2022

Azure Site Recovery Elevation of Privilege Vulnerability

Azure Site Recovery Elevation of Privilege Vulnerability

Azure Site Recovery Elevation of Privilege Vulnerability

Azure Site Recovery Elevation of Privilege Vulnerability

Azure Site Recovery Elevation of Privilege Vulnerability

Azure Site Recovery Elevation of Privilege Vulnerability

Azure Site Recovery Elevation of Privilege Vulnerability

Azure Site Recovery Elevation of Privilege Vulnerability

Azure Site Recovery Elevation of Privilege Vulnerability

Azure Site Recovery Elevation of Privilege Vulnerability

Azure Site Recovery Elevation of Privilege Vulnerability

Azure Site Recovery Elevation of Privilege Vulnerability

Azure Site Recovery Elevation of Privilege Vulnerability

Azure Site Recovery Elevation of Privilege Vulnerability

Azure Site Recovery Elevation of Privilege Vulnerability

Microsoft Defender for Endpoint Tampering Vulnerability

Microsoft Office Security Feature Bypass Vulnerability

The libconnect extension before 7.0.8 and 8.x before 8.1.0 for TYPO3 allows XSS.

The matomo_integration (aka Matomo Integration) extension before 1.3.2 for TYPO3 allows XSS.

Mogu blog 5.2 is vulnerable to Cross Site Scripting (XSS).

Windows Hyper-V Information Disclosure Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Windows GDI+ Information Disclosure Vulnerability

Windows Connected Devices Platform Service Information Disclosure Vulnerability

Windows Security Account Manager (SAM) Denial of Service Vulnerability

Windows Group Policy Elevation of Privilege Vulnerability

Azure Storage Library Information Disclosure Vulnerability

Azure Site Recovery Elevation of Privilege Vulnerability

The gridelements (aka Grid Elements) extension through 7.6.1, 8.x through 8.7.0, 9.x through 9.7.0, and 10.x through 10.

Windows BitLocker Information Disclosure Vulnerability

BitLocker Security Feature Bypass Vulnerability

Windows Hyper-V Information Disclosure Vulnerability

Windows Print Spooler Elevation of Privilege Vulnerability

Windows Network File System Information Disclosure Vulnerability

Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability

Windows Kernel Information Disclosure Vulnerability

The ameos_tarteaucitron (aka AMEOS - TarteAuCitron GDPR cookie banner and tracking management / French RGPD compatible)

The schema (aka Embedding schema.org vocabulary) extension before 1.13.1 and 2.x before 2.5.1 for TYPO3 allows XSS.

A vulnerability in SAP NW EP (WPC) - versions 7.30, 7.31, 7.40, 7.50, which does not sufficiently validate user-controll

SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-c

SAP Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled

SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-c

When a user opens manipulated JPEG 2000 (.jp2, jp2k.x3d) files received from untrusted sources in SAP 3D Visual Enterpri

SAP NetWeaver Enterprise Portal does - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, not sufficiently encode user-c

SAP BusinessObjects Business Intelligence Platform (LCM) - versions 420, 430, allows an attacker with an admin privilege

Due to missing input validation in the Manage Checkbooks component of SAP S/4HANA - version 101, 102, 103, 104, 105, 106

SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, is susceptible to script execution

SAP Busines Objects Business Intelligence Platform (Visual Difference Application) - versions 420, 430, allows an authen

VMware vRealize Log Insight in versions prior to 8.8.2 contain a stored cross-site scripting vulnerability due to improp

VMware vRealize Log Insight in versions prior to 8.8.2 contain a stored cross-site scripting vulnerability due to improp