29828 matches found
@ibm/rse-api-for-zowe-cli (>=3.2.2, <=4.1.0), @zowe/zowe-explorer-api (>=2.13.0, <=2.15.0) potentially affected by CVE-2024-6833 via @zowe/cli (>=7.18.0, <=7.23.3)
@zowe/cli NPM version =7.18.0, =3.2.2, =2.13.0, =2.15.0 Source cves: CVE-2024-6833 Source advisory: GHSA-GHGQ-X6WC-6JR5...
@ibm/rse-api-for-zowe-cli (>=3.2.2, <=4.1.0), @zowe/zowe-explorer-api (>=2.13.0, <=2.15.0) potentially affected by CVE-2024-6833 via @zowe/cli (>=7.18.0, <=7.23.3)
@zowe/cli NPM version =7.18.0, =3.2.2, =2.13.0, =2.15.0 Source cves: CVE-2024-6833 Source advisory: MEND:CVE-2024-6833...
China-linked APT17 Targets Italian Companies with 9002 RAT Malware
A China-linked threat actor called APT17 has been observed targeting Italian companies and government entities using a variant of a known malware referred to as 9002 RAT. The two targeted attacks took place on June 24 and July 2, 2024, Italian cybersecurity company TG Soft said in an analysis...
awarc (>=0.0.1, <=0.0.4), lungs-segmentation (>=1.1.1, <=1.1.2) +1 more potentially affected by CVE-2024-6345 via setuptools (49.2.0)
setuptools PYPI version 49.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - awarc =0.0.1, =1.1.1, =0.0.14, =0.0.17 Source cves: CVE-2024-6345 Source advisory: OSV:GHSA-CX63-2MW6-8HW5...
Windows File Explorer Driver Privilege Escalation
The vulnerability of the Windows File Explorer driver in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
CVE-2024-38112: Void Banshee Targets Windows Users Through Zombie Internet Explorer in Zero-Day Attacks
Our threat hunters discovered CVE-2024-38112, which was used as a zero-day by APT group Void Banshee, to access and execute files through the disabled Internet Explorer using MSHTML. We promptly identified and reported this zero-day vulnerability to Microsoft, and it has been patched...
Citrix Receiver is Unable to Create a Secure (https://) Connection in the Browser
When launching applications on Internet Explorer 10 using the Citrix Receiver for HTML5 v1.1, the following error message appears: “Citrix Receiver cannot create a secure https:// connection in this browser. Please try a different browser.”...
CVE-2024-38100
Windows File Explorer Elevation of Privilege Vulnerability...
CVE-2024-38100
Windows File Explorer Elevation of Privilege Vulnerability...
CVE-2024-38100 Windows File Explorer Elevation of Privilege Vulnerability
...
CVE-2024-38100 Windows File Explorer Elevation of Privilege Vulnerability
...
CVE-2024-38100
CVE-2024-38100 is a privilege escalation vulnerability in the Windows File Explorer driver and the Windows COM Session component. The root cause is attributed to deficiencies in access control , which could allow a low-privileged attacker to enhance their privileges on the system. Several public ...
KB5040426: Cumulative security update for Internet Explorer: July 9, 2024
KB5040426: Cumulative security update for Internet Explorer: July 9, 2024 Important Certain versions of Microsoft Internet Explorer have reached the end of support. Note that some versions of Internet Explorer may be supported past the latest OS end date when Extended Security Updates ESUs are...
Windows File Explorer Elevation of Privilege Vulnerability
...
Microsoft Windows File Explorer security vulnerability
Microsoft Windows File Explorer is a file manager application from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows File Explorer. An attacker exploiting this vulnerability could elevate privileges. The following products and editions are affected:Windows Server...
PT-2024-4763
The Windows File Explorer is affected by a privilege escalation issue, which allows attackers to gain access to a user's NetNTLM hash from any session on the computer, even with low-privileged user rights. This issue is related to unnecessary permissions being set in Access Security when...
PT-2024-4626
Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The vulnerability is related to the MSHTML platform in Microsoft Windows and involves a spoofing issue that allows attackers to affect the system. It has been exploited by threat...
CVE-2024-38100: Improper Access Control
Windows File Explorer Elevation of Privilege Vulnerability...
Security Bulletin: IBM MQ is affected by a vulnerability in Eclipse Jetty (CVE-2024-22201)
Summary An issue was found in Eclipse Jetty that is shipped with the IBM MQ Explorer. Vulnerability Details CVEID:CVE-2024-22201 DESCRIPTION: Eclipse Jetty is vulnerable to a denial of service, caused by a flaw when an HTTP/2 connection gets TCP congested. By sending a specially crafted request, ...
