244 matches found
Leaked Pentagon Documents May Herald a New Era of Revelations
The bizarre release of sensitive US government materials soon after their creation signals a potential shift to near-real-time unauthorized disclosures...
[SECURITY] [DLA 3380-1] firmware-nonfree LTS new upstream version (security updates and newer firmware for Linux 5.10)
Debian LTS Advisory DLA-3380-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost April 01, 2023 https://wiki.debian.org/LTS Package : firmware-nonfree Version : 20190114+really20220913-0+deb10u1 CVE ID : CVE-2020-12362 CVE-2020-12363 CVE-2020-12364 CVE-2020-24586...
CVE-2023-28760
creationtimestamp| type| source ---|---|--- 2023-03-24 12:53:44+00:00| published-proof-of-concept| https://t.me/crackcodes/2821 2023-03-24 15:39:00+00:00| published-proof-of-concept| Telegram/Gyrvv86AbWrB1GT84Y-sUOl1kYGUEvQAgiox85A6xDMevbQ 2023-03-24 15:59:08+00:00| published-proof-of-concept|...
PT-2023-21905 · Dino +2 · Dino +2
Name of the Vulnerable Software and Affected Versions: Dino versions prior to 0.2.3 Dino versions 0.3.x prior to 0.3.2 Dino versions 0.4.x prior to 0.4.2 Description: The issue allows attackers to modify the personal bookmark store via a crafted message. This can lead to changing the display of...
Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-20220304.10019)
The version of AHV installed on the remote host is prior to 20220304.10019. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-20220304.10019 advisory. - BIND 9.11.0 - 9.11.36 9.12.0 - 9.16.26 9.17.0 - 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 - 9.11.36-S...
CVE-2022-48870
creationtimestamp| type| source ---|---|--- 2022-12-22 06:51:17+00:00| published-proof-of-concept| https://t.me/crackcodes/1927 2022-12-22 11:02:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/7406 2022-12-22 15:38:37+00:00| published-proof-of-concept|...
Joomla! 4.2.0 Multiple Full Path Disclosures
According to its self-reported version, the instance of Joomla! running on the remote web server is 4.2.0. It is, therefore, affected by multiple full path disclosures because of missing 'JEXEC or die check' caused by the PSR12 changes done in 4.2.0. Note that the scanner has not tested for these...
CVE-2022-27911
An issue was discovered in Joomla! 4.2.0. Multiple Full Path Disclosures because of missing 'JEXEC or die check' caused by the PSR12 changes...
CVE-2022-27911
Mode C: Concrete details found. Joomla! 4.2.0 is affected by a vulnerability described as Multiple Full Path Disclosures caused by a missing '_JEXEC or die check' introduced by PSR12 changes. The issue affects Joomla! core and leads to potential exposure of internal paths. In the connected docume...
CVE-2022-27911 [20220801] - Core - Multiple Full Path Disclosures because of missing '_JEXEC or die check'
An issue was discovered in Joomla! 4.2.0. Multiple Full Path Disclosures because of missing 'JEXEC or die check' caused by the PSR12 changes...
OpenEMR < 6.1.0.1 Multiple Vulnerabilities
OpenEMR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:open-emr:openemr"; ifdescription...
SUSE-SU-2022:2177-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 kernel was updated. The following security bugs were fixed: - CVE-2022-1972: Fixed a buffer overflow in nftable that could lead to privilege escalation. bsc1200019 - CVE-2019-19377: Fixed an user-after-free that could be triggered when an attacker mounts a crafted...
Get to Know Steve Povolny
Meet Steve Povolny Head of Advanced Threat Research for Trellix Threat Labs By Michael Alicea · May 17, 2022 At Trellix, we celebrate and champion our people. This week, I sat down with Steve Povolny, Head of Advanced Threat Research for Trellix Threat Labs. As he is one of the leading...
CVE-2022-1459
Non-Privilege User Can View Patient’s Disclosures in GitHub repository openemr/openemr prior to 6.1.0.1...
CVE-2022-1459
Non-Privilege User Can View Patient’s Disclosures in GitHub repository openemr/openemr prior to 6.1.0.1...
Design/Logic Flaw
Non-Privilege User Can View Patient’s Disclosures in GitHub repository openemr/openemr prior to 6.1.0.1...
CVE-2022-1459 Non-Privilege User Can View Patient’s Disclosures in openemr/openemr
Non-Privilege User Can View Patient’s Disclosures in GitHub repository openemr/openemr prior to 6.1.0.1...
CVE-2022-1459 Non-Privilege User Can View Patient’s Disclosures in openemr/openemr
Non-Privilege User Can View Patient’s Disclosures in GitHub repository openemr/openemr prior to 6.1.0.1...
CVE-2022-1459
CVE-2022-1459 affects OpenEMR prior to 6.1.0.1. The issue is an Insecure Direct Object Reference that allows a non-privilege user to view patient disclosures via the OpenEMR web interface (example endpoint: interface/patient_file/summary/record_disclosure.php?editlid=…). This exposes confidential...
OpenEMR 安全漏洞
OpenEMR is an open source medical management system from the Openemr community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. A security vulnerability exists in versions of OpenEMR prior to 6.1.0.1, which can...