14454 matches found
SUSE CVE-2022-1481
Use after free in Sharing in Google Chrome on Mac prior to 101.0.4951.41 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page...
SUSE CVE-2022-1640
Use after free in Sharing in Google Chrome prior to 101.0.4951.64 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page...
SUSE CVE-2022-1861
Use after free in Sharing in Google Chrome on Chrome OS prior to 102.0.5005.61 allowed a remote attacker who convinced a user to enage in specific user interactions to potentially exploit heap corruption via specific user interaction...
SUSE CVE-2022-23709
A flaw was discovered in Kibana in which users with Read access to the Uptime feature could modify alerting rules. A user with this privilege would be able to create new alerting rules or overwrite existing ones. However, any new or modified rules would not be enabled, and a user with this...
SUSE CVE-2022-24812
Grafana is an open-source platform for monitoring and observability. When fine-grained access control is enabled and a client uses Grafana API Key to make requests, the permissions for that API Key are cached for 30 seconds for the given organization. Because of the way the cache ID is constructe...
SUSE CVE-2022-40959
During iframe navigation, certain pages did not have their FeaturePolicy fully initialized leading to a bypass that leaked device permissions into untrusted subdocuments. This vulnerability affects Firefox ESR 102.3, Thunderbird 102.3, and Firefox 105...
PT-2023-18706 · Ls Electric · Ls Electric Xbc-Dn32U
Name of the Vulnerable Software and Affected Versions: LS ELECTRIC XBC-DN32U version 01.80 Description: The issue is related to improper access control in the read prohibition feature of the device. This could allow a remote attacker to set the feature to lock users out of reading data from the...
CVE-2023-21809
Microsoft Defender for Endpoint Security Feature Bypass Vulnerability...
CVE-2023-21809
Microsoft Defender for Endpoint Security Feature Bypass Vulnerability...
CVE-2023-21809
Microsoft Defender for Endpoint Security Feature Bypass Vulnerability...
Security feature bypass
Microsoft Publisher Security Features Bypass Vulnerability...
Security feature bypass
Microsoft Defender for Endpoint Security Feature Bypass Vulnerability...
CVE-2023-21715 Microsoft Publisher Security Feature Bypass Vulnerability
...
CVE-2023-21809
CVE-2023-21809 is a Microsoft Defender for Endpoint Security Feature Bypass vulnerability. The issue is categorized as a local vulnerability with low attack complexity, requiring user interaction, and with high impact (confidentiality, integrity, and availability). The CVE is listed under Microso...
CVE-2023-21809 Microsoft Defender for Endpoint Security Feature Bypass Vulnerability
...
CVE-2023-22931
In Splunk Enterprise versions below 8.1.13 and 8.2.10, the ‘createrss’ external search command overwrites existing Resource Description Format Site Summary RSS feeds without verifying permissions. This feature has been deprecated and disabled by default...
Microsoft Patch Tuesday for February 2023 — Snort rules and prominent vulnerabilities
Microsoft released its monthly security update on Tuesday, disclosing 73 vulnerabilities. Of these vulnerabilities, 8 are classified as "Critical", 64 are classified as "Important", one vulnerability is classified as "Moderate." According to Microsoft none of the vulnerabilities has been publicly...
Description of the security update for SharePoint Enterprise Server 2016: February 14, 2023 (KB5002350)
None None...
