AMD Zen Information Disclosure Vulnerability

Processor optimization removal or modification of security-critical code in AMD Zen allows an authorized attacker to disclose information locally.

AMD Zen Information Disclosure Vulnerability

Processor optimization removal or modification of security-critical code in AMD Zen allows an authorized attacker to disclose information locally.

Windows iSCSI Target Service Information Disclosure Vulnerability

Buffer over-read in Windows iSCSI Target Service allows an unauthorized attacker to disclose information over a network.

Windows DNS Denial of Service Vulnerability

Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny service over a network.

Windows Print Spooler Components Elevation of Privilege Vulnerability

Relative path traversal in Windows Print Spooler Components allows an unauthorized attacker to elevate privileges over a network.

Windows Print Spooler Components Elevation of Privilege Vulnerability

Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

Microsoft Office Excel Information Disclosure Vulnerability

Improper control of generation of code ('code injection') in Microsoft Office Excel allows an authorized attacker to disclose information locally.

WordPress GeoDirectory plugin <= 2.8.162 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AyeCode Ltd GeoDirectory geodirectory allows Blind SQL Injection.This issue affects GeoDirectory: from n/a through 2.8.162.

In Eclipse BaSyx Go Components versions up to and including 1.1.3, ABAC-enabled deployments match `ROUTE` access rules against the fully decoded request path, while the router routes on the raw, still encoded path. An encoded slash (`%2F`) inside a path value is a segment separator for the access check but part of the value for the router, so a request can match a narrow `ROUTE` rule while the handler returns a different, larger resource. An authenticated caller whose rules grant READ only on parts of a resource can therefore read the whole resource. In the DPP API, a rule such as `/v1/dpps/*/elements/*`, meant to grant only passport elements, also grants the complete passport whose identifier contains `/elements/`. In the Submodel Repository, AAS Repository and AAS Environment, a rule such as `/submodels/*/submodel-elements/*/attachment`, meant to grant only file attachments, also grants the complete element whose stored idShort contains `%2F`. The issue is fixed in Eclipse BaSyx Go Components v1.1.4.

Microsoft Office Word Remote Code Execution Vulnerability

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Windows Remote Desktop Services Remote Code Execution Vulnerability

Use after free in Remote Desktop Gateway Service allows an authorized attacker to execute code locally.

Windows DNS Server Remote Code Execution Vulnerability

Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network.

Microsoft Bluetooth Driver Elevation of Privilege Vulnerability

Use after free in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges locally.

Windows DHCP Server Remote Code Execution Vulnerability

Time-of-check time-of-use (toctou) race condition in Windows DHCP Server allows an authorized attacker to execute code over a network.

Windows DNS Remote Code Execution Vulnerability

Double free in Windows DNS allows an unauthorized attacker to execute code over a network.

Windows Performance Counters Information Disclosure Vulnerability

Buffer over-read in Windows Performance Counters allows an authorized attacker to disclose information locally.

Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.

Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.

Servicing Stack Updates Elevation of Privilege Vulnerability

Unintended proxy or intermediary ('confused deputy') in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.

Microsoft QUIC Denial of Service Vulnerability

Null pointer dereference in Microsoft QUIC allows an unauthorized attacker to deny service over a network.