deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-23277
Published: 2021-04-13
Description: Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated eval injection vulnerability. The software does not neutralize code syntax from users before using in the dynamic evaluation call in loadUserFile function under scripts/libs/utils.js. Successful exploitation can allow attackers to control the input to the function and execute attacker controlled commands.
CVSS Score: 8.3 (HIGH)
CWE: CWE-95, CWE-94
References: https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/eaton-intelligent-power-manager-ipm-vulnerability-advisory.pdf; https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/eaton-intelligent-power-manager-ipm-vulnerability-advisory.pdf
CVE: CVE-2021-23278
Published: 2021-04-13
Description: Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to authenticated arbitrary file delete vulnerability induced due to improper input validation at server/maps_srv.js with action removeBackground and server/node_upgrade_srv.js with action removeFirmware. An attacker can send specially crafted packets to delete the files on the system where IPM software is installed.
CVSS Score: 8.7 (HIGH)
CWE: CWE-20
References: https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/eaton-intelligent-power-manager-ipm-vulnerability-advisory.pdf; https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/eaton-intelligent-power-manager-ipm-vulnerability-advisory.pdf
CVE: CVE-2021-23279
Published: 2021-04-13
Description: Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated arbitrary file delete vulnerability induced due to improper input validation in meta_driver_srv.js class with saveDriverData action using invalidated driverID. An attacker can send specially crafted packets to delete the files on the system where IPM software is installed.
CVSS Score: 8.0 (HIGH)
CWE: CWE-20, CWE-20
References: https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/eaton-intelligent-power-manager-ipm-vulnerability-advisory.pdf; https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/eaton-intelligent-power-manager-ipm-vulnerability-advisory.pdf
CVE: CVE-2021-23280
Published: 2021-04-13
Description: Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to authenticated arbitrary file upload vulnerability. IPM’s maps_srv.js allows an attacker to upload a malicious NodeJS file using uploadBackgroud action. An attacker can upload a malicious code or execute any command using a specially crafted packet to exploit the vulnerability.
CVSS Score: 8.0 (HIGH)
CWE: CWE-434, CWE-434
References: https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/eaton-intelligent-power-manager-ipm-vulnerability-advisory.pdf; https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/eaton-intelligent-power-manager-ipm-vulnerability-advisory.pdf
CVE: CVE-2021-23281
Published: 2021-04-13
Description: Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated remote code execution vulnerability. IPM software does not sanitize the date provided via coverterCheckList action in meta_driver_srv.js class. Attackers can send a specially crafted packet to make IPM connect to rouge SNMP server and execute attacker-controlled code.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-94, CWE-94
References: https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/eaton-intelligent-power-manager-ipm-vulnerability-advisory.pdf; https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/eaton-intelligent-power-manager-ipm-vulnerability-advisory.pdf
CVE: CVE-2021-27598
Published: 2021-04-13
Description: SAP NetWeaver AS JAVA (Customer Usage Provisioning Servlet), versions - 7.31, 7.40, 7.50, allows an attacker to read some statistical data like product version, traffic, timestamp etc. because of missing authorization check in the servlet.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284, CWE-862
References: https://launchpad.support.sap.com/#/notes/3027937; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=573801649; https://launchpad.support.sap.com/#/notes/3027937
CVE: CVE-2021-27600
Published: 2021-04-13
Description: SAP Manufacturing Execution (System Rules), versions - 15.1, 15.2, 15.3, 15.4, allows an authorized attacker to embed malicious code into HTTP parameter and send it to the server because SAP Manufacturing Execution (System Rules) tab does not sufficiently encode some parameters, resulting in Stored Cross-Site Scripting (XSS) vulnerability. The malicious code can be used for different purposes. e.g., information can be read, modified, and sent to the attacker. However, availability of the server cannot be impacted.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/3024414; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=573801649; https://launchpad.support.sap.com/#/notes/3024414
CVE: CVE-2021-27601
Published: 2021-04-13
Description: SAP NetWeaver AS Java (Applications based on HTMLB for Java) allows a basic-level authorized attacker to store a malicious file on the server. When a victim tries to open this file, it results in a Cross-Site Scripting (XSS) vulnerability and the attacker can read and modify data. However, the attacker does not have control over kind or degree.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/2963592; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=573801649; https://launchpad.support.sap.com/#/notes/2963592
CVE: CVE-2021-27602
Published: 2021-04-13
Description: SAP Commerce, versions - 1808, 1811, 1905, 2005, 2011, Backoffice application allows certain authorized users to create source rules which are translated to drools rule when published to certain modules within the application. An attacker with this authorization can inject malicious code in the source rules and perform remote code execution enabling them to compromise the confidentiality, integrity and availability of the application.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-94
References: https://launchpad.support.sap.com/#/notes/3040210; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=573801649; https://launchpad.support.sap.com/#/notes/3040210
CVE: CVE-2021-27603
Published: 2021-04-13
Description: An RFC enabled function module SPI_WAIT_MILLIS in SAP NetWeaver AS ABAP, versions - 731, 740, 750, allows to keep a work process busy for any length of time. An attacker could call this function module multiple times to block all work processes thereby causing Denial of Service and affecting the Availability of the SAP system.
