19814 matches found
[SECURITY] Fedora 38 Update: libkrun-1.5.0-7.fc38
Dynamic library providing Virtualization-based process isolation capabilities...
Adobe Premiere Pro Buffer Overflow
The vulnerability of the professional video editing software Adobe Premiere Pro is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code within the context of the current user...
Adobe Audition Buffer Overflow Code Execution
The vulnerability of Adobe Audition is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code within the context of the current user...
New Threat Actor 'AeroBlade' Emerges in Espionage Attack on U.S. Aerospace
A previously undocumented threat actor has been linked to a cyber attack targeting an aerospace organization in the U.S. as part of what's suspected to be a cyber espionage mission. The BlackBerry Threat Research and Intelligence team is tracking the activity cluster as AeroBlade. Its origin is...
Building an AppSec Program with Qualys WAS -Introduction and Configuring a Web Application or API: Default Scan Settings
Qualys WAS Web Application Scanning tools stand out as The Leading Dynamic Application Security Testing DAST solutions in the industry. Since it comes with default scan settings, understanding these settings in detail is critical to uncover vulnerabilities effectively. Scan performance and covera...
CVE-2023-48692 Azure RTOS NetX Duo Remote Code Execution Vulnerability
Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause remote code execution due to memory overflow vulnerabilities in Azure RTOS NETX Duo. The affected components include processes/functions related to icmp,...
Method to an Old Consultant's Madness with Site Design
If it's your first time purchasing and setting up InsightVM – or if you are a seasoned veteran – I highly recommend a ‘less is more’ strategy with site design. After many thousands of health checks performed by security consultants for InsightVM customers, the biggest challenge most consultants...
EZVIZ Studio Security Vulnerability
EZVIZ Studio is an application from the Chinese company Fluorite EZVIZ. It is used to manage your camera on a personal computer. A security vulnerability exists in EZVIZ Studio version v2.2.0, which originates from a DLL hijacking that can be performed by planting a malicious TcApi.dll in certain...
Number withdrawn
Perl is a general-purpose, interpreted, dynamic cross-platform programming language from the PERL community...
Huddly Camera Service Security Vulnerability
Huddly Camera Service is a connected camera technology from Huddly, Inc. in the United States. A security vulnerability exists in Huddly Camera Service versions prior to 8.0.7 excluding version 7.99, which stems from a DLL hijacking vulnerability due to HuddlyCameraService being installed in a...
CVE-2023-4770
An uncontrolled search path element vulnerability has been found on 4D and 4D server Windows executables applications, affecting version 19 R8 100218. This vulnerability consists in a DLL hijacking by replacing x64 shfolder.dll in the installation path, causing an arbitrary code execution...
PT-2023-30456 · Microsoft +1 · Urlmon.Dll +1
Name of the Vulnerable Software and Affected Versions: NetEase CloudMusic version 2.10.4 Description: An Untrusted search path issue allows local users to gain escalated privileges through the urlmon.dll file in the current working directory. Recommendations: For NetEase CloudMusic version 2.10.4...
4D Windows Server Code Issue Vulnerability
4D Windows Server is a family of applications from 4D USA. A code issue vulnerability exists in 4D Windows Server that originates from a DLL hijacking that can lead to arbitrary code execution by replacing shfolder.dll in the installation path...
Perl Buffer Overflow DoS
The vulnerability of the Perl programming language is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow a remote attacker to cause system failures or execute arbitrary code...
Fortinet FortiClient Insecure Search Path Code Execution
The vulnerability of the Fortinet FortiClient security device for Windows relates to the use of an insecure lookup path. Exploiting this vulnerability allows attackers to execute arbitrary code by replacing the legitimate DLL file with a malicious library...
kernel: use-after-free due to race condition occurring in dvb_register_device()
A race condition flaw leading to a use-after-free issue was found in the Linux kernel media subsystem in the DVB core device driver. It could occur in the dvbregisterdevice function due to the fileoperations structure fops being dynamically allocated and later kfreed. A local user could use this...
kernel: use-after-free due to race condition occurring in dvb_register_device()
A race condition flaw leading to a use-after-free issue was found in the Linux kernel media subsystem in the DVB core device driver. It could occur in the dvbregisterdevice function due to the fileoperations structure fops being dynamically allocated and later kfreed. A local user could use this...
PT-2023-31163 · Unknown · Xmachoviewer
Name of the Vulnerable Software and Affected Versions: XMachOViewer version 0.04 Description: A dylib injection issue allows attackers to compromise integrity by injecting unauthorized code into the product's processes. This could potentially lead to remote control and unauthorized access to...
Dynamic Host Configuration Protocol (DHCP) Detection
UDP based detection via DHCPINFORM message of services supporting the Dynamic Host Configuration Protocol DHCP. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
