Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

Windows Authentication Information Disclosure Vulnerability

Windows Networking Denial of Service Vulnerability

BranchCache Denial of Service Vulnerability

Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability

.NET and Visual Studio Denial of Service Vulnerability

Windows Package Library Manager Information Disclosure Vulnerability

Windows Standards-Based Storage Management Service Denial of Service Vulnerability

.NET and Visual Studio Denial of Service Vulnerability

Possible system denial of service in case of arbitrary changing Firefox browser parameters. An attacker could change specific Firefox browser parameters file in a certain way and then reboot the system to make the system unbootable.

Microsoft WS-Discovery Denial of Service Vulnerability

The GIF parser in ateimg32.dll in AOL Instant Messenger (AIM) 5.9.3797 and earlier allows remote attackers to cause a denial of service (crash) via a malformed buddy icon that causes an integer underflow in a loop counter variable.

iDrive RemotePC before 7.6.48 on Windows allows information disclosure. A locally authenticated attacker can read the system's Personal Key in world-readable %PROGRAMDATA% log files.

Windows Kernel-Mode Driver Information Disclosure Vulnerability

Bowser.sys Denial of Service Vulnerability

NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to gain access to information from unscrubbed memory, which may lead to information disclosure.

Windows Remote Desktop Licensing Service Denial of Service Vulnerability

NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to gain access to information from unscrubbed registers, which may lead to information disclosure.

Microsoft Windows Codecs Library Information Disclosure Vulnerability

Windows Networking Denial of Service Vulnerability

Windows Network Address Translation (NAT) Denial of Service Vulnerability

.NET Core and Visual Studio Information Disclosure Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Windows AF_UNIX Socket Provider Denial of Service Vulnerability

Windows Remote Access Connection Manager Information Disclosure Vulnerability

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 federated server is vulnerable to a denial of service when a specially crafted cursor is used. IBM X-Force ID: 268759.

Windows Remote Desktop Services Denial of Service Vulnerability

Media Foundation Information Disclosure Vulnerability

PuTTY before 0.75 on Windows allows remote servers to cause a denial of service (Windows GUI hang) by telling the PuTTY window to change its title repeatedly at high speed, which results in many SetWindowTextA or SetWindowTextW calls. NOTE: the same attack methodology may affect some OS-level GUIs on Linux or other platforms for similar reasons.

Windows Bind Filter Driver Information Disclosure Vulnerability

Microsoft Excel Information Disclosure Vulnerability

Windows Graphics Component Elevation of Privilege Vulnerability

Windows Kernel Information Disclosure Vulnerability

When the Windows Tentacle docker image starts up it logs all the commands that it runs along with the arguments, which writes the Octopus Server API key in plaintext. This does not affect the Linux Docker image

ASP.NET Core Denial of Service Vulnerability

Microsoft SharePoint Information Disclosure Vulnerability

Windows Remote Desktop Services Denial of Service Vulnerability

Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 35739.

Windows Projected File System FS Filter Driver Information Disclosure Vulnerability

Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 36119.

Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability

IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI displays user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 207610.

Bugzilla 3.6.x before 3.6.6, 3.7.x, 4.0.x before 4.0.2, and 4.1.x before 4.1.3 on Windows does not delete the temporary files associated with uploaded attachments, which allows local users to obtain sensitive information by reading these files. NOTE: this issue exists because of a regression in 3.6.

Windows TCP/IP Driver Denial of Service Vulnerability

Windows TCP/IP Driver Denial of Service Vulnerability

Windows Kernel Information Disclosure Vulnerability