14424 matches found
Microsoft Windows Multiple Vulnerabilities (KB5034766)
This host is missing an important security update according to Microsoft KB5034766 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
PT-2024-20199 · Apache · Apache Superset
Name of the Vulnerable Software and Affected Versions: Apache Superset versions up to and including 2.1.2 Apache Superset versions 3.0.0, 3.0.1 Description: Uncontrolled resource consumption can be triggered by an authenticated attacker that uploads a malicious ZIP to import database, dashboards,...
Microsoft Windows Multiple Vulnerabilities (KB5034763)
This host is missing an important security update according to Microsoft KB5034763 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
CVE-2024-21412
Internet Shortcut Files Security Feature Bypass Vulnerability...
CVE-2024-21412
Internet Shortcut Files Security Feature Bypass Vulnerability...
CVE-2024-21362
Windows Kernel Security Feature Bypass Vulnerability...
CVE-2024-21362
Windows Kernel Security Feature Bypass Vulnerability...
Security feature bypass
Internet Shortcut Files Security Feature Bypass Vulnerability...
Security feature bypass
Windows SmartScreen Security Feature Bypass Vulnerability...
CVE-2024-21412
CVE-2024-21412 is a Windows SmartScreen security feature bypass that lets a downloaded file, marked by the Mark of the Web (MoTW), execute without SmartScreen prompts when dealing with Internet Shortcut files. Connected sources cite in-the-wild activity (Water Hydra) and exploitation via spearphi...
CVE-2024-21412 Internet Shortcut Files Security Feature Bypass Vulnerability
...
CVE-2024-21412 Internet Shortcut Files Security Feature Bypass Vulnerability
...
CVE-2024-21362
Technical details for CVE-2024-21362 are not publicly available in the provided documents. No affected products, root cause, or remediation details are disclosed here. Monitor for updates from official sources.
CVE-2024-21362 Windows Kernel Security Feature Bypass Vulnerability
...
CVE-2024-21351
CVE-2024-21351 is a Windows SmartScreen Security Feature Bypass vulnerability. Public exploits exist; attackers could bypass SmartScreen and inject code, potentially gaining code execution, exposing data, or impacting availability. Relevant advisories note active exploitation and focus on applyin...
CVE-2024-21351 Windows SmartScreen Security Feature Bypass Vulnerability
...
AZL-34351 CVE-2023-5679 affecting package bind for versions less than 9.16.48-1
A bad interaction between DNS64 and serve-stale may cause named to crash with an assertion failure during recursive resolution, when both of these features are enabled. This issue affects BIND 9 versions 9.16.12 through 9.16.45, 9.18.0 through 9.18.21, 9.19.0 through 9.19.19, 9.16.12-S1 through...
ALPINE-CVE-2023-5679
A bad interaction between DNS64 and serve-stale may cause named to crash with an assertion failure during recursive resolution, when both of these features are enabled. This issue affects BIND 9 versions 9.16.12 through 9.16.45, 9.18.0 through 9.18.21, 9.19.0 through 9.19.19, 9.16.12-S1 through...