6162 matches found
KB5031364: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (October 2023)
The remote Windows host is missing security update 5031364. It is, therefore, affected by multiple vulnerabilities - The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through...
KB5031358: Windows 11 version 21H2 Security Update (October 2023)
The remote Windows host is missing security update 5031358. It is, therefore, affected by multiple vulnerabilities - The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through...
KB5031356: Windows 10 Version 21H2 / Windows 10 Version 22H2 Security Update (October 2023)
The remote Windows host is missing security update 5031356. It is, therefore, affected by multiple vulnerabilities - The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through...
KB5031361: Windows 10 version 1809 / Windows Server 2019 Security Update (October 2023)
The remote Windows host is missing security update 5031361. It is, therefore, affected by multiple vulnerabilities - The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through...
KB5031362: Windows 10 Version 1607 and Windows Server 2016 Security Update (October 2023)
The remote Windows host is missing security update 5031362. It is, therefore, affected by multiple vulnerabilities - The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through...
KB5031354: Windows 11 version 22H2 Security Update (October 2023)
The remote Windows host is missing security update 5031354. It is, therefore, affected by multiple vulnerabilities - The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through...
Microsoft ODBC Driver Security Vulnerability
Microsoft ODBC Driver is a driver from Microsoft. It allows applications to access data in a database management system DBMS using SQL as the standard for accessing data. A security vulnerability exists in Microsoft ODBC Driver. An attacker could exploit the vulnerability to remotely execute code...
CVE-2023-41660 WordPress WP Migration Plugin DB & Files – WP Synchro Plugin <= 1.9.1 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in WPSynchro WP Synchro plugin = 1.9.1 versions...
GLSA-202310-08 : man-db: privilege escalation
The remote host is affected by the vulnerability described in GLSA-202310-08 man-db: privilege escalation - man-db before 2.8.5 on Gentoo allows local users with access to the man user account to gain root privileges because /usr/bin/mandb is executed by root but not owned by root. Also, the owne...
man-db: privilege escalation
Background man-db is a man replacement that utilizes BerkeleyDB instead of flat files. Description A root privilege escalation through setuid executable and cron job has been discovered in man-db. Please review the CVE identifier referenced below for details. Impact A local user with access to th...
PT-2024-14759
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the lack of validity checks for db maxag and db agpref, which are used as indexes for the db agfree array. This can lead to errors, as reported by Syzbot with an...
EDRaser - Tool For Remotely Deleting Access Logs, Windows Event Logs, Databases, And Other Files
EDRaser is a powerful tool for remotely deleting access logs, Windows event logs, databases, and other files on remote machines. It offers two modes of operation: automated and manual. Automated Mode In automated mode, EDRaser scans the C class of a given address space of IPs for vulnerable syste...
CVE-2023-2567
A SQL Injection vulnerability has been found in Nozomi Networks Guardian and CMC, due to improper input validation in certain parameters used in the Query functionality. Authenticated users may be able to execute arbitrary SQL statements on the DBMS used by the web application...
Malicious code in synth-fhr-db (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08b15f2afb6158618f0f675049b7d15fa35646e7f4c630791df22eb59148f1d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8181 Malicious code in synth-fhr-db (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08b15f2afb6158618f0f675049b7d15fa35646e7f4c630791df22eb59148f1d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in synth-fhr-db
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
CVE-2023-42387
An issue in TDSQL Chitu management platform v.10.3.19.5.0 allows a remote attacker to obtain sensitive information via getdbinfo function in install.php...
PT-2023-28326 · Unknown · Tdsql Chitu Management Platform
Name of the Vulnerable Software and Affected Versions: TDSQL Chitu management platform version 10.3.19.5.0 Description: An issue in the TDSQL Chitu management platform allows a remote attacker to obtain sensitive information via the get db info function in the install.php file. Recommendations: F...
The vulnerability of the components colord/src/cd-device-db.c and colord/src/cd-profile-db.c of the Linux operating system’s kernel, which allows a malicious individual to gain unauthorized access to protected information.
The vulnerability of the components colord/src/cd-device-db.c and colord/src/cd-profile-db.c in the Linux operating system’s system daemon colord is related to a memory release error. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
