRF) vulnerability in Booking Core - Ultimate Booking System Booking Core 1.7.0 . The CSRF token is not being validated when the request is sent as a GET method. This results in an unauthorized change in the user's email ID, which can later be used to reset the password. The new password will be sent to a modified email ID.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://medium.com/%40singh.satyam158/vulnerabilities-in-booking-core-1-7-d85d1dfae44e; https://medium.com/%40singh.satyam158/vulnerabilities-in-booking-core-1-7-d85d1dfae44e
CVE: CVE-2021-22778
Published: 2021-07-14
Description: Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Process Expert (all versions, including all versions of EcoStruxure Hybrid DCS), and SCADAPack RemoteConnect for x70, all versions, that could cause protected derived function blocks to be read or modified by unauthorized users when accessing a project file.
CVSS Score: 7.1 (HIGH)
CWE: CWE-522
References: http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01; http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01
CVE: CVE-2021-22779
Published: 2021-07-14
Description: Authentication Bypass by Spoofing vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Control Expert V15.0 SP1, EcoStruxure Process Expert (all versions, including all versions of EcoStruxure Hybrid DCS), SCADAPack RemoteConnect for x70 (all versions), Modicon M580 CPU (all versions - part numbers BMEP* and BMEH*), Modicon M340 CPU (all versions - part numbers BMXP34*), that could cause unauthorized access in read and write mode to the controller by spoofing the Modbus communication between the engineering software and the controller.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-290
References: http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01; http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01
CVE: CVE-2021-22780
Published: 2021-07-14
Description: Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Process Expert (all versions, including all versions of EcoStruxure Hybrid DCS), and SCADAPack RemoteConnect for x70, all versions, that could cause unauthorized access to a project file protected by a password when this file is shared with untrusted sources. An attacker may bypass the password protection and be able to view and modify a project file.
CVSS Score: 7.1 (HIGH)
CWE: CWE-522
References: http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01; http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01
CVE: CVE-2021-22781
Published: 2021-07-14
Description: Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Process Expert (all versions, including all versions of EcoStruxure Hybrid DCS), and SCADAPack RemoteConnect for x70, all versions, that could cause a leak of SMTP credential used for mailbox authentication when an attacker can access a project file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-522, CWE-522
References: http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01; http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01
CVE: CVE-2021-22782
Published: 2021-07-14
Description: Missing Encryption of Sensitive Data vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Process Expert (all versions, including all versions of EcoStruxure Hybrid DCS), and SCADAPack RemoteConnect for x70, all versions, that could cause an information leak allowing disclosure of network and process information, credentials or intellectual property when an attacker can access a project file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-311
References: http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01; http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01
CVE: CVE-2021-36716
Published: 2021-07-14
Description: A ReDoS (regular expression denial of service) flaw was found in the Segment is-email package before 1.0.1 for Node.js. An attacker that is able to provide crafted input to the isEmail(input) function may cause an application to consume an excessive amount of CPU.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://github.com/segmentio/is-email/releases; https://segment.com/docs/release_notes/2021-07-13-cve-2021-36716/; https://github.com/segmentio/is-email/releases
CVE: CVE-2020-18144
Published: 2021-07-14
Description: SQL Injection Vulnerability in ECTouch v2 via the integral_min parameter in index.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/yundiao/ectouch/issues/1; https://github.com/yundiao/ectouch/issues/1
CVE: CVE-2020-29146
Published: 2021-07-14
Description: A cross site scripting (XSS) vulnerability in index.php of Wayang-CMS v1.0 allows attackers to execute arbitrary web scripts or HTML via a constructed payload created by adding the X-Forwarded-For field to the header.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://lowliness9.me/post/iDACsrRWO/; https://lowliness9.me/post/iDACsrRWO/
CVE: CVE-2020-29147
Published: 2021-07-14
Description: A SQL injection vulnerability in wy_controlls/wy_side_visitor.php of Wayang-CMS v1.0 allows attackers to obtain sensitive database information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://lowliness9.me/post/Ma16ZrNDN/; https://lowliness9.me/post/Ma16ZrNDN/
CVE: CVE-2021-23407
Published: 2021-07-14
Description: This affects the package elFinder.Net.Core from 0 and before 1.2.4. The user-controlled file name is not properly sanitized before it is used to create a file system path.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/trannamtrung1st/elFinder.Net.Core/commit/5498c8a86b76ef089cfbd7ef8be014b61fa11c73; https://github.com/trannamtrung1st/elFinder.Net.Core/releases/tag/all-1.2.4; https://snyk.io/vuln/SNYK-DOTNET-ELFINDERNETCORE-1315152
CVE: CVE-2021-31859
Published: 2021-07-14
Description: Incorrect privileges in the MU55 FlexiSpooler service in YSoft SafeQ 6 6.0.55 allows local user privilege escalation by overwriting the executable file via an alternative data stream.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://www.ysoft.com/en; https://www.ysoft.com/en/legal/ysoft-safeq-flexispooler; https://www.ysoft.com/en
CVE: CVE-2021-36740
Published: 2021-07-14
