21104 matches found
CVE-2023-3127
CVE-2023-3127 concerns improper authentication in Sensormatic Electronics iSTAR devices (Ultra, Ultra LT, Ultra G2, Edge G2). The vulnerability allows an unauthenticated user to login with administrator rights, with CVSS v3.1 base score 7.5 (AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:L) per CISA ICS and N...
CVE-2023-3127 Improper Authentication in iSTAR
An unauthenticated user could log into iSTAR Ultra, iSTAR Ultra LT, iSTAR Ultra G2, and iSTAR Edge G2 with administrator rights...
CVE-2023-3127 Improper Authentication in iSTAR
An unauthenticated user could log into iSTAR Ultra, iSTAR Ultra LT, iSTAR Ultra G2, and iSTAR Edge G2 with administrator rights...
Microsoft Entra expands into Security Service Edge and Azure AD becomes Microsoft Entra ID
A year ago when we announced the Microsoft Entra product family, we asked what the world could achieve if we had trust in every digital experience and interaction.1 This question inspired us to offer a vision for securing the millions and millions of connections that happen every second between...
Microsoft Entra expands into Security Service Edge and Azure AD becomes Microsoft Entra ID
A year ago when we announced the Microsoft Entra product family, we asked what the world could achieve if we had trust in every digital experience and interaction.1 This question inspired us to offer a vision for securing the millions and millions of connections that happen every second between...
Internet Explorer help
None None...
PT-2023-23269 · Unknown · Istar Ultra G2 +3
Name of the Vulnerable Software and Affected Versions: iSTAR Ultra affected versions not specified iSTAR Ultra LT affected versions not specified iSTAR Ultra G2 affected versions not specified iSTAR Edge G2 affected versions not specified Description: An unauthenticated user could log into the...
Siemens Solid Edge Viewer DWG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Siemens Solid Edge Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...
uint128 changeAmount might overflow
Lines of code Vulnerability details Impact This issue is an edge case, that uint128 changeAmount could overflow, making the protocol fail for certain amount of swap. Proof of Concept Let's break down the changeAmount: 1. amountOut/amountIn 2. BASE27 3. normalizer File:...
CVE-2023-20899
VMware SD-WAN Edge contains a bypass authentication vulnerability. An unauthenticated attacker can download the Diagnostic bundle of the application under VMware SD-WAN Management...
Authentication flaw
VMware SD-WAN Edge contains a bypass authentication vulnerability. An unauthenticated attacker can download the Diagnostic bundle of the application under VMware SD-WAN Management...
CVE-2023-20899
Summary (CVE-2023-20899) : VMware SD-WAN (Edge) contains a bypass authentication vulnerability that allows an unauthenticated attacker to download the Diagnostic bundle from VMware SD-WAN Management. This is the core issue described across multiple sources, including the NVD entry and vendor advi...
CVE-2023-20899
VMware SD-WAN Edge contains a bypass authentication vulnerability. An unauthenticated attacker can download the Diagnostic bundle of the application under VMware SD-WAN Management...
The vulnerability of Microsoft Edge browsers, related to vulnerabilities in access control, allows attackers to bypass security restrictions, enhance their privileges, or execute arbitrary code.
The vulnerability of Microsoft Edge is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass security restrictions, enhance their privileges, or execute arbitrary code by opening a specially crafted malicious web page...
Microsoft Edge 114.0.1823.67 (64-bit) - Information Disclosure
Title:Microsoft Edge 114.0.1823.67 64-bit - Information Disclosure Author: nu11secur1ty Date: 07.06.2023 Vendor: https://www.microsoft.com/ Software: https://www.microsoft.com/en-us/edge?form=MA13FJ&exp=e415 Reference: https://portswigger.net/web-security/information-disclosure,...
Logic Flaw Vulnerability in Edge Console at AliCloud Computing Ltd.
AliCloud Computing Ltd. is the world's leading cloud computing and artificial intelligence technology company, dedicated to providing secure and reliable computing and data processing capabilities as an online public service, making computing and artificial intelligence a universal technology. A...
CVE-2021-42307
Microsoft Edge Chromium-based Information Disclosure Vulnerability...
CVE-2021-34506
Microsoft Edge Chromium-based Security Feature Bypass Vulnerability...