deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-37204
Published: 2022-02-09
Description: A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V21.9), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions >= V21.9 < V21.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 Ready4Linux (All versions), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions < V4.5.0), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions >= V4.5.0 < V4.5.2), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions < V2.9.2), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions >= V2.9.2 < V2.9.4), SIMATIC S7-1500 Software Controller (All versions < V21.9), SIMATIC S7-1500 Software Controller (All versions >= V21.9 < V21.9.4), SIMATIC S7-PLCSIM Advanced (All versions < V4.0), SIMATIC S7-PLCSIM Advanced (All versions >= V4.0 < V4.0 SP1), SIPLUS TIM 1531 IRC (All versions < V2.3.6), TIM 1531 IRC (All versions < V2.3.6). An unauthenticated attacker could cause a denial-of-service condition in a PLC when sending specially prepared packet over port 102/tcp. A restart of the affected device is needed to restore normal operations.
CVSS Score: 7.5 (HIGH)
CWE: CWE-672
References: https://cert-portal.siemens.com/productcert/pdf/ssa-838121.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-838121.pdf
CVE: CVE-2021-37205
Published: 2022-02-09
Description: A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions >= V21.9 < V21.9.4), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions >= V4.5.0 < V4.5.2), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions >= V2.9.2 < V2.9.4), SIMATIC S7-1500 Software Controller (All versions >= V21.9 < V21.9.4), SIMATIC S7-PLCSIM Advanced (All versions >= V4.0 < V4.0 SP1), SIPLUS TIM 1531 IRC (All versions < V2.3.6), TIM 1531 IRC (All versions < V2.3.6). An unauthenticated attacker could cause a denial-of-service condition in a PLC when sending specially prepared packets over port 102/tcp. A restart of the affected device is needed to restore normal operations.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401, CWE-401
References: https://cert-portal.siemens.com/productcert/pdf/ssa-838121.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-838121.pdf
CVE: CVE-2021-37853
Published: 2022-02-09
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2021. Notes: none
CVE: CVE-2021-37854
Published: 2022-02-09
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2021. Notes: none
CVE: CVE-2021-37855
Published: 2022-02-09
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2021. Notes: none
CVE: CVE-2021-37856
Published: 2022-02-09
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2021. Notes: none
CVE: CVE-2021-37857
Published: 2022-02-09
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2021. Notes: none
CVE: CVE-2021-37858
Published: 2022-02-09
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2021. Notes: none
CVE: CVE-2021-40360
Published: 2022-02-09
Description: A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP1), SIMATIC WinCC V15 and earlier (All versions < V15 SP1 Update 7), SIMATIC WinCC V16 (All versions < V16 Update 5), SIMATIC WinCC V17 (All versions < V17 Update 2), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Update 19), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 6). The password hash of a local user account in the remote server could be granted via public API to a user on the affected system. An authenticated attacker could brute force the password hash and use it to login to the server.
CVSS Score: 8.8 (HIGH)
CWE: CWE-200, CWE-522
References: https://cert-portal.siemens.com/productcert/pdf/ssa-914168.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-914168.pdf
CVE: CVE-2021-40363
Published: 2022-02-09
Description: A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP1), SIMATIC WinCC V15 and earlier (All versions < V15 SP1 Update 7), SIMATIC WinCC V16 (All versions < V16 Update 5), SIMATIC WinCC V17 (All versions < V17 Update 2), SIMATIC WinCC V17 (All versions <= V17 Update 4), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Update 19), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 6). The affected component stores the credentials of a local system account in a potentially publicly accessible project file using an outdated cipher algorithm. An attacker may use this to brute force the credentials and take over the system.