Description: Varnish Cache, with HTTP/2 enabled, allows request smuggling and VCL authorization bypass via a large Content-Length header for a POST request. This affects Varnish Enterprise 6.0.x before 6.0.8r3, and Varnish Cache 5.x and 6.x before 6.5.2, 6.6.x before 6.6.1, and 6.0 LTS before 6.0.8.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-444
References: https://docs.varnish-software.com/security/VSV00007/; https://github.com/varnishcache/varnish-cache/commit/82b0a629f60136e76112c6f2c6372cce77b683be; https://github.com/varnishcache/varnish-cache/commit/9be22198e258d0e7a5c41f[PII_REDACTED]a29405cf
CVE: CVE-2020-18145
Published: 2021-07-14
Description: Cross Site Scripting (XSS) vulnerability in umeditor v1.2.3 via /public/common/umeditor/php/getcontent.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/fex-team/umeditor/issues/624; https://github.com/fex-team/umeditor/issues/624
CVE: CVE-2021-31183
Published: 2021-07-14
Description: Windows TCP/IP Driver Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31183; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31183
CVE: CVE-2021-31196
Published: 2021-07-14
Description: Microsoft Exchange Server Remote Code Execution Vulnerability
CVSS Score: 7.2 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31196; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31196; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-31196
CVE: CVE-2021-31206
Published: 2021-07-14
Description: Microsoft Exchange Server Remote Code Execution Vulnerability
CVSS Score: 7.6 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31206; https://www.zerodayinitiative.com/advisories/ZDI-21-826/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31206
CVE: CVE-2021-31947
Published: 2021-07-14
Description: HEVC Video Extensions Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31947; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31947
CVE: CVE-2021-31961
Published: 2021-07-14
Description: Windows InstallService Elevation of Privilege Vulnerability
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-269
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31961; https://www.zerodayinitiative.com/advisories/ZDI-21-818/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31961
CVE: CVE-2021-31979
Published: 2021-07-14
Description: Windows Kernel Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-119
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31979; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31979; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-31979
CVE: CVE-2021-31984
Published: 2021-07-14
Description: Power BI Remote Code Execution Vulnerability
CVSS Score: 7.6 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31984; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31984
CVE: CVE-2021-33740
Published: 2021-07-14
Description: Windows Media Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33740; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33740
CVE: CVE-2021-33743
Published: 2021-07-14
Description: Windows Projected File System Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33743; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33743
CVE: CVE-2021-33744
Published: 2021-07-14
Description: Windows Secure Kernel Mode Security Feature Bypass Vulnerability
CVSS Score: 5.3 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33744; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33744
CVE: CVE-2021-33745
Published: 2021-07-14
Description: Windows DNS Server Denial of Service Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33745; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33745
CVE: CVE-2021-33746
Published: 2021-07-14
Description: Windows DNS Server Remote Code Execution Vulnerability
CVSS Score: 8.0 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33746; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33746
CVE: CVE-2021-33749
Published: 2021-07-14
Description: Windows DNS Snap-in Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33749; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33749
CVE: CVE-2021-33750
Published: 2021-07-14
Description: Windows DNS Snap-in Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33750; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33750
CVE: CVE-2021-33751
Published: 2021-07-14
Description: Storage Spaces Controller Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
CWE: CWE-269
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33751; https://www.zerodayinitiative.com/advisories/ZDI-21-824/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33751
CVE: CVE-2021-33752
Published: 2021-07-14
Description: Windows DNS Snap-in Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33752; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33752
CVE: CVE-2021-33753
Published: 2021-07-14
Description: Microsoft Bing Search Spoofing Vulnerability
CVSS Score: 4.7 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33753; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33753
CVE: CVE-2021-33754
Published: 2021-07-14
Description: Windows DNS Server Remote Code Execution Vulnerability
CVSS Score: 8.0 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33754; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33754
CVE: CVE-2021-33755
Published: 2021-07-14
Description: Windows Hyper-V Denial of Service Vulnerability
CVSS Score: 6.3 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33755; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33755
CVE: CVE-2021-33756
Published: 2021-07-14
Description: Windows DNS Snap-in Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33756; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33756
CVE: CVE-2021-33757
Published: 2021-07-14
Description: Windows Security Account Manager Remote Protocol Security Feature Bypass Vulnerability
CVSS Score: 5.3 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33757; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33757
CVE: CVE-2021-33758
Published: 2021-07-14
Description: Windows Hyper-V Denial of Service Vulnerability
