13572 matches found
Schneider Electric Modicon M340 安全漏洞
The Schneider Electric Modicon M340 is a medium-range PLC programmable logic controller for industrial processes and infrastructure from Schneider Electric, France. A security vulnerability exists in the Schneider Electric Modicon M340 that arises from improper implementation of message integrity...
WordPress plugin Hash Elements 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
WordPress Hash Elements Plugin <= 1.4.7 is vulnerable to Broken Access Control
Software Hash Elements Type Plugin Vulnerable versions = 1.4.7 Fixed in 1.4.8 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-10802 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 100e3ce93b18 Credits Francesco Carlucci Required...
November Patch Tuesday release contains three critical remote code execution vulnerabilities
The Patch Tuesday for November of 2024 includes 89 vulnerabilities, including four that Microsoft marked as "critical." The remaining vulnerabilities listed are classified as "important." Microsoft assessed that exploitation of the four "critical" vulnerabilities is "less likely." CVE-2024-43639 ...
November Microsoft Patch Tuesday
November Microsoft Patch Tuesday. 125 CVEs, 35 of which were added since October MSPT. 2 vulnerabilities with signs of exploitation in the wild: Elevation of Privilege - Windows Task Scheduler CVE-2024-49039 Disclosure/Spoofing - NTLM Hash CVE-2024-43451 No signs of exploitation, but with a priva...
Patch Tuesday - November 2024
Microsoft is addressing 90 vulnerabilities this November 2024 Patch Tuesday. Microsoft has evidence of in-the-wild exploitation and/or public disclosure for four of the vulnerabilities published today, although as with last month’s batch, it does not evaluate any of these zero-day vulnerabilities...
Microsoft Patch Tuesday, November 2024 Edition
Microsoft today released updates to plug at least 89 security holes in its Windows operating systems and other software. November's patch batch includes fixes for two zero-day vulnerabilities that are already being exploited by attackers, as well as two other flaws that were publicly disclosed...
Microsoft and Adobe Patch Tuesday, November 2024 Security Update Review
Microsoft has released its November 2024 Patch Tuesday updates, targeting various vulnerabilities that could impact users and organizations worldwide. From zero-day threats to key product patches, here’s what’s crucial to apply this month. Here’s a breakdown of the updates and how they impact you...
CVE-2024-43451
NTLM Hash Disclosure Spoofing Vulnerability...
CVE-2024-43451
NTLM Hash Disclosure Spoofing Vulnerability...
CVE-2024-43451 NTLM Hash Disclosure Spoofing Vulnerability
...
CVE-2024-43451
CVE-2024-43451 is a Windows NTLMv2 hash disclosure spoofing vulnerability. Affected: Windows; root cause: NTLM hash leakage occurs when the shell processes .URL shortcuts, triggering NTLM authentication over SMB to an attacker-controlled server. Impact: attackers can obtain NTLMv2 hashes and perf...
CVE-2024-43451 NTLM Hash Disclosure Spoofing Vulnerability
...
Description of the security update for Office Online Server: November 12, 2024 (KB5002648)
None None...
Description of the security update for Office 2016: November 12, 2024 (KB5002642)
None None...
Description of the security update for SharePoint Server 2019: November 12, 2024 (KB5002650)
None None...
Description of the security update for Word 2016: November 12, 2024 (KB5002619)
None None...
Description of the security update for SharePoint Server Subscription Edition: November 12, 2024 (KB5002651)
None None...