CVSS Score: 7.8 (HIGH)
CWE: CWE-538, CWE-312
References: https://cert-portal.siemens.com/productcert/pdf/ssa-914168.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-914168.pdf
CVE: CVE-2021-44000
Published: 2022-02-09
Description: A vulnerability has been identified in JT2Go (All versions < V13.2.0.7), Solid Edge SE2021 (All versions < SE2021MP9), Solid Edge SE2022 (All versions < SE2022MP1), Teamcenter Visualization V13.1 (All versions < V13.1.0.9), Teamcenter Visualization V13.2 (All versions < V13.2.0.7), Teamcenter Visualization V13.3 (All versions < V13.3.0.1). The plmxmlAdapterSE70.dll contains an out of bounds write past the fixed-length heap-based buffer while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-15053)
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-301589.pdf; https://www.zerodayinitiative.com/advisories/ZDI-22-335/; https://cert-portal.siemens.com/productcert/pdf/ssa-301589.pdf
CVE: CVE-2021-44016
Published: 2022-02-09
Description: A vulnerability has been identified in JT2Go (All versions < V13.2.0.7), Solid Edge SE2021 (All versions < SE2021MP9), Solid Edge SE2022 (All versions < SE2022MP1), Teamcenter Visualization V13.1 (All versions < V13.1.0.9), Teamcenter Visualization V13.2 (All versions < V13.2.0.7), Teamcenter Visualization V13.3 (All versions < V13.3.0.1). The plmxmlAdapterSE70.dll library is vulnerable to memory corruption condition while parsing specially crafted PAR files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-15110)
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-301589.pdf; https://www.zerodayinitiative.com/advisories/ZDI-22-338/; https://cert-portal.siemens.com/productcert/pdf/ssa-301589.pdf
CVE: CVE-2021-44018
Published: 2022-02-09
Description: A vulnerability has been identified in JT2Go (All versions < V13.2.0.7), Solid Edge SE2021 (All versions < SE2021MP9), Solid Edge SE2022 (All versions < SE2022MP1), Teamcenter Visualization V13.1 (All versions < V13.1.0.9), Teamcenter Visualization V13.2 (All versions < V13.2.0.7), Teamcenter Visualization V13.3 (All versions < V13.3.0.1). The plmxmlAdapterSE70.dll library is vulnerable to memory corruption condition while parsing specially crafted PAR files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-15112)
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-119
References: https://cert-portal.siemens.com/productcert/pdf/ssa-301589.pdf; https://www.zerodayinitiative.com/advisories/ZDI-22-340/; https://cert-portal.siemens.com/productcert/pdf/ssa-301589.pdf
CVE: CVE-2021-44911
Published: 2022-02-09
Description: XE before 1.11.6 is vulnerable to Unrestricted file upload via modules/menu/menu.admin.controller.php. When uploading the Mouse over button and When selected button, there is no restriction on the file suffix, which leads to any file uploading to the files directory. Since .htaccess only restricts the PHP type, uploading HTML-type files leads to stored XSS vulnerabilities.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/xpressengine/xe-core/issues/2434; https://github.com/xpressengine/xe-core/issues/2434
CVE: CVE-2021-44912
Published: 2022-02-09
Description: In XE 1.116, when uploading the Normal button, there is no restriction on the file suffix, which leads to any file uploading to the files directory. Since .htaccess only restricts the PHP type, uploading HTML-type files leads to stored XSS vulnerabilities. If the .htaccess configuration is improper, for example before the XE 1.11.2 version, you can upload the PHP type file to GETSHELL.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/xpressengine/xe-core/issues/2433; https://github.com/xpressengine/xe-core/issues/2433
CVE: CVE-2021-45106
Published: 2022-02-09
Description: A vulnerability has been identified in SICAM TOOLBOX II (All versions). Affected applications use a circumventable access control within a database service. This could allow an attacker to access the database.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-798, CWE-798
References: https://cert-portal.siemens.com/productcert/pdf/ssa-669737.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-669737.pdf
CVE: CVE-2021-46151
Published: 2022-02-09
Description: A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). Affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted NEU files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-14754, ZDI-CAN-15082)
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-609880.pdf; https://www.zerodayinitiative.com/advisories/ZDI-22-291/; https://www.zerodayinitiative.com/advisories/ZDI-22-292/
CVE: CVE-2021-46152
Published: 2022-02-09
Description: A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). Affected application contains a type confusion vulnerability while parsing NEU files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-14643, ZDI-CAN-14644, ZDI-CAN-14755, ZDI-CAN-15183)
CVSS Score: 7.8 (HIGH)
CWE: CWE-843, CWE-843
References: https://cert-portal.siemens.com/productcert/pdf/ssa-609880.pdf; https://www.zerodayinitiative.com/advisories/ZDI-22-293/; https://www.zerodayinitiative.com/advisories/ZDI-22-294/
CVE: CVE-2021-46153
Published: 2022-02-09
Description: A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). Affected application contains a memory corruption vulnerability while parsing NEU files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-14645, ZDI-CAN-15305, ZDI-CAN-15589, ZDI-CAN-15599)
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-609880.pdf; https://www.zerodayinitiative.com/advisories/ZDI-22-297/; https://www.zerodayinitiative.com/advisories/ZDI-22-298/
CVE: CVE-2021-46154
Published: 2022-02-09
Description: A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). Affected application contains a stack based buffer overflow vulnerability while parsing NEU files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-14646, ZDI-CAN-14679, ZDI-CAN-15084, ZDI-CAN-15304)
CVSS Score: 7.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-609880.pdf; https://www.zerodayinitiative.com/advisories/ZDI-22-301/; https://www.zerodayinitiative.com/advisories/ZDI-22-302/
CVE: CVE-2021-46155
Published: 2022-02-09
Description: A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). Affected application contains a stack based buffer overflow vulnerability while parsing NEU files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-14683, ZDI-CAN-15283, ZDI-CAN-15303, ZDI-CAN-15593)
CVSS Score: 7.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-609880.pdf; https://www.zerodayinitiative.com/advisories/ZDI-22-305/; https://www.zerodayinitiative.com/advisories/ZDI-22-306/
CVE: CVE-2021-46156
Published: 2022-02-09
Description: A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). Affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted NEU files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-14684)
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-609880.pdf; https://www.zerodayinitiative.com/advisories/ZDI-22-309/; https://cert-portal.siemens.com/productcert/pdf/ssa-609880.pdf
CVE: CVE-2021-46157
Published: 2022-02-09
Description: A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). Affected application contains a memory corruption vulnerability while parsing NEU files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-14757)