CVSS Score: 7.7 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33758; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33758
CVE: CVE-2021-33759
Published: 2021-07-14
Description: Windows Desktop Bridge Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33759; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33759
CVE: CVE-2021-33760
Published: 2021-07-14
Description: Media Foundation Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33760; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33760
CVE: CVE-2021-33761
Published: 2021-07-14
Description: Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33761; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33761
CVE: CVE-2021-33763
Published: 2021-07-14
Description: Windows Remote Access Connection Manager Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33763; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33763
CVE: CVE-2021-33764
Published: 2021-07-14
Description: Windows Key Distribution Center Information Disclosure Vulnerability
CVSS Score: 5.9 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33764; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33764
CVE: CVE-2021-33765
Published: 2021-07-14
Description: Windows Installer Spoofing Vulnerability
CVSS Score: 6.2 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33765; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33765
CVE: CVE-2021-33766
Published: 2021-07-14
Description: Microsoft Exchange Server Information Disclosure Vulnerability
CVSS Score: 7.3 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33766; https://www.zerodayinitiative.com/advisories/ZDI-21-798/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33766
CVE: CVE-2021-33767
Published: 2021-07-14
Description: Open Enclave SDK Elevation of Privilege Vulnerability
CVSS Score: 8.2 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33767; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33767
CVE: CVE-2021-33768
Published: 2021-07-14
Description: Microsoft Exchange Server Elevation of Privilege Vulnerability
CVSS Score: 8.0 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33768; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33768
CVE: CVE-2021-33771
Published: 2021-07-14
Description: Windows Kernel Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33771; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33771; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-33771
CVE: CVE-2021-33772
Published: 2021-07-14
Description: Windows TCP/IP Driver Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33772; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33772
CVE: CVE-2021-33773
Published: 2021-07-14
Description: Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33773; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33773
CVE: CVE-2021-33774
Published: 2021-07-14
Description: Windows Event Tracing Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33774; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33774
CVE: CVE-2021-33775
Published: 2021-07-14
Description: HEVC Video Extensions Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33775; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33775
CVE: CVE-2021-33776
Published: 2021-07-14
Description: HEVC Video Extensions Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33776; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33776
CVE: CVE-2021-33777
Published: 2021-07-14
Description: HEVC Video Extensions Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33777; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33777
CVE: CVE-2021-33778
Published: 2021-07-14
Description: HEVC Video Extensions Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33778; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33778
CVE: CVE-2021-33779
Published: 2021-07-14
Description: Windows AD FS Security Feature Bypass Vulnerability
CVSS Score: 8.1 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33779; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33779
CVE: CVE-2021-33780
Published: 2021-07-14
Description: Windows DNS Server Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33780; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33780
CVE: CVE-2021-33781
Published: 2021-07-14
Description: Azure AD Security Feature Bypass Vulnerability
CVSS Score: 8.1 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33781; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33781
CVE: CVE-2021-33782
Published: 2021-07-14
Description: Windows Authenticode Spoofing Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33782; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33782
CVE: CVE-2021-33783
Published: 2021-07-14
Description: Windows SMB Information Disclosure Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33783; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33783
CVE: CVE-2021-33784
Published: 2021-07-14
Description: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33784; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33784
CVE: CVE-2021-33785
Published: 2021-07-14
Description: Windows AF_UNIX Socket Provider Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33785; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33785
CVE: CVE-2021-33786
Published: 2021-07-14
Description: Windows LSA Security Feature Bypass Vulnerability
CVSS Score: 8.1 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33786; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33786
CVE: CVE-2021-33788
Published: 2021-07-14
Description: Windows LSA Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33788; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33788
CVE: CVE-2021-34468
Published: 2021-07-14
Description: Microsoft SharePoint Server Remote Code Execution Vulnerability
CVSS Score: 7.1 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34468; https://www.zerodayinitiative.com/advisories/ZDI-21-829/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34468
CVE: CVE-2021-34469
Published: 2021-07-14
Description: Microsoft Office Security Feature Bypass Vulnerability
CVSS Score: 8.2 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34469; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34469