14574 matches found
CVE-2023-32458
Dell AppSync (Dell EMC AppSync) versions 4.4.0.0–4.6.0.0 (including SPs) contain an improper access control vulnerability in the Embedded Service Enabler. A local attacker could exploit this during installation to achieve privilege escalation. The issue is documented in CVE-2023-32458 with CVSSv3...
CVE-2023-32458
Dell AppSync, versions 4.4.0.0 to 4.6.0.0 including Service Pack releases, contains an improper access control vulnerability in Embedded Service Enabler component. A local malicious user could potentially exploit this vulnerability during installation leading to a privilege escalation...
CVE-2023-32458
Dell AppSync, versions 4.4.0.0 to 4.6.0.0 including Service Pack releases, contains an improper access control vulnerability in Embedded Service Enabler component. A local malicious user could potentially exploit this vulnerability during installation leading to a privilege escalation...
Dell EMC AppSync Access Control Vulnerability
Dell EMC AppSync is a replication data management software from Dell, Inc. It provides a simple self-service, SLA-driven approach to protecting, recovering and cloning critical Microsoft and Oracle applications and VMware environments. An Access Control Error vulnerability exists in Dell EMC...
CVE-2023-32458: Improper Access Control
Dell AppSync, versions 4.4.0.0 to 4.6.0.0 including Service Pack releases, contains an improper access control vulnerability in Embedded Service Enabler component. A local malicious user could potentially exploit this vulnerability during installation leading to a privilege escalation...
PT-2023-23802 · Dell · Dell Appsync
Name of the Vulnerable Software and Affected Versions: Dell AppSync versions 4.4.0.0 through 4.6.0.0 Description: The issue is related to an improper access control vulnerability in the Embedded Service Enabler component. A local malicious user could potentially exploit this vulnerability during...
Wind River VxWorks Path Traversal Vulnerability
Wind River VxWorks is an operating system from Wind River Systems, Inc. the industry-leading real-time operating system for building embedded devices and systems. A security vulnerability exists in Wind River VxWorks that stems from a flaw in the tarExtract function that could lead to unexpected...
Poppler PDF Rendering Library DoS
The vulnerability of the pdfunite.cc component in the Poppler PDF rendering library lies in the lack of flow control before saving the embedded file’s main function within pdfunite.cc. Exploiting this vulnerability could allow a malicious actor to cause service failures...
Lexmark Device Embedded Web Server Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Lexmark Device Embedded Web Server RCE', 'Description' = %q A unauthenticated Remote Code Execution vulnerability exists in the embedded webserve...
org.eclipse.jetty.documentation:jetty-documentation (>=12.0.0.alpha0, <=12.0.0.beta1), org.eclipse.jetty.ee10.demos:jetty-ee10-demo-embedded (>=12.0.0.alpha0, <=12.0.0.beta1) +4 more potentially affected by CVE-2023-36479 via org.eclipse.jetty.ee10:jetty-ee10-servlets (>=12.0.0.alpha0, <=12.0.0.beta1)
org.eclipse.jetty.ee10:jetty-ee10-servlets MAVEN version =12.0.0.alpha0, =12.0.0.alpha0, =12.0.0.alpha0, =12.0.0.alpha0, =12.0.0.alpha0, =12.0.0.alpha0, =12.0.0.beta1 Source cves: CVE-2023-36479 Source advisory: GHSA-3GH6-V5V9-6V9J...
org.eclipse.jetty.documentation:jetty-documentation (>=12.0.0.alpha0, <=12.0.0.beta1), org.eclipse.jetty.ee10.demos:jetty-ee10-demo-embedded (>=12.0.0.alpha0, <=12.0.0.beta1) +4 more potentially affected by CVE-2023-36479 via org.eclipse.jetty.ee10:jetty-ee10-servlets (>=12.0.0.alpha0, <=12.0.0.beta1)
org.eclipse.jetty.ee10:jetty-ee10-servlets MAVEN version =12.0.0.alpha0, =12.0.0.alpha0, =12.0.0.alpha0, =12.0.0.alpha0, =12.0.0.alpha0, =12.0.0.alpha0, =12.0.0.beta1 Source cves: CVE-2023-36479 Source advisory: OSV:GHSA-3GH6-V5V9-6V9J...
org.eclipse.jetty.ee9.demos:jetty-ee9-demo-embedded (>=12.0.0.alpha0, <=12.0.0.beta1), org.eclipse.jetty.ee9.demos:jetty-ee9-demo-jetty-webapp (>=12.0.0.alpha0, <=12.0.0.beta1) +3 more potentially affected by CVE-2023-36479 via org.eclipse.jetty.ee9:jetty-ee9-servlets (>=12.0.0.alpha0, <=12.0.0.beta1)
org.eclipse.jetty.ee9:jetty-ee9-servlets MAVEN version =12.0.0.alpha0, =12.0.0.alpha0, =12.0.0.alpha0, =12.0.0.alpha0, =12.0.0.alpha0, =12.0.0.beta1 Source cves: CVE-2023-36479 Source advisory: GHSA-3GH6-V5V9-6V9J...
org.eclipse.jetty.ee9.demos:jetty-ee9-demo-embedded (>=12.0.0.alpha0, <=12.0.0.beta1), org.eclipse.jetty.ee9.demos:jetty-ee9-demo-jetty-webapp (>=12.0.0.alpha0, <=12.0.0.beta1) +3 more potentially affected by CVE-2023-36479 via org.eclipse.jetty.ee9:jetty-ee9-servlets (>=12.0.0.alpha0, <=12.0.0.beta1)
org.eclipse.jetty.ee9:jetty-ee9-servlets MAVEN version =12.0.0.alpha0, =12.0.0.alpha0, =12.0.0.alpha0, =12.0.0.alpha0, =12.0.0.alpha0, =12.0.0.beta1 Source cves: CVE-2023-36479 Source advisory: OSV:GHSA-3GH6-V5V9-6V9J...
Cisco Identity Services Engine Privilege Escalation
The vulnerability of the Embedded Service Router service of the Cisco Identity Services Engine ISE management platform for connection policies is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to enhance their privileges by sending specially crafted...
2023-09 Security and Quality Rollup for .NET Framework 3.5.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Embedded Standard 7 (KB5030182)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
2023-09 Security and Quality Rollup for .NET Framework 3.5.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Embedded Standard 7 for x64 (KB5030182)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
September 12, 2023—KB5030287 (Security-only update)
None None...
September 12, 2023—KB5030261 (Security-only update)
None None...