4798 matches found
CVE-2023-3335 Information Exposure Vulnerability in Hitachi Ops Center Administrator
Insertion of Sensitive Information into Log File vulnerability in Hitachi Ops Center Administrator on Linux allows local users to gain sensitive information.This issue affects Hitachi Ops Center Administrator: before 10.9.3-00...
CVE-2023-22644
A user can reverse engineer the JWT token JSON Web Token used in authentication for Manager and API access, forging a valid NeuVector Token to perform malicious activity in NeuVector. This can lead to an RCE...
Code injection
An Innsertion of Sensitive Information into Log File vulnerability in SUSE SUSE Manager Server Module 4.2 spacewalk-java, SUSE SUSE Manager Server Module 4.3 spacewalk-java causes sensitive information to be logged. This issue affects SUSE Manager Server Module 4.2: before 4.2.50-150300.3.66.5;...
CVE-2023-22644 JWT token compromise can allow malicious actions including Remote Code Execution (RCE)
A user can reverse engineer the JWT token JSON Web Token used in authentication for Manager and API access, forging a valid NeuVector Token to perform malicious activity in NeuVector. This can lead to an RCE...
CVE-2023-22644 JWT token compromise can allow malicious actions including Remote Code Execution (RCE)
A user can reverse engineer the JWT token JSON Web Token used in authentication for Manager and API access, forging a valid NeuVector Token to perform malicious activity in NeuVector. This can lead to an RCE...
CVE-2023-22644
CVE-2023-22644 describes a JWT authentication weakness in NeuVector where an attacker can reverse engineer the token used for Manager and API access to forge a valid NeuVector token, enabling malicious activity and potentially Remote Code Execution (RCE). Public details in the provided documents ...
Information disclosure
A vulnerability, which was classified as problematic, has been found in China Unicom TEWA-800G 4.16L.04CT2015Yueme. Affected by this issue is some unknown functionality. The manipulation leads to information exposure through debug log file. It is possible to launch the attack on the physical...
CVE-2023-5028 China Unicom TEWA-800G debug log file
A vulnerability, which was classified as problematic, has been found in China Unicom TEWA-800G 4.16L.04CT2015Yueme. Affected by this issue is some unknown functionality. The manipulation leads to information exposure through debug log file. It is possible to launch the attack on the physical...
CVE-2023-5028
CVE-2023-5028 affects China Unicom TEWA-800G, version 4.16L.04_CT2015_Yueme. The issue is an information exposure through a debug log file that can be triggered on the physical device. Sources consistently describe the vulnerability as affecting an unknown functionality and note a relatively high...
CVE-2023-5028 China Unicom TEWA-800G debug log file
A vulnerability, which was classified as problematic, has been found in China Unicom TEWA-800G 4.16L.04CT2015Yueme. Affected by this issue is some unknown functionality. The manipulation leads to information exposure through debug log file. It is possible to launch the attack on the physical...
The vulnerability of the CLFS driver in Windows operating systems allows a hacker to gain unauthorized access to protected information and enhance their privileges.
The vulnerability of the CLFS driver in Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information and increase their privileges...
The vulnerability of the CLFS driver for Windows operating systems allows attackers to gain increased privileges.
The vulnerability of the CLFS driver in Windows operating systems is related to the issue where operations exceed the buffer boundaries in memory when processing BLF log files. Exploiting this vulnerability can allow attackers to gain increased privileges...
Windows Common Log File System Driver (clfs.sys) Privilege Escalation
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Common Log File System Driver clfs.sys Elevation of Privilege Vulnerability', 'Description' = %q A privilege escalation vulnerability...
Update Citrix Secure Access and SSO apps to 23.09.1 before upgrading OS on Mac and iOS devices
In general we have seen two issues with the beta releases from Apple for Sonoma and iOS 17. So if the versions prior to 23.09.1 of the Citrix Secure Access and SSO apps are used with MacOS Sonoma and iOS/iPadOS 17, then the following issues would be seen: Apps will not be able to generate the log...
CVE-2023-38143
Windows Common Log File System Driver Elevation of Privilege Vulnerability...
CVE-2023-38143
Windows Common Log File System Driver Elevation of Privilege Vulnerability...
Privilege escalation
Windows Common Log File System Driver Elevation of Privilege Vulnerability...
CVE-2023-38143 Windows Common Log File System Driver Elevation of Privilege Vulnerability
...