Citrix Receiver is Unable to Create a Secure (https://) Connection in the Browser

When launching applications on Internet Explorer 10 using the Citrix Receiver for HTML5 v1.1, the following error message appears: “Citrix Receiver cannot create a secure https:// connection in this browser. Please try a different browser.”...

CVE-2024-38100

Windows File Explorer Elevation of Privilege Vulnerability...

CVE-2024-38100

Windows File Explorer Elevation of Privilege Vulnerability...

CVE-2024-38100 Windows File Explorer Elevation of Privilege Vulnerability

...

CVE-2024-38100 Windows File Explorer Elevation of Privilege Vulnerability

...

CVE-2024-38100

CVE-2024-38100 is a Windows File Explorer elevation-of-privilege vulnerability. The provided documents identify it as a Windows File Explorer issue with a CVSS v3.1 base score of 7.8 (Local access, Privilege escalation, no user interaction). Connected sources corroborate Windows-vulnerability con...

KB5040426: Cumulative security update for Internet Explorer: July 9, 2024

KB5040426: Cumulative security update for Internet Explorer: July 9, 2024 Important Certain versions of Microsoft Internet Explorer have reached the end of support. Note that some versions of Internet Explorer may be supported past the latest OS end date when Extended Security Updates ESUs are...

Windows File Explorer Elevation of Privilege Vulnerability

...

PT-2024-4626

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The vulnerability is related to the MSHTML platform in Microsoft Windows and involves a spoofing issue that allows attackers to affect the system. It has been exploited by threat...

Microsoft Windows File Explorer security vulnerability

Microsoft Windows File Explorer is a file manager application from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows File Explorer. An attacker exploiting this vulnerability could elevate privileges. The following products and editions are affected:Windows Server...

PT-2024-4763

The Windows File Explorer is affected by a privilege escalation issue, which allows attackers to gain access to a user's NetNTLM hash from any session on the computer, even with low-privileged user rights. This issue is related to unnecessary permissions being set in Access Security when...

Security Bulletin: IBM MQ is affected by a vulnerability in Eclipse Jetty (CVE-2024-22201)

Summary An issue was found in Eclipse Jetty that is shipped with the IBM MQ Explorer. Vulnerability Details CVEID:CVE-2024-22201 DESCRIPTION: Eclipse Jetty is vulnerable to a denial of service, caused by a flaw when an HTTP/2 connection gets TCP congested. By sending a specially crafted request, ...

Malicious code in active-explorer (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

June 25, 2024—KB5039302 (OS Builds 22621.3810 and 22631.3810) Preview

None None...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect Watson Explorer and Watson Explorer Content Analytics Studio (CVE-2024-20952, CVE-2024-20918,CVE-2024-20921, CVE-2023-33850)

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 8 used by Watson Explorer and Watson Explorer Content Analytics Studio. Watson Explorer and Watson Explorer Content Analytics Studio have addressed the applicable CVEs. CVE-2024-20952,...

Security Bulletin: IBM Watson Explorer affected by vulnerability in Apache ZooKeeper.(CVE-2024-23944)

Summary IBM Watson Explorer Foundational Components contains a vulnerable version of Apache ZooKeeper.CVE-2024-23944 Vulnerability Details CVEID:CVE-2024-23944 DESCRIPTION: Apache ZooKeeper could allow a remote authenticated attacker to obtain sensitive information, caused by a flaw in persistent...

CVE-2024-3467

There is a vulnerability in AVEVA PI Asset Framework Client that could allow malicious code to execute on the PI System Explorer environment under the privileges of an interactive user that was socially engineered to import XML supplied by an attacker...

CVE-2024-3467

There is a vulnerability in AVEVA PI Asset Framework Client that could allow malicious code to execute on the PI System Explorer environment under the privileges of an interactive user that was socially engineered to import XML supplied by an attacker...

CVE-2024-3467 Deserialization of Untrusted Data in AVEVA PI Asset Framework Client

There is a vulnerability in AVEVA PI Asset Framework Client that could allow malicious code to execute on the PI System Explorer environment under the privileges of an interactive user that was socially engineered to import XML supplied by an attacker...

CVE-2024-3467

Vulnerability summary (CVE-2024-3467) : AVEVA PI Asset Framework Client is affected. The issue is described as Deserialization of Untrusted Data (CWE-502) in the PI System Explorer workflow, which could allow malicious code to execute under the privileges of an interactive user when XML data is s...