Lucene search
+L

21105 matches found

BDU FSTEC
BDU FSTEC
added 2023/05/29 12:00 a.m.14 views

The vulnerability of Siemens Solid Edge’s design and simulation tools relates to the execution of operations beyond the buffer boundaries in memory. This allows attackers to execute arbitrary code or trigger malfunctions during maintenance operations.

The vulnerability of Siemens Solid Edge’s design and simulation tools relates to the execution of operations beyond the buffer boundaries in memory when processing STP files. Exploiting this vulnerability can allow attackers to execute arbitrary code or cause service interruptions by creating a...

7.8CVSS8AI score0.00226EPSS
SaveExploits0References3
Information Security Automation
Information Security Automation
added 2023/05/27 10:39 p.m.195 views

Microsoft Patch Tuesday May 2023: Microsoft Edge, BlackLotus Secure Boot SFB, OLE RCE, Win32k EoP, NFS RCE, PGM RCE, LDAP RCE, SharePoint RCE

Microsoft Patch Tuesday May 2023: Microsoft Edge, BlackLotus Secure Boot SFB, OLE RCE, Win32k EoP, NFS RCE, PGM RCE, LDAP RCE, SharePoint RCE. Hello everyone! This episode will be about Microsoft Patch Tuesday for May 2023, including vulnerabilities that were added between April and May Patch...

9.8CVSS9.5AI score0.94683EPSS
SaveExploits11
The Hacker News
The Hacker News
added 2023/05/26 11:48 a.m.4 views

5 Must-Know Facts about 5G Network Security and Its Cloud Benefits

5G is a game changer for mobile connectivity, including mobile connectivity to the cloud. The technology provides high speed and low latency when connecting smartphones and IoT devices to cloud infrastructure. 5G networks are a critical part of all infrastructure layers between the end user and t...

6.5AI score
SaveExploits0
OSV
OSV
added 2023/05/24 9:15 p.m.15 views

CVE-2023-31458

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect versions 19.3 SP2 22.24.1500.0 and earlier could allow an unauthenticated attacker with internal network access to authenticate with administrative privileges, because initial installation does not enforce a password change. A...

9.8CVSS7.5AI score0.00922EPSS
SaveExploits0References2
NVD
NVD
added 2023/05/24 9:15 p.m.25 views

CVE-2023-31458

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect versions 19.3 SP2 22.24.1500.0 and earlier could allow an unauthenticated attacker with internal network access to authenticate with administrative privileges, because initial installation does not enforce a password change. A...

9.8CVSS9.7AI score0.00922EPSS
SaveExploits0References2
Prion
Prion
added 2023/05/24 9:15 p.m.25 views

Command injection

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect versions 19.3 SP2 22.24.1500.0 and earlier could allow an unauthenticated attacker with internal network access to authenticate with administrative privileges, because initial installation does not enforce a password change. A...

7.5CVSS9.6AI score0.00922EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2023/05/24 12:00 a.m.76 views

CVE-2023-31458

Summary of CVE-2023-31458 (Mitel MiVoice Connect Edge Gateway) : The Edge Gateway component in MiVoice Connect versions 19.3 SP2 (22.24.1500.0) and earlier allows an unauthenticated attacker with internal network access to authenticate with administrative privileges because the initial installati...

9.8CVSS9.5AI score0.00922EPSS
SaveExploits0References2Affected Software1
Oracle linux
Oracle linux
added 2023/05/24 12:00 a.m.60 views

Image Builder security, bug fix, and enhancement update

cockpit-composer 45-1.0.1 - Make per page documentation links point to Oracle Linux Orabug: 32013095 45-1 - New upstream release 44-1 - New upstream release 43-1 - New upstream release 42-1 - New upstream release 40-1 - New upstream release 39-1 - New upstream release 38-1 - New upstream release...

7.5CVSS7.4AI score0.05623EPSS
SaveExploits1
Vulnrichment
Vulnrichment
added 2023/05/24 12:00 a.m.11 views

CVE-2023-31458

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect versions 19.3 SP2 22.24.1500.0 and earlier could allow an unauthenticated attacker with internal network access to authenticate with administrative privileges, because initial installation does not enforce a password change. A...

9.7AI score0.00922EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/05/24 12:00 a.m.44 views

CVE-2023-31458

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect versions 19.3 SP2 22.24.1500.0 and earlier could allow an unauthenticated attacker with internal network access to authenticate with administrative privileges, because initial installation does not enforce a password change. A...

9.8AI score0.00922EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2023/05/23 12:00 a.m.60 views

Microsoft Edge (Chromium) < 113.0.1774.50 / 112.0.1722.84 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 113.0.1774.50 / 112.0.1722.84. It is, therefore, affected by multiple vulnerabilities as referenced in the May 18, 2023 advisory. - Use after free in Navigation in Google Chrome prior to 113.0.5672.126 allowed a remote...

8.8CVSS8.1AI score0.29136EPSS
SaveExploits1References13
Tenable Nessus
Tenable Nessus
added 2023/05/22 12:00 a.m.27 views

Microsoft Edge Add-on Enumeration (Windows)

Binary data microsoftedgechromiumaddons.nbin...

7.3AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2023/05/19 12:00 a.m.10 views

Microsoft Edge’s vulnerability, related to the use of memory after it is freed, allows a hacker to bypass security restrictions.

The vulnerability of Microsoft Edge is related to security configuration errors. Exploiting this vulnerability can allow a remote attacker to bypass security restrictions...

5CVSS6.5AI score0.01399EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/05/19 12:00 a.m.12 views

Microsoft Edge’s vulnerability, related to the use of memory after it is freed, allows attackers to increase their privileges.

The vulnerability of Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

7.6CVSS7.4AI score0.02609EPSS
SaveExploits0References4Affected Software1
NCSC
NCSC
added 2023/05/19 12:00 a.m.12 views

Vulnerabilities fixed in Mitel MiVoice Connect

Mitel has fixed vulnerabilities in several components of MiVoice Connect, such as Mobility router, Edge Gateway, HQ and DVS. A malicious party can exploit the vulnerabilities to execute arbitrary code within the context of the application. To execute code as an administrator, the malicious party...

9.8CVSS7.6AI score0.01714EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2023/05/18 8:38 p.m.49 views

Chromium: CVE-2023-2726 Inappropriate implementation in WebApp Installs

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.4AI score0.00681EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2023/05/18 8:38 p.m.46 views

Chromium: CVE-2023-2725 Use after free in Guest View

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.5AI score0.24663EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2023/05/18 8:38 p.m.35 views

Chromium: CVE-2023-2724 Type Confusion in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.5AI score0.29136EPSS
SaveExploits1
Microsoft CVE
Microsoft CVE
added 2023/05/18 8:38 p.m.41 views

Chromium: CVE-2023-2723 Use after free in DevTools

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.5AI score0.15428EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2023/05/18 8:38 p.m.35 views

Chromium: CVE-2023-2722 Use after free in Autofill UI

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.4AI score0.0085EPSS
SaveExploits0
Rows per page
Query Builder