1115 matches found
The vulnerability of the Console Window Host component in Microsoft Windows operating systems allows a hacker to bypass security restrictions.
The vulnerability of the Console Window Host component in Microsoft Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow an attacker to circumvent security restrictions...
CVE-2021-40872
The CVE-2021-40872 issue affects Softing Industrial Automation uaToolkit Embedded prior to version 1.40. Affected component: the OPC/UA server implemented by uaToolkit Embedded. Root cause: invalid type cast leading to server process crash on crafted messages. Impact: remote attacker can cause a ...
Vulnerabilities hide in Java
Vulnerabilities have been fixed in Java. The vulnerabilities allow a malicious person to perform attacks that result in the following categories of damage: Denial-of-Service DoS Circumvention of security measure Remote code execution User rights Access to sensitive data Access to system data -=...
Security Bulletin: IBM Security Guardium is affected by a kernel vulnerability (CVE-2020-25705, CVE-2020-28374)
Summary IBM Security Guardium has fixed this vulnerability Vulnerability Details CVEID: CVE-2020-28374 DESCRIPTION: Linux Kernel could allow a remote authenticated attacker to traverse directories on the system, caused by insufficient identifier checking in the LIO SCSI target code. An attacker...
USN-5131-1: Firefox vulnerabilities
Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, bypass security restrictions, spoof the browser UI, confuse the user, conduct phishing attacks, or execut...
The vulnerability of the Active Directory Federation Services (ADFS) on the Windows operating system allows a perpetrator to bypass the security measures.
The vulnerability of the Active Directory Federation Services AD FS on Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass security measures...
KLA12350 Multiple vulnerabilities in Google Chrome
Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in...
The vulnerability of the Windows operating system, related to errors in security settings, allows a perpetrator to bypass the security mechanisms.
The vulnerability of the Windows operating system is related to security configuration errors. Exploiting this vulnerability can allow a remote attacker to bypass security measures...
Security Bulletin: Operations Dashboard is vulnerable to multiple Go vulnerabilities
Summary Operations Dashboard is vulnerable to multiple Go vulnerabilities with details of each below Vulnerability Details CVEID: CVE-2021-33197 DESCRIPTION: Golang Go could allow a remote attacker to bypass security restrictions, caused by a flaw in the ReverseProxy in net/http/httputil. By...
The vulnerability of the Moxa MXView network control software, related to deficiencies in access control, allows a violator to circumvent security restrictions.
The vulnerability of the Moxa MXView network control software is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to bypass security restrictions using the MQTT protocol Message Queuing Telemetry Transport...
The vulnerability of Google Chrome, related to a type conversion error, allows a hacker to circumvent existing security restrictions by using a specially created HTML page.
The vulnerability of Google Chrome is related to a type conversion error. Exploiting this vulnerability allows an attacker to bypass existing security restrictions through a specially created HTML page...
Input validation
In “SuiteCRM” application, v7.11.18 through v7.11.19 and v7.10.29 through v7.10.31 are affected by “CSV Injection” vulnerability Formula Injection. A low privileged attacker can use accounts module to inject payloads in the input fields. When an administrator access accounts module to export the...
Security Bulletin: Vulnerabilities in ntp affect Power Hardware Management Console (CVE-2015-1798 CVE-2015-1799 CVE-2015-3405)
Summary ntp is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVEs Vulnerability Details CVEID: CVE-2015-1798 DESCRIPTION: Network Time Protocol NTP Project NTP daemon ntpd could allow a remote attacker to bypass security restrictions, caused by the acceptance of...
Vulnerabilities fixed in Cisco products
Vulnerabilities have been fixed in Cisco products. The vulnerabilities allow a malicious party to carry out attacks execute attacks that result in the following categories of damage: Denial-of-Service DoS. Bypassing authentication Bypassing security measure The vulnerability with attribute...
e107 CMS 2.3.0 - Remote Code Execution (RCE) (Authenticated)
Exploit Title: e107 CMS 2.3.0 - Remote Code Execution RCE Authenticated Date: 21-09-2021 Exploit Author: Halit AKAYDIN hLtAkydn Vendor Homepage: https://e107.org/ Software Link: https://e107.org/download Version: 2.3.0 Category: Webapps Tested on: Linux/Windows e107 is a free website content...
Drupal 访问控制错误漏洞
Drupal is an open source content management system developed in PHP by the Drupal community. An access control error vulnerability exists in Drupal, where a remote user can bypass implemented security restrictions and read certain field data...
Security Bulletin: IBM Cloud Pak for Multicloud Management Monitoring has applied security fixes for its use of Apache HttpClient
Summary IBM Cloud Pak for Multicloud Management Monitoring has applied security fixes for its use of Apache HttpClient. Vulnerability Details CVEID: CVE-2020-13956 DESCRIPTION: Apache HttpClient could allow a remote attacker to bypass security restrictions, caused by the improper handling of...
Adobe Magento Input Validation Error Vulnerability (CNVD-2021-102807)
Magento is an open source e-commerce platform written in PHP by Adobe. An input validation error vulnerability exists in Adobe Magento. An attacker could exploit this vulnerability to bypass security features...
Microsoft Windows Multiple Vulnerabilities (KB5005033)
This host is missing a critical security update according to Microsoft KB5005033 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Magento Commerce输入验证错误漏洞
Magento is an open source e-commerce platform written in PHP by Adobe. An input validation error vulnerability exists in Adobe Magento. An attacker could exploit this vulnerability to bypass security features...