HID Parser Library Elevation of Privilege Vulnerability

Integer overflow or wraparound in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack.

Windows NetBIOS Elevation of Privilege Vulnerability

Use after free in Windows NetBIOS allows an authorized attacker to elevate privileges locally.

Windows DNS Denial of Service Vulnerability

Use after free in Windows DNS allows an unauthorized attacker to deny service over an adjacent network.

Role: DNS Server Denial of Service Vulnerability

Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network.

Windows DNS Information Disclosure Vulnerability

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

Windows DNS Information Disclosure Vulnerability

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

Windows DNS Information Disclosure Vulnerability

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

Windows DNS Information Disclosure Vulnerability

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

Microsoft Word Remote Code Execution Vulnerability

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Windows Storage Spaces Controller Remote Code Execution Vulnerability

Untrusted pointer dereference in Windows Storage Spaces Controller allows an unauthorized attacker to execute code over a network.

Windows Bind Filter Driver Elevation of Privilege Vulnerability

Weak authentication in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

Opixido OCMS Admin TUI index.php cross site scripting

A flaw has been found in Opixido OCMS up to b7c15660aba83d96677c1a9abaa69c082a24f21c. This impacts an unknown function of the file admin/TUI/index.php of the component Admin TUI. This manipulation of the argument img causes cross site scripting. The attack can be initiated remotely. The exploit has been published and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way.

Dell PowerStore contains an information disclosure vulnerability. An unauthenticated attacker could exploit this vulnerability to obtain service metadata useful for further attacks.

Dell PowerStore contains an integer overflow vulnerability. An adjacent attacker could exploit it to bypass volume bounds checks, potentially leading to data destruction or denial of service.

Email Marketing 4Dem <= 2.0.5 - Unauthenticated Configuration Destruction and Arbitrary Plugin Record Deletion

The Email Marketing 4Dem WordPress plugin through 2.0.5 does not perform authorization or capability checks on several of its AJAX actions, allowing unauthenticated users to destroy its stored configuration and delete its records.

Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability

Access of resource using incompatible type ('type confusion') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

Microsoft Graphics Component Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to disclose information locally.

Windows RNDIS Elevation of Privilege Vulnerability

Out-of-bounds read in Windows RNDIS allows an unauthorized attacker to elevate privileges with a physical attack.

Windows Filtering Platform (WFP) Elevation of Privilege Vulnerability

Use after free in Windows Filtering Platform (WFP) allows an authorized attacker to elevate privileges locally.

Windows Task Scheduler Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Task Scheduler allows an authorized attacker to elevate privileges locally.