Security
Headlines
HeadlinesLatestCVEs

Tag

#microsoft

CVE-2021-43889

Microsoft Defender for IoT Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-41365, CVE-2021-42310, CVE-2021-42311, CVE-2021-42313, CVE-2021-42314, CVE-2021-42315, CVE-2021-43882.

CVE
#vulnerability#microsoft
CVE-2021-43899

Microsoft 4K Wireless Display Adapter Remote Code Execution Vulnerability

CVE-2021-43905

Microsoft Office app Remote Code Execution Vulnerability

CVE-2021-43896

Microsoft PowerShell Spoofing Vulnerability

CVE-2021-43875

Microsoft Office Graphics Remote Code Execution Vulnerability

CVE-2021-43255

Microsoft Office Trust Center Spoofing Vulnerability

CVE-2021-43256

Microsoft Excel Remote Code Execution Vulnerability

CVE-2021-43892

Microsoft BizTalk ESB Toolkit Spoofing Vulnerability

CVE-2021-41557: Software for automotive leasing, financing and mobility management

Sofico Miles RIA 2020.2 Build 127964T is affected by Stored Cross Site Scripting (XSS). An attacker with access to a user account of the RIA IT or the Fleet role can create a crafted work order in the damage reports section (or change existing work orders). The XSS payload is in the work order number.

RHSA-2021:5134: Red Hat Security Advisory: Red Hat Fuse 7.10.0 release and security update

A minor version update (from 7.9 to 7.10) is now available for Red Hat Fuse. The purpose of this text-only errata is to inform you about the security issues fixed in this release. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2019-10744: nodejs-lodash: prototype pollution in defaultsDeep function leading to modifying properties * CVE-2019-12415: poi: a specially crafted Microsoft Excel document allows attacker to read files from the local filesystem * CVE-2020-2875: mysql-...