CVSS Score: 6.5 (MEDIUM)
References: https://launchpad.support.sap.com/#/notes/3028729; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=573801649; https://launchpad.support.sap.com/#/notes/3028729
CVE: CVE-2021-27605
Published: 2021-04-13
Description: SAP's HCM Travel Management Fiori Apps V2, version - 608, does not perform proper authorization check, allowing an authenticated but unauthorized attacker to read personnel numbers of employees, resulting in escalation of privileges. However, the attacker can only read some information like last name, first name of the employees, so there is some loss of confidential information, Integrity and Availability are not impacted.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://launchpad.support.sap.com/#/notes/3025054; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=573801649; https://launchpad.support.sap.com/#/notes/3025054
CVE: CVE-2021-27609
Published: 2021-04-13
Description: SAP Focused RUN versions 200, 300, does not perform necessary authorization checks for an authenticated user, which allows a user to call the oData service and manipulate the activation for the SAP EarlyWatch Alert service data collection and sending to SAP without the intended authorization.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://launchpad.support.sap.com/#/notes/3030948; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=573801649; https://launchpad.support.sap.com/#/notes/3030948
CVE: CVE-2021-21399
Published: 2021-04-13
Description: Ampache is a web based audio/video streaming application and file manager. Versions prior to 4.4.1 allow unauthenticated access to Ampache using the subsonic API. To successfully make the attack you must use a username that is not part of the site to bypass the auth checks. For more details and workaround guidance see the referenced GitHub security advisory.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-284, CWE-287
References: https://github.com/ampache/ampache/security/advisories/GHSA-p9pm-j95j-5mjf; https://github.com/ampache/ampache/security/advisories/GHSA-p9pm-j95j-5mjf
CVE: CVE-2021-23372
Published: 2021-04-13
Description: All versions of package mongo-express are vulnerable to Denial of Service (DoS) when exporting an empty collection as CSV, due to an unhandled exception, leading to a crash.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-754
References: https://snyk.io/vuln/SNYK-JS-MONGOEXPRESS-1085403; https://snyk.io/vuln/SNYK-JS-MONGOEXPRESS-1085403
CVE: CVE-2021-26413
Published: 2021-04-13
Description: Windows Installer Spoofing Vulnerability
CVSS Score: 6.2 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26413; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26413
CVE: CVE-2021-26415
Published: 2021-04-13
Description: Windows Installer Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26415; https://www.zerodayinitiative.com/advisories/ZDI-21-409/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26415
CVE: CVE-2021-26416
Published: 2021-04-13
Description: Windows Hyper-V Denial of Service Vulnerability
CVSS Score: 7.7 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26416; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26416
CVE: CVE-2021-26417
Published: 2021-04-13
Description: Windows Overlay Filter Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26417; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26417
CVE: CVE-2021-27064
Published: 2021-04-13
Description: Visual Studio Installer Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27064; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27064
CVE: CVE-2021-27067
Published: 2021-04-13
Description: Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27067; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27067
CVE: CVE-2021-27072
Published: 2021-04-13
Description: Win32k Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27072; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27072
CVE: CVE-2021-27079
Published: 2021-04-13
Description: Windows Media Photo Codec Information Disclosure Vulnerability
CVSS Score: 5.7 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27079; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27079
CVE: CVE-2021-27086
Published: 2021-04-13
Description: Windows Services and Controller App Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-863
References: http://packetstormsecurity.com/files/162157/Microsoft-Windows-SCM-Remote-Access-Check-Limit-Bypass-Privilege-Escalation.html; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27086; http://packetstormsecurity.com/files/162157/Microsoft-Windows-SCM-Remote-Access-Check-Limit-Bypass-Privilege-Escalation.html
CVE: CVE-2021-27088
Published: 2021-04-13
Description: Windows Event Tracing Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27088; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27088
CVE: CVE-2021-27089
Published: 2021-04-13
Description: Microsoft Internet Messaging API Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27089; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27089
CVE: CVE-2021-27090
Published: 2021-04-13
Description: Windows Secure Kernel Mode Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27090; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27090
CVE: CVE-2021-27091
Published: 2021-04-13
Description: RPC Endpoint Mapper Service Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27091; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27091
CVE: CVE-2021-27092
Published: 2021-04-13
Description: Azure AD Web Sign-in Security Feature Bypass Vulnerability
CVSS Score: 6.8 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27092; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27092
CVE: CVE-2021-27093
Published: 2021-04-13
Description: Windows Kernel Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27093; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27093
CVE: CVE-2021-27094
Published: 2021-04-13
Description: Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability
CVSS Score: 4.4 (MEDIUM)
References: https://bi-zone.medium.com/measured-boot-and-malware-signatures-exploring-two-vulnerabilities-found-in-the-windows-loader-5a4fcc3c4b66; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27094; https://bi-zone.medium.com/measured-boot-and-malware-signatures-exploring-two-vulnerabilities-found-in-the-windows-loader-5a4fcc3c4b66
