22199 matches found
Schneider Electric StruxureWare Data Center Expert 操作系统命令注入漏洞
Schneider Electric StruxureWare Data Center Expert is a monitoring software from the French company Schneider Electric Schneider Electric. It is suitable for a variety of organizations to monitor their company-wide power, cooling, security, and environment. An operating system command injection...
Schneider Electric StruxureWare Data Center Expert 授权问题漏洞
Schneider Electric StruxureWare Data Center Expert StruxureWare Data Center Management Expert is a monitoring software from the French company Schneider Electric Schneider Electric. It is suitable for a variety of organizations to monitor their company-wide power, cooling, security,...
Schneider Electric StruxureWare Data Center Expert 代码注入漏洞
Schneider Electric StruxureWare Data Center Expert is a monitoring software from the French company Schneider Electric Schneider Electric. It is suitable for a variety of organizations to monitor their company-wide power, cooling, security, and environment. A code injection vulnerability exists i...
Schneider Electric StruxureWare Data Center Expert 安全漏洞
Schneider Electric StruxureWare Data Center Expert is a monitoring software from the French company Schneider Electric Schneider Electric. It is suitable for a variety of organizations to monitor their company-wide power, cooling, security, and environment. An access control error vulnerability...
Schneider Electric StruxureWare Data Center Expert 代码注入漏洞
Schneider Electric StruxureWare Data Center Expert is a monitoring software from the French company Schneider Electric Schneider Electric. It is suitable for a variety of organizations to monitor their company-wide power, cooling, security, and environment. A code injection vulnerability exists i...
Schneider Electric StruxureWare Data Center Expert 跨站脚本漏洞
Schneider Electric StruxureWare Data Center Expert is a monitoring software from the French company Schneider Electric Schneider Electric. It is suitable for a variety of organizations to monitor their company-wide power, cooling, security, and environment. A cross-site scripting vulnerability...
Schneider Electric StruxureWare Data Center Expert 操作系统命令注入漏洞
Schneider Electric StruxureWare Data Center Expert is a monitoring software from the French company Schneider Electric Schneider Electric. It is suitable for a variety of organizations to monitor their company-wide power, cooling, security, and environment. An operating system command injection...
CVE-2023-28971
An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the timescaledb feature of Juniper Networks Paragon Active Assurance PAA Formerly Netrounds allows an attacker to bypass existing firewall rules and limitations used to restrict internal communcations. The Tes...
KLA48959 SB vulnerability in Microsoft System Center
A security feature bypass vulnerability was found in Microsoft System Center. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories CVE-2023-24934 Related products Windows-Defender CVE list CVE-2023-24934 high KB list Solution Install necessary update...
Ransomware in France, April 2022–March 2023
This article is based on research by Marcelo Rivero, Malwarebytes' ransomware specialist, who monitors information published by ransomware gangs on their dark web sites. In this report, "known attacks" are attacks where the victim opted not to pay a ransom. This provides the best overall picture ...
Cisco DNA Center Web Interface Detection
Binary data ciscodnacenterwebdetect.nbin...
The vulnerability of the Jenkins website builder, update-center2, related to errors in handling HTTP headers, allows attackers to perform cross-site scripting (XSS) attacks.
The vulnerability of the Jenkins website builder, Jenkins update-center2, is related to errors in handling HTTP headers. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting XSS attacks remotely...
7 Rapid Questions: Lindsey Searle
Welcome back to 7 Rapid Questions, our blog series where we ask passionate leaders at Rapid7 to give us an inside look at what it’s like to work on their team, and how they’re creating an impact every day. In this installment, we talk to Lindsey Searle, Senior Manager, Customer Advisors on how he...
Description of the security update for Publisher 2013: April 11, 2023 (KB5002213)
Description of the security update for Publisher 2013: April 11, 2023 KB5002213 Summary This security update resolves a Microsoft Publisher remote code execution vulnerability. To learn more about the vulnerability, see the following security advisories: Microsoft Common Vulnerabilities and...
Description of the security update for SharePoint Foundation 2013: April 11, 2023 (KB5002383)
Description of the security update for SharePoint Foundation 2013: April 11, 2023 KB5002383 Summary This security update resolves a Microsoft SharePoint Server spoofing vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2023-28288...
Description of the security update for SharePoint Server 2019: April 11, 2023 (KB5002373)
None None...
Description of the security update for Publisher 2016: April 11, 2023 (KB5002221)
None None...
KLA48846 DoS vulnerability in Microsoft System Center
A denial of service vulnerability was found in Microsoft System Center. Malicious users can exploit this vulnerability to cause denial of service. Original advisories CVE-2023-24860 Related products Windows-Defender CVE list CVE-2023-24860 critical KB list Solution Install necessary updates from...
NewStart CGSL CORE 5.05 / MAIN 5.05 : control-center Vulnerability (NS-SA-2023-0018)
The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has control-center packages installed that are affected by a vulnerability: - It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physical...
The vulnerabilities of the net/http and mime/multipart libraries used in the GoLang-based application software of the PPEO “Avora Center” allow attackers to perform a type of attack known as “denial-of-service attack”.
The vulnerability of the net/http and mime/multipart libraries used in the GoLang-based application software for the PPEO “Avora Center” involves uncontrolled resource consumption under certain input conditions. Exploiting this vulnerability could allow a remote attacker to execute a type of atta...