14441 matches found
CVE-2023-29352
Windows Remote Desktop Security Feature Bypass Vulnerability...
Security feature bypass
Windows SMB Witness Service Security Feature Bypass Vulnerability...
Security feature bypass
Windows Remote Desktop Security Feature Bypass Vulnerability...
Security feature bypass
Windows Server Service Security Feature Bypass Vulnerability...
PT-2023-23732 · Zhong Bang · Zhong Bang Crmeb
Name of the Vulnerable Software and Affected Versions: Zhong Bang CRMEB versions up to 4.6.0 Description: A critical issue has been found, affecting the get image base64 function of the file api/controller/v1/PublicController.php. This leads to server-side request forgery and can be launched...
CVE-2023-34865
Directory traversal vulnerability in ujcms 6.0.2 allows attackers to move files via the rename feature...
PT-2023-25038 · Ujcms · Ujcms
Name of the Vulnerable Software and Affected Versions: ujcms version 6.0.2 Description: The issue allows attackers to perform directory traversal, enabling them to move files using the rename feature. Recommendations: For ujcms version 6.0.2, consider restricting the rename feature to prevent fil...
CVE-2023-34865
CVE-2023-34865 affects ujcms 6.0.2 with a directory traversal flaw that allows moving files via the rename feature. The issue is documented across multiple feeds; endpoints and/or components involved are the ujcms rename path and file moves. Impact is high (CVE/CVSS: Critical) per the primary ent...
CVE-2023-32021 Windows SMB Witness Service Security Feature Bypass Vulnerability
...
CVE-2023-32021
Technical details about CVE-2023-32021 are not publicly provided in the connected documents. The provided sources reference the CVE and related Windows updates, but do not disclose affected components, root cause, or impact in this dataset. Monitor for updates.
CVE-2023-29352
CVE-2023-29352 is a Windows Remote Desktop Security Feature Bypass vulnerability. The CVSS 3.1 vector indicates network access with low attack complexity, no privileges, and user interaction required, resulting in potential integrity impact (I: High) but no confidentiality or availability impact ...
CVE-2023-29352 Windows Remote Desktop Security Feature Bypass Vulnerability
...
CVE-2023-29352 Windows Remote Desktop Security Feature Bypass Vulnerability
...
Microsoft and Adobe Patch Tuesday, June 2023 Security Update Review
Microsoft has released Junes edition of Patch Tuesday! This installment of security updates addressed 94 security vulnerabilities in various products, features, and roles. Microsoft Patch Tuesday for June 2023 No zero-day vulnerabilities known to be exploited in the wild have been fixed in this...
CVE-2023-31541
A unrestricted file upload vulnerability was discovered in the ‘Browse and upload images’ feature of the CKEditor v1.2.3 plugin for Redmine, which allows arbitrary files to be uploaded to the server...
Security feature bypass
An issue was discovered in systemd 253. An attacker can modify the contents of past events in a sealed log file and then adjust the file such that checking the integrity shows no error, despite modifications. NOTE: the vendor reportedly sent "a reply denying that any of the finding was a security...
Security feature bypass
DISPUTED An issue was discovered in systemd 253. An attacker can modify a sealed log file such that, in some views, not all existing and sealed log messages are displayed. NOTE: the vendor reportedly sent "a reply denying that any of the finding was a security vulnerability."...
Windows Server Service Security Feature Bypass Vulnerability
...
