Where
-Infinity
0

Trending

Last week
Last month
Last year

Microsoft Windows 7Windows 7 is vulnerable to a full blind TCP/IP hijacking attack. The vulnerability exists in Windows…

Risk 40
Severity
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Windows 7 is vulnerable to a full blind TCP/IP hijacking attack. The vulnerability exists in Windows 7 (any Windows until Windows 8) and in any implementation of TCP/IP, which is vulnerable to the Idle scan attack (including many IoT devices). NOTE: The vendor considers this a low severity issue.

First published (updated )
CVE-2023-34367

Schneider-electric Apc Easy Ups Online Monitoring SoftwareMalicious File Upload

Risk 86
Severity
9.8
Malicious File Upload
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could cause remote code execution when the attacker uploads a malicious JSP file. Affected Products: APC Easy UPS Online Monitoring Software (Windows 7, 10, 11 & Windows Server 2016, 2019, 2022 - Versions prior to V2.5-GA), APC Easy UPS Online Monitoring Software (Windows 11, Windows Server 2019, 2022 - Versions prior to V2.5-GA-01-22261), Schneider Electric Easy UPS Online Monitoring Software (Windows 7, 10, 11 & Windows Server 2016, 2019, 2022 - Versions prior to V2.5-GS), Schneider Electric Easy UPS Online Monitoring Software (Windows 11, Windows Server 2019, 2022 - Versions prior to V2.5-GS-01-22261)

First published (updated )
CVE-2022-42971

Schneider-electric Apc Easy Ups Online Monitoring SoftwareA CWE-306: Missing Authentication for Critical Function The software does not perform any authentica…

Risk 86
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A CWE-306: Missing Authentication for Critical Function The software does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources. Affected Products: APC Easy UPS Online Monitoring Software (Windows 7, 10, 11 & Windows Server 2016, 2019, 2022 - Versions prior to V2.5-GA), APC Easy UPS Online Monitoring Software (Windows 11, Windows Server 2019, 2022 - Versions prior to V2.5-GA-01-22261), Schneider Electric Easy UPS Online Monitoring Software (Windows 7, 10, 11 & Windows Server 2016, 2019, 2022 - Versions prior to V2.5-GS), Schneider Electric Easy UPS Online Monitoring Software (Windows 11, Windows Server 2019, 2022 - Versions prior to V2.5-GS-01-22261)

First published (updated )
CVE-2022-42970

Schneider-electric Apc Easy Ups Online Monitoring SoftwareA CWE-732: Incorrect Permission Assignment for Critical Resource vulnerability exists that could cau…

Risk 69
Severity
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A CWE-732: Incorrect Permission Assignment for Critical Resource vulnerability exists that could cause local privilege escalation when a local attacker modifies the webroot directory. Affected Products: APC Easy UPS Online Monitoring Software (Windows 7, 10, 11 & Windows Server 2016, 2019, 2022 - Versions prior to V2.5-GA), APC Easy UPS Online Monitoring Software (Windows 11, Windows Server 2019, 2022 - Versions prior to V2.5-GA-01-22261), Schneider Electric Easy UPS Online Monitoring Software (Windows 7, 10, 11 & Windows Server 2016, 2019, 2022 - Versions prior to V2.5-GS), Schneider Electric Easy UPS Online Monitoring Software (Windows 11, Windows Server 2019, 2022 - Versions prior to V2.5-GS-01-22261)

First published (updated )
CVE-2022-42972

Schneider-electric Apc Easy Ups Online Monitoring SoftwareA CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause local privilege escal…

Risk 69
Severity
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause local privilege escalation when local attacker connects to the database. Affected Products: APC Easy UPS Online Monitoring Software (Windows 7, 10, 11 & Windows Server 2016, 2019, 2022 - Versions prior to V2.5-GA), APC Easy UPS Online Monitoring Software (Windows 11, Windows Server 2019, 2022 - Versions prior to V2.5-GA-01-22261), Schneider Electric Easy UPS Online Monitoring Software (Windows 7, 10, 11 & Windows Server 2016, 2019, 2022 - Versions prior to V2.5-GS), Schneider Electric Easy UPS Online Monitoring Software (Windows 11, Windows Server 2019, 2022 - Versions prior to V2.5-GS-01-22261)

First published (updated )
CVE-2022-42973

Microsoft Windows Server 2012 R2Windows Kernel Elevation of Privilege Vulnerability

Risk 69
Severity
7.8
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Kernel Elevation of Privilege Vulnerability

First published (updated )
CVE-2023-21772

Microsoft Windows Server 2012 R2Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

Risk 77
Severity
8.8
Integer Underflow
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

First published (updated )
CVE-2023-21681

Microsoft Windows Server 2012 R2Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability

Risk 75
Severity
8.1
Integer Underflow
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability

