2218 matches found
CVE-2023-20004
Three Cisco CVEs (CVE-2023-20004, CVE-2023-20092, CVE-2023-20093) affect the CLI of Cisco TelePresence CE and RoomOS. The root cause is improper access controls on local filesystem files, enabling an authenticated, local attacker to overwrite arbitrary files by placing a symbolic link in a specif...
CVE-2023-20036
CVE-2023-20036 affects Cisco Industrial Network Director (IND). The issue is in the web UI and arises from improper input validation during Device Pack uploads, allowing an authenticated, remote attacker to inject commands and execute arbitrary code with NT AUTHORITY\SYSTEM privileges on the devi...
CVE-2023-20039
CVE-2023-20039 – Cisco IND : A vulnerability in Cisco Industrial Network Director (IND) allows an authenticated, local attacker to read files in the application data directory due to insufficient default file permissions. This could enable viewing sensitive information. Cisco states software upda...
CVE-2023-20094
This CVE (CVE-2023-20094) affects Cisco TelePresence CE and Cisco RoomOS. The issue is caused by improper bounds checks in the affected software, enabling an unauthenticated, adjacent attacker to send a crafted request that can trigger an out-of-bounds read, potentially disclosing sensitive infor...
CVE-2023-20154
CVE-2023-20154 affects Cisco Modeling Labs external authentication. An unauthenticated, remote attacker could log in to the web interface with administrative privileges by exploiting improper handling of messages from the external authentication server. The attack requires valid credentials store...
CVE-2024-20373
CVE-2024-20373 affects Cisco IOS and IOS XE SNMP IPv4 ACL handling. Root cause: extended IPv4 ACLs for SNMP aren’t supported, but extended named IPv4 ACLs can be attached to the SNMP server without warning, causing no ACL to be applied to SNMP listening. Impact: unauthenticated remote SNMP pollin...
Defense-in-Depth Security Updates for Microsoft SharePoint Server 2019 (November 2024)
The Microsoft SharePoint Server 2019 installation is missing defense-in-depth security updates to help improve security-related features. %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid211460; scriptversion"1.2";...
CVE-2022-2232
CVE-2022-2232 concerns a LDAP injection in Keycloak’s username lookup, allowing bypass and potentially other actions. Affected: Keycloak package; root cause: LDAP injection during username lookup. Impact: high confidentiality risk; no user interaction required, network vector, privileges not requ...
CVE-2022-31667
Harbor (the Harbor registry) is affected by CVE-2022-31667 due to improper authorization when updating a robot account. The issue occurs when a request to update a robot account specifies an account and name belonging to a project the authenticated user cannot access, allowing an attacker to revo...
CVE-2023-1973
A flaw was found in Undertow package. Using the FormAuthenticationMechanism, a malicious user could trigger a Denial of Service by sending crafted requests, leading the server to an OutofMemory error, exhausting the server's memory...
libmozjs-128-0-128.4.0-1.1 on GA media (moderate)
libmozjs-128-0-128.4.0-1.1 on GA media Announcement ID: openSUSE-SU-2024:14461-1 Rating: moderate Cross-References: CVE-2024-10458 CVE-2024-10459 CVE-2024-10460 CVE-2024-10461 CVE-2024-10462 CVE-2024-10463 CVE-2024-10464 CVE-2024-10465 CVE-2024-10466 CVE-2024-10467 CVSS scores: CVE-2024-10458 SUS...
CVE-2024-6480
creationtimestamp| type| source ---|---|--- 2024-10-31 23:37:58+00:00| seen| https://t.me/cvedetector/9545...
BELL-CVE-2024-50067
Bulletin has no description...
CVE-2023-50310
CVE-2023-50310 affects IBM CICS Transaction Gateway for Multiplatforms (versions 9.2 and 9.3). The vulnerability arises from transmitting or storing authentication credentials using an insecure method, enabling potential interception or retrieval. Connected sources confirm affected products and p...
BELL-CVE-2024-47749
Bulletin has no description...
CVE-2020-5260
creationtimestamp| type| source ---|---|--- 2024-10-21 17:03:42+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/970 2025-01-14 17:04:36+00:00| seen| https://github.blog/open-source/git/git-security-vulnerabilities-announced-5/ 2025-01-14 19:10:45+00:00| seen|...
GHSA-QM7J-C969-7J4Q
creationtimestamp| type| source ---|---|--- 2024-10-21 17:03:42+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/970 2025-01-14 17:04:36+00:00| seen| https://github.blog/open-source/git/git-security-vulnerabilities-announced-5/ 2025-01-14 19:10:45+00:00| seen|...
CVE-2024-22029
Insecure permissions in the packaging of tomcat allow local users that win a race during package installation to escalate to root...
MozillaThunderbird-128.3.1-1.1 on GA media (moderate)
MozillaThunderbird-128.3.1-1.1 on GA media Announcement ID: openSUSE-SU-2024:14394-1 Rating: moderate Cross-References: CVE-2024-8900 CVE-2024-9392 CVE-2024-9393 CVE-2024-9394 CVE-2024-9396 CVE-2024-9397 CVE-2024-9398 CVE-2024-9399 CVE-2024-9400 CVE-2024-9401 CVE-2024-9402 CVE-2024-9680 CVSS...