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-609880.pdf; https://www.zerodayinitiative.com/advisories/ZDI-22-310/; https://cert-portal.siemens.com/productcert/pdf/ssa-609880.pdf
CVE: CVE-2021-46158
Published: 2022-02-09
Description: A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). Affected application contains a stack based buffer overflow vulnerability while parsing NEU files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-15085, ZDI-CAN-15289, ZDI-CAN-15602)
CVSS Score: 7.8 (HIGH)
CWE: CWE-121, CWE-1284
References: https://cert-portal.siemens.com/productcert/pdf/ssa-609880.pdf; https://www.zerodayinitiative.com/advisories/ZDI-22-311/; https://www.zerodayinitiative.com/advisories/ZDI-22-312/
CVE: CVE-2021-46159
Published: 2022-02-09
Description: A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). Affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted NEU files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-15050)
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-609880.pdf; https://www.zerodayinitiative.com/advisories/ZDI-22-314/; https://cert-portal.siemens.com/productcert/pdf/ssa-609880.pdf
CVE: CVE-2021-46160
Published: 2022-02-09
Description: A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). Affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted NEU files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-15286)
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-609880.pdf; https://www.zerodayinitiative.com/advisories/ZDI-22-315/; https://cert-portal.siemens.com/productcert/pdf/ssa-609880.pdf
CVE: CVE-2021-46161
Published: 2022-02-09
Description: A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). Affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted NEU files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-15302)
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-609880.pdf; https://www.zerodayinitiative.com/advisories/ZDI-22-316/; https://cert-portal.siemens.com/productcert/pdf/ssa-609880.pdf
CVE: CVE-2022-23102
Published: 2022-02-09
Description: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0). Affected products contain an open redirect vulnerability. An attacker could trick a valid authenticated user to the device into clicking a malicious link there by leading to phishing attacks.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601, CWE-601
References: http://packetstormsecurity.com/files/165966/SIEMENS-SINEMA-Remote-Connect-1.0-SP3-HF1-Open-Redirection.html; http://seclists.org/fulldisclosure/2022/Feb/20; https://cert-portal.siemens.com/productcert/pdf/ssa-654775.pdf
CVE: CVE-2022-23312
Published: 2022-02-09
Description: A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP9 Security Patch 1). The integrated web application "Online Help" in affected product contains a Cross-Site Scripting (XSS) vulnerability that could be exploited if unsuspecting users are tricked into accessing a malicious link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://cert-portal.siemens.com/productcert/pdf/ssa-831168.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-831168.pdf
CVE: CVE-2021-41441
Published: 2022-02-09
Description: A DoS attack in the web application of D-Link DIR-X1860 before v1.10WWB09_Beta allows a remote unauthenticated attacker to reboot the router via sending a specially crafted URL to an authenticated victim. The authenticated victim need to visit this URL, for the router to reboot.
CVSS Score: 7.4 (HIGH)
CWE: CWE-404
References: http://d-link.com; http://dir-x1860.com; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10283
CVE: CVE-2022-21844
Published: 2022-02-09
Description: HEVC Video Extensions Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21844; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21844
CVE: CVE-2022-21926
Published: 2022-02-09
Description: HEVC Video Extensions Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21926; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21926
CVE: CVE-2022-21927
Published: 2022-02-09
Description: HEVC Video Extensions Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21927; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21927
CVE: CVE-2022-21957
Published: 2022-02-09
Description: Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
CVSS Score: 7.2 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21957; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21957
CVE: CVE-2022-21965
Published: 2022-02-09
Description: Microsoft Teams Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21965; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21965
CVE: CVE-2022-21968
Published: 2022-02-09
Description: Microsoft SharePoint Server Security Feature Bypass Vulnerability
CVSS Score: 4.3 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21968; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21968
CVE: CVE-2022-21971
Published: 2022-02-09
Description: Windows Runtime Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-824, CWE-824
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21971; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21971; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-21971
CVE: CVE-2022-21974
Published: 2022-02-09
Description: Roaming Security Rights Management Services Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21974; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21974
CVE: CVE-2022-21981
Published: 2022-02-09
Description: Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21981; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21981
CVE: CVE-2022-21984
Published: 2022-02-09
Description: Windows DNS Server Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21984; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21984
CVE: CVE-2022-21985
Published: 2022-02-09
Description: Windows Remote Access Connection Manager Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21985; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21985
CVE: CVE-2022-21986
Published: 2022-02-09
Description: .NET Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21986; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21986
CVE: CVE-2022-21987
Published: 2022-02-09
Description: Microsoft SharePoint Server Spoofing Vulnerability
CVSS Score: 8.0 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21987; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21987
CVE: CVE-2022-21988
Published: 2022-02-09
Description: Microsoft Office Visio Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21988; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21988
CVE: CVE-2022-21989
Published: 2022-02-09
Description: Windows Kernel Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21989; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21989
CVE: CVE-2022-21991
Published: 2022-02-09
Description: Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability
CVSS Score: 8.1 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21991; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21991
CVE: CVE-2022-21992
Published: 2022-02-09
Description: Windows Mobile Device Management Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21992; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21992