Amazon Linux 2 : edk2 (ALAS-2024-2465)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2465 advisory. EDK2 is susceptible to a vulnerability in the Tcg2MeasureGptTable function, allowing a user to trigger a heap buffer overflow via a local network. Successful exploitation of this vulnerability ma...

Medium: edk2

Issue Overview: EDK2 is susceptible to a vulnerability in the Tcg2MeasureGptTable function, allowing a user to trigger a heap buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability...

Debian dsa-5624 : ovmf - security update

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5624 advisory. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-5624...

CVE-2022-36764

A heap-based buffer overflow flaw was found via the Tcg2MeasurePeImage function in EDK2. Successful exploitation requires a local attacker to trigger an integer overflow in the calculation of the EventSize variable at DxeTpm2MeasureBootLib.c, leading to the heap-buffer overflow, presenting a...

CVE-2022-36764

creationtimestamp| type| source ---|---|--- 2024-01-09 17:26:59+00:00| seen| https://t.me/ctinow/165152 2024-01-10 08:06:59+00:00| seen| https://t.me/ctinow/165595 2024-01-26 14:11:05+00:00| seen| https://t.me/ctinow/174234...

AZL-39292 CVE-2022-36764 affecting package edk2 for versions less than 20230301gitf80f052277c8-40

EDK2 is susceptible to a vulnerability in the Tcg2MeasurePeImage function, allowing a user to trigger a heap buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability...

Microsoft SharePoint Server 2019 Elevation of Privilege Vulnerability (KB5002472)

This host is missing a critical security update according to Microsoft KB5002472 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2023-36764

creationtimestamp| type| source ---|---|--- 2023-09-12 20:23:04+00:00| seen| https://t.me/cibsecurity/70297...

CVE-2023-36764 Microsoft SharePoint Server Elevation of Privilege Vulnerability

...

CVE-2023-36764

CVE-2023-36764 affects Microsoft SharePoint Server and is an Elevation of Privilege vulnerability. The connected CNVD entry confirms an elevation of privilege issue exists in SharePoint Server; MSRC details indicate a patch exists for SharePoint Server 2019 (KB5002472). The remediation requires i...

Security Updates for Microsoft SharePoint Server Subscription Edition (September 2023)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by the following vulnerability: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. %NASLMINLEVEL 70300 C...

Security Updates for Microsoft SharePoint Server 2019 (September 2023)

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by the following vulnerability: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. %NASLMINLEVEL 70300 C Tenable, Inc...

Security Updates for Microsoft SharePoint Server 2016 (September 2023)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2023-36764 - A remote code execution...

CVE-2021-36764

creationtimestamp| type| source ---|---|--- 2021-08-04 19:24:29+00:00| seen| https://t.me/cibsecurity/26813 2026-03-17 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-076-01...

CVE-2021-36764

The CVE-2021-36764 issue affects CODESYS Gateway V3 prior to version 3.5.17.10, where a NULL pointer dereference can be triggered by crafted communication requests, potentially causing a denial-of-service in affected CODESYS products. The connected sources consistently describe this NULL pointer ...