First published (updated )
CVE-2023-21556

Microsoft Windows 7Windows Point-to-Point Protocol (PPP) Information Disclosure Vulnerability

Risk 27
Severity
5.3
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C

Windows Point-to-Point Protocol (PPP) Information Disclosure Vulnerability

First published (updated )
CVE-2023-21682

Microsoft Windows 7Windows Kernel Elevation of Privilege Vulnerability

Risk 69
Severity
7.8
Integer Overflow
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Kernel Elevation of Privilege Vulnerability

First published (updated )
CVE-2023-21754

Microsoft Windows Server 2012 R2Windows Print Spooler Elevation of Privilege Vulnerability

Risk 52
Severity
7.1
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C

Windows Print Spooler Elevation of Privilege Vulnerability

First published (updated )
CVE-2023-21760

Microsoft Windows 7Windows Kernel Elevation of Privilege Vulnerability

Risk 69
Severity
7.8
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Kernel Elevation of Privilege Vulnerability

First published (updated )
CVE-2023-21675

Microsoft Windows Server 2012 R2Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability

Risk 69
Severity
7.8
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability

First published (updated )
CVE-2023-21524

Microsoft Windows 7Windows Print Spooler Elevation of Privilege Vulnerability

Risk 69
Severity
7.8
Integer Overflow
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Print Spooler Elevation of Privilege Vulnerability

First published (updated )
CVE-2023-21765

Microsoft Windows 7Windows Boot Manager Security Feature Bypass Vulnerability

Risk 59
Severity
6.6
AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Boot Manager Security Feature Bypass Vulnerability

First published (updated )
CVE-2023-21560

Microsoft Windows 7Windows NTLM Elevation of Privilege Vulnerability

Risk 69
Severity
7.8
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows NTLM Elevation of Privilege Vulnerability

First published (updated )
CVE-2023-21746

Microsoft Windows Server 2012 R2Windows Netlogon Denial of Service Vulnerability

Risk 43
Severity
7.5
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C

Windows Netlogon Denial of Service Vulnerability

First published (updated )
CVE-2023-21728

Microsoft Windows Server 2012 R2Microsoft ODBC Driver Remote Code Execution Vulnerability

Risk 77
Severity
8.8
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft ODBC Driver Remote Code Execution Vulnerability

First published (updated )
CVE-2023-21732

Microsoft Windows Server 2012 R2Windows Win32k Elevation of Privilege Vulnerability

Risk 69
Severity
7.8
Use After Free
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Win32k Elevation of Privilege Vulnerability

First published (updated )
CVE-2023-21680

Microsoft Windows Server 2012 R2Windows Layer 2 Tunneling Protocol (L2TP) Denial of Service Vulnerability

Risk 43
Severity
7.5
Null Pointer Dereference
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C

Windows Layer 2 Tunneling Protocol (L2TP) Denial of Service Vulnerability

First published (updated )
CVE-2023-21757

Microsoft Windows Server 2012 R2Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability

Risk 75
Severity
8.1
Race Condition
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability

First published (updated )
CVE-2023-21546

Microsoft Windows 7Windows GDI Elevation of Privilege Vulnerability

Risk 63
Severity
7
Use After Free
AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows GDI Elevation of Privilege Vulnerability

First published (updated )
CVE-2023-21532

Microsoft Windows Server 2012 R2Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability

Risk 75
Severity
8.1
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability

First published (updated )
CVE-2023-21543

Microsoft Windows Server 2012 R2Remote Procedure Call Runtime Denial of Service Vulnerability

Risk 32
Severity
5.3
AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C

Remote Procedure Call Runtime Denial of Service Vulnerability

First published (updated )
CVE-2023-21525

Microsoft Windows 7Windows Kernel Information Disclosure Vulnerability

Risk 32
Severity
5.5
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

Windows Kernel Information Disclosure Vulnerability

First published (updated )
CVE-2023-21776

Microsoft Windows Server 2012 R2Microsoft Cryptographic Services Elevation of Privilege Vulnerability

Risk 69
Severity
7.8
Integer Overflow
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft Cryptographic Services Elevation of Privilege Vulnerability

First published (updated )
CVE-2023-21561

Microsoft Windows Server 2012 R2Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability

Risk 75
Severity
8.1
Race Condition, Use After Free
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability

First published (updated )
CVE-2023-21679

Microsoft Windows 7Windows Kernel Elevation of Privilege Vulnerability

Risk 69
Severity
7.8
Input Validation
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Kernel Elevation of Privilege Vulnerability

First published (updated )
CVE-2023-21749

Microsoft Windows 7Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

Risk 75
Severity
8.1
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

First published (updated )
CVE-2023-21548

Microsoft Windows 7Windows Kernel Elevation of Privilege Vulnerability

Risk 69
Severity
7.8
Use After Free
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Kernel Elevation of Privilege Vulnerability

First published (updated )
CVE-2023-21773

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203