21 matches found
USN-8266-1 linux, linux-aws, linux-aws-fips, linux-aws-hwe, linux-azure-4.15, linux-fips, linux-gcp, linux-gcp-4.15, linux-gcp-fips, linux-hwe, linux-kvm, linux-oracle vulnerabilities
Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module LSM. An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information kernel memory, local...
USN-8224-1 linux-bluefield vulnerabilities
Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module LSM. An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information kernel memory, local...
Photon OS 5.0: Linux PHSA-2026-5.0-0806
An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0806. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Linux Distros Unpatched Vulnerability : CVE-2026-23410
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: apparmor: fix race on rawdata dereference There is a race condition that leads to a...
BELL-CVE-2026-23410
Bulletin has no description...
CVE-2026-23410
creationtimestamp| type| source ---|---|--- 2026-04-01 11:20:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3migl4llo3z2q 2026-04-02 17:36:56+00:00| seen| Telegram/Mrl-2X1DMgxtaU5XSUN4IbsWrdS8894u2WS0LqzSL2HMbhg 2026-04-02 17:37:03+00:00| seen|...
CVE-2025-23410
When uploading organism or sequence data via the web interface, GMOD Apollo will unzip and inspect the files and will not check for path traversal in supported archive types...
CVE-2025-23410 GMOD Apollo Relative Path Traversal
When uploading organism or sequence data via the web interface, GMOD Apollo will unzip and inspect the files and will not check for path traversal in supported archive types...
CVE-2025-23410 GMOD Apollo Relative Path Traversal
When uploading organism or sequence data via the web interface, GMOD Apollo will unzip and inspect the files and will not check for path traversal in supported archive types...
CVE-2025-23410
creationtimestamp| type| source ---|---|--- 2025-03-04 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-063-07 2025-03-05 00:33:48+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6467 2025-03-05 01:49:26+00:00| seen|...
CVE-2023-23410
creationtimestamp| type| source ---|---|--- 2023-04-28 11:01:16+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/8202 2023-05-02 22:40:34+00:00| published-proof-of-concept| https://t.me/cybred/404 2023-05-02 23:24:44+00:00| seen| https://t.me/reversedungeon/3062 2023-05-2...
CVE-2023-23410 Windows HTTP.sys Elevation of Privilege Vulnerability
...
CVE-2023-23410 Windows HTTP.sys Elevation of Privilege Vulnerability
...
CVE-2023-23410
CVE-2023-23410 is described as a Windows HTTP.sys Elevation of Privilege Vulnerability. The initial document provides CVSS 3.1 metrics: local attack vector, low attack complexity, privileges required low, and impact high on confidentiality, integrity, and availability, with a base score of 7.8. C...
CVE-2022-23410
creationtimestamp| type| source ---|---|--- 2022-02-15 00:33:13+00:00| seen| https://t.me/cibsecurity/37459...
CVE-2022-23410
AXIS IP Utility before 4.18.0 allows for remote code execution and local privilege escalation by the means of DLL hijacking. IPUtility.exe would attempt to load DLLs from its current working directory which could allow for remote code execution if a compromised DLL would be placed in the same...
CVE-2022-23410
AXIS IP Utility prior to 4.18.0 is affected by a DLL hijacking issue that enables remote code execution and local privilege escalation. IPUtility.exe loads DLLs from its current working directory, so placing a compromised DLL in that folder could trigger exploitation. Affected version range: befo...
Exploit for CVE-2021-23410
Test for https://snyk.io/vuln/SNYK-JS-MSGPACK-1296122 This look...
CVE-2021-23410
CVE-2021-23410 relates to deserialization of untrusted data in msgpack; connected advisories show a withdrawn CVE entry and a withdrawn advisory for msgpack, with PoC code illustrating a non-exploitable scenario and explicit withdrawal by the CNA. The Snyk advisory amendment notes the issue was d...
CVE-2021-23410
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...