CVE: CVE-2021-27095
Published: 2021-04-13
Description: Windows Media Video Decoder Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27095; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27095
CVE: CVE-2021-27096
Published: 2021-04-13
Description: NTFS Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27096; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27096
CVE: CVE-2021-28309
Published: 2021-04-13
Description: Windows Kernel Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28309; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28309
CVE: CVE-2021-28310
Published: 2021-04-13
Description: Win32k Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28310; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28310; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-28310
CVE: CVE-2021-28311
Published: 2021-04-13
Description: Windows Application Compatibility Cache Denial of Service Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28311; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28311
CVE: CVE-2021-28312
Published: 2021-04-13
Description: Windows NTFS Denial of Service Vulnerability
CVSS Score: 3.3 (LOW)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28312; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28312
CVE: CVE-2021-28313
Published: 2021-04-13
Description: Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: http://packetstormsecurity.com/files/162251/Microsoft-DiagHub-Privilege-Escalation.html; http://seclists.org/fulldisclosure/2021/Apr/40; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28313
CVE: CVE-2021-28314
Published: 2021-04-13
Description: Windows Hyper-V Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28314; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28314
CVE: CVE-2021-28315
Published: 2021-04-13
Description: Windows Media Video Decoder Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28315; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28315
CVE: CVE-2021-28316
Published: 2021-04-13
Description: Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability
CVSS Score: 4.2 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28316; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28316
CVE: CVE-2021-28317
Published: 2021-04-13
Description: Microsoft Windows Codecs Library Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28317; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28317
CVE: CVE-2021-28318
Published: 2021-04-13
Description: Windows GDI+ Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28318; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28318
CVE: CVE-2021-28319
Published: 2021-04-13
Description: Windows TCP/IP Driver Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28319; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28319
CVE: CVE-2021-28320
Published: 2021-04-13
Description: Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28320; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28320
CVE: CVE-2021-28321
Published: 2021-04-13
Description: Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: http://packetstormsecurity.com/files/162251/Microsoft-DiagHub-Privilege-Escalation.html; http://seclists.org/fulldisclosure/2021/Apr/40; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28321
CVE: CVE-2021-28322
Published: 2021-04-13
Description: Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: http://packetstormsecurity.com/files/162251/Microsoft-DiagHub-Privilege-Escalation.html; http://seclists.org/fulldisclosure/2021/Apr/40; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28322
CVE: CVE-2021-28323
Published: 2021-04-13
Description: Windows DNS Information Disclosure Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-178
References: http://packetstormsecurity.com/files/162251/Microsoft-DiagHub-Privilege-Escalation.html; http://seclists.org/fulldisclosure/2021/Apr/40; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28323
CVE: CVE-2021-28324
Published: 2021-04-13
Description: Windows SMB Information Disclosure Vulnerability
CVSS Score: 7.5 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28324; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28324
CVE: CVE-2021-28325
Published: 2021-04-13
Description: Windows SMB Information Disclosure Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28325; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28325
CVE: CVE-2021-28326
Published: 2021-04-13
Description: Windows AppX Deployment Server Denial of Service Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28326; https://www.zerodayinitiative.com/advisories/ZDI-21-424/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28326
CVE: CVE-2021-28327
Published: 2021-04-13
Description: Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28327; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28327
CVE: CVE-2021-28328
Published: 2021-04-13
Description: Windows DNS Information Disclosure Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28328; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28328
CVE: CVE-2021-28329
Published: 2021-04-13
Description: Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28329; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28329
CVE: CVE-2021-28330
Published: 2021-04-13
Description: Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28330; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28330
CVE: CVE-2021-28331
Published: 2021-04-13
Description: Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28331; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28331
CVE: CVE-2021-28332
Published: 2021-04-13
Description: Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28332; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28332
CVE: CVE-2021-28333
Published: 2021-04-13
Description: Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28333; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28333
CVE: CVE-2021-28334
Published: 2021-04-13
Description: Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28334